You are configuring a deployment pipeline in Azure DevOps. The deployment requires a database connection string and an API key. These secrets must not be stored in plaintext in the YAML pipeline file or the repository. What is the most secure and natively integrated way to handle these secrets?

Question

Sunny · Accepted Answer

Store the secrets in an Azure Key Vault and link it to a Variable Group in Azure Pipelines. Azure Key Vault provides secure storage for secrets. In Azure DevOps, you can create a Variable Group and link it to an Azure Key Vault. The pipeline can then retrieve the secrets dynamically at runtime without ever exposing them in the repository or pipeline definition. The secrets are automatically masked in the pipeline logs.

You are configuring a deployment pipeline in Azure DevOps. The deployment requires a database connection string and an API key. These secrets must not be stored in plaintext in the YAML pipeline file or the repository. What is the most secure and natively integrated way to handle these secrets?

You are configuring a deployment pipeline in Azure DevOps. The deployment requires a database connection string and an API key. These secrets must not be stored in plaintext in the YAML pipeline file or the repository. What is the most secure and natively integrated way to handle these secrets?

📚 What This Question Tests

More Security and Compliance Practice Questions