Secrets, managed identities and code scanning

AZ-400 · Develop a security and compliance plan · Updated

Store secrets with Key Vault and GitHub secrets, pick the right identity, and use GitHub Advanced Security and dependency scanning in pipelines.

This lesson is part of full AZ-400 access

The first 2 AZ-400 lessons are free. Full access opens every lesson with its practice questions, and the exam-style AZ-400 question bank.

In this lesson
  • Where secrets live
  • Identities
  • Protecting Azure DevOps
  • Scanning
  • Exam traps
  • Practice questions

Get full access Try the free practice exam Log in

AZ-400 course outline

All 7 lessons · Course overview
  1. Azure Boards, work item links and flow metricsConfigure processes and communications Free
  2. Branch protection, pull requests and code ownersDesign and implement a source control strategy Free
  3. Git history cleanup, large files and repository sizeDesign and implement a source control strategy Full access
  4. YAML pipelines, agents, triggers and templatesDesign and implement build and release pipelines Full access
  5. Deployment strategies, environments and approvalsDesign and implement build and release pipelines Full access
  6. Secrets, managed identities and code scanningDevelop a security and compliance plan Full access
  7. Application Insights, alerts and KQLImplement an instrumentation strategy Full access