Service connection

In the Ultra Transcenders books

AZ-400

Each book explains Service connection in context, with comparison tables and the common traps.

Terms in this definition

• Azure DevOps

  Microsoft's suite of DevOps services, among them Azure Boards and Azure Pipelines.

• Container

  Something that groups data. Blob Storage containers sit inside a storage account and hold blobs much as folders hold files; Cosmos DB containers hold items and set the scope for partitioning and throughput.

• ARM

  Short for Azure Resource Manager, the control plane Azure uses for deploying and managing resources.

• AGDLP

  Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.

• APPLY

  Evaluates a table-valued expression for every row on its left, inside FROM. Think of OUTER APPLY as a left outer join and CROSS APPLY as an inner join.

Related terms

• GitHub Release task

  Uses a GitHub service connection so a pipeline can create, edit or delete a GitHub release, attaching assets and an auto-generated changelog.

• Key Vault-linked variable group

  Pulls fresh values of selected Key Vault secrets into a pipeline on every run, though keys and certificates are not supported. The service connection must hold Get and List, or the Key Vault Secrets User role; vaults using RBAC behind a private endpoint won't work.

• OAuth

  An authorisation standard allowing software to act for someone. In Azure Pipelines, choosing it for a GitHub service connection ties the connection to your own GitHub account; for integrations with Azure DevOps APIs, Microsoft Entra ID OAuth is the right choice.

• Pipeline permissions

  Controls which YAML pipelines may use a protected resource such as an agent pool, environment, repository, secure file, variable group or service connection. With Open access, any project pipeline can.