DOS1050

Disable auto-provisioning of agent pools

DOS1050

AzureDevOps organization high builtIn

Description

Do not enable auto-provisioning of the agent pool in new projects. Enabling the auto-provisioning will import automatically the agent pool for all new projects. Learn more: https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/pools-queues

Recommendation

1. Go to Organization Settings. 
2. Click on Pipelines -> Agent pools. 
3. Select an agent pool. 
4. Select the Settings tab. 
5. Turn 'Off' the setting 'Auto-provision this agent pool in new projects'.

Policy Rule

{
  "target": "ADOTaskAgentPool",
  "if": {
    "allOf": [
      {
        "resource": "ADOTaskAgentPool",
        "property": "Name",
        "operator": "notEquals",
        "value": "Azure Pipelines"
      },
      {
        "resource": "ADOTaskAgentPool",
        "property": "AutoProvision",
        "operator": "equals",
        "value": false
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
« DOS1040 DOS1060 »
Rule Details
  • Rule ID: DOS1050
  • Code: ADO_Organization_Pipeline_AgentPool_Dont_Enable_AutoProvisioning
  • Platform: AzureDevOps
  • Category: organization
  • Severity: high
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions