Approvers should grant approval for deployment. Extend pipeline protection by configuring a manual approval check on your production resources. Most pipelines need a second set of eyes look over changes (especially to the pipeline itself) before deploying to production. Checks allow you to pause the pipeline run until certain conditions are met. Learn more: https://learn.microsoft.com/en-us/azure/devops/pipelines/security/resources#checks https://learn.microsoft.com/en-us/azure/devops/pipelines/process/approvals https://learn.microsoft.com/en-us/azure/devops/pipelines/library/service-endpoints
1. Navigate to Project Settings. 2. Open the Service connections link under Pipelines. 3. Select a service connection. 4. Click on 'Approvals and checks' tab. 5. Add a new 'Approvals' check and choose your 'Approvers'. 6. Click 'Create' to add the check.
{
"target": "ADOProjectCheckConfiguration",
"if": {
"allOf": [
{
"resource": "ADOProjectCheckConfiguration",
"property": "Resource.Type",
"operator": "equals",
"value": "endpoint"
},
{
"resource": "ADOProjectCheckConfiguration",
"property": "Resource.Name",
"operator": "match",
"value": "$(POLICY_VAR_PROJECT_PROD_SERVICE_CONNECTION_PATTERNS)"
},
{
"resource": "ADOProjectCheckConfiguration",
"property": "Type.Name",
"operator": "equals",
"value": "Approval"
},
{
"resource": "ADOProjectCheckConfiguration",
"property": "Approval.ApproversCount",
"operator": "greaterThan",
"value": 0
}
]
},
"then": {
"effect": "Audit"
}
}Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions