-
-
Notifications
You must be signed in to change notification settings - Fork 6
Azure.DevOps.ServiceConnections.WorkloadIdentityFederation
github-actions edited this page Dec 17, 2023
·
3 revisions
category: Microsoft Azure DevOps Service Connections severity: Important online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.ServiceConnections.WorkloadIdentityFederation.md
A Service connection should use Workload Identity Federation.
Workload Identity Federation allows you to use a service principal managed by Azure Active Directory to authenticate to Azure services instead of using a service principal managed by Azure DevOps. This is more secure as the service principal is not stored in Azure DevOps.
Mininum TokenType: ReadOnly
Consider using Workload Identity Federation for your service connections.