Azure DevOps Pipelines

Question

I am new to working with Azure DevOps, I am trying to create a pipeline using Azure DevOps for deploying my terraform code onto AWS, for authentication I am aware that we can use service principles but that will mean I will need to specify my acess and secret keys in azure DevOps which I do not want to do, so I wanted to check if there are any other ways of doing this?

Answer 1

For accessing/storing these kinds of secrets you can try the Azure Key Vault

Store all your secrets in Azure Key Vault secrets.

When you want to access secrets:

• Ensure the Azure service connection has at least Get and List permissions on the vault. You can set these permissions in the Azure
  portal:

  • Open the Settings blade for the vault, choose Access policies, then Add new.

  • In the Add access policy blade, choose Select principal and select the service principal for your client account.

  • In the Add access policy blade, choose Secret permissions and ensure that Get and List are checked (ticked).

  • Choose OK to save the changes.

Reference