https://gotoguy.blog/categories/azure-devops/Azure DevOps - Category - GoToGuy BlogHugo -- gohugo.ioen-usFri, 05 Apr 2024 20:40:59 +0000https://gotoguy.blog/2024/04/05/automatic-provisioning-and-deprovisioning-of-copilot-for-security-capacity-unit/Fri, 05 Apr 2024 20:40:59 +0000Jan Vidar Elvenhttps://gotoguy.blog/2024/04/05/automatic-provisioning-and-deprovisioning-of-copilot-for-security-capacity-unit/At time of writing this blog post, it’s only the first week after Microsoft Copilot for Security went GA April 1st, and already the #Security #Community are creating scripts, automations and tools for provisioning or deprovisioning Secure Capacity Units (SCU) that are required for running Copilot for Security in your environment. A potential cost of 4$ per hour per SCU can amount to $2920 per month if you count 730 hours standard per month, so the motivation is clear, to save cost and use the service only when you need to.https://gotoguy.blog/2023/09/15/connect-to-microsoft-graph-in-azure-devops-pipelines-using-workload-identity-federation/Fri, 15 Sep 2023 12:31:36 +0000Jan Vidar Elvenhttps://gotoguy.blog/2023/09/15/connect-to-microsoft-graph-in-azure-devops-pipelines-using-workload-identity-federation/Microsoft recently announced that Workload Identity Federation for Azure Pipelines now is in Public Preview: https://devblogs.microsoft.com/devops/public-preview-of-workload-identity-federation-for-azure-pipelines/ . This opens for a lot of scenarios for Azure service connections, without the need to manage secrets for service principals and more security as there are no secrets that can be exposed or exfiltrated. As I work a lot with Microsoft Graph and automation, I wanted to see if and how I could use Workload Identity Federation to connect to and send queries to Microsoft Graph using Azure Pipelines.