Btukfyl

I am new to working with Azure DevOps, I am trying to create a pipeline using Azure DevOps for deploying my terraform code onto AWS, for authentication I am aware that we can use service principles but that will mean I will need to specify my acess and secret keys in azure DevOps which I do not want to do, so I wanted to check if there are any other ways of doing this?

Perhaps use the Azure Devops Libary > Variable Groups to securely store you keys.

Alternatively you may be able to use the Project Settings> Service connection. Perhaps using credentials connection or a generic on.

Service principals is the industry standard for this case. You should create a specific service principal for Azure DevOps and limit its scope to only what's necessary.

For accessing/storing these kinds of secrets you can try the Azure Key Vault

Store all your secrets in Azure Key Vault secrets.

When you want to access secrets:

• 
  

  Ensure the Azure service connection has at least Get and List permissions on the vault. You can set these permissions in the Azure
  
  portal:

  
  
  
  
  

  • Open the Settings blade for the vault, choose Access policies, then Add new.

  
  

  • In the Add access policy blade, choose Select principal and select the service principal for your client account.

  
  

  • In the Add access policy blade, choose Secret permissions and ensure that Get and List are checked (ticked).

  
  

  • Choose OK to save the changes.

  
  
  
  

Reference