CODEWITHSUNDEEP
network-programmingdevopspolicypci
APTOS APT
APTOS APT

Reputation: 1

Azure Devops Servers/Policy Design

We are facing a challenge with our security department to implement Azure DevOps for continuous deployment on our production servers, which are under PCI policy. The challenge is that our Azure DevOps is administered by our development team. We are responsible for pipelines, so security concerns arise even if there is an approval level for deploying on production. They do not want the server used by our team to access any production server to ensure that our test and development VLAN cannot deploy anything in production. I do not have any idea about what the possible design to solve our issue might be.

We have installed two nodes of Azure DevOps application tier with one database server. I have blocked outbound and inbound connections between one of them (which we use for testing and development) to ensure that we cannot deploy to production. However, because the second server has a connection to production, we encounter the same problem of having access to production due to the second server so what is the best practice to keep using continous deployment and in the other hand prevent our team to access production server.

Upvotes: 0

Views: 20

Answers (0)

Related Questions