| category | severity | online version |
|---|---|---|
Microsoft Azure DevOps Service Connections |
Critical |
A Service connection should not use the Classic Azure service connection type.
A service connection is a securely stored object that contains information about how to connect to a service. Service connections are used during the build or release pipeline to connect to external and remote resources. The Classic Azure service connection type can not be scoped to a specific resource group or subscription. This means that any user with access to the service connection can deploy to any resource group or subscription. Also the Classic Azure service connection type does not support modern ways of authentication.
Mininum TokenType: ReadOnly
Consider using a service connection type that can be scoped to a specific resource group with modern authentication.