AI-102 Question 49
Select 3You are tasked with integrating Azure Cognitive Services into a CI/CD pipeline for a machine learning application. The pipeline must automate the deployment of the service and ensure the API keys and endpoint are securely managed during the process. Which of the following steps should you include in the pipeline to meet the requirements?
- A
Store the API keys and endpoint in Azure Key Vault and retrieve them during the pipeline execution.
- B
Manually configure the API keys in the application code before committing to the repository.
- C
Use Azure Resource Manager (ARM) templates to provision the Cognitive Services resource during the pipeline run.
- D
Deploy the Cognitive Services resource using the Azure portal and retrieve its details manually for use in the pipeline.
- E
Integrate Azure DevOps secrets management to securely pass API keys to the deployment process.
Show answer and explanation
Correct answers: A, C, E
Explanation
To integrate Azure Cognitive Services into a CI/CD pipeline securely and efficiently, you should automate resource provisioning using ARM templates, manage sensitive information like API keys with Azure Key Vault or Azure DevOps secrets management, and avoid manual configuration or deployment steps that can compromise security and reduce automation. These practices align with CI/CD principles and ensure a secure and robust pipeline.
- A. Correct.
Storing API keys and endpoints in Azure Key Vault ensures secure management of sensitive information, which can be retrieved dynamically during the pipeline execution.
- B. Incorrect.
Manually configuring API keys in application code before committing to the repository is insecure and prone to exposing sensitive information in version control.
- C. Correct.
Using ARM templates allows for automated and consistent provisioning of the Cognitive Services resource as part of the CI/CD process.
- D. Incorrect.
Deploying resources manually via the Azure portal does not align with the principles of automation in CI/CD pipelines.
- E. Correct.
Azure DevOps secrets management can securely handle and inject API keys into the deployment process, enhancing security and automation.