Deployment Standards · DEVOPS-02
Deployment rollbacks should be automated · DEVOPS-02.2 · MUST · DEV
It should be as quick and easy as possible to revert a deployment if needed.
Software updates must be deployed securely · DEVOPS-02.3 · MUST · DEV
Deployments must protect the confidentiality of software and configuration. Use secure, encrypted channels and avoid manual mechanisms.
- Deploy only build artifacts from controlled Build pipelines.
- Store credentials in a Key Vault or Variable Group Secret. Never use plain‑text secrets.
- Use dedicated service principals with minimal RBAC to maintain least-privilage.
- Require pipeline approvals for production releases.