#13 Use Azure Key Vault

Secrets Management
- Store and control access to tokens, passwords, certificates, API keys and other secrets
Key Management
Certificate Management
Store secrets backed by Hardware Security Modules
You can monitor activity by enabling logging for your vaults to see who accesses them
Operations can perform key rotation and manage keys with out developer involvement

Links

Variable groups https://docs.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups?view=azure-devops&tabs=yaml#link-secrets-from-an-azure-key-vault
KeyVault logging https://docs.microsoft.com/en-us/azure/key-vault/key-vault-logging