Identities can connect to your organization's Git repos through SSH
AZDO.1001HighAzure DevOpsSecurity policiesPreview 3.0
Part of Maester · Azure DevOps · Security policies · All checks
Invoke-Maester -TestId AZDO.1001Overview
Section titled “Overview”Connecting to Azure DevOps using SSH should be disabled.
Rationale: OAuth is the preferred and most secure authentication method.
Remediation action
Section titled “Remediation action”Disable the policy to stop these requests and notifications.
- Sign in to your organization.
- Choose Organization settings.
- Select Policies under the Security section.
- Locate the “SSH authentication” policy and toggle it to off.
Results: Users can no longer use SSH to connect to Azure DevOps.
Related links
Section titled “Related links”Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | AZDO.1001 |
| Severity | High |
| Suite | Maester |
| Product | Azure DevOps |
| Feature | Security policies |
| Area | Authentication |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Medium |
| MITRE ATT&CK | T1552.004 Private Keys, T1098.001 Additional Cloud Credentials |
| PowerShell test | Test-AzdoSSHAuthentication |
| Services | AzureDevOps |
| Learn more | https://aka.ms/vstspolicyssh |