The goal

The goal is to be able to run database migrations as part of a Azure DevOps Pipeline with using a stored secret anywhere. The databases are Azure Sql Databases, connected to a VNET, with no public access. There are two major problems to solve:

• Network access
• Authentication

Background

My current project is at a company with a software solution that has been in development for more than 20 years. Traditionally it ran on-premise, that is at the customer’s site. This is still the case for a few customers, but most customers are now using the service served from a cloud-hosted solution - Software-as-a-Service - SaaS