Ghi chú sử dụng
Lộ trình chứng chỉ rõ ràng, dễ học theo từng giai đoạn
Đi từ nền tảng đến Azure DevOps Engineer, sau đó mở rộng sang DevSecOps, Platform Engineering và NoOps. Các thẻ bên dưới đã gắn biểu tượng để dễ nhận diện từng nhánh học.
Lộ trình chứng chỉ đề xuất — từ Basic đến DevOps / DevSecOps / NoOps
Lộ trình này ưu tiên chứng chỉ chính thức Microsoft và GitHub trước, sau đó mở rộng sang bảo mật, kiến trúc, Kubernetes, Platform Engineering và NoOps. AZ-400 yêu cầu phải có Azure Administrator Associate hoặc Azure Developer Associate để đạt chứng chỉ DevOps Engineer Expert.
Foundation
Dành cho người mới hoặc cần chuẩn hóa kiến thức cloud, GitHub và Azure cơ bản.
GitHub Actions / CI-CD
Tập trung workflow automation, reusable workflow, custom actions, runner, OIDC và bảo mật pipeline.
Azure Associate prerequisite
Chọn một trong hai hướng trước khi lấy DevOps Engineer Expert.
DevOps Expert
Chứng chỉ chính cho vai trò Azure DevOps Engineer.
DevSecOps / Security
Dành cho người muốn đi sâu bảo mật pipeline, cloud security, SOC và compliance automation.
Architect / Platform
Dành cho người muốn thiết kế kiến trúc Azure, platform engineering, self-service và golden path.
- AZ-305 — Azure Solutions Architect Expert
- Platform Engineering / Backstage / IDP
NoOps / Automation
Không phải “không cần vận hành”, mà là tự động hóa vận hành tối đa bằng event-driven ops, auto-remediation và self-healing.
- Event-driven Operations
- Auto-remediation / Self-healing
- ChatOps / AIOps
Thứ tự học khuyến nghị
| Thứ tự | Chứng chỉ / năng lực | Chương nên học | Kết quả mong muốn |
|---|---|---|---|
| 01 | AZ-900 + GitHub Foundations | 01–03, 25–27 | Nắm cloud, Git, GitHub, Linux, scripting. |
| 02 | GH-200 | 04–12 | Tự động hóa workflow, CI/CD, OIDC, runner, governance. |
| 03 | AZ-104 hoặc AZ-204 | 13–21, 26–30 | Có nền tảng Azure đủ để đi AZ-400. |
| 04 | AZ-400 | 13–24, 28–30 | Thiết kế và triển khai DevOps end-to-end. |
| 05 | AZ-500 / SC-200 | 22, 31–35 | Đi sâu DevSecOps, security baseline, compliance. |
| 06 | AZ-305 / Platform Engineering | 36–40 | Thiết kế platform, IDP, golden path, self-service. |
| 07 | NoOps / Automation Mastery | 41–45 | Auto-remediation, self-healing, ChatOps, AIOps. |
Foundation
Các chương trong nhóm Foundation.
Git version control, branch, commit, Pull Request
Organization, Project, Boards, Repos, Pipelines
Backlog, sprint, query, wiki, Mermaid
GH-200
Các chương trong nhóm GH-200.
Workflow YAML, jobs, steps, runners
push, PR, schedule, manual workflow
github/env/vars/secrets context
Matrix build, cache, artifacts
workflow_call, templates, secrets inheritance
Composite, JavaScript, Docker actions
Runner labels, groups, hardening
Allowed actions, environments, audit
GITHUB_TOKEN, OIDC, pin SHA
AZ-400
Các chương trong nhóm AZ-400.
Branch strategy, PR policy, Git LFS
trigger, pool, steps, artifacts
stages, environments, gates
test result, coverage, Azure Artifacts
blue-green, canary, feature flags
Web App, slots, swap, rollback
Dockerfile, ACR, AKS, Container Apps
Bicep, Terraform, plan, what-if
SPN, managed identity, Key Vault
CodeQL, Dependabot, secret scanning
App Insights, KQL, alerts, DORA
Enterprise
Các chương trong nhóm Enterprise.
Plan, build, scan, deploy, monitor
DNS, TLS, firewall, private endpoint
Script automation, error handling
Probes, resources, HPA, RBAC
Traces, SLO, error budget
Budget, tags, policy, cleanup
Full DevSecOps
Các chương trong nhóm Full DevSecOps.
STRIDE, security baseline, threat model
SBOM, Cosign, provenance, SLSA
OPA policies, admission control
rotation, workload identity, secretless
evidence, gates, control mapping
Platform Engineering
Các chương trong nhóm Platform Engineering.
IDP, platform team, paved road
service catalog, ownership, docs
software templates, standard pipeline
developer self-service, Terraform/Bicep
scorecards, maturity, ownership
NoOps
Các chương trong nhóm NoOps.
NoOps model, automation maturity
health check, rollback, autoscale
Teams/GitHub commands, incident automation
Danh sách 120 lab thực hành
| Lab | Tên lab | Chương | Nền tảng |
|---|---|---|---|
| LAB-001 | Git workflow căn bản | Git & GitHub căn bản | Web, CLI, GitHub UI |
| LAB-002 | Pull Request trên GitHub | Git & GitHub căn bản | Web, CLI, GitHub UI |
| LAB-003 | Tạo Azure DevOps Organization và Project | Azure DevOps căn bản | Web, Azure Portal, CLI, PowerShell |
| LAB-004 | Tạo repo và clone về máy | Azure DevOps căn bản | Web, Azure Portal, CLI, PowerShell |
| LAB-005 | Tạo backlog và sprint board | Agile, Boards, Wiki & Dashboard | Web, CLI |
| LAB-006 | Tạo Wiki có Mermaid diagram | Agile, Boards, Wiki & Dashboard | Web, CLI |
| LAB-007 | Workflow đầu tiên với GitHub Actions | GitHub Actions workflow căn bản | Web, CLI, GitHub UI |
| LAB-008 | Build Node.js app cơ bản | GitHub Actions workflow căn bản | Web, CLI, GitHub UI |
| LAB-009 | Workflow chạy khi Pull Request | Events, triggers & workflow_dispatch | Web, CLI |
| LAB-010 | Manual workflow với input môi trường | Events, triggers & workflow_dispatch | Web, CLI |
| LAB-011 | In thông tin context an toàn | Contexts, expressions, variables & secrets | Web, CLI |
| LAB-012 | Dùng variables và secrets | Contexts, expressions, variables & secrets | Web, CLI |
| LAB-013 | Matrix build Node.js | Matrix, cache, artifacts & job summary | Web, CLI |
| LAB-014 | Cache và artifact | Matrix, cache, artifacts & job summary | Web, CLI |
| LAB-015 | Tạo reusable workflow CI | Reusable workflows & workflow templates | Web, CLI |
| LAB-016 | Reusable workflow có secret | Reusable workflows & workflow templates | Web, CLI |
| LAB-017 | Tạo composite action | Custom actions | Web, CLI, GitHub UI |
| LAB-018 | Tạo JavaScript action cơ bản | Custom actions | Web, CLI, GitHub UI |
| LAB-019 | Cài self-hosted runner | GitHub-hosted & self-hosted runners | Web, CLI, GitHub UI |
| LAB-020 | Dùng custom label cho runner | GitHub-hosted & self-hosted runners | Web, CLI, GitHub UI |
| LAB-021 | Environment protection cho production | Enterprise governance for GitHub Actions | Web, CLI, GitHub UI |
| LAB-022 | Giới hạn quyền GITHUB_TOKEN | Enterprise governance for GitHub Actions | Web, CLI, GitHub UI |
| LAB-023 | OIDC GitHub Actions vào Azure | GitHub Actions security & OIDC | Web, Azure Portal, CLI, PowerShell |
| LAB-024 | Hardening workflow | GitHub Actions security & OIDC | Web, CLI, GitHub UI |
| LAB-025 | Branch policy trong Azure Repos | Source control strategy | Web, Azure Portal, CLI, PowerShell |
| LAB-026 | Git LFS cho file lớn | Source control strategy | Web, CLI |
| LAB-027 | Pipeline YAML đầu tiên | Azure Pipelines YAML căn bản | Web, Azure Portal, CLI, PowerShell |
| LAB-028 | Build và publish artifact | Azure Pipelines YAML căn bản | Web, Azure Portal, CLI, PowerShell |
| LAB-029 | Tạo multi-stage pipeline | Multi-stage pipeline & approvals | Web, CLI |
| LAB-030 | Approval cho production | Multi-stage pipeline & approvals | Web, CLI |
| LAB-031 | Publish test result | Build, test, coverage & package management | Web, CLI |
| LAB-032 | Tạo Azure Artifacts feed | Build, test, coverage & package management | Web, Azure Portal, CLI, PowerShell |
| LAB-033 | Blue-green với App Service slots | Deployment strategies | Web, Azure Portal, CLI, PowerShell |
| LAB-034 | Feature flag cơ bản | Deployment strategies | Web, CLI |
| LAB-035 | Deploy Web App từ Azure Pipeline | Azure App Service & deployment slots | Web, Azure Portal, CLI, PowerShell |
| LAB-036 | App settings và slot settings | Azure App Service & deployment slots | Web, Azure Portal, CLI, PowerShell |
| LAB-037 | Build và push image lên ACR | Containers: Docker, ACR, AKS, ACA | CLI, Azure Portal, Linux/macOS Terminal, PowerShell, CLI, Docker Desktop |
| LAB-038 | Deploy Azure Container Apps | Containers: Docker, ACR, AKS, ACA | CLI, Azure Portal, Linux/macOS Terminal, PowerShell, CLI, Docker Desktop |
| LAB-039 | Bicep tạo Storage Account | Infrastructure as Code | Web, CLI |
| LAB-040 | Terraform remote state | Infrastructure as Code | Web, CLI, CLI |
| LAB-041 | Tạo service connection Azure Resource Manager | Identity, service connections & Key Vault | Web, Azure Portal, CLI, PowerShell |
| LAB-042 | Variable group liên kết Key Vault | Identity, service connections & Key Vault | Web, Azure Portal, CLI, PowerShell |
| LAB-043 | CodeQL code scanning | DevSecOps, GHAS & compliance căn bản | Web, CLI |
| LAB-044 | Dependabot alerts và updates | DevSecOps, GHAS & compliance căn bản | Web, CLI |
| LAB-045 | Application Insights telemetry | Monitoring, KQL, DORA & feedback loop | Web, CLI |
| LAB-046 | KQL và alert HTTP 500 | Monitoring, KQL, DORA & feedback loop | Web, CLI |
| LAB-047 | Capstone GitHub Actions → Azure | Capstone end-to-end project | Web, Azure Portal, CLI, PowerShell |
| LAB-048 | Capstone Azure DevOps Pipeline | Capstone end-to-end project | Web, Azure Portal, CLI, PowerShell |
| LAB-049 | Runbook rollback | Capstone end-to-end project | Web, CLI |
| LAB-050 | Báo cáo hoàn thành | Capstone end-to-end project | Web, CLI |
| LAB-051 | Linux log troubleshooting | Linux for DevOps | Linux Terminal, WSL2, Azure Linux VM |
| LAB-052 | Bash automation script cho deployment | Linux for DevOps | Linux Terminal, WSL2, Azure Linux VM |
| LAB-053 | Systemd service cho app demo | Linux for DevOps | Linux Terminal, WSL2, Azure Linux VM |
| LAB-054 | DNS + custom domain + TLS cho App Service | Networking for DevOps | Web, Azure Portal, CLI, PowerShell |
| LAB-055 | Private Endpoint cho Storage hoặc Key Vault | Networking for DevOps | Web, Azure Portal, CLI, PowerShell |
| LAB-056 | App Service VNet Integration | Networking for DevOps | Web, Azure Portal, CLI, PowerShell |
| LAB-057 | PowerShell script tạo Resource Group + tags | PowerShell & Bash Automation | Linux Terminal, WSL2, Azure Linux VM, PowerShell |
| LAB-058 | Azure CLI script idempotent | PowerShell & Bash Automation | Linux Terminal, WSL2, Azure Linux VM, PowerShell |
| LAB-059 | Script dùng trong pipeline | PowerShell & Bash Automation | Linux Terminal, WSL2, Azure Linux VM, PowerShell |
| LAB-060 | AKS readiness/liveness probes | Kubernetes nâng cao cho DevOps | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-061 | AKS requests/limits + HPA | Kubernetes nâng cao cho DevOps | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-062 | AKS RBAC namespace cho team | Kubernetes nâng cao cho DevOps | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-063 | Helm chart nâng cao | Kubernetes nâng cao cho DevOps | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-064 | Kustomize overlay dev/staging/prod | Kubernetes nâng cao cho DevOps | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-065 | OpenTelemetry tracing cơ bản | Observability nâng cao: OpenTelemetry, SLO, SLA | Web, CLI |
| LAB-066 | SLO/error budget dashboard | Observability nâng cao: OpenTelemetry, SLO, SLA | Web, CLI |
| LAB-067 | Incident response và postmortem template | Observability nâng cao: OpenTelemetry, SLO, SLA | Web, CLI |
| LAB-068 | Azure Cost Management budget alert | FinOps & Cost Governance trên Azure | Web, Azure Portal, CLI, PowerShell |
| LAB-069 | Resource tagging policy | FinOps & Cost Governance trên Azure | Web, Azure Portal, CLI, PowerShell |
| LAB-070 | Enterprise capstone nâng cao | FinOps & Cost Governance trên Azure | Web, Azure Portal, CLI, PowerShell |
| LAB-071 | STRIDE threat model cho ứng dụng web | Security baseline & threat modeling | Web, CLI |
| LAB-072 | Security baseline cho Azure App Service | Security baseline & threat modeling | Web, Azure Portal, CLI, PowerShell |
| LAB-073 | Security baseline cho GitHub repository | Security baseline & threat modeling | Web, CLI, GitHub UI |
| LAB-074 | Risk register và mitigation plan | Security baseline & threat modeling | Web, CLI |
| LAB-075 | Tạo SBOM bằng Syft | Supply Chain Security: SBOM, Signing, SLSA | Web, CLI, CLI, Docker Desktop |
| LAB-076 | Scan SBOM bằng Grype | Supply Chain Security: SBOM, Signing, SLSA | Web, CLI, CLI, Docker Desktop |
| LAB-077 | Ký container image bằng Cosign | Supply Chain Security: SBOM, Signing, SLSA | Web, CLI, CLI, Docker Desktop |
| LAB-078 | SLSA provenance cho build artifact | Supply Chain Security: SBOM, Signing, SLSA | Web, CLI, CLI, Docker Desktop |
| LAB-079 | OPA policy chặn privileged container | Policy-as-Code nâng cao: OPA, Gatekeeper, Kyverno | CLI, Azure Portal, Linux/macOS Terminal, PowerShell, CLI, Docker Desktop |
| LAB-080 | Gatekeeper constraint cho Kubernetes | Policy-as-Code nâng cao: OPA, Gatekeeper, Kyverno | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-081 | Kyverno enforce image registry | Policy-as-Code nâng cao: OPA, Gatekeeper, Kyverno | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-082 | Azure Policy deny public IP | Policy-as-Code nâng cao: OPA, Gatekeeper, Kyverno | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-083 | Key Vault secret rotation thủ công + CLI | Secrets Management nâng cao & Zero Secret | Web, Azure Portal, CLI, PowerShell |
| LAB-084 | Workload identity không dùng client secret | Secrets Management nâng cao & Zero Secret | Web, CLI |
| LAB-085 | Managed Identity truy cập Key Vault | Secrets Management nâng cao & Zero Secret | Web, Azure Portal, CLI, PowerShell |
| LAB-086 | Zero-secret pipeline checklist | Secrets Management nâng cao & Zero Secret | Web, CLI |
| LAB-087 | Pipeline security evidence report | Compliance Automation & Audit Evidence | Web, CLI |
| LAB-088 | Compliance control mapping ISO/SOC2-style | Compliance Automation & Audit Evidence | Web, CLI |
| LAB-089 | Release approval gate có security evidence | Compliance Automation & Audit Evidence | Web, CLI |
| LAB-090 | License scanning và policy | Compliance Automation & Audit Evidence | Web, Azure Portal, CLI, PowerShell |
| LAB-091 | Thiết kế Internal Developer Platform | Platform Engineering & Internal Developer Platform | Web, CLI |
| LAB-092 | Tạo platform backlog và owner model | Platform Engineering & Internal Developer Platform | Web, CLI |
| LAB-093 | Paved road cho ứng dụng web | Platform Engineering & Internal Developer Platform | Web, CLI |
| LAB-094 | Cài Backstage local | Backstage Developer Portal | Web, CLI, GitHub UI |
| LAB-095 | Tạo service catalog entity | Backstage Developer Portal | Web, CLI, GitHub UI |
| LAB-096 | Gắn TechDocs cho service | Backstage Developer Portal | Web, CLI, GitHub UI |
| LAB-097 | Software template sinh repo mẫu | Golden Path Templates | Web, CLI |
| LAB-098 | Template sinh pipeline chuẩn | Golden Path Templates | Web, CLI |
| LAB-099 | Template sinh service docs | Golden Path Templates | Web, CLI |
| LAB-100 | Self-service environment bằng Terraform | Self-Service Environment Provisioning | Web, CLI, CLI |
| LAB-101 | Self-service environment bằng Bicep | Self-Service Environment Provisioning | Web, CLI |
| LAB-102 | Approval workflow cho environment | Self-Service Environment Provisioning | Web, CLI |
| LAB-103 | Service scorecard cơ bản | Developer Experience, Scorecards & Service Catalog | Web, CLI |
| LAB-104 | Service ownership và lifecycle | Developer Experience, Scorecards & Service Catalog | Web, CLI |
| LAB-105 | Developer portal quality gate | Developer Experience, Scorecards & Service Catalog | Web, CLI |
| LAB-106 | Đánh giá automation maturity | NoOps Principles & Automation Maturity | Web, CLI |
| LAB-107 | NoOps readiness checklist | NoOps Principles & Automation Maturity | Web, CLI |
| LAB-108 | Chuẩn hóa runbook tự động | NoOps Principles & Automation Maturity | Web, CLI |
| LAB-109 | Webhook GitHub kích hoạt workflow vận hành | Event-driven Operations | Web, CLI, GitHub UI |
| LAB-110 | Azure Event Grid + Logic App | Event-driven Operations | Web, Azure Portal, CLI, PowerShell |
| LAB-111 | Event-driven cleanup resource | Event-driven Operations | Web, CLI |
| LAB-112 | Azure Monitor alert gọi remediation script | Auto-remediation | Web, Azure Portal, CLI, PowerShell |
| LAB-113 | GitHub Actions tự rollback khi health check fail | Auto-remediation | Web, CLI, GitHub UI |
| LAB-114 | Auto-remediate missing tags | Auto-remediation | Web, CLI |
| LAB-115 | Autoscale ACA/AKS theo metric | Self-healing Infrastructure | CLI, Azure Portal, Linux/macOS Terminal, PowerShell |
| LAB-116 | Synthetic monitoring endpoint | Self-healing Infrastructure | Web, CLI |
| LAB-117 | Chaos test nhẹ và tự phục hồi | Self-healing Infrastructure | Web, CLI |
| LAB-118 | ChatOps deploy qua GitHub comment | ChatOps, AIOps & Automated Incident Response | Web, CLI, GitHub UI |
| LAB-119 | Teams webhook thông báo incident | ChatOps, AIOps & Automated Incident Response | Web, CLI |
| LAB-120 | AIOps incident summary từ logs | ChatOps, AIOps & Automated Incident Response | Web, CLI |