Skip to content

Commit 464b72b

Browse files
Merge pull request #54197 from MicrosoftDocs/NEW-intro-to-agentic-devops
New intro to agentic devops - to main
2 parents 2712168 + 3a78364 commit 464b72b

15 files changed

Lines changed: 513 additions & 0 deletions
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.wwl.introduction-agentic-devops-microsoft-tools-azure.introduction
3+
title: Introduction to agentic DevOps for Microsoft environments
4+
metadata:
5+
title: Introduction to agentic DevOps for Microsoft environments
6+
description: "Overview of agentic DevOps and what this module covers for Microsoft DevOps Engineers on Azure."
7+
ms.date: 04/03/2026
8+
author: petender
9+
ms.author: petender
10+
ms.topic: unit
11+
ai-usage: ai-generated
12+
durationInMinutes: 2
13+
content: |
14+
[!include[](includes/1-introduction.md)]
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.wwl.introduction-agentic-devops-microsoft-tools-azure.define-agentic-devops-microsoft-environments
3+
title: Define agentic DevOps for Microsoft environments
4+
metadata:
5+
title: Define agentic DevOps for Microsoft environments
6+
description: "Define the agentic operating model, distinguish it from traditional automation, and understand the Microsoft platform spectrum of agentic capabilities."
7+
ms.date: 04/10/2026
8+
author: petender
9+
ms.author: petender
10+
ms.topic: unit
11+
ai-usage: ai-generated
12+
durationInMinutes: 8
13+
content: |
14+
[!include[](includes/2-define-agentic-devops-microsoft-environments.md)]
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.wwl.introduction-agentic-devops-microsoft-tools-azure.map-devops-work-agentic-opportunities
3+
title: Map day-to-day DevOps work to agentic opportunities
4+
metadata:
5+
title: Map day-to-day DevOps work to agentic opportunities
6+
description: "Map DevOps lifecycle phases to high-value agentic support opportunities using a priority framework based on frequency, context breadth, and decision reversibility."
7+
ms.date: 04/10/2026
8+
author: petender
9+
ms.author: petender
10+
ms.topic: unit
11+
ai-usage: ai-generated
12+
durationInMinutes: 9
13+
content: |
14+
[!include[](includes/3-map-devops-work-agentic-opportunities.md)]
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.wwl.introduction-agentic-devops-microsoft-tools-azure.set-autonomy-boundaries-human-control
3+
title: Set autonomy boundaries and human control points
4+
metadata:
5+
title: Set autonomy boundaries and human control points
6+
description: "Define the four-level autonomy spectrum for agentic actions, classify DevOps operations by reversibility and blast radius, and establish mandatory human control points for production-facing operations."
7+
ms.date: 04/10/2026
8+
author: petender
9+
ms.author: petender
10+
ms.topic: unit
11+
ai-usage: ai-generated
12+
durationInMinutes: 10
13+
content: |
14+
[!include[](includes/4-set-autonomy-boundaries-human-control.md)]
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.wwl.introduction-agentic-devops-microsoft-tools-azure.exercise-classify-devops-backlog
3+
title: "Exercise: Classify a DevOps backlog by autonomy level"
4+
metadata:
5+
title: "Exercise: Classify a DevOps backlog by autonomy level"
6+
description: "Apply the agentic DevOps framework by classifying a realistic DevOps task backlog into autonomy levels, then compare your answers against reference criteria."
7+
ms.date: 04/10/2026
8+
author: petender
9+
ms.author: petender
10+
ms.topic: unit
11+
ai-usage: ai-generated
12+
durationInMinutes: 10
13+
content: |
14+
[!include[](includes/5-exercise-classify-devops-backlog.md)]
Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.wwl.introduction-agentic-devops-microsoft-tools-azure.knowledge-check
3+
title: Module assessment
4+
metadata:
5+
title: Module assessment
6+
description: "Knowledge check for Introduction to agentic DevOps using Microsoft tools on Azure."
7+
ms.date: 04/10/2026
8+
author: petender
9+
ms.author: petender
10+
ms.topic: unit
11+
module_assessment: true
12+
ai_generated_module_assessment: true
13+
ai-usage: ai-generated
14+
durationInMinutes: 5
15+
quiz:
16+
title: ""
17+
questions:
18+
- content: "Which property distinguishes an agentic AI capability from traditional DevOps automation?"
19+
choices:
20+
- content: "It executes a deterministic script without requiring human input."
21+
isCorrect: false
22+
explanation: "Deterministic, scripted execution is the defining characteristic of traditional automation, not agentic capabilities."
23+
- content: "It observes intermediate results and adapts its plan to reach a defined goal."
24+
isCorrect: true
25+
explanation: "The observe-reason-act loop, combined with goal orientation and tool invocation, is what distinguishes agents from scripted automation."
26+
- content: "It can only suggest actions without executing them."
27+
isCorrect: false
28+
explanation: "Agentic capabilities span a full autonomy spectrum; many can execute actions, not only suggest them."
29+
- content: "A DevOps engineer wants to use agentic capabilities to assign incoming bugs to the correct team and area path automatically. Which autonomy level is most appropriate for this task?"
30+
choices:
31+
- content: "Suggest only, because any modification to work items requires human authorization."
32+
isCorrect: false
33+
explanation: "Work item assignment is fully reversible with no blast radius outside Boards, making autonomous execution appropriate."
34+
- content: "Execute autonomously, because the task is high-frequency, reversible, and has no meaningful blast radius."
35+
isCorrect: true
36+
explanation: "Reversible operations with low blast radius and high frequency are suitable for autonomous execution, and work item assignment meets all three criteria."
37+
- content: "Inform only, because agents should never interact with project management data."
38+
isCorrect: false
39+
explanation: "Inform is restrictive for this task. Agents can interact with Boards data; the question is how much autonomy is appropriate."
40+
- content: "Which of the following DevOps operations must always retain a mandatory human authorization step regardless of agent maturity?"
41+
choices:
42+
- content: "Generating a pull request description for an infrastructure change."
43+
isCorrect: false
44+
explanation: "PR description generation is informational. No state is changed until a human opens the PR."
45+
- content: "Creating RBAC (Role Based Access Control) role assignments in a production Azure subscription."
46+
isCorrect: true
47+
explanation: "RBAC (Role Based Access Control)changes in production have low reversibility and compliance implications that require documented human authorization."
48+
- content: "Summarizing the previous week's pipeline failure history."
49+
isCorrect: false
50+
explanation: "This Inform-level operation is read-only, which carries no blast radius or reversibility risk."
51+
- content: "A platform team is designing their agentic DevOps deployment. They want to allow agents to generate and validate Bicep templates but require human review before applying changes to nonproduction environments. Which autonomy level does this describe?"
52+
choices:
53+
- content: "Inform"
54+
isCorrect: false
55+
explanation: "Inform produces findings only. This scenario includes an execution phase after human review, which goes beyond Inform."
56+
- content: "Execute autonomously"
57+
isCorrect: false
58+
explanation: "Execute autonomously means no per-step confirmation is required. This scenario explicitly requires human review before execution."
59+
- content: "Execute on approval"
60+
isCorrect: true
61+
explanation: "Execute on approval means the agent prepares the execution plan and waits for explicit human confirmation before proceeding. Exactly matching this scenario."
62+
- content: "What is the primary reason to implement audit logging for agent-initiated Azure resource operations from the start of an agentic DevOps pilot?"
63+
choices:
64+
- content: "To prevent agents from making any changes to Azure resources during the pilot period."
65+
isCorrect: false
66+
explanation: "Audit logging records actions; it doesn't block them. Authorization scoping and approval gates prevent changes."
67+
- content: "To create the compliance baseline and feedback mechanism needed to responsibly expand agent autonomy over time."
68+
isCorrect: true
69+
explanation: "Audit logs serve two purposes: they satisfy compliance requirements and they provide the evidence that builds confidence for expanding autonomy as agent behavior is validated."
70+
- content: "To ensure that all agent actions are reviewed by a security team before they take effect."
71+
isCorrect: false
72+
explanation: "Approval gates handle preflight review, not audit logs. Audit logs record what happened, enabling post-hoc review and incident investigation."
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
### YamlMime:ModuleUnit
2+
uid: learn.wwl.introduction-agentic-devops-microsoft-tools-azure.summary
3+
title: Summary
4+
metadata:
5+
title: Summary
6+
description: "Summary of the key concepts from Introduction to agentic DevOps using Microsoft tools on Azure."
7+
ms.date: 04/10/2026
8+
author: petender
9+
ms.author: petender
10+
ms.topic: unit
11+
ai-usage: ai-generated
12+
durationInMinutes: 3
13+
content: |
14+
[!include[](includes/7-summary.md)]
Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
You're already shipping reliable pipelines, managing infrastructure at scale, and responding to production incidents before most of your organization even opens their laptops. Your DevOps practices are mature. But your tools are changing faster than your workflows.
2+
3+
AI-assisted capabilities are now embedded across the Microsoft platform you work in every day: inside GitHub Copilot, Azure DevOps, your CI/CD tooling, and the Azure operations experience itself. Some of those capabilities follow a fundamentally different model than the automation you've built and trusted for years. They observe context, reason about it, and take multi-step actions without explicit scripting for every case.
4+
5+
This shift is called **agentic DevOps**. Understanding it isn't about adopting hype. It's about knowing exactly where these new capabilities fit in your workflows, where they add clear value, and where human judgment must stay in the loop.
6+
7+
## What you'll learn in this module
8+
9+
This module builds a working mental model for agentic DevOps in **Microsoft-first Azure and Azure DevOps environments**. You'll define what makes a capability "agentic" and how it differs from traditional automation. Next, you'll map specific, high-frequency tasks in the DevOps lifecycle to agentic patterns. This allows you to leave with a concrete view of where to focus first. Finally, you'll establish the autonomy boundaries and human control points that make agentic approaches safe to apply in production environments.
10+
11+
By the end of this module, you'll be able to:
12+
13+
- Define agentic DevOps in a Microsoft Azure and Azure DevOps context.
14+
- Identify high-value DevOps tasks that benefit from agentic support.
15+
- Distinguish assistant, semi-autonomous, and autonomous operating modes.
16+
- Explain human oversight requirements for production-facing operations.
Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
As an experienced DevOps engineer, you've built automation that runs without human intervention. A pipeline triggers on push, a script rotates credentials on a schedule, a policy blocks a non-compliant resource at the control plane. These are deterministic: given the same input, they produce the same output, every time.
2+
3+
Agentic capabilities are different. They don't execute a fixed script. They reason about a goal, gather context from multiple sources, decide which tools to use, and take a sequence of actions — adapting their next step based on what they observe. That reasoning loop is what distinguishes an agent from automation.
4+
5+
## Understand what makes a capability agentic
6+
7+
An agent, in the AI sense, is a system that perceives its environment, reasons about a goal, selects and invokes tools, and adjusts its approach based on results. Applied to DevOps, this means an agent doesn't just respond to a single instruction. It can accept a goal like "generate a Bicep template for this workload and validate it against our policy baseline," then break that goal into subtasks, query your repository, invoke Bicep tools, check Azure Policy compliance data, and return a ready-to-review template.
8+
9+
Three properties distinguish agentic capabilities from traditional automation and from simple AI chatbots:
10+
11+
- **Goal orientation** - the agent works toward an objective, not a fixed sequence of commands.
12+
- **Tool invocation** - the agent calls external tools, APIs, or services to gather information and take actions.
13+
- **Observe-reason-act loops** - the agent evaluates intermediate results and adjusts its plan accordingly.
14+
15+
Traditional DevOps automation has goal orientation (pipelines have a target state) and sometimes tool invocation, but it doesn't have the **adaptive reasoning loop**. A Bash script doesn't observe that its first command failed to then choose a different strategy. An agent does.
16+
17+
## Place agentic DevOps on the Microsoft platform spectrum
18+
19+
Microsoft has been building incremental agentic capabilities across its toolchain for several years. The progression is clearest in GitHub Copilot, which moved from a code completion tool to a chat assistant. Then evolved into agent mode, and now is a cloud-based coding agent that can take assigned tasks, open pull requests, and iterate on feedback without staying in your editor.
20+
21+
A similar progression appears across the platform:
22+
23+
| Capability family | How it behaves agentically |
24+
|---|---|
25+
| GitHub Copilot (chat and inline) | Responds to prompts. Suggests code, explains errors, and generates documentation. Single-turn or short multi-turn. |
26+
| GitHub Copilot agent mode | Reads your full codebase context, executes multi-step tasks, invokes tools (terminal, file system, tests), and iterates. Multi-turn with tool use. |
27+
| GitHub Copilot coding agent (cloud) | Receives assigned issues from your backlog, creates a pull request, and iterates on review comments. Asynchronous, repository-scoped. |
28+
| Azure Copilot agents | Specialized agents in the Azure portal for deployment, migration, observability, optimization, resiliency, and troubleshooting of Azure workloads. |
29+
| Azure DevOps AI capabilities | AI-assisted work item summaries, pull request descriptions, pipeline authoring suggestions, and Boards content generation — integrated into daily workflow surfaces. |
30+
| MCP-enabled tooling | Extensions to any of the above through the Model Context Protocol. Gives agents access to additional tools (Azure CLI, ADO project context, Bicep analyzer) scoped by you. |
31+
32+
Rather than treating these as separate products to learn in isolation, think of them as different points on an autonomy spectrum. Based on your experience level, you might use them isolated at first, to then evolve into a combined set of tools.
33+
34+
## Distinguish agentic capabilities from your existing automation
35+
36+
You might be thinking: "I already have pipelines that deploy infrastructure, scripts that check drift, and runbooks that respond to alerts. How is this different?"
37+
38+
The key distinction is *breadth of context* and *adaptive decision-making*. Your existing automation knows what you told it to know, does what you told it to do, and stops or fails when it hits an unexpected state. An agent can:
39+
40+
- Ingest context from multiple unstructured sources (pull request description, failing test logs, monitoring telemetry, documentation) and synthesize it into a coherent action plan.
41+
- Select from a set of available tools to gather what it needs, rather than having tool selection hard-coded.
42+
- Respond to intermediate results — for example, discovering mid-task that a resource name conflicts with an existing deployment and choosing an alternative automatically.
43+
44+
This isn't a replacement for your automation. It's a different layer of the operating model. One that handles the *judgment-intensive, context-switching, multi-source* work that your pipelines were never designed to absorb.
45+
46+
## Define agentic DevOps as an operating model
47+
48+
Agentic DevOps is the application of agent-based AI capabilities to DevOps workflows, where those capabilities handle tasks that require multi-source reasoning, produce structured outcomes that fit into existing delivery processes, and operate within human-defined boundaries.
49+
50+
The goal isn't to remove DevOps engineers from the loop. It's to change **what** they're in the loop for. Instead of manually triaging a failing build by searching through five different log views, you describe the failure to an agent, which synthesizes the logs, cross-references similar past failures, and surfaces the probable root cause with supporting evidence. You still make the fix decision. You just spend less time on the search.
51+
52+
This distinction of AI doing the information-intensive groundwork, and humans making the consequential decision, is the foundation of every concept in the rest of this module.
53+
54+
> [!NOTE]
55+
> The capabilities described in this module represent the Microsoft platform. Specific feature availability may vary by plan, region, and product release cycle. Always verify capability status in official Microsoft documentation before designing production workflows.

0 commit comments

Comments
 (0)