Anyone know if it's possible to upload custom policies via an Azure DevOps task?
The release pipeline might look like this:
- Staging Environment - Deploy from Git to IEF, add suffix _staging
- Block pipeline for manual testing
- Prod Environment - Deploy to IEF without the staging suffix
It is possible through MS Graph API for Programmatic access to Custom Policies and Keysets.
You can use Graph API requests to create, update and delete custom policies. These are Graph API requests so you can integrate these in your pipeline but you need to manage the access token.
The MS Graph API is indeed the way to go. For a complete solution look here. Details on integrating with a DevOps pipeline are here.