Back Up Every Azure Logic App to Git, Automatically

说明与用途

Azure DevOps 管道每天将所有 Logic Apps、API 连接和 APIM 实例备份到受锁定的 Git 分支，提供不可篡改的历史记录和安全的恢复功能。

问题

Logic Apps edited only in the Azure portal lack history, undo for deletes, and a source of truth, making it hard to recover or audit changes.

结果

A single scheduled pipeline creates a daily, tamper‑proof backup of all Logic Apps, API connections, and APIM instances in a locked Git branch, while a separate restore pipeline can revert any version safely.

工作流

• Schedule a pipeline to run daily on a Microsoft‑hosted agent.
• Clone the backup branch from the repo.
• Sign in with a Reader service connection and export all resources via ARM REST API or APIOps extractor.
• Stage only the backup folders.
• Commit and push only if changes are detected.
• Use branch security to lock the backup branch and keep scripts on a separate tooling branch.
• Trigger a second pipeline manually to restore from any backup commit, with defaults that prevent accidental production impact.

证据

No history: when a workflow breaks after an edit, you can't see what it looked like yesterday.

来源

A scheduled pipeline reads Azure and commits to a locked backup branch.

来源

Use branch security instead (Repos → Branches → ⋯ → Branch security).

来源