Create resource group in Azure.
Create container registry in Azure.
Create Log Analytics workspace for the containers in Azure.
Create a key vault and secrets (key value pairs) you may need in Azure.
Go to Azure DevOps and create a Variable group (You can link the Key vault from Step 3 here if you wish to do so).
Grab the credentials for the registry created in Step 2.
Store the credentials inside demo-app-DEPLOYMENT variable group.
Note: I've already refreshed my password shown in the screenshot so you won't be able to connect to my registry. :)
Create different environments: DEV and PROD
Create a service connection that enables Azure Pipelines to access our Azure subscription
Azure DevOps -> Project settings -> Service Connections -> Create Service Connection -> Search 'Azure Resource Manager'
Next -> Service Principal (Automatic)