Agent-Skills azure-confidential-ledger

Expert knowledge for Azure Confidential Ledger development including decision making, security, integrations & coding patterns, and deployment. Use when configuring Entra ID/RBAC, client certs, node attestation, .NET SDK, JavaScript UDFs, or ARM/Terraform deployments, and other Azure Confidential Ledger related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Key Vault (use azure-key-vault), Azure Dedicated HSM (use azure-dedicated-hsm), Azure Cloud Hsm (use azure-cloud-hsm).

install

source · Clone the upstream repo

git clone https://github.com/MicrosoftDocs/Agent-Skills

Claude Code · Install into ~/.claude/skills/

T=$(mktemp -d) && git clone --depth=1 https://github.com/MicrosoftDocs/Agent-Skills "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/azure-confidential-ledger" ~/.claude/skills/microsoftdocs-agent-skills-azure-confidential-ledger && rm -rf "$T"

manifest: skills/azure-confidential-ledger/SKILL.md

source content

Azure Confidential Ledger Skill

This skill provides expert guidance for Azure Confidential Ledger. Covers decision making, security, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,
L35-L120
), use
read_file
with the specified lines. For categories with file links (e.g.,
[security.md](security.md)
), use
read_file
on the linked reference file

IMPORTANT for Agent: If
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use

mcp_microsoftdocs:microsoft_docs_fetch

with query string

from=learn-agent-skill

. Returns Markdown.

Fallback: Use

fetch_webpage

with query string

from=learn-agent-skill&accept=text/markdown

. Returns Markdown.

Category Index

Category	Lines	Description
Decision Making	L32-L36	Guidance on migrating from Managed CCF to Azure Confidential Ledger, including compatibility, feature mapping, and steps to move existing apps and data.
Security	L37-L49	Auth, attestation, RBAC, and security for Confidential Ledger: Entra ID setup, client certs, user/role management, node quote verification, and best‑practice hardening.
Integrations & Coding Patterns	L50-L60	Patterns and code for integrating ACL with other services (Blob digests, Power Automate), querying/organizing data, using the .NET SDK, writing JavaScript UDFs, and verifying transaction receipts.
Deployment	L61-L65	How to deploy and provision Azure Confidential Ledger instances using ARM templates or Terraform, including required parameters and configuration steps.

Decision Making

Topic	URL
Migrate from Managed CCF to Azure Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/managed-confidential-consortium-framework-migration

Security

Topic	URL
Authenticate and attest Azure Confidential Ledger nodes securely	https://learn.microsoft.com/en-us/azure/confidential-ledger/authenticate-ledger-nodes
Configure Microsoft Entra authentication for Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/authentication-azure-ad
Create and configure client certificates for Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/create-client-certificate
Manage Entra token-based users and roles in Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/manage-azure-ad-token-based-users
Manage certificate-based users and roles in Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/manage-certificate-based-users
Register Confidential Ledger applications in Microsoft Entra ID	https://learn.microsoft.com/en-us/azure/confidential-ledger/register-application
Apply security best practices to Azure Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/secure-confidential-ledger
Implement advanced UDFs with RBAC in Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/user-defined-endpoints
Verify node quotes and establish trust in Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/verify-node-quotes

Integrations & Coding Patterns

Topic	URL
Integrate Blob Storage digests with Azure Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/create-blob-managed-app
Use Power Automate connector with Azure Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/create-power-automate-workflow
Organize and query data in Azure Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/data-organization
Use Azure Confidential Ledger .NET client library	https://learn.microsoft.com/en-us/azure/confidential-ledger/quickstart-net
Run user-defined functions in Azure Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/server-side-programming
Create simple JavaScript UDFs in Confidential Ledger	https://learn.microsoft.com/en-us/azure/confidential-ledger/user-defined-functions
Programmatically verify Confidential Ledger transaction receipts	https://learn.microsoft.com/en-us/azure/confidential-ledger/verify-write-transaction-receipts

Deployment

Topic	URL
Deploy Azure Confidential Ledger via ARM template	https://learn.microsoft.com/en-us/azure/confidential-ledger/quickstart-template
Provision Azure Confidential Ledger using Terraform	https://learn.microsoft.com/en-us/azure/confidential-ledger/quickstart-terraform