You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/confidential-ledger/overview.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,13 +5,13 @@ services: confidential-ledger
5
5
author: msmbaldwin
6
6
ms.service: confidential-ledger
7
7
ms.topic: overview
8
-
ms.date: 11/14/2022
8
+
ms.date: 01/30/2024
9
9
ms.author: mbaldwin
10
10
11
11
---
12
12
# Microsoft Azure confidential ledger
13
13
14
-
Microsoft Azure confidential ledger (ACL) is a new and highly secure service for managing sensitive data records. It runs exclusively on hardware-backed secure enclaves, a heavily monitored and isolated runtime environment which keeps potential attacks at bay. Furthermore, Azure confidential ledger runs on a minimalistic Trusted Computing Base (TCB), which ensures that no one—not even Microsoft—is "above" the ledger.
14
+
Microsoft Azure confidential ledger (ACL) is a new and highly secure service for managing sensitive data records. It runs exclusively on hardware-backed secure enclaves, a heavily monitored and isolated runtime environment, which keeps potential attacks at bay. Furthermore, Azure confidential ledger runs on a minimalistic Trusted Computing Base (TCB), which ensures that no one—not even Microsoft—is "above" the ledger.
15
15
16
16
As its name suggests, Azure confidential ledger utilizes the [Azure Confidential Computing platform](../confidential-computing/index.yml) and the [Confidential Consortium Framework](https://ccf.dev) to provide a high integrity solution that is tamper-protected and evident. One ledger spans across three or more identical instances, each of which run in a dedicated, fully attested hardware-backed enclave. The ledger's integrity is maintained through a consensus-based blockchain.
17
17
@@ -28,19 +28,19 @@ For more information, you can watch the [Azure confidential ledger demo](https:/
28
28
29
29
## Key Features
30
30
31
-
The confidential ledger is exposed through REST APIs which can be integrated into new or existing applications. The confidential ledger can be managed by administrators utilizing Administrative APIs (Control Plane). It can also be called directly by application code through Functional APIs (Data Plane). The Administrative APIs support basic operations such as create, update, get and, delete. The Functional APIs allow direct interaction with your instantiated ledger and include operations such as put and get data.
31
+
The confidential ledger is exposed through REST APIs, which can be integrated into new or existing applications. Administrators can manage the confidential ledger with Administrative APIs (Control Plane). The confidential ledger can also be called directly by application code through Functional APIs (Data Plane). The Administrative APIs support basic operations such as create, update, get and, delete. The Functional APIs allow direct interaction with your instantiated ledger and include operations such as put and get data.
32
32
33
33
## Ledger security
34
34
35
35
The ledger APIs support certificate-based authentication process with owner roles as well as Microsoft Entra ID based authentication and also role-based access (for example, owner, reader, and contributor).
36
36
37
-
The data to the ledger is sent through TLS 1.3 connection and the TLS 1.3 connection terminates inside the hardware backed security enclaves (Intel® SGX enclaves). This ensures that no one can intercept the connection between a customer's client and the confidential ledger server nodes.
37
+
The data to the ledger is sent through TLS 1.3 connection and the TLS 1.3 connection terminates inside the hardware backed security enclaves (Intel® SGX enclaves), ensuring that no one can intercept the connection between a customer's client and the confidential ledger server nodes.
38
38
39
39
### Ledger storage
40
40
41
41
Confidential ledgers are created as blocks in blob storage containers belonging to an Azure Storage account. Transaction data can either be stored encrypted or in plaintext depending on your needs.
42
42
43
-
The confidential ledger can be managed by administrators utilizing Administrative APIs (Control Plane), and can be called directly by your application code through Functional APIs (Data Plane). The Administrative APIs support basic operations such as create, update, get and, delete.
43
+
Administrators can manage the confidential ledger with Administrative APIs (Control Plane), and the confidential ledger can be called directly by your application code through Functional APIs (Data Plane). The Administrative APIs support basic operations such as create, update, get and, delete.
44
44
45
45
The Functional APIs allow direct interaction with your instantiated confidential ledger and include operations such as put and get data.
46
46
@@ -56,8 +56,8 @@ The Functional APIs allow direct interaction with your instantiated confidential
56
56
|--|--|
57
57
| ACL | Azure confidential ledger |
58
58
| Ledger | An immutable append-only record of transactions (also known as a Blockchain) |
59
-
| Commit | A confirmation that a transaction has been appended to the ledger. |
60
-
| Receipt | Proof that the transaction was processed by the ledger. |
59
+
| Commit | A confirmation that a transaction was appended to the ledger. |
60
+
| Receipt | Proof that the ledger processed a transaction. |
Copy file name to clipboardExpand all lines: articles/confidential-ledger/quickstart-cli.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,17 +3,17 @@ title: Quickstart – Microsoft Azure confidential ledger with the Azure CLI
3
3
description: Learn to use the Microsoft Azure confidential ledger through the Azure CLI
4
4
author: msmbaldwin
5
5
ms.author: mbaldwin
6
-
ms.date: 03/22/2022
6
+
ms.date: 01/30/2024
7
7
ms.service: confidential-ledger
8
8
ms.custom: devx-track-azurecli
9
9
ms.topic: quickstart
10
10
---
11
11
12
12
# Quickstart: Create a confidential ledger using the Azure CLI
13
13
14
-
Azure confidential ledger is a cloud service that provides a high integrity store for sensitive data logs and records that must be kept intact. In this quickstart you will use the [Azure CLI](/cli/azure/) to create a confidential ledger, view and update its properties, and delete it.
14
+
Azure confidential ledger is a cloud service that provides a high integrity store for sensitive data logs and records that must be kept intact. In this quickstart, you use the [Azure CLI](/cli/azure/) to create a confidential ledger, view and update its properties, and delete it.
15
15
16
-
For more information on Azure confidential ledger, and for examples of what can be stored in a confidential ledger, see [About Microsoft Azure confidential ledger](overview.md).
16
+
For more information on Azure confidential ledger and examples of what can be stored in a confidential ledger, see [About Microsoft Azure confidential ledger](overview.md).
@@ -27,13 +27,13 @@ For more information on Azure confidential ledger, and for examples of what can
27
27
28
28
## Get your principal ID
29
29
30
-
To create a confidential ledger, you'll need your Microsoft Entra principal ID (also called your object ID). To obtain your principal ID, use the Azure CLI [az ad signed-in-user](/cli/azure/ad/signed-in-user) command, and filter the results by `objectId`:
30
+
To create a confidential ledger, you need your Microsoft Entra principal ID (also called your object ID). To obtain your principal ID, use the Azure CLI [az ad signed-in-user](/cli/azure/ad/signed-in-user) command, and filter the results by `objectId`:
31
31
32
32
```azurecli
33
33
az ad signed-in-user show --query objectId
34
34
```
35
35
36
-
Your result will be in the format `xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx`.
36
+
Your result is in the format `xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx`.
37
37
38
38
## Create a confidential ledger
39
39
@@ -43,9 +43,9 @@ Use the Azure CLI [az confidentialledger create](/cli/azure/confidentialledger#a
A successful operation will return the properties of the newly created ledger. Take note of the **ledgerUri**. In the example above, this URI is "https://myledger.confidential-ledger.azure.com".
46
+
A successful operation returns the properties of the newly created ledger. Take note of the **ledgerUri**. In our example, this URI is "https://myledger.confidential-ledger.azure.com".
47
47
48
-
You'll need this URI to transact with the confidential ledger from the data plane.
48
+
You need this URI to transact with the confidential ledger from the data plane.
49
49
50
50
## View and update your confidential ledger properties
51
51
@@ -67,7 +67,7 @@ To update the properties of a confidential ledger, use do so, use the Azure CLI
If you again run [az confidentialledger show](/cli/azure/confidentialledger#az-confidentialledger-show), you'll see that the role has been updated.
70
+
If you again run [az confidentialledger show](/cli/azure/confidentialledger#az-confidentialledger-show), you see that the role is updated.
71
71
72
72
```json
73
73
"ledgerRoleName": "Reader",
@@ -79,6 +79,6 @@ If you again run [az confidentialledger show](/cli/azure/confidentialledger#az-c
79
79
80
80
## Next steps
81
81
82
-
In this quickstart, you created a confidential ledger by using the Azure CLI. To learn more about Azure confidential ledger and how to integrate it with your applications, continue on to the articles below.
82
+
In this quickstart, you created a confidential ledger by using the Azure CLI. To learn more about Azure confidential ledger and how to integrate it with your applications, continue on to these articles.
83
83
84
84
-[Overview of Microsoft Azure confidential ledger](overview.md)
-[.NET Core 3.1 SDK or later](https://dotnet.microsoft.com/download/dotnet-core)
27
27
-[Azure CLI](/cli/azure/install-azure-cli)
28
28
29
-
You will also need a running confidential ledger, and a registered user with the `Administrator` privileges. You can create a confidential ledger (and an administrator) using the [Azure portal](quickstart-portal.md), the [Azure CLI](quickstart-cli.md), or [Azure PowerShell](quickstart-powershell.md).
29
+
You also need a running confidential ledger, and a registered user with the `Administrator` privileges. You can create a confidential ledger (and an administrator) using the [Azure portal](quickstart-portal.md), the [Azure CLI](quickstart-cli.md), or [Azure PowerShell](quickstart-powershell.md).
30
30
31
31
## Setup
32
32
33
33
### Create new .NET console app
34
34
35
35
1. In a command shell, run the following command to create a project named `acl-app`:
36
-
37
36
```dotnetcli
38
37
dotnet new console --name acl-app
39
38
```
40
-
41
39
1. Change to the newly created *acl-app* directory, and run the following command to build the project:
42
40
43
41
```dotnetcli
44
42
dotnet build
45
43
```
46
-
47
44
The build output should contain no warnings or errors.
48
-
49
45
```console
50
46
Build succeeded.
51
47
0 Warning(s)
@@ -60,15 +56,15 @@ Install the Confidential Ledger client library for .NET with [NuGet][client_nuge
For this quickstart, you'll also need to install the Azure SDK client library for Azure Identity:
59
+
For this quickstart, you also need to install the Azure SDK client library for Azure Identity:
64
60
65
61
```dotnetcli
66
62
dotnet add package Azure.Identity
67
63
```
68
64
69
65
## Object model
70
66
71
-
The Azure confidential ledger client library for .NET allows you to create an immutable ledger entry in the service. The [Code examples](#code-examples) section shows how to create a write to the ledger and retrieve the transaction ID.
67
+
The Azure confidential ledger client library for .NET allows you to create an immutable ledger entry in the service. The [Code examples](#code-examples) section shows how to create a write to the ledger and retrieve the transaction ID.
72
68
73
69
## Code examples
74
70
@@ -86,7 +82,7 @@ using Azure.Security.ConfidentialLedger.Certificate;
86
82
87
83
### Authenticate and create a client
88
84
89
-
In this quickstart, logged in user is used to authenticate to Azure confidential ledger, which is preferred method for local development. The name of your confidential ledger is expanded to the key vault URI, in the format "https://\<your-confidential-ledger-name\>.confidential-ledger.azure.com". This example is using ['DefaultAzureCredential()'](/dotnet/api/azure.identity.defaultazurecredential) class from [Azure Identity Library](/dotnet/api/overview/azure/identity-readme), which allows to use the same code across different environments with different options to provide identity.
85
+
In this quickstart, logged in user is used to authenticate to Azure confidential ledger, which is preferred method for local development. The name of your confidential ledger is expanded to the key vault URI, in the format "https://\<your-confidential-ledger-name\>.confidential-ledger.azure.com". This example is using ['DefaultAzureCredential()'](/dotnet/api/azure.identity.defaultazurecredential) class from [Azure Identity Library](/dotnet/api/overview/azure/identity-readme), which allows to use the same code across different environments with different options to provide identity.
Copy file name to clipboardExpand all lines: articles/confidential-ledger/quickstart-portal.md
+7-14Lines changed: 7 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,15 +3,15 @@ title: Quickstart – Microsoft Azure confidential ledger with the Azure portal
3
3
description: Learn to use the Microsoft Azure confidential ledger through the Azure portal
4
4
author: msmbaldwin
5
5
ms.author: mbaldwin
6
-
ms.date: 11/14/2022
6
+
ms.date: 01/30/2024
7
7
ms.service: confidential-ledger
8
8
ms.topic: quickstart
9
9
ms.custom: mode-ui
10
10
---
11
11
12
12
# Quickstart: Create a confidential ledger using the Azure portal
13
13
14
-
Azure confidential ledger is a cloud service that provides a high integrity store for sensitive data logs and records that require data to be kept intact. For more information on Azure confidential ledger, and for examples of what can be stored in a confidential ledger, see [About Microsoft Azure confidential ledger](overview.md).
14
+
Azure confidential ledger is a cloud service that provides a high integrity store for sensitive data logs and records that require data to be kept intact. For more information on Azure confidential ledger and examples of what can be stored in a confidential ledger, see [About Microsoft Azure confidential ledger](overview.md).
@@ -28,32 +28,25 @@ Sign in to the [Azure portal](https://portal.azure.com).
28
28
## Create a confidential ledger
29
29
30
30
1. From the Azure portal menu, or from the Home page, select **Create a resource**.
31
-
32
31
1. In the Search box, enter "Confidential Ledger", select said application, and then choose **Create**.
33
-
34
32
1. On the Create confidential ledger section, provide the following information:
35
33
-**Name**: Provide a unique name.
36
34
-**Subscription**: Choose the desired subscription.
37
35
-**Resource Group**: Select **Create new*** and enter a resource group name.
38
36
-**Location**: In the pull-down menu, choose a location.
39
37
- Leave the other options to their defaults.
40
-
41
38
1. Select the **Security** tab.
42
-
43
-
1. You must now add a Microsoft Entra ID-based or certificate-based user to your confidential ledger with a role of "Administrator." In this quickstart, we'll add a Microsoft Entra ID-based user. Select **+ Add Microsoft Entra ID-Based User**.
44
-
39
+
1. You must now add a Microsoft Entra ID-based or certificate-based user to your confidential ledger with a role of "Administrator." In this quickstart, you add a Microsoft Entra ID-based user. Select **+ Add Microsoft Entra ID-Based User**.
45
40
1. You must add a Microsoft Entra ID-based or Certificate-based user. Search the right-hand pane for your email address. Select your row, and then choose **Select** at the bottom of the pane. Your user profile may already be in the Microsoft Entra ID-based user section, in which case you cannot add yourself again.
46
-
47
41
1. In the **Ledger Role** drop-down field, select **Administrator**.
42
+
1. Select **Review + Create**. After validation, select **Create**.
48
43
49
-
1. Select **Review + Create**. After validation has passed, select **Create**.
50
-
51
-
When the deployment is complete. select **Go to resource**.
44
+
When the deployment is complete, select **Go to resource**.
0 commit comments