{"files":{"SKILL.md":"---\nname: keyvaultclient\ndescription: \"KeyVaultClient API skill. Use when working with KeyVaultClient for keys, deletedkeys, secrets. Covers 78 endpoints.\"\nversion: 1.0.0\ngenerator: lapsh\n---\n\n# KeyVaultClient\nAPI version: 7.0-preview\n\n## Auth\nNo authentication required.\n\n## Base URL\nNot specified.\n\n## Setup\n1. No auth setup needed\n2. GET /keys -- list keys in the specified vault.\n3. POST /keys/{key-name}/create -- create first create\n\n## Endpoints\n78 endpoints across 8 groups. See references/api-spec.lap for full details.\n\n### Keys\n| Method | Path | Description |\n|--------|------|-------------|\n| POST | /keys/{key-name}/create | Creates a new key, stores it, then returns key parameters and attributes to the client. |\n| PUT | /keys/{key-name} | Imports an externally created key, stores it, and returns key parameters and attributes to the client. |\n| DELETE | /keys/{key-name} | Deletes a key of any type from storage in Azure Key Vault. |\n| PATCH | /keys/{key-name}/{key-version} | The update key operation changes specified attributes of a stored key and can be applied to any key type and key version stored in Azure Key Vault. |\n| GET | /keys/{key-name}/{key-version} | Gets the public part of a stored key. |\n| GET | /keys/{key-name}/versions | Retrieves a list of individual key versions with the same key name. |\n| GET | /keys | List keys in the specified vault. |\n| POST | /keys/{key-name}/backup | Requests that a backup of the specified key be downloaded to the client. |\n| POST | /keys/restore | Restores a backed up key to a vault. |\n| POST | /keys/{key-name}/{key-version}/encrypt | Encrypts an arbitrary sequence of bytes using an encryption key that is stored in a key vault. |\n| POST | /keys/{key-name}/{key-version}/decrypt | Decrypts a single block of encrypted data. |\n| POST | /keys/{key-name}/{key-version}/sign | Creates a signature from a digest using the specified key. |\n| POST | /keys/{key-name}/{key-version}/verify | Verifies a signature using a specified key. |\n| POST | /keys/{key-name}/{key-version}/wrapkey | Wraps a symmetric key using a specified key. |\n| POST | /keys/{key-name}/{key-version}/unwrapkey | Unwraps a symmetric key using the specified key that was initially used for wrapping that key. |\n\n### Deletedkeys\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /deletedkeys | Lists the deleted keys in the specified vault. |\n| GET | /deletedkeys/{key-name} | Gets the public part of a deleted key. |\n| DELETE | /deletedkeys/{key-name} | Permanently deletes the specified key. |\n| POST | /deletedkeys/{key-name}/recover | Recovers the deleted key to its latest version. |\n\n### Secrets\n| Method | Path | Description |\n|--------|------|-------------|\n| PUT | /secrets/{secret-name} | Sets a secret in a specified key vault. |\n| DELETE | /secrets/{secret-name} | Deletes a secret from a specified key vault. |\n| PATCH | /secrets/{secret-name}/{secret-version} | Updates the attributes associated with a specified secret in a given key vault. |\n| GET | /secrets/{secret-name}/{secret-version} | Get a specified secret from a given key vault. |\n| GET | /secrets | List secrets in a specified key vault. |\n| GET | /secrets/{secret-name}/versions | List all versions of the specified secret. |\n| POST | /secrets/{secret-name}/backup | Backs up the specified secret. |\n| POST | /secrets/restore | Restores a backed up secret to a vault. |\n\n### Deletedsecrets\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /deletedsecrets | Lists deleted secrets for the specified vault. |\n| GET | /deletedsecrets/{secret-name} | Gets the specified deleted secret. |\n| DELETE | /deletedsecrets/{secret-name} | Permanently deletes the specified secret. |\n| POST | /deletedsecrets/{secret-name}/recover | Recovers the deleted secret to the latest version. |\n\n### Certificates\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /certificates | List certificates in a specified key vault |\n| DELETE | /certificates/{certificate-name} | Deletes a certificate from a specified key vault. |\n| PUT | /certificates/contacts | Sets the certificate contacts for the specified key vault. |\n| GET | /certificates/contacts | Lists the certificate contacts for a specified key vault. |\n| DELETE | /certificates/contacts | Deletes the certificate contacts for a specified key vault. |\n| GET | /certificates/issuers | List certificate issuers for a specified key vault. |\n| PUT | /certificates/issuers/{issuer-name} | Sets the specified certificate issuer. |\n| PATCH | /certificates/issuers/{issuer-name} | Updates the specified certificate issuer. |\n| GET | /certificates/issuers/{issuer-name} | Lists the specified certificate issuer. |\n| DELETE | /certificates/issuers/{issuer-name} | Deletes the specified certificate issuer. |\n| POST | /certificates/{certificate-name}/create | Creates a new certificate. |\n| POST | /certificates/{certificate-name}/import | Imports a certificate into a specified key vault. |\n| GET | /certificates/{certificate-name}/versions | List the versions of a certificate. |\n| GET | /certificates/{certificate-name}/policy | Lists the policy for a certificate. |\n| PATCH | /certificates/{certificate-name}/policy | Updates the policy for a certificate. |\n| PATCH | /certificates/{certificate-name}/{certificate-version} | Updates the specified attributes associated with the given certificate. |\n| GET | /certificates/{certificate-name}/{certificate-version} | Gets information about a certificate. |\n| PATCH | /certificates/{certificate-name}/pending | Updates a certificate operation. |\n| GET | /certificates/{certificate-name}/pending | Gets the creation operation of a certificate. |\n| DELETE | /certificates/{certificate-name}/pending | Deletes the creation operation for a specific certificate. |\n| POST | /certificates/{certificate-name}/pending/merge | Merges a certificate or a certificate chain with a key pair existing on the server. |\n| POST | /certificates/{certificate-name}/backup | Backs up the specified certificate. |\n| POST | /certificates/restore | Restores a backed up certificate to a vault. |\n\n### Deletedcertificates\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /deletedcertificates | Lists the deleted certificates in the specified vault currently available for recovery. |\n| GET | /deletedcertificates/{certificate-name} | Retrieves information about the specified deleted certificate. |\n| DELETE | /deletedcertificates/{certificate-name} | Permanently deletes the specified deleted certificate. |\n| POST | /deletedcertificates/{certificate-name}/recover | Recovers the deleted certificate back to its current version under /certificates. |\n\n### Storage\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /storage | List storage accounts managed by the specified key vault. This operation requires the storage/list permission. |\n| POST | /storage/{storage-account-name}/backup | Backs up the specified storage account. |\n| POST | /storage/restore | Restores a backed up storage account to a vault. |\n| DELETE | /storage/{storage-account-name} | Deletes a storage account. This operation requires the storage/delete permission. |\n| GET | /storage/{storage-account-name} | Gets information about a specified storage account. This operation requires the storage/get permission. |\n| PUT | /storage/{storage-account-name} | Creates or updates a new storage account. This operation requires the storage/set permission. |\n| PATCH | /storage/{storage-account-name} | Updates the specified attributes associated with the given storage account. This operation requires the storage/set/update permission. |\n| POST | /storage/{storage-account-name}/regeneratekey | Regenerates the specified key value for the given storage account. This operation requires the storage/regeneratekey permission. |\n| GET | /storage/{storage-account-name}/sas | List storage SAS definitions for the given storage account. This operation requires the storage/listsas permission. |\n| DELETE | /storage/{storage-account-name}/sas/{sas-definition-name} | Deletes a SAS definition from a specified storage account. This operation requires the storage/deletesas permission. |\n| GET | /storage/{storage-account-name}/sas/{sas-definition-name} | Gets information about a SAS definition for the specified storage account. This operation requires the storage/getsas permission. |\n| PUT | /storage/{storage-account-name}/sas/{sas-definition-name} | Creates or updates a new SAS definition for the specified storage account. This operation requires the storage/setsas permission. |\n| PATCH | /storage/{storage-account-name}/sas/{sas-definition-name} | Updates the specified attributes associated with the given SAS definition. This operation requires the storage/setsas permission. |\n\n### Deletedstorage\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /deletedstorage | Lists deleted storage accounts for the specified vault. |\n| GET | /deletedstorage/{storage-account-name} | Gets the specified deleted storage account. |\n| DELETE | /deletedstorage/{storage-account-name} | Permanently deletes the specified storage account. |\n| POST | /deletedstorage/{storage-account-name}/recover | Recovers the deleted storage account. |\n| GET | /deletedstorage/{storage-account-name}/sas | Lists deleted SAS definitions for the specified vault and storage account. |\n| GET | /deletedstorage/{storage-account-name}/sas/{sas-definition-name} | Gets the specified deleted sas definition. |\n| POST | /deletedstorage/{storage-account-name}/sas/{sas-definition-name}/recover | Recovers the deleted SAS definition. |\n\n## Common Questions\nMatch user requests to endpoints in references/api-spec.lap. Key patterns:\n- \"Create a create?\" -> POST /keys/{key-name}/create\n- \"Update a key?\" -> PUT /keys/{key-name}\n- \"Delete a key?\" -> DELETE /keys/{key-name}\n- \"Partially update a key?\" -> PATCH /keys/{key-name}/{key-version}\n- \"Get key details?\" -> GET /keys/{key-name}/{key-version}\n- \"List all versions?\" -> GET /keys/{key-name}/versions\n- \"List all keys?\" -> GET /keys\n- \"Create a backup?\" -> POST /keys/{key-name}/backup\n- \"Create a restore?\" -> POST /keys/restore\n- \"Create a encrypt?\" -> POST /keys/{key-name}/{key-version}/encrypt\n- \"Create a decrypt?\" -> POST /keys/{key-name}/{key-version}/decrypt\n- \"Create a sign?\" -> POST /keys/{key-name}/{key-version}/sign\n- \"Create a verify?\" -> POST /keys/{key-name}/{key-version}/verify\n- \"Create a wrapkey?\" -> POST /keys/{key-name}/{key-version}/wrapkey\n- \"Create a unwrapkey?\" -> POST /keys/{key-name}/{key-version}/unwrapkey\n- \"List all deletedkeys?\" -> GET /deletedkeys\n- \"Get deletedkey details?\" -> GET /deletedkeys/{key-name}\n- \"Delete a deletedkey?\" -> DELETE /deletedkeys/{key-name}\n- \"Create a recover?\" -> POST /deletedkeys/{key-name}/recover\n- \"Update a secret?\" -> PUT /secrets/{secret-name}\n- \"Delete a secret?\" -> DELETE /secrets/{secret-name}\n- \"Partially update a secret?\" -> PATCH /secrets/{secret-name}/{secret-version}\n- \"Get secret details?\" -> GET /secrets/{secret-name}/{secret-version}\n- \"List all secrets?\" -> GET /secrets\n- \"List all deletedsecrets?\" -> GET /deletedsecrets\n- \"Get deletedsecret details?\" -> GET /deletedsecrets/{secret-name}\n- \"Delete a deletedsecret?\" -> DELETE /deletedsecrets/{secret-name}\n- \"List all certificates?\" -> GET /certificates\n- \"Delete a certificate?\" -> DELETE /certificates/{certificate-name}\n- \"List all contacts?\" -> GET /certificates/contacts\n- \"List all issuers?\" -> GET /certificates/issuers\n- \"Update a issuer?\" -> PUT /certificates/issuers/{issuer-name}\n- \"Partially update a issuer?\" -> PATCH /certificates/issuers/{issuer-name}\n- \"Get issuer details?\" -> GET /certificates/issuers/{issuer-name}\n- \"Delete a issuer?\" -> DELETE /certificates/issuers/{issuer-name}\n- \"Create a import?\" -> POST /certificates/{certificate-name}/import\n- \"List all policy?\" -> GET /certificates/{certificate-name}/policy\n- \"Partially update a certificate?\" -> PATCH /certificates/{certificate-name}/{certificate-version}\n- \"Get certificate details?\" -> GET /certificates/{certificate-name}/{certificate-version}\n- \"List all pending?\" -> GET /certificates/{certificate-name}/pending\n- \"Create a merge?\" -> POST /certificates/{certificate-name}/pending/merge\n- \"List all deletedcertificates?\" -> GET /deletedcertificates\n- \"Get deletedcertificate details?\" -> GET /deletedcertificates/{certificate-name}\n- \"Delete a deletedcertificate?\" -> DELETE /deletedcertificates/{certificate-name}\n- \"List all storage?\" -> GET /storage\n- \"List all deletedstorage?\" -> GET /deletedstorage\n- \"Get deletedstorage details?\" -> GET /deletedstorage/{storage-account-name}\n- \"Delete a deletedstorage?\" -> DELETE /deletedstorage/{storage-account-name}\n- \"Delete a storage?\" -> DELETE /storage/{storage-account-name}\n- \"Get storage details?\" -> GET /storage/{storage-account-name}\n- \"Update a storage?\" -> PUT /storage/{storage-account-name}\n- \"Partially update a storage?\" -> PATCH /storage/{storage-account-name}\n- \"Create a regeneratekey?\" -> POST /storage/{storage-account-name}/regeneratekey\n- \"List all sas?\" -> GET /storage/{storage-account-name}/sas\n- \"Get sa details?\" -> GET /deletedstorage/{storage-account-name}/sas/{sas-definition-name}\n- \"Delete a sa?\" -> DELETE /storage/{storage-account-name}/sas/{sas-definition-name}\n- \"Update a sa?\" -> PUT /storage/{storage-account-name}/sas/{sas-definition-name}\n- \"Partially update a sa?\" -> PATCH /storage/{storage-account-name}/sas/{sas-definition-name}\n\n## Response Tips\n- Check response schemas in references/api-spec.lap for field details\n- Create/update endpoints return the modified resource on success\n\n## References\n- Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas\n\n> Generated from the official API spec by [LAP](https://lap.sh)\n","references/api-spec.lap":"@lap v0.3\n# Machine-readable API spec. Each @endpoint block is one API call.\n@api KeyVaultClient\n@version 7.0-preview\n@common_fields {api-version: any # Client API version.}\n@endpoints 78\n@hint download_for_search\n@toc keys(15), deletedkeys(4), secrets(8), deletedsecrets(4), certificates(23), deletedcertificates(4), storage(13), deletedstorage(7)\n\n@group keys\n@endpoint POST /keys/{key-name}/create\n@desc Creates a new key, stores it, then returns key parameters and attributes to the client.\n@required {key-name: any # The name for the new key. The system will generate the version name for the new key., parameters: any # The parameters to create a key.}\n@returns(200) A key bundle containing the result of the create key request.\n\n@endpoint PUT /keys/{key-name}\n@desc Imports an externally created key, stores it, and returns key parameters and attributes to the client.\n@required {key-name: any # Name for the imported key., parameters: any # The parameters to import a key.}\n@returns(200) Imported key bundle to the vault.\n\n@endpoint DELETE /keys/{key-name}\n@desc Deletes a key of any type from storage in Azure Key Vault.\n@required {key-name: any # The name of the key to delete.}\n@returns(200) The public part of the deleted key and deletion information on when the key will be purged.\n\n@endpoint PATCH /keys/{key-name}/{key-version}\n@desc The update key operation changes specified attributes of a stored key and can be applied to any key type and key version stored in Azure Key Vault.\n@required {key-name: any # The name of key to update., key-version: any # The version of the key to update., parameters: any # The parameters of the key to update.}\n@returns(200) The updated key.\n\n@endpoint GET /keys/{key-name}/{key-version}\n@desc Gets the public part of a stored key.\n@required {key-name: any # The name of the key to get., key-version: any # Adding the version parameter retrieves a specific version of a key.}\n@returns(200) A key bundle containing the key and its attributes.\n\n@endpoint GET /keys/{key-name}/versions\n@desc Retrieves a list of individual key versions with the same key name.\n@required {key-name: any # The name of the key.}\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of keys along with a link to the next page of keys.\n\n@endpoint GET /keys\n@desc List keys in the specified vault.\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of keys in the vault along with a link to the next page of keys.\n\n@endpoint POST /keys/{key-name}/backup\n@desc Requests that a backup of the specified key be downloaded to the client.\n@required {key-name: any # The name of the key.}\n@returns(200) The backup blob containing the backed up key.\n\n@endpoint POST /keys/restore\n@desc Restores a backed up key to a vault.\n@required {parameters: any # The parameters to restore the key.}\n@returns(200) Restored key bundle in the vault.\n\n@endpoint POST /keys/{key-name}/{key-version}/encrypt\n@desc Encrypts an arbitrary sequence of bytes using an encryption key that is stored in a key vault.\n@required {key-name: any # The name of the key., key-version: any # The version of the key., parameters: any # The parameters for the encryption operation.}\n@returns(200) The encryption result.\n\n@endpoint POST /keys/{key-name}/{key-version}/decrypt\n@desc Decrypts a single block of encrypted data.\n@required {key-name: any # The name of the key., key-version: any # The version of the key., parameters: any # The parameters for the decryption operation.}\n@returns(200) The decryption result.\n\n@endpoint POST /keys/{key-name}/{key-version}/sign\n@desc Creates a signature from a digest using the specified key.\n@required {key-name: any # The name of the key., key-version: any # The version of the key., parameters: any # The parameters for the signing operation.}\n@returns(200) The signature value.\n\n@endpoint POST /keys/{key-name}/{key-version}/verify\n@desc Verifies a signature using a specified key.\n@required {key-name: any # The name of the key., key-version: any # The version of the key., parameters: any # The parameters for verify operations.}\n@returns(200) The verification result.\n\n@endpoint POST /keys/{key-name}/{key-version}/wrapkey\n@desc Wraps a symmetric key using a specified key.\n@required {key-name: any # The name of the key., key-version: any # The version of the key., parameters: any # The parameters for wrap operation.}\n@returns(200) The wrapped symmetric key.\n\n@endpoint POST /keys/{key-name}/{key-version}/unwrapkey\n@desc Unwraps a symmetric key using the specified key that was initially used for wrapping that key.\n@required {key-name: any # The name of the key., key-version: any # The version of the key., parameters: any # The parameters for the key operation.}\n@returns(200) The unwrapped symmetric key.\n\n@endgroup\n\n@group deletedkeys\n@endpoint GET /deletedkeys\n@desc Lists the deleted keys in the specified vault.\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of deleted keys in the vault along with a link to the next page of deleted keys.\n\n@endpoint GET /deletedkeys/{key-name}\n@desc Gets the public part of a deleted key.\n@required {key-name: any # The name of the key.}\n@returns(200) A DeletedKeyBundle consisting of a WebKey plus its Attributes and deletion information.\n\n@endpoint DELETE /deletedkeys/{key-name}\n@desc Permanently deletes the specified key.\n@required {key-name: any # The name of the key}\n@returns(204) No content, signaling that the key was permanently purged.\n\n@endpoint POST /deletedkeys/{key-name}/recover\n@desc Recovers the deleted key to its latest version.\n@required {key-name: any # The name of the deleted key.}\n@returns(200) A Key bundle of the original key and its attributes\n\n@endgroup\n\n@group secrets\n@endpoint PUT /secrets/{secret-name}\n@desc Sets a secret in a specified key vault.\n@required {secret-name: any # The name of the secret., parameters: any # The parameters for setting the secret.}\n@returns(200) A secret bundle containing the result of the set secret request.\n\n@endpoint DELETE /secrets/{secret-name}\n@desc Deletes a secret from a specified key vault.\n@required {secret-name: any # The name of the secret.}\n@returns(200) The deleted secret and information on when the secret will be deleted, and how to recover the deleted secret.\n\n@endpoint PATCH /secrets/{secret-name}/{secret-version}\n@desc Updates the attributes associated with a specified secret in a given key vault.\n@required {secret-name: any # The name of the secret., secret-version: any # The version of the secret., parameters: any # The parameters for update secret operation.}\n@returns(200) The updated secret.\n\n@endpoint GET /secrets/{secret-name}/{secret-version}\n@desc Get a specified secret from a given key vault.\n@required {secret-name: any # The name of the secret., secret-version: any # The version of the secret.}\n@returns(200) The retrieved secret.\n\n@endpoint GET /secrets\n@desc List secrets in a specified key vault.\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of secrets in the vault along with a link to the next page of secrets.\n\n@endpoint GET /secrets/{secret-name}/versions\n@desc List all versions of the specified secret.\n@required {secret-name: any # The name of the secret.}\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of secrets along with a link to the next page of secrets.\n\n@endgroup\n\n@group deletedsecrets\n@endpoint GET /deletedsecrets\n@desc Lists deleted secrets for the specified vault.\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of deleted secrets in the vault, along with a link to the next page of deleted secrets.\n\n@endpoint GET /deletedsecrets/{secret-name}\n@desc Gets the specified deleted secret.\n@required {secret-name: any # The name of the secret.}\n@returns(200) A secret bundle of the secret and its attributes.\n\n@endpoint DELETE /deletedsecrets/{secret-name}\n@desc Permanently deletes the specified secret.\n@required {secret-name: any # The name of the secret.}\n@returns(204) No content signaling that the secret was purged forever.\n\n@endpoint POST /deletedsecrets/{secret-name}/recover\n@desc Recovers the deleted secret to the latest version.\n@required {secret-name: any # The name of the deleted secret.}\n@returns(200) A Secret bundle of the original secret and its attributes.\n\n@endgroup\n\n@group secrets\n@endpoint POST /secrets/{secret-name}/backup\n@desc Backs up the specified secret.\n@required {secret-name: any # The name of the secret.}\n@returns(200) The backup blob containing the backed up secret.\n\n@endpoint POST /secrets/restore\n@desc Restores a backed up secret to a vault.\n@required {parameters: any # The parameters to restore the secret.}\n@returns(200) Restored secret bundle in the vault.\n\n@endgroup\n\n@group certificates\n@endpoint GET /certificates\n@desc List certificates in a specified key vault\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null., includePending: any # Specifies whether to include certificates which are not completely provisioned.}\n@returns(200) A response message containing a list of certificates along with a link to the next page of certificates.\n\n@endpoint DELETE /certificates/{certificate-name}\n@desc Deletes a certificate from a specified key vault.\n@required {certificate-name: any # The name of the certificate.}\n@returns(200) The deleted certificate.\n\n@endpoint PUT /certificates/contacts\n@desc Sets the certificate contacts for the specified key vault.\n@required {contacts: any # The contacts for the key vault certificate.}\n@returns(200) The contacts for the key vault certificate.\n\n@endpoint GET /certificates/contacts\n@desc Lists the certificate contacts for a specified key vault.\n@returns(200) The contacts for the key vault certificate.\n\n@endpoint DELETE /certificates/contacts\n@desc Deletes the certificate contacts for a specified key vault.\n@returns(200) The contacts for the key vault certificate.\n\n@endpoint GET /certificates/issuers\n@desc List certificate issuers for a specified key vault.\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of certificate issuers in a key vault along with a link to the next page of certificate issuers.\n\n@endpoint PUT /certificates/issuers/{issuer-name}\n@desc Sets the specified certificate issuer.\n@required {issuer-name: any # The name of the issuer., parameter: any # Certificate issuer set parameter.}\n@returns(200) The issuer for the key vault certificate.\n\n@endpoint PATCH /certificates/issuers/{issuer-name}\n@desc Updates the specified certificate issuer.\n@required {issuer-name: any # The name of the issuer., parameter: any # Certificate issuer update parameter.}\n@returns(200) The issuer for the key vault certificate.\n\n@endpoint GET /certificates/issuers/{issuer-name}\n@desc Lists the specified certificate issuer.\n@required {issuer-name: any # The name of the issuer.}\n@returns(200) The issuer for the key vault certificate.\n\n@endpoint DELETE /certificates/issuers/{issuer-name}\n@desc Deletes the specified certificate issuer.\n@required {issuer-name: any # The name of the issuer.}\n@returns(200) The issuer for the key vault certificate.\n\n@endpoint POST /certificates/{certificate-name}/create\n@desc Creates a new certificate.\n@required {certificate-name: any # The name of the certificate., parameters: any # The parameters to create a certificate.}\n@returns(202) Created certificate bundle.\n\n@endpoint POST /certificates/{certificate-name}/import\n@desc Imports a certificate into a specified key vault.\n@required {certificate-name: any # The name of the certificate., parameters: any # The parameters to import the certificate.}\n@returns(200) Imported certificate bundle to the vault.\n\n@endpoint GET /certificates/{certificate-name}/versions\n@desc List the versions of a certificate.\n@required {certificate-name: any # The name of the certificate.}\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of certificates in the key vault along with a link to the next page of keys.\n\n@endpoint GET /certificates/{certificate-name}/policy\n@desc Lists the policy for a certificate.\n@required {certificate-name: any # The name of the certificate in a given key vault.}\n@returns(200) The certificate policy.\n\n@endpoint PATCH /certificates/{certificate-name}/policy\n@desc Updates the policy for a certificate.\n@required {certificate-name: any # The name of the certificate in the given vault., certificatePolicy: any # The policy for the certificate.}\n@returns(200) The certificate policy\n\n@endpoint PATCH /certificates/{certificate-name}/{certificate-version}\n@desc Updates the specified attributes associated with the given certificate.\n@required {certificate-name: any # The name of the certificate in the given key vault., certificate-version: any # The version of the certificate., parameters: any # The parameters for certificate update.}\n@returns(200) The updated certificate.\n\n@endpoint GET /certificates/{certificate-name}/{certificate-version}\n@desc Gets information about a certificate.\n@required {certificate-name: any # The name of the certificate in the given vault., certificate-version: any # The version of the certificate.}\n@returns(200) The retrieved certificate.\n\n@endpoint PATCH /certificates/{certificate-name}/pending\n@desc Updates a certificate operation.\n@required {certificate-name: any # The name of the certificate., certificateOperation: any # The certificate operation response.}\n@returns(200) A message containing the certificate operation response.\n\n@endpoint GET /certificates/{certificate-name}/pending\n@desc Gets the creation operation of a certificate.\n@required {certificate-name: any # The name of the certificate.}\n@returns(200) The certificate operation response.\n\n@endpoint DELETE /certificates/{certificate-name}/pending\n@desc Deletes the creation operation for a specific certificate.\n@required {certificate-name: any # The name of the certificate.}\n@returns(200) A message containing the certificate operation response.\n\n@endpoint POST /certificates/{certificate-name}/pending/merge\n@desc Merges a certificate or a certificate chain with a key pair existing on the server.\n@required {certificate-name: any # The name of the certificate., parameters: any # The parameters to merge certificate.}\n@returns(201) Merged certificate bundle to the vault.\n\n@endpoint POST /certificates/{certificate-name}/backup\n@desc Backs up the specified certificate.\n@required {certificate-name: any # The name of the certificate.}\n@returns(200) The backup blob containing the backed up certificate.\n\n@endpoint POST /certificates/restore\n@desc Restores a backed up certificate to a vault.\n@required {parameters: any # The parameters to restore the certificate.}\n@returns(200) Restored certificate bundle in the vault.\n\n@endgroup\n\n@group deletedcertificates\n@endpoint GET /deletedcertificates\n@desc Lists the deleted certificates in the specified vault currently available for recovery.\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null., includePending: any # Specifies whether to include certificates which are not completely provisioned.}\n@returns(200) A response message containing a list of deleted certificates in the vault along with a link to the next page of deleted certificates\n\n@endpoint GET /deletedcertificates/{certificate-name}\n@desc Retrieves information about the specified deleted certificate.\n@required {certificate-name: any # The name of the certificate}\n@returns(200) A Certificate bundle of the certificate and its attributes\n\n@endpoint DELETE /deletedcertificates/{certificate-name}\n@desc Permanently deletes the specified deleted certificate.\n@required {certificate-name: any # The name of the certificate}\n@returns(204) No content signaling that the certificate was purged forever.\n\n@endpoint POST /deletedcertificates/{certificate-name}/recover\n@desc Recovers the deleted certificate back to its current version under /certificates.\n@required {certificate-name: any # The name of the deleted certificate}\n@returns(200) A Certificate bundle of the original certificate and its attributes\n\n@endgroup\n\n@group storage\n@endpoint GET /storage\n@desc List storage accounts managed by the specified key vault. This operation requires the storage/list permission.\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of storage accounts along with a link to the next page of storage accounts.\n\n@endgroup\n\n@group deletedstorage\n@endpoint GET /deletedstorage\n@desc Lists deleted storage accounts for the specified vault.\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of deleted storage accounts in the vault, along with a link to the next page of deleted storage accounts.\n\n@endpoint GET /deletedstorage/{storage-account-name}\n@desc Gets the specified deleted storage account.\n@required {storage-account-name: any # The name of the storage account.}\n@returns(200) The deleted storage account and information on when it will be purged, and how to recover the deleted storage account.\n\n@endpoint DELETE /deletedstorage/{storage-account-name}\n@desc Permanently deletes the specified storage account.\n@required {storage-account-name: any # The name of the storage account.}\n@returns(204) No content signaling that the storage account was purged forever.\n\n@endpoint POST /deletedstorage/{storage-account-name}/recover\n@desc Recovers the deleted storage account.\n@required {storage-account-name: any # The name of the storage account.}\n@returns(200) A storage bundle of the original storage account and its attributes.\n\n@endgroup\n\n@group storage\n@endpoint POST /storage/{storage-account-name}/backup\n@desc Backs up the specified storage account.\n@required {storage-account-name: any # The name of the storage account.}\n@returns(200) The backup blob containing the backed up storage account.\n\n@endpoint POST /storage/restore\n@desc Restores a backed up storage account to a vault.\n@required {parameters: any # The parameters to restore the storage account.}\n@returns(200) Restored storage account bundle in the vault.\n\n@endpoint DELETE /storage/{storage-account-name}\n@desc Deletes a storage account. This operation requires the storage/delete permission.\n@required {storage-account-name: any # The name of the storage account.}\n@returns(200) The deleted storage account and information on when the storage account will be deleted, and how to recover the deleted storage account.\n\n@endpoint GET /storage/{storage-account-name}\n@desc Gets information about a specified storage account. This operation requires the storage/get permission.\n@required {storage-account-name: any # The name of the storage account.}\n@returns(200) The retrieved storage account.\n\n@endpoint PUT /storage/{storage-account-name}\n@desc Creates or updates a new storage account. This operation requires the storage/set permission.\n@required {storage-account-name: any # The name of the storage account., parameters: any # The parameters to create a storage account.}\n@returns(200) The created storage account.\n\n@endpoint PATCH /storage/{storage-account-name}\n@desc Updates the specified attributes associated with the given storage account. This operation requires the storage/set/update permission.\n@required {storage-account-name: any # The name of the storage account., parameters: any # The parameters to update a storage account.}\n@returns(200) The updated storage account.\n\n@endpoint POST /storage/{storage-account-name}/regeneratekey\n@desc Regenerates the specified key value for the given storage account. This operation requires the storage/regeneratekey permission.\n@required {storage-account-name: any # The name of the storage account., parameters: any # The parameters to regenerate storage account key.}\n@returns(200) The updated storage account.\n\n@endpoint GET /storage/{storage-account-name}/sas\n@desc List storage SAS definitions for the given storage account. This operation requires the storage/listsas permission.\n@required {storage-account-name: any # The name of the storage account.}\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of SAS definitions along with a link to the next page of SAS definitions.\n\n@endgroup\n\n@group deletedstorage\n@endpoint GET /deletedstorage/{storage-account-name}/sas\n@desc Lists deleted SAS definitions for the specified vault and storage account.\n@required {storage-account-name: any # The name of the storage account.}\n@optional {maxresults: any # Specifies the maximum number of results to return in a page. Setting maxresults to a value less than 1 or greater than 25 results in error response code 400 (Bad Request). If there are additional results to return, then the service returns a nextLink containing a skip token for pagination. In certain cases, the service might return fewer results than specified by maxresults (even 0 results) and also return a nextLink. Clients should not make any assumptions on the minimum number of results per page, and should enumerate all pages until the nextLink becomes null.}\n@returns(200) A response message containing a list of deleted SAS definitions for the storage account, along with a link to the next page of deleted SAS definitions.\n\n@endpoint GET /deletedstorage/{storage-account-name}/sas/{sas-definition-name}\n@desc Gets the specified deleted sas definition.\n@required {storage-account-name: any # The name of the storage account., sas-definition-name: any # The name of the SAS definition.}\n@returns(200) The deleted SAS definition and information on when the it will be purged, and how to recover the deleted SAS definition.\n\n@endpoint POST /deletedstorage/{storage-account-name}/sas/{sas-definition-name}/recover\n@desc Recovers the deleted SAS definition.\n@required {storage-account-name: any # The name of the storage account., sas-definition-name: any # The name of the SAS definition.}\n@returns(200) A SAS definition bundle of the original SAS definition and its attributes.\n\n@endgroup\n\n@group storage\n@endpoint DELETE /storage/{storage-account-name}/sas/{sas-definition-name}\n@desc Deletes a SAS definition from a specified storage account. This operation requires the storage/deletesas permission.\n@required {storage-account-name: any # The name of the storage account., sas-definition-name: any # The name of the SAS definition.}\n@returns(200) The deleted SAS definition and information on when the SAS definition will be deleted, and how to recover the deleted SAS definition.\n\n@endpoint GET /storage/{storage-account-name}/sas/{sas-definition-name}\n@desc Gets information about a SAS definition for the specified storage account. This operation requires the storage/getsas permission.\n@required {storage-account-name: any # The name of the storage account., sas-definition-name: any # The name of the SAS definition.}\n@returns(200) The retrieved SAS definition.\n\n@endpoint PUT /storage/{storage-account-name}/sas/{sas-definition-name}\n@desc Creates or updates a new SAS definition for the specified storage account. This operation requires the storage/setsas permission.\n@required {storage-account-name: any # The name of the storage account., sas-definition-name: any # The name of the SAS definition., parameters: any # The parameters to create a SAS definition.}\n@returns(200) The created SAS definition.\n\n@endpoint PATCH /storage/{storage-account-name}/sas/{sas-definition-name}\n@desc Updates the specified attributes associated with the given SAS definition. This operation requires the storage/setsas permission.\n@required {storage-account-name: any # The name of the storage account., sas-definition-name: any # The name of the SAS definition., parameters: any # The parameters to update a SAS definition.}\n@returns(200) The updated SAS definition.\n\n@endgroup\n\n@end\n"}}