# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Azure API Management REST Gateway Certificate Authority API
  version: 1.0.0
extends: openapi/microsoft-azure-api-management-gatewaycertificateauthority-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 5
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/gateways/{gatewayId}/certificateAuthorities'].get
  update:
    x-apievangelist-phrasing:
      intent: List a gateway's certificate authorities
      effect: read
      questions:
      - Which certificate authorities are trusted by one of my self-hosted gateways?
      - Can I see all CA certificates assigned to a gateway?
      instructions:
      - text: List the certificate authorities for gateway {gatewayId} in service {serviceName}.
        slots:
          gatewayId: path.gatewayId
          serviceName: path.serviceName
      - text: Show the CA certificates the gateway trusts.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/gateways/{gatewayId}/certificateAuthorities/{certificateId}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a gateway certificate authority
      effect: read
      questions:
      - How do I see whether an assigned CA is marked trusted on a gateway?
      - What details does a gateway keep about one certificate authority?
      instructions:
      - text: Get certificate authority {certificateId} on gateway {gatewayId} in service {serviceName}.
        slots:
          certificateId: path.certificateId
          gatewayId: path.gatewayId
          serviceName: path.serviceName
      - text: Show the gateway's assigned CA certificate.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/gateways/{gatewayId}/certificateAuthorities/{certificateId}'].put
  update:
    x-apievangelist-phrasing:
      intent: Assign a certificate as a gateway CA
      effect: write
      questions:
      - How do I make a gateway trust a certificate as a certificate authority?
      - Can I add a CA certificate to a self-hosted gateway for client cert validation?
      instructions:
      - text: Assign certificate {certificateId} to gateway {gatewayId} in service {serviceName} as a certificate authority.
        slots:
          certificateId: path.certificateId
          gatewayId: path.gatewayId
          serviceName: path.serviceName
      - text: Make the gateway trust the certificate as a CA.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/gateways/{gatewayId}/certificateAuthorities/{certificateId}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Unassign a CA from a gateway
      effect: destructive
      questions:
      - Can I stop a gateway from trusting a certificate authority?
      - Does removing a gateway CA delete the certificate itself?
      instructions:
      - text: Remove certificate authority {certificateId} from gateway {gatewayId} in service {serviceName}.
        slots:
          certificateId: path.certificateId
          gatewayId: path.gatewayId
          serviceName: path.serviceName
      - text: Unassign the CA certificate from the gateway.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/gateways/{gatewayId}/certificateAuthorities/{certificateId}'].head
  update:
    x-apievangelist-phrasing:
      intent: Check if a certificate is a gateway CA
      effect: read
      questions:
      - How can I tell whether a certificate is already assigned as a gateway CA?
      - Is there a quick check for a certificate authority on a gateway?
      instructions:
      - text: Check whether certificate {certificateId} is assigned to gateway {gatewayId} in service {serviceName} as a CA.
        slots:
          certificateId: path.certificateId
          gatewayId: path.gatewayId
          serviceName: path.serviceName
      - text: Get the ETag of the gateway's certificate authority assignment.
      method: generated
      generated: '2026-10-01'