swagger: '2.0'
info:
  version: 2020-08-01-preview
  title: Microsoft Azure AccessControlClient AccessConnector BackupResourceEncryptionConfigs API
schemes:
- https
tags:
- name: BackupResourceEncryptionConfigs
paths:
  ? /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.RecoveryServices/vaults/{vaultName}/backupEncryptionConfigs/backupResourceEncryptionConfig
  : get:
      tags:
      - BackupResourceEncryptionConfigs
      description: Fetches Vault Encryption config.
      operationId: microsoftAzureBackupresourceencryptionconfigsGet
      produces:
      - application/json
      parameters:
      - $ref: '#/parameters/ApiVersion'
      - $ref: '#/parameters/VaultName'
      - $ref: '#/parameters/ResourceGroupName'
      - $ref: '#/parameters/SubscriptionId'
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/BackupResourceEncryptionConfigExtendedResource'
        default:
          description: Error response describing why the operation failed.
          schema:
            $ref: '#/definitions/NewErrorResponse'
      x-ms-examples:
        Get Vault Encryption Configuration:
          $ref: ./examples/BackupResourceEncryptionConfig_Get.json
      summary: Microsoft Azure Get Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Recoveryservices Vaults Vaultname Backupencryptionconfigs Backupresourceencryptionconfig
    put:
      tags:
      - BackupResourceEncryptionConfigs
      description: Updates Vault encryption config.
      operationId: microsoftAzureBackupresourceencryptionconfigsUpdate
      produces:
      - application/json
      parameters:
      - $ref: '#/parameters/ApiVersion'
      - $ref: '#/parameters/VaultName'
      - $ref: '#/parameters/ResourceGroupName'
      - $ref: '#/parameters/SubscriptionId'
      - name: parameters
        in: body
        description: Vault encryption input config request
        required: true
        schema:
          $ref: '#/definitions/BackupResourceEncryptionConfigResource'
      responses:
        '200':
          description: OK
        default:
          description: Error response describing why the operation failed.
          schema:
            $ref: '#/definitions/NewErrorResponse'
      x-ms-examples:
        Update Vault Encryption Configuration:
          $ref: ./examples/BackupResourceEncryptionConfig_Put.json
      summary: Microsoft Azure Put Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Recoveryservices Vaults Vaultname Backupencryptionconfigs Backupresourceencryptionconfig
definitions:
  NewErrorResponse:
    properties:
      error:
        type: object
        description: The error object.
        properties:
          code:
            readOnly: true
            type: string
            description: The error code.
          message:
            readOnly: true
            type: string
            description: The error message.
          target:
            readOnly: true
            type: string
            description: The error target.
          details:
            readOnly: true
            type: array
            items:
              $ref: '#/definitions/NewErrorResponse'
            x-ms-identifiers:
            - /error/code
            description: The error details.
          additionalInfo:
            readOnly: true
            type: array
            items:
              $ref: ../../../../../common-types/resource-management/v1/types.json#/definitions/ErrorAdditionalInfo
            x-ms-identifiers: []
            description: The error additional info.
    description: The resource management error response.
  Resource:
    description: ARM Resource.
    type: object
    properties:
      id:
        description: Resource Id represents the complete path to the resource.
        type: string
        readOnly: true
      name:
        description: Resource name associated with the resource.
        type: string
        readOnly: true
      type:
        description: Resource type represents the complete path of the form Namespace/ResourceType/ResourceType/...
        type: string
        readOnly: true
      location:
        description: Resource location.
        type: string
      tags:
        description: Resource tags.
        type: object
        additionalProperties:
          type: string
      eTag:
        description: Optional ETag.
        type: string
    x-ms-azure-resource: true
  BackupResourceEncryptionConfigExtendedResource:
    type: object
    allOf:
    - $ref: '#/definitions/Resource'
    properties:
      properties:
        $ref: '#/definitions/BackupResourceEncryptionConfigExtended'
        description: BackupResourceEncryptionConfigExtendedResource properties
  BackupResourceEncryptionConfigExtended:
    type: object
    allOf:
    - $ref: '#/definitions/BackupResourceEncryptionConfig'
    properties:
      userAssignedIdentity:
        description: User Assigned Identity Id
        type: string
      useSystemAssignedIdentity:
        description: bool to indicate whether to use system Assigned Identity or not
        type: boolean
  BackupResourceEncryptionConfigResource:
    allOf:
    - $ref: '#/definitions/Resource'
    properties:
      properties:
        $ref: '#/definitions/BackupResourceEncryptionConfig'
        description: BackupResourceEncryptionConfigResource properties
  BackupResourceEncryptionConfig:
    type: object
    properties:
      encryptionAtRestType:
        description: Encryption At Rest Type
        enum:
        - Invalid
        - MicrosoftManaged
        - CustomerManaged
        type: string
        x-ms-enum:
          name: EncryptionAtRestType
          modelAsString: true
      keyUri:
        description: Key Vault Key URI
        type: string
      subscriptionId:
        description: Key Vault Subscription Id
        type: string
      lastUpdateStatus:
        enum:
        - Invalid
        - NotEnabled
        - PartiallySucceeded
        - PartiallyFailed
        - Failed
        - Succeeded
        - Initialized
        - FirstInitialization
        type: string
        x-ms-enum:
          name: LastUpdateStatus
          modelAsString: true
      infrastructureEncryptionState:
        enum:
        - Invalid
        - Disabled
        - Enabled
        type: string
        x-ms-enum:
          name: InfrastructureEncryptionState
          modelAsString: true
parameters:
  ResourceGroupName:
    name: resourceGroupName
    in: path
    description: The name of the resource group where the recovery services vault is present.
    required: true
    type: string
    x-ms-parameter-location: method
  VaultName:
    name: vaultName
    in: path
    description: The name of the recovery services vault.
    required: true
    type: string
    x-ms-parameter-location: method
  ApiVersion:
    name: api-version
    in: query
    description: Client Api Version.
    required: true
    type: string
  SubscriptionId:
    name: subscriptionId
    in: path
    description: The subscription Id.
    required: true
    type: string
x-ms-parameterized-host:
  hostTemplate: '{endpoint}'
  useSchemePrefix: false
  parameters:
  - $ref: '#/parameters/Endpoint'