# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Microsoft Azure Keys API
  version: 1.0.0
extends: openapi/microsoft-azure-keys-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 8
- target: $.paths['/keys'].get
  update:
    x-apievangelist-phrasing:
      intent: List App Configuration keys
      effect: read
      questions:
      - Which keys are stored in my App Configuration store?
      - Can I see the key names as they were at an earlier point in time?
      instructions:
      - text: List App Configuration keys matching {name}.
        slots:
          name: query.name
      - text: Show configuration store keys as of {acceptDatetime}.
        slots:
          acceptDatetime: header.Accept-Datetime
      - text: List the next page of configuration keys after {after}.
        slots:
          after: query.After
      method: generated
      generated: '2026-09-26'
- target: $.paths['/keys'].head
  update:
    x-apievangelist-phrasing:
      intent: Check App Configuration keys headers
      effect: read
      questions:
      - Can I check whether matching configuration keys exist without downloading the list?
      - What headers come back when I probe the App Configuration key list?
      instructions:
      - text: Check headers for configuration keys matching {name} without fetching the body.
        slots:
          name: query.name
      - text: Probe the App Configuration key list status using sync token {syncToken}.
        slots:
          syncToken: header.Sync-Token
      method: generated
      generated: '2026-09-26'
- target: $.paths['/keys/{key-name}/create'].post
  update:
    x-apievangelist-phrasing:
      intent: Create a key in Key Vault
      effect: write
      questions:
      - How do I generate a new RSA or EC key in Key Vault?
      - Can I make a Key Vault key exportable with a release policy?
      - What key sizes and curves can I choose when creating a vault key?
      instructions:
      - text: Create Key Vault key {keyName} of type {kty}.
        slots:
          keyName: path.key-name
          kty: requestBody.kty
      - text: Create an RSA key {keyName} of size {keySize} in the vault.
        slots:
          keyName: path.key-name
          keySize: requestBody.key_size
      - text: Create EC key {keyName} of type {kty} on curve {crv}.
        slots:
          keyName: path.key-name
          kty: requestBody.kty
          crv: requestBody.crv
      method: generated
      generated: '2026-09-26'
- target: $.paths['/keys/{key-name}/{key-version}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a Key Vault key version
      effect: read
      questions:
      - How do I fetch the public part of a stored vault key?
      - Does reading a symmetric key from Key Vault return its key material?
      instructions:
      - text: Get version {keyVersion} of Key Vault key {keyName}.
        slots:
          keyVersion: path.key-version
          keyName: path.key-name
      - text: Show the public key for {keyName} version {keyVersion}.
        slots:
          keyName: path.key-name
          keyVersion: path.key-version
      method: generated
      generated: '2026-09-26'
- target: $.paths['/keys/{key-name}/{key-version}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a Key Vault key's attributes
      effect: write
      questions:
      - Can I disable a vault key or change its allowed operations without rotating it?
      - Which attributes of a stored Key Vault key version can be updated?
      instructions:
      - text: Update attributes of key {keyName} version {keyVersion} to {attributes}.
        slots:
          keyName: path.key-name
          keyVersion: path.key-version
          attributes: requestBody.attributes
      - text: Restrict key {keyName} version {keyVersion} to operations {keyOps}.
        slots:
          keyName: path.key-name
          keyVersion: path.key-version
          keyOps: requestBody.key_ops
      method: generated
      generated: '2026-09-26'
- target: $.paths['/keys/{key-name}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a key from Key Vault
      effect: destructive
      questions:
      - How do I delete a key from my vault?
      - Can I remove just one version of a Key Vault key?
      instructions:
      - text: Delete Key Vault key {keyName} and all its versions.
        slots:
          keyName: path.key-name
      - text: Remove key {keyName} from the vault.
        slots:
          keyName: path.key-name
      method: generated
      generated: '2026-09-26'
- target: $.paths['/modelmanagement/v1.0/subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.MachineLearningServices/workspaces/{workspace}/services/{id}/listkeys'].post
  update:
    x-apievangelist-phrasing:
      intent: List keys for an ML model management service
      effect: read
      questions:
      - Where do I find the auth keys for a deployed Machine Learning web service?
      - Can I get the keys needed to call my model management service endpoint?
      instructions:
      - text: List keys for ML service {id} in workspace {workspace} in {resourceGroup} of subscription {subscriptionId}.
        slots:
          id: path.id
          workspace: path.workspace
          resourceGroup: path.resourceGroup
          subscriptionId: path.subscriptionId
      - text: Show the service keys for deployed service {id}.
        slots:
          id: path.id
      method: generated
      generated: '2026-09-26'
- target: $.paths['/modelmanagement/v1.0/subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.MachineLearningServices/workspaces/{workspace}/services/{id}/regenerateKeys'].post
  update:
    x-apievangelist-phrasing:
      intent: Regenerate keys for an ML model management service
      effect: destructive
      questions:
      - How do I rotate the primary or secondary key of a deployed ML service?
      - Can I set a specific value when regenerating a model service key?
      instructions:
      - text: Regenerate the {keyType} key for ML service {id} in workspace {workspace} in {resourceGroup} of subscription {subscriptionId}.
        slots:
          keyType: requestBody.keyType
          id: path.id
          workspace: path.workspace
          resourceGroup: path.resourceGroup
          subscriptionId: path.subscriptionId
      - text: Rotate service {id} key to value {keyValue}.
        slots:
          id: path.id
          keyValue: requestBody.keyValue
      method: generated
      generated: '2026-09-26'