CDNs REST API documentation lacks using "Latest" version from Key Vault when using custom domain with custom certificate

[timmkrause]

When configuring custom domain / HTTP / certificate via the Azure Portal, the UI suggests to set it to 'Latest' to always use the latest version of the certificate stored in Key Vault.

I don't see that this is possible via the REST API:

https://github.com/Azure/azure-rest-api-specs/blob/master/specification/cdn/resource-manager/Microsoft.Cdn/stable/2020-09-01/examples/CustomDomains_EnableCustomHttpsUsingBYOC.json

https://docs.microsoft.com/en-us/rest/api/cdn/cdn/customdomains/enablecustomhttps#keyvaultcertificatesourceparameters

[timmkrause]

I see a chance, that when not providing secretVersion in the request body, "Latest" will be used by default.
Can somebody confirm this? I cannot test it atm.

If this is the case, the documentation should be adapted accordingly.

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @RandalliLama, @schaabs, @jlichwa.

Issue Details

---

When configuring custom domain / HTTP / certificate via the Azure Portal, the UI suggests to set it to 'Latest' to always use the latest version of the certificate stored in Key Vault.

I don't see that this is possible via the REST API:

https://github.com/Azure/azure-rest-api-specs/blob/master/specification/cdn/resource-manager/Microsoft.Cdn/stable/2020-09-01/examples/CustomDomains_EnableCustomHttpsUsingBYOC.json

https://docs.microsoft.com/en-us/rest/api/cdn/cdn/customdomains/enablecustomhttps#keyvaultcertificatesourceparameters

Author:	timmkrause
Assignees:	ruowan
Labels:	KeyVault, Service Attention, needs-triage, question
Milestone:	-

[timmkrause]

I just tested it. Removing secretVersion from the request body defaults to "Latest" from Key Vault. This behavior should be added to the documentation (especially because it is also recommended by the Azure Portal).

[jlichwa]

@timmkrase this is cdn specs not Key Vault. Please change the label to accurate team.

[timmkrause]

Sorry, I thought the "CDN:" prefix in the title and mentioned resources made that clear enough. Hope it's better now.