[APIM] Order of policy elements and attributes

Author: dlepow

articles/api-management/graphql-policies.md

@@ -152,12 +152,16 @@ The `set-graphql-resolver` policy retrieves or sets data for a GraphQL field in
 <set-graphql-resolver parent-type="type" field="field"> 
     <http-data-source> 
         <http-request> 
-            <set-method>HTTP method</set-method> 
+            <set-method>set-method policy configuration for HTTP method</set-method> 
             <set-url>URL</set-url>
-            [...]  
+            <set-header>set-header policy configuration</set-header>
+            <set-body>set-body policy configuration</set-body>
+            <authentication-certificate>authentication-certificate policy configuration</authentication-certificate>  
         </http-request> 
         <http-response>
-            [...]
+            <json-to-xml>json-to-xml policy configuration</json-to-xml>
+            <xml-to-json>xml-to-json policy configuration</xml-to-json>
+            <find-and-replace>find-and-replace policy configuration</find-and-replace>
         </http-response>
       </http-data-source> 
 </set-graphql-resolver> 
@@ -287,14 +291,22 @@ type User {
 | `http-data-source` | Configures the HTTP request and optionally the HTTP response that are used to resolve data for the given `parent-type` and `field`.   | Yes |
 | `http-request` | Specifies a URL and child policies to configure the resolver's HTTP request. Each of the following policies can be specified at most once in the element. <br/><br/>Required policy: [set-method](api-management-advanced-policies.md#SetRequestMethod)<br/><br/>Optional policies: [set-header](api-management-transformation-policies.md#SetHTTPheader), [set-body](api-management-transformation-policies.md#SetBody), [authentication-certificate](api-management-authentication-policies.md#ClientCertificate) | Yes |
 | `set-url` | The URL of the resolver's HTTP request. | Yes |
-| `http-response` |  Optionally specifies child policies to configure the resolver's HTTP response. If not specified, the response is returned as a raw string. Each of the following policies can be specified at most once. <br/><br/>Optional policies: [set-body](api-management-transformation-policies.md#SetBody), [json-to-xml](api-management-transformation-policies.md#ConvertJSONtoXML), [xml-to-json](api-management-transformation-policies.md#ConvertXMLtoJSON), [find-and-replace](api-management-transformation-policies.md#Findandreplacestringinbody) | No |
+| `http-response` |  Optionally specifies child policies to configure the resolver's HTTP response. If not specified, the response is returned as a raw string. Each of the following policies can be specified at most once. <br/><br/>Optional policies: [set-body](api-management-transformation-policies.md#SetBody), , [xml-to-json](api-management-transformation-policies.md#ConvertXMLtoJSON), [find-and-replace](api-management-transformation-policies.md#Findandreplacestringinbody) | No |
 
 ### Attributes
 
 | Name                       | Description                                                                                                                                                            | Required | Default |
 | -------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | ------- |
 | `parent-type`| An object type in the GraphQL schema.  |   Yes    | N/A   |
 | `field`| A field of the specified `parent-type` in the GraphQL schema.  |   Yes    | N/A   |
+| `set-method`| HTTP method of the resolver's HTTP request, specified using the [set-method](api-management-advanced-policies.md#SetRequestMethod) policy.  |   Yes    | N/A   |
+| `set-url`  |  URL of the resolver's HTTP request. | Yes  | N/A  |
+| `set-header`  | Header set in the resolver's HTTP request, specified using the [set-header](api-management-transformation-policies.md#SetHTTPheader) policy.  | No  | N/A  |
+| `set-body`  |  Body set in the resolver's HTTP request, specified using the [set-body](api-management-transformation-policies.md#SetBody) policy. | No  | N/A |
+| `authentication-certificate`  | Client certificate presented in the resolver's HTTP request, specified using the [authentication-certificate](api-management-authentication-policies.md#ClientCertificate) policy.  | No  | N/A  |
+| `json-to-xml`   | Transforms the resolver's HTTP response using the [json-to-xml](api-management-transformation-policies.md#ConvertJSONtoXML) policy. | No  | N/A  |
+| `xml-to-json`   | Transforms the resolver's HTTP response using the [xml-to-json](api-management-transformation-policies.md#ConvertJSONtoXML) policy. | No  | N/A  |
+| `find-and-replace`   | Transforms the resolver's HTTP response using the [find-and-replace](api-management-transformation-policies.md#Findandreplacestringinbody) policy. | No  | N/A  |
 
 > [!NOTE]
 > Currently, the values of `parent-type` and `field` aren't validated by this policy. If they aren't valid, the policy is ignored, and the GraphQL query is forwarded to a GraphQL endpoint (if one is configured).

articles/api-management/set-edit-policies.md

@@ -106,6 +106,9 @@ To configure a policy:
         </on-error>
     </policies>
     ```
+    > [!NOTE]
+    > Set policy attributes and elements in the order provided in the policy statement and examples.
+
 1. Select **Save** to propagate changes to the API Management gateway immediately.
 
     The **ip-filter** policy now appears in the **Inbound processing** section.

includes/api-management-policy-generic-alert.md

@@ -2,8 +2,8 @@
 author: dlepow
 ms.service: api-management
 ms.topic: include
-ms.date: 03/15/2022
+ms.date: 06/27/2022
 ms.author: danlep
 ---
 > [!TIP]
-> Learn [how to set or edit API Management policies](../articles/api-management/set-edit-policies.md).	
+> Set policy attributes and elements in the order provided in the policy statement and examples. Learn more about [how to set or edit API Management policies](../articles/api-management/set-edit-policies.md).