how to get the latest secret version value from azure key vault in one rest api call

Microsoft.Azure.KeyVault library passes String.Empty as an version to the call when there is no specific version requested, so your suggestion should work.

In my case it is just https://mykeyvault.vault.azure.net/secrets/testSecret/