Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Databricks Provider
  4. API Docs
  5. AiGatewayModelProviderService
Viewing docs for Databricks v1.116.0
published on Tuesday, Oct 20, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

databricks.AiGatewayModelProviderService

databricks logo databricks logo
Viewing docs for Databricks v1.116.0
published on Tuesday, Oct 20, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

    GA

    API Documentation

    Manages a Unity Catalog model provider service. A model provider service defines how model services connect to an external model provider and which provider models they can access.

    Model provider services are contained in a Unity Catalog schema and governed by Unity Catalog permissions. Supply provider credentials through a sensitive variable or another secure input instead of hardcoding them in your configuration.

    Example Usage

    The following example creates a model provider service for a custom OpenAI-compatible provider. Pass providerApiKey through a secure input, such as the TF_VAR_provider_api_key environment variable.

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const config = new pulumi.Config();
const providerApiKey = config.require("providerApiKey");
const example = new databricks.AiGatewayModelProviderService("example", {
    parent: "schemas/main.default",
    modelProviderServiceId: "custom_provider",
    comment: "Connects to a custom model provider",
    config: {
        providerType: "EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM",
        targets: [{
            model: "chat-model",
            nativeApiTypes: ["openai/v1/chat/completions"],
        }],
        custom: {
            direct: {
                baseUrl: "https://api.example.com/v1",
                apiKey: {
                    plaintext: providerApiKey,
                },
            },
        },
    },
});

    import pulumi
import pulumi_databricks as databricks

config = pulumi.Config()
provider_api_key = config.require("providerApiKey")
example = databricks.AiGatewayModelProviderService("example",
    parent="schemas/main.default",
    model_provider_service_id="custom_provider",
    comment="Connects to a custom model provider",
    config={
        "provider_type": "EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM",
        "targets": [{
            "model": "chat-model",
            "native_api_types": ["openai/v1/chat/completions"],
        }],
        "custom": {
            "direct": {
                "base_url": "https://api.example.com/v1",
                "api_key": {
                    "plaintext": provider_api_key,
                },
            },
        },
    })

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		providerApiKey := cfg.Require("providerApiKey")
		_, err := databricks.NewAiGatewayModelProviderService(ctx, "example", &databricks.AiGatewayModelProviderServiceArgs{
			Parent:                 pulumi.String("schemas/main.default"),
			ModelProviderServiceId: pulumi.String("custom_provider"),
			Comment:                pulumi.String("Connects to a custom model provider"),
			Config: &databricks.AiGatewayModelProviderServiceConfigArgs{
				ProviderType: pulumi.String("EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM"),
				Targets: databricks.AiGatewayModelProviderServiceConfigTargetArray{
					&databricks.AiGatewayModelProviderServiceConfigTargetArgs{
						Model: pulumi.String("chat-model"),
						NativeApiTypes: pulumi.StringArray{
							pulumi.String("openai/v1/chat/completions"),
						},
					},
				},
				Custom: &databricks.AiGatewayModelProviderServiceConfigCustomArgs{
					Direct: &databricks.AiGatewayModelProviderServiceConfigCustomDirectArgs{
						BaseUrl: pulumi.String("https://api.example.com/v1"),
						ApiKey: &databricks.AiGatewayModelProviderServiceConfigCustomDirectApiKeyArgs{
							Plaintext: pulumi.String(providerApiKey),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var providerApiKey = config.Require("providerApiKey");
    var example = new Databricks.AiGatewayModelProviderService("example", new()
    {
        Parent = "schemas/main.default",
        ModelProviderServiceId = "custom_provider",
        Comment = "Connects to a custom model provider",
        Config = new Databricks.Inputs.AiGatewayModelProviderServiceConfigArgs
        {
            ProviderType = "EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM",
            Targets = new[]
            {
                new Databricks.Inputs.AiGatewayModelProviderServiceConfigTargetArgs
                {
                    Model = "chat-model",
                    NativeApiTypes = new[]
                    {
                        "openai/v1/chat/completions",
                    },
                },
            },
            Custom = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomArgs
            {
                Direct = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomDirectArgs
                {
                    BaseUrl = "https://api.example.com/v1",
                    ApiKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomDirectApiKeyArgs
                    {
                        Plaintext = providerApiKey,
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.AiGatewayModelProviderService;
import com.pulumi.databricks.AiGatewayModelProviderServiceArgs;
import com.pulumi.databricks.inputs.AiGatewayModelProviderServiceConfigArgs;
import com.pulumi.databricks.inputs.AiGatewayModelProviderServiceConfigTargetArgs;
import com.pulumi.databricks.inputs.AiGatewayModelProviderServiceConfigCustomArgs;
import com.pulumi.databricks.inputs.AiGatewayModelProviderServiceConfigCustomDirectArgs;
import com.pulumi.databricks.inputs.AiGatewayModelProviderServiceConfigCustomDirectApiKeyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var providerApiKey = config.require("providerApiKey");
        var example = new AiGatewayModelProviderService("example", AiGatewayModelProviderServiceArgs.builder()
            .parent("schemas/main.default")
            .modelProviderServiceId("custom_provider")
            .comment("Connects to a custom model provider")
            .config(AiGatewayModelProviderServiceConfigArgs.builder()
                .providerType("EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM")
                .targets(AiGatewayModelProviderServiceConfigTargetArgs.builder()
                    .model("chat-model")
                    .nativeApiTypes("openai/v1/chat/completions")
                    .build())
                .custom(AiGatewayModelProviderServiceConfigCustomArgs.builder()
                    .direct(AiGatewayModelProviderServiceConfigCustomDirectArgs.builder()
                        .baseUrl("https://api.example.com/v1")
                        .apiKey(AiGatewayModelProviderServiceConfigCustomDirectApiKeyArgs.builder()
                            .plaintext(providerApiKey)
                            .build())
                        .build())
                    .build())
                .build())
            .build());

    }
}

    configuration:
  providerApiKey:
    type: string
resources:
  example:
    type: databricks:AiGatewayModelProviderService
    properties:
      parent: schemas/main.default
      modelProviderServiceId: custom_provider
      comment: Connects to a custom model provider
      config:
        providerType: EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM
        targets:
          - model: chat-model
            nativeApiTypes:
              - openai/v1/chat/completions
        custom:
          direct:
            baseUrl: https://api.example.com/v1
            apiKey:
              plaintext: ${providerApiKey}

    terraform {
  required_providers {
    databricks = {
      source = "pulumi/databricks"
    }
  }
}

resource "databricks_ai_gateway_model_provider_service" "example" {
  lifecycle {
    create_before_destroy = true
  }
  parent                    = "schemas/main.default"
  model_provider_service_id = "custom_provider"
  comment                   = "Connects to a custom model provider"
  config = {
    provider_type = "EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM"
    targets = [{
      model            = "chat-model"
      native_api_types = ["openai/v1/chat/completions"]
    }]
    custom = {
      direct = {
        base_url = "https://api.example.com/v1"
        api_key = {
          plaintext = var.providerApiKey
        }
      }
    }
  }
}
variable "providerApiKey" {
  type = string
}

    Create AiGatewayModelProviderService Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AiGatewayModelProviderService(name: string, args: AiGatewayModelProviderServiceArgs, opts?: CustomResourceOptions);
    @overload
def AiGatewayModelProviderService(resource_name: str,
                                  args: AiGatewayModelProviderServiceArgs,
                                  opts: Optional[ResourceOptions] = None)

@overload
def AiGatewayModelProviderService(resource_name: str,
                                  opts: Optional[ResourceOptions] = None,
                                  model_provider_service_id: Optional[str] = None,
                                  parent: Optional[str] = None,
                                  comment: Optional[str] = None,
                                  config: Optional[AiGatewayModelProviderServiceConfigArgs] = None,
                                  provider_config: Optional[AiGatewayModelProviderServiceProviderConfigArgs] = None)
    func NewAiGatewayModelProviderService(ctx *Context, name string, args AiGatewayModelProviderServiceArgs, opts ...ResourceOption) (*AiGatewayModelProviderService, error)
    public AiGatewayModelProviderService(string name, AiGatewayModelProviderServiceArgs args, CustomResourceOptions? opts = null)
    public AiGatewayModelProviderService(String name, AiGatewayModelProviderServiceArgs args)
public AiGatewayModelProviderService(String name, AiGatewayModelProviderServiceArgs args, CustomResourceOptions options)

    type: databricks:AiGatewayModelProviderService
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "databricks_ai_gateway_model_provider_service" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args AiGatewayModelProviderServiceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AiGatewayModelProviderServiceArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AiGatewayModelProviderServiceArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AiGatewayModelProviderServiceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AiGatewayModelProviderServiceArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var aiGatewayModelProviderServiceResource = new Databricks.AiGatewayModelProviderService("aiGatewayModelProviderServiceResource", new()
{
    ModelProviderServiceId = "string",
    Parent = "string",
    Comment = "string",
    Config = new Databricks.Inputs.AiGatewayModelProviderServiceConfigArgs
    {
        AllowAllTargets = false,
        AmazonBedrock = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAmazonBedrockArgs
        {
            Direct = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAmazonBedrockDirectArgs
            {
                AwsAccessKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeyArgs
                {
                    AccessKeyId = "string",
                    SecretAccessKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeyArgs
                    {
                        Plaintext = "string",
                        SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReferenceArgs
                        {
                            Name = "string",
                        },
                    },
                },
                Region = "string",
                ServiceCredential = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredentialArgs
                {
                    Name = "string",
                },
            },
        },
        Anthropic = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAnthropicArgs
        {
            Direct = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAnthropicDirectArgs
            {
                ApiKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAnthropicDirectApiKeyArgs
                {
                    Plaintext = "string",
                    SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReferenceArgs
                    {
                        Name = "string",
                    },
                },
            },
            Relayed = null,
        },
        AzureOpenai = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAzureOpenaiArgs
        {
            Direct = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAzureOpenaiDirectArgs
            {
                ApiKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeyArgs
                {
                    Plaintext = "string",
                    SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReferenceArgs
                    {
                        Name = "string",
                    },
                },
                BaseUrl = "string",
                EntraServicePrincipal = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalArgs
                {
                    ClientId = "string",
                    ClientSecret = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretArgs
                    {
                        Plaintext = "string",
                        SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReferenceArgs
                        {
                            Name = "string",
                        },
                    },
                    TenantId = "string",
                },
                ServiceCredential = new Databricks.Inputs.AiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredentialArgs
                {
                    Name = "string",
                },
            },
        },
        Custom = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomArgs
        {
            Direct = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomDirectArgs
            {
                ApiKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomDirectApiKeyArgs
                {
                    Plaintext = "string",
                    SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReferenceArgs
                    {
                        Name = "string",
                    },
                },
                BaseUrl = "string",
                HeaderAuth = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthArgs
                {
                    ApiKeyName = "string",
                    ApiKeyValue = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueArgs
                    {
                        Plaintext = "string",
                        SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReferenceArgs
                        {
                            Name = "string",
                        },
                    },
                },
            },
        },
        ForwardHeaders = false,
        ForwardQueryParameters = false,
        ForwardUnmanagedPaths = false,
        GeminiEnterprise = new Databricks.Inputs.AiGatewayModelProviderServiceConfigGeminiEnterpriseArgs
        {
            Direct = new Databricks.Inputs.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectArgs
            {
                ApiKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeyArgs
                {
                    Plaintext = "string",
                    SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReferenceArgs
                    {
                        Name = "string",
                    },
                },
                ProjectId = "string",
                Region = "string",
                ServiceCredential = new Databricks.Inputs.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredentialArgs
                {
                    Name = "string",
                },
            },
        },
        InferenceTable = new Databricks.Inputs.AiGatewayModelProviderServiceConfigInferenceTableArgs
        {
            Parent = "string",
            IsDeleted = false,
            Table = "string",
            TableNamePrefix = "string",
        },
        MicrosoftFoundry = new Databricks.Inputs.AiGatewayModelProviderServiceConfigMicrosoftFoundryArgs
        {
            Direct = new Databricks.Inputs.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectArgs
            {
                ApiKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeyArgs
                {
                    Plaintext = "string",
                    SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReferenceArgs
                    {
                        Name = "string",
                    },
                },
                BaseUrl = "string",
                EntraServicePrincipal = new Databricks.Inputs.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalArgs
                {
                    ClientId = "string",
                    ClientSecret = new Databricks.Inputs.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretArgs
                    {
                        Plaintext = "string",
                        SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReferenceArgs
                        {
                            Name = "string",
                        },
                    },
                    TenantId = "string",
                },
                ServiceCredential = new Databricks.Inputs.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredentialArgs
                {
                    Name = "string",
                },
            },
        },
        Openai = new Databricks.Inputs.AiGatewayModelProviderServiceConfigOpenaiArgs
        {
            Direct = new Databricks.Inputs.AiGatewayModelProviderServiceConfigOpenaiDirectArgs
            {
                ApiKey = new Databricks.Inputs.AiGatewayModelProviderServiceConfigOpenaiDirectApiKeyArgs
                {
                    Plaintext = "string",
                    SecretReference = new Databricks.Inputs.AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReferenceArgs
                    {
                        Name = "string",
                    },
                },
                BaseUrl = "string",
                Organization = "string",
            },
        },
        ProviderType = "string",
        RateLimits = new[]
        {
            new Databricks.Inputs.AiGatewayModelProviderServiceConfigRateLimitArgs
            {
                Key = "string",
                RenewalPeriod = "string",
                Principal = "string",
                Requests = 0,
                Tokens = 0,
            },
        },
        Targets = new[]
        {
            new Databricks.Inputs.AiGatewayModelProviderServiceConfigTargetArgs
            {
                Model = "string",
                NativeApiTypes = new[]
                {
                    "string",
                },
            },
        },
    },
    ProviderConfig = new Databricks.Inputs.AiGatewayModelProviderServiceProviderConfigArgs
    {
        WorkspaceId = "string",
    },
});

    example, err := databricks.NewAiGatewayModelProviderService(ctx, "aiGatewayModelProviderServiceResource", &databricks.AiGatewayModelProviderServiceArgs{
	ModelProviderServiceId: pulumi.String("string"),
	Parent:                 pulumi.String("string"),
	Comment:                pulumi.String("string"),
	Config: &databricks.AiGatewayModelProviderServiceConfigArgs{
		AllowAllTargets: pulumi.Bool(false),
		AmazonBedrock: &databricks.AiGatewayModelProviderServiceConfigAmazonBedrockArgs{
			Direct: &databricks.AiGatewayModelProviderServiceConfigAmazonBedrockDirectArgs{
				AwsAccessKey: &databricks.AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeyArgs{
					AccessKeyId: pulumi.String("string"),
					SecretAccessKey: &databricks.AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeyArgs{
						Plaintext: pulumi.String("string"),
						SecretReference: &databricks.AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReferenceArgs{
							Name: pulumi.String("string"),
						},
					},
				},
				Region: pulumi.String("string"),
				ServiceCredential: &databricks.AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredentialArgs{
					Name: pulumi.String("string"),
				},
			},
		},
		Anthropic: &databricks.AiGatewayModelProviderServiceConfigAnthropicArgs{
			Direct: &databricks.AiGatewayModelProviderServiceConfigAnthropicDirectArgs{
				ApiKey: &databricks.AiGatewayModelProviderServiceConfigAnthropicDirectApiKeyArgs{
					Plaintext: pulumi.String("string"),
					SecretReference: &databricks.AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReferenceArgs{
						Name: pulumi.String("string"),
					},
				},
			},
			Relayed: &databricks.AiGatewayModelProviderServiceConfigAnthropicRelayedArgs{},
		},
		AzureOpenai: &databricks.AiGatewayModelProviderServiceConfigAzureOpenaiArgs{
			Direct: &databricks.AiGatewayModelProviderServiceConfigAzureOpenaiDirectArgs{
				ApiKey: &databricks.AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeyArgs{
					Plaintext: pulumi.String("string"),
					SecretReference: &databricks.AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReferenceArgs{
						Name: pulumi.String("string"),
					},
				},
				BaseUrl: pulumi.String("string"),
				EntraServicePrincipal: &databricks.AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalArgs{
					ClientId: pulumi.String("string"),
					ClientSecret: &databricks.AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretArgs{
						Plaintext: pulumi.String("string"),
						SecretReference: &databricks.AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReferenceArgs{
							Name: pulumi.String("string"),
						},
					},
					TenantId: pulumi.String("string"),
				},
				ServiceCredential: &databricks.AiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredentialArgs{
					Name: pulumi.String("string"),
				},
			},
		},
		Custom: &databricks.AiGatewayModelProviderServiceConfigCustomArgs{
			Direct: &databricks.AiGatewayModelProviderServiceConfigCustomDirectArgs{
				ApiKey: &databricks.AiGatewayModelProviderServiceConfigCustomDirectApiKeyArgs{
					Plaintext: pulumi.String("string"),
					SecretReference: &databricks.AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReferenceArgs{
						Name: pulumi.String("string"),
					},
				},
				BaseUrl: pulumi.String("string"),
				HeaderAuth: &databricks.AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthArgs{
					ApiKeyName: pulumi.String("string"),
					ApiKeyValue: &databricks.AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueArgs{
						Plaintext: pulumi.String("string"),
						SecretReference: &databricks.AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReferenceArgs{
							Name: pulumi.String("string"),
						},
					},
				},
			},
		},
		ForwardHeaders:         pulumi.Bool(false),
		ForwardQueryParameters: pulumi.Bool(false),
		ForwardUnmanagedPaths:  pulumi.Bool(false),
		GeminiEnterprise: &databricks.AiGatewayModelProviderServiceConfigGeminiEnterpriseArgs{
			Direct: &databricks.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectArgs{
				ApiKey: &databricks.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeyArgs{
					Plaintext: pulumi.String("string"),
					SecretReference: &databricks.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReferenceArgs{
						Name: pulumi.String("string"),
					},
				},
				ProjectId: pulumi.String("string"),
				Region:    pulumi.String("string"),
				ServiceCredential: &databricks.AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredentialArgs{
					Name: pulumi.String("string"),
				},
			},
		},
		InferenceTable: &databricks.AiGatewayModelProviderServiceConfigInferenceTableArgs{
			Parent:          pulumi.String("string"),
			IsDeleted:       pulumi.Bool(false),
			Table:           pulumi.String("string"),
			TableNamePrefix: pulumi.String("string"),
		},
		MicrosoftFoundry: &databricks.AiGatewayModelProviderServiceConfigMicrosoftFoundryArgs{
			Direct: &databricks.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectArgs{
				ApiKey: &databricks.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeyArgs{
					Plaintext: pulumi.String("string"),
					SecretReference: &databricks.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReferenceArgs{
						Name: pulumi.String("string"),
					},
				},
				BaseUrl: pulumi.String("string"),
				EntraServicePrincipal: &databricks.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalArgs{
					ClientId: pulumi.String("string"),
					ClientSecret: &databricks.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretArgs{
						Plaintext: pulumi.String("string"),
						SecretReference: &databricks.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReferenceArgs{
							Name: pulumi.String("string"),
						},
					},
					TenantId: pulumi.String("string"),
				},
				ServiceCredential: &databricks.AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredentialArgs{
					Name: pulumi.String("string"),
				},
			},
		},
		Openai: &databricks.AiGatewayModelProviderServiceConfigOpenaiArgs{
			Direct: &databricks.AiGatewayModelProviderServiceConfigOpenaiDirectArgs{
				ApiKey: &databricks.AiGatewayModelProviderServiceConfigOpenaiDirectApiKeyArgs{
					Plaintext: pulumi.String("string"),
					SecretReference: &databricks.AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReferenceArgs{
						Name: pulumi.String("string"),
					},
				},
				BaseUrl:      pulumi.String("string"),
				Organization: pulumi.String("string"),
			},
		},
		ProviderType: pulumi.String("string"),
		RateLimits: databricks.AiGatewayModelProviderServiceConfigRateLimitArray{
			&databricks.AiGatewayModelProviderServiceConfigRateLimitArgs{
				Key:           pulumi.String("string"),
				RenewalPeriod: pulumi.String("string"),
				Principal:     pulumi.String("string"),
				Requests:      pulumi.Int(0),
				Tokens:        pulumi.Int(0),
			},
		},
		Targets: databricks.AiGatewayModelProviderServiceConfigTargetArray{
			&databricks.AiGatewayModelProviderServiceConfigTargetArgs{
				Model: pulumi.String("string"),
				NativeApiTypes: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
	},
	ProviderConfig: &databricks.AiGatewayModelProviderServiceProviderConfigArgs{
		WorkspaceId: pulumi.String("string"),
	},
})

    resource "databricks_ai_gateway_model_provider_service" "aiGatewayModelProviderServiceResource" {
  lifecycle {
    create_before_destroy = true
  }
  model_provider_service_id = "string"
  parent                    = "string"
  comment                   = "string"
  config = {
    allow_all_targets = false
    amazon_bedrock = {
      direct = {
        aws_access_key = {
          access_key_id = "string"
          secret_access_key = {
            plaintext = "string"
            secret_reference = {
              name = "string"
            }
          }
        }
        region = "string"
        service_credential = {
          name = "string"
        }
      }
    }
    anthropic = {
      direct = {
        api_key = {
          plaintext = "string"
          secret_reference = {
            name = "string"
          }
        }
      }
      relayed = {}
    }
    azure_openai = {
      direct = {
        api_key = {
          plaintext = "string"
          secret_reference = {
            name = "string"
          }
        }
        base_url = "string"
        entra_service_principal = {
          client_id = "string"
          client_secret = {
            plaintext = "string"
            secret_reference = {
              name = "string"
            }
          }
          tenant_id = "string"
        }
        service_credential = {
          name = "string"
        }
      }
    }
    custom = {
      direct = {
        api_key = {
          plaintext = "string"
          secret_reference = {
            name = "string"
          }
        }
        base_url = "string"
        header_auth = {
          api_key_name = "string"
          api_key_value = {
            plaintext = "string"
            secret_reference = {
              name = "string"
            }
          }
        }
      }
    }
    forward_headers          = false
    forward_query_parameters = false
    forward_unmanaged_paths  = false
    gemini_enterprise = {
      direct = {
        api_key = {
          plaintext = "string"
          secret_reference = {
            name = "string"
          }
        }
        project_id = "string"
        region     = "string"
        service_credential = {
          name = "string"
        }
      }
    }
    inference_table = {
      parent            = "string"
      is_deleted        = false
      table             = "string"
      table_name_prefix = "string"
    }
    microsoft_foundry = {
      direct = {
        api_key = {
          plaintext = "string"
          secret_reference = {
            name = "string"
          }
        }
        base_url = "string"
        entra_service_principal = {
          client_id = "string"
          client_secret = {
            plaintext = "string"
            secret_reference = {
              name = "string"
            }
          }
          tenant_id = "string"
        }
        service_credential = {
          name = "string"
        }
      }
    }
    openai = {
      direct = {
        api_key = {
          plaintext = "string"
          secret_reference = {
            name = "string"
          }
        }
        base_url     = "string"
        organization = "string"
      }
    }
    provider_type = "string"
    rate_limits = [{
      key            = "string"
      renewal_period = "string"
      principal      = "string"
      requests       = 0
      tokens         = 0
    }]
    targets = [{
      model            = "string"
      native_api_types = ["string"]
    }]
  }
  provider_config = {
    workspace_id = "string"
  }
}

    var aiGatewayModelProviderServiceResource = new AiGatewayModelProviderService("aiGatewayModelProviderServiceResource", AiGatewayModelProviderServiceArgs.builder()
    .modelProviderServiceId("string")
    .parent("string")
    .comment("string")
    .config(AiGatewayModelProviderServiceConfigArgs.builder()
        .allowAllTargets(false)
        .amazonBedrock(AiGatewayModelProviderServiceConfigAmazonBedrockArgs.builder()
            .direct(AiGatewayModelProviderServiceConfigAmazonBedrockDirectArgs.builder()
                .awsAccessKey(AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeyArgs.builder()
                    .accessKeyId("string")
                    .secretAccessKey(AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeyArgs.builder()
                        .plaintext("string")
                        .secretReference(AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReferenceArgs.builder()
                            .name("string")
                            .build())
                        .build())
                    .build())
                .region("string")
                .serviceCredential(AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredentialArgs.builder()
                    .name("string")
                    .build())
                .build())
            .build())
        .anthropic(AiGatewayModelProviderServiceConfigAnthropicArgs.builder()
            .direct(AiGatewayModelProviderServiceConfigAnthropicDirectArgs.builder()
                .apiKey(AiGatewayModelProviderServiceConfigAnthropicDirectApiKeyArgs.builder()
                    .plaintext("string")
                    .secretReference(AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReferenceArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .build())
            .relayed(AiGatewayModelProviderServiceConfigAnthropicRelayedArgs.builder()
                .build())
            .build())
        .azureOpenai(AiGatewayModelProviderServiceConfigAzureOpenaiArgs.builder()
            .direct(AiGatewayModelProviderServiceConfigAzureOpenaiDirectArgs.builder()
                .apiKey(AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeyArgs.builder()
                    .plaintext("string")
                    .secretReference(AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReferenceArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .baseUrl("string")
                .entraServicePrincipal(AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalArgs.builder()
                    .clientId("string")
                    .clientSecret(AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretArgs.builder()
                        .plaintext("string")
                        .secretReference(AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReferenceArgs.builder()
                            .name("string")
                            .build())
                        .build())
                    .tenantId("string")
                    .build())
                .serviceCredential(AiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredentialArgs.builder()
                    .name("string")
                    .build())
                .build())
            .build())
        .custom(AiGatewayModelProviderServiceConfigCustomArgs.builder()
            .direct(AiGatewayModelProviderServiceConfigCustomDirectArgs.builder()
                .apiKey(AiGatewayModelProviderServiceConfigCustomDirectApiKeyArgs.builder()
                    .plaintext("string")
                    .secretReference(AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReferenceArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .baseUrl("string")
                .headerAuth(AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthArgs.builder()
                    .apiKeyName("string")
                    .apiKeyValue(AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueArgs.builder()
                        .plaintext("string")
                        .secretReference(AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReferenceArgs.builder()
                            .name("string")
                            .build())
                        .build())
                    .build())
                .build())
            .build())
        .forwardHeaders(false)
        .forwardQueryParameters(false)
        .forwardUnmanagedPaths(false)
        .geminiEnterprise(AiGatewayModelProviderServiceConfigGeminiEnterpriseArgs.builder()
            .direct(AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectArgs.builder()
                .apiKey(AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeyArgs.builder()
                    .plaintext("string")
                    .secretReference(AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReferenceArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .projectId("string")
                .region("string")
                .serviceCredential(AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredentialArgs.builder()
                    .name("string")
                    .build())
                .build())
            .build())
        .inferenceTable(AiGatewayModelProviderServiceConfigInferenceTableArgs.builder()
            .parent("string")
            .isDeleted(false)
            .table("string")
            .tableNamePrefix("string")
            .build())
        .microsoftFoundry(AiGatewayModelProviderServiceConfigMicrosoftFoundryArgs.builder()
            .direct(AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectArgs.builder()
                .apiKey(AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeyArgs.builder()
                    .plaintext("string")
                    .secretReference(AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReferenceArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .baseUrl("string")
                .entraServicePrincipal(AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalArgs.builder()
                    .clientId("string")
                    .clientSecret(AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretArgs.builder()
                        .plaintext("string")
                        .secretReference(AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReferenceArgs.builder()
                            .name("string")
                            .build())
                        .build())
                    .tenantId("string")
                    .build())
                .serviceCredential(AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredentialArgs.builder()
                    .name("string")
                    .build())
                .build())
            .build())
        .openai(AiGatewayModelProviderServiceConfigOpenaiArgs.builder()
            .direct(AiGatewayModelProviderServiceConfigOpenaiDirectArgs.builder()
                .apiKey(AiGatewayModelProviderServiceConfigOpenaiDirectApiKeyArgs.builder()
                    .plaintext("string")
                    .secretReference(AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReferenceArgs.builder()
                        .name("string")
                        .build())
                    .build())
                .baseUrl("string")
                .organization("string")
                .build())
            .build())
        .providerType("string")
        .rateLimits(AiGatewayModelProviderServiceConfigRateLimitArgs.builder()
            .key("string")
            .renewalPeriod("string")
            .principal("string")
            .requests(0)
            .tokens(0)
            .build())
        .targets(AiGatewayModelProviderServiceConfigTargetArgs.builder()
            .model("string")
            .nativeApiTypes("string")
            .build())
        .build())
    .providerConfig(AiGatewayModelProviderServiceProviderConfigArgs.builder()
        .workspaceId("string")
        .build())
    .build());

    ai_gateway_model_provider_service_resource = databricks.AiGatewayModelProviderService("aiGatewayModelProviderServiceResource",
    model_provider_service_id="string",
    parent="string",
    comment="string",
    config={
        "allow_all_targets": False,
        "amazon_bedrock": {
            "direct": {
                "aws_access_key": {
                    "access_key_id": "string",
                    "secret_access_key": {
                        "plaintext": "string",
                        "secret_reference": {
                            "name": "string",
                        },
                    },
                },
                "region": "string",
                "service_credential": {
                    "name": "string",
                },
            },
        },
        "anthropic": {
            "direct": {
                "api_key": {
                    "plaintext": "string",
                    "secret_reference": {
                        "name": "string",
                    },
                },
            },
            "relayed": {},
        },
        "azure_openai": {
            "direct": {
                "api_key": {
                    "plaintext": "string",
                    "secret_reference": {
                        "name": "string",
                    },
                },
                "base_url": "string",
                "entra_service_principal": {
                    "client_id": "string",
                    "client_secret": {
                        "plaintext": "string",
                        "secret_reference": {
                            "name": "string",
                        },
                    },
                    "tenant_id": "string",
                },
                "service_credential": {
                    "name": "string",
                },
            },
        },
        "custom": {
            "direct": {
                "api_key": {
                    "plaintext": "string",
                    "secret_reference": {
                        "name": "string",
                    },
                },
                "base_url": "string",
                "header_auth": {
                    "api_key_name": "string",
                    "api_key_value": {
                        "plaintext": "string",
                        "secret_reference": {
                            "name": "string",
                        },
                    },
                },
            },
        },
        "forward_headers": False,
        "forward_query_parameters": False,
        "forward_unmanaged_paths": False,
        "gemini_enterprise": {
            "direct": {
                "api_key": {
                    "plaintext": "string",
                    "secret_reference": {
                        "name": "string",
                    },
                },
                "project_id": "string",
                "region": "string",
                "service_credential": {
                    "name": "string",
                },
            },
        },
        "inference_table": {
            "parent": "string",
            "is_deleted": False,
            "table": "string",
            "table_name_prefix": "string",
        },
        "microsoft_foundry": {
            "direct": {
                "api_key": {
                    "plaintext": "string",
                    "secret_reference": {
                        "name": "string",
                    },
                },
                "base_url": "string",
                "entra_service_principal": {
                    "client_id": "string",
                    "client_secret": {
                        "plaintext": "string",
                        "secret_reference": {
                            "name": "string",
                        },
                    },
                    "tenant_id": "string",
                },
                "service_credential": {
                    "name": "string",
                },
            },
        },
        "openai": {
            "direct": {
                "api_key": {
                    "plaintext": "string",
                    "secret_reference": {
                        "name": "string",
                    },
                },
                "base_url": "string",
                "organization": "string",
            },
        },
        "provider_type": "string",
        "rate_limits": [{
            "key": "string",
            "renewal_period": "string",
            "principal": "string",
            "requests": 0,
            "tokens": 0,
        }],
        "targets": [{
            "model": "string",
            "native_api_types": ["string"],
        }],
    },
    provider_config={
        "workspace_id": "string",
    })

    const aiGatewayModelProviderServiceResource = new databricks.AiGatewayModelProviderService("aiGatewayModelProviderServiceResource", {
    modelProviderServiceId: "string",
    parent: "string",
    comment: "string",
    config: {
        allowAllTargets: false,
        amazonBedrock: {
            direct: {
                awsAccessKey: {
                    accessKeyId: "string",
                    secretAccessKey: {
                        plaintext: "string",
                        secretReference: {
                            name: "string",
                        },
                    },
                },
                region: "string",
                serviceCredential: {
                    name: "string",
                },
            },
        },
        anthropic: {
            direct: {
                apiKey: {
                    plaintext: "string",
                    secretReference: {
                        name: "string",
                    },
                },
            },
            relayed: {},
        },
        azureOpenai: {
            direct: {
                apiKey: {
                    plaintext: "string",
                    secretReference: {
                        name: "string",
                    },
                },
                baseUrl: "string",
                entraServicePrincipal: {
                    clientId: "string",
                    clientSecret: {
                        plaintext: "string",
                        secretReference: {
                            name: "string",
                        },
                    },
                    tenantId: "string",
                },
                serviceCredential: {
                    name: "string",
                },
            },
        },
        custom: {
            direct: {
                apiKey: {
                    plaintext: "string",
                    secretReference: {
                        name: "string",
                    },
                },
                baseUrl: "string",
                headerAuth: {
                    apiKeyName: "string",
                    apiKeyValue: {
                        plaintext: "string",
                        secretReference: {
                            name: "string",
                        },
                    },
                },
            },
        },
        forwardHeaders: false,
        forwardQueryParameters: false,
        forwardUnmanagedPaths: false,
        geminiEnterprise: {
            direct: {
                apiKey: {
                    plaintext: "string",
                    secretReference: {
                        name: "string",
                    },
                },
                projectId: "string",
                region: "string",
                serviceCredential: {
                    name: "string",
                },
            },
        },
        inferenceTable: {
            parent: "string",
            isDeleted: false,
            table: "string",
            tableNamePrefix: "string",
        },
        microsoftFoundry: {
            direct: {
                apiKey: {
                    plaintext: "string",
                    secretReference: {
                        name: "string",
                    },
                },
                baseUrl: "string",
                entraServicePrincipal: {
                    clientId: "string",
                    clientSecret: {
                        plaintext: "string",
                        secretReference: {
                            name: "string",
                        },
                    },
                    tenantId: "string",
                },
                serviceCredential: {
                    name: "string",
                },
            },
        },
        openai: {
            direct: {
                apiKey: {
                    plaintext: "string",
                    secretReference: {
                        name: "string",
                    },
                },
                baseUrl: "string",
                organization: "string",
            },
        },
        providerType: "string",
        rateLimits: [{
            key: "string",
            renewalPeriod: "string",
            principal: "string",
            requests: 0,
            tokens: 0,
        }],
        targets: [{
            model: "string",
            nativeApiTypes: ["string"],
        }],
    },
    providerConfig: {
        workspaceId: "string",
    },
});

    type: databricks:AiGatewayModelProviderService
properties:
    comment: string
    config:
        allowAllTargets: false
        amazonBedrock:
            direct:
                awsAccessKey:
                    accessKeyId: string
                    secretAccessKey:
                        plaintext: string
                        secretReference:
                            name: string
                region: string
                serviceCredential:
                    name: string
        anthropic:
            direct:
                apiKey:
                    plaintext: string
                    secretReference:
                        name: string
            relayed: {}
        azureOpenai:
            direct:
                apiKey:
                    plaintext: string
                    secretReference:
                        name: string
                baseUrl: string
                entraServicePrincipal:
                    clientId: string
                    clientSecret:
                        plaintext: string
                        secretReference:
                            name: string
                    tenantId: string
                serviceCredential:
                    name: string
        custom:
            direct:
                apiKey:
                    plaintext: string
                    secretReference:
                        name: string
                baseUrl: string
                headerAuth:
                    apiKeyName: string
                    apiKeyValue:
                        plaintext: string
                        secretReference:
                            name: string
        forwardHeaders: false
        forwardQueryParameters: false
        forwardUnmanagedPaths: false
        geminiEnterprise:
            direct:
                apiKey:
                    plaintext: string
                    secretReference:
                        name: string
                projectId: string
                region: string
                serviceCredential:
                    name: string
        inferenceTable:
            isDeleted: false
            parent: string
            table: string
            tableNamePrefix: string
        microsoftFoundry:
            direct:
                apiKey:
                    plaintext: string
                    secretReference:
                        name: string
                baseUrl: string
                entraServicePrincipal:
                    clientId: string
                    clientSecret:
                        plaintext: string
                        secretReference:
                            name: string
                    tenantId: string
                serviceCredential:
                    name: string
        openai:
            direct:
                apiKey:
                    plaintext: string
                    secretReference:
                        name: string
                baseUrl: string
                organization: string
        providerType: string
        rateLimits:
            - key: string
              principal: string
              renewalPeriod: string
              requests: 0
              tokens: 0
        targets:
            - model: string
              nativeApiTypes:
                - string
    modelProviderServiceId: string
    parent: string
    providerConfig:
        workspaceId: string

    AiGatewayModelProviderService Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AiGatewayModelProviderService resource accepts the following input properties:

    ModelProviderServiceId string
    Name for the model provider service, e.g. "openaiProd"
    Parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    Comment string
    User-provided description
    Config AiGatewayModelProviderServiceConfig
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    ProviderConfig AiGatewayModelProviderServiceProviderConfig
    Configure the provider for management through account provider.
    ModelProviderServiceId string
    Name for the model provider service, e.g. "openaiProd"
    Parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    Comment string
    User-provided description
    Config AiGatewayModelProviderServiceConfigArgs
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    ProviderConfig AiGatewayModelProviderServiceProviderConfigArgs
    Configure the provider for management through account provider.
    model_provider_service_id string
    Name for the model provider service, e.g. "openaiProd"
    parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    comment string
    User-provided description
    config object
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    provider_config object
    Configure the provider for management through account provider.
    modelProviderServiceId String
    Name for the model provider service, e.g. "openaiProd"
    parent String
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    comment String
    User-provided description
    config AiGatewayModelProviderServiceConfig
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    providerConfig AiGatewayModelProviderServiceProviderConfig
    Configure the provider for management through account provider.
    modelProviderServiceId string
    Name for the model provider service, e.g. "openaiProd"
    parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    comment string
    User-provided description
    config AiGatewayModelProviderServiceConfig
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    providerConfig AiGatewayModelProviderServiceProviderConfig
    Configure the provider for management through account provider.
    model_provider_service_id str
    Name for the model provider service, e.g. "openaiProd"
    parent str
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    comment str
    User-provided description
    config AiGatewayModelProviderServiceConfigArgs
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    provider_config AiGatewayModelProviderServiceProviderConfigArgs
    Configure the provider for management through account provider.
    modelProviderServiceId String
    Name for the model provider service, e.g. "openaiProd"
    parent String
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    comment String
    User-provided description
    config Property Map
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    providerConfig Property Map
    Configure the provider for management through account provider.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AiGatewayModelProviderService resource produces the following output properties:

    CreateTime string
    (string) - Time the provider service was created
    CreatedBy string
    (string) - Creator identity
    EffectiveOwner string
    (string) - Owner of the model provider service
    Etag string
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    Id string
    The provider-assigned unique ID for this managed resource.
    MetastoreId string
    (string) - Metastore hosting the provider service
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    UpdateTime string
    (string) - Time the provider service was last modified
    UpdatedBy string
    (string) - Identity of the last updater
    CreateTime string
    (string) - Time the provider service was created
    CreatedBy string
    (string) - Creator identity
    EffectiveOwner string
    (string) - Owner of the model provider service
    Etag string
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    Id string
    The provider-assigned unique ID for this managed resource.
    MetastoreId string
    (string) - Metastore hosting the provider service
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    UpdateTime string
    (string) - Time the provider service was last modified
    UpdatedBy string
    (string) - Identity of the last updater
    create_time string
    (string) - Time the provider service was created
    created_by string
    (string) - Creator identity
    effective_owner string
    (string) - Owner of the model provider service
    etag string
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    id string
    The provider-assigned unique ID for this managed resource.
    metastore_id string
    (string) - Metastore hosting the provider service
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    update_time string
    (string) - Time the provider service was last modified
    updated_by string
    (string) - Identity of the last updater
    createTime String
    (string) - Time the provider service was created
    createdBy String
    (string) - Creator identity
    effectiveOwner String
    (string) - Owner of the model provider service
    etag String
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    id String
    The provider-assigned unique ID for this managed resource.
    metastoreId String
    (string) - Metastore hosting the provider service
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    updateTime String
    (string) - Time the provider service was last modified
    updatedBy String
    (string) - Identity of the last updater
    createTime string
    (string) - Time the provider service was created
    createdBy string
    (string) - Creator identity
    effectiveOwner string
    (string) - Owner of the model provider service
    etag string
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    id string
    The provider-assigned unique ID for this managed resource.
    metastoreId string
    (string) - Metastore hosting the provider service
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    updateTime string
    (string) - Time the provider service was last modified
    updatedBy string
    (string) - Identity of the last updater
    create_time str
    (string) - Time the provider service was created
    created_by str
    (string) - Creator identity
    effective_owner str
    (string) - Owner of the model provider service
    etag str
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    id str
    The provider-assigned unique ID for this managed resource.
    metastore_id str
    (string) - Metastore hosting the provider service
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    update_time str
    (string) - Time the provider service was last modified
    updated_by str
    (string) - Identity of the last updater
    createTime String
    (string) - Time the provider service was created
    createdBy String
    (string) - Creator identity
    effectiveOwner String
    (string) - Owner of the model provider service
    etag String
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    id String
    The provider-assigned unique ID for this managed resource.
    metastoreId String
    (string) - Metastore hosting the provider service
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    updateTime String
    (string) - Time the provider service was last modified
    updatedBy String
    (string) - Identity of the last updater

    Look up Existing AiGatewayModelProviderService Resource

    Get an existing AiGatewayModelProviderService resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AiGatewayModelProviderServiceState, opts?: CustomResourceOptions): AiGatewayModelProviderService
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        comment: Optional[str] = None,
        config: Optional[AiGatewayModelProviderServiceConfigArgs] = None,
        create_time: Optional[str] = None,
        created_by: Optional[str] = None,
        effective_owner: Optional[str] = None,
        etag: Optional[str] = None,
        metastore_id: Optional[str] = None,
        model_provider_service_id: Optional[str] = None,
        name: Optional[str] = None,
        parent: Optional[str] = None,
        provider_config: Optional[AiGatewayModelProviderServiceProviderConfigArgs] = None,
        update_time: Optional[str] = None,
        updated_by: Optional[str] = None) -> AiGatewayModelProviderService
    func GetAiGatewayModelProviderService(ctx *Context, name string, id IDInput, state *AiGatewayModelProviderServiceState, opts ...ResourceOption) (*AiGatewayModelProviderService, error)
    public static AiGatewayModelProviderService Get(string name, Input<string> id, AiGatewayModelProviderServiceState? state, CustomResourceOptions? opts = null)
    public static AiGatewayModelProviderService get(String name, Output<String> id, AiGatewayModelProviderServiceState state, CustomResourceOptions options)
    resources:  _:    type: databricks:AiGatewayModelProviderService    get:      id: ${id}
    import {
  to = databricks_ai_gateway_model_provider_service.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Comment string
    User-provided description
    Config AiGatewayModelProviderServiceConfig
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    CreateTime string
    (string) - Time the provider service was created
    CreatedBy string
    (string) - Creator identity
    EffectiveOwner string
    (string) - Owner of the model provider service
    Etag string
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    MetastoreId string
    (string) - Metastore hosting the provider service
    ModelProviderServiceId string
    Name for the model provider service, e.g. "openaiProd"
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    ProviderConfig AiGatewayModelProviderServiceProviderConfig
    Configure the provider for management through account provider.
    UpdateTime string
    (string) - Time the provider service was last modified
    UpdatedBy string
    (string) - Identity of the last updater
    Comment string
    User-provided description
    Config AiGatewayModelProviderServiceConfigArgs
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    CreateTime string
    (string) - Time the provider service was created
    CreatedBy string
    (string) - Creator identity
    EffectiveOwner string
    (string) - Owner of the model provider service
    Etag string
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    MetastoreId string
    (string) - Metastore hosting the provider service
    ModelProviderServiceId string
    Name for the model provider service, e.g. "openaiProd"
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    ProviderConfig AiGatewayModelProviderServiceProviderConfigArgs
    Configure the provider for management through account provider.
    UpdateTime string
    (string) - Time the provider service was last modified
    UpdatedBy string
    (string) - Identity of the last updater
    comment string
    User-provided description
    config object
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    create_time string
    (string) - Time the provider service was created
    created_by string
    (string) - Creator identity
    effective_owner string
    (string) - Owner of the model provider service
    etag string
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    metastore_id string
    (string) - Metastore hosting the provider service
    model_provider_service_id string
    Name for the model provider service, e.g. "openaiProd"
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    provider_config object
    Configure the provider for management through account provider.
    update_time string
    (string) - Time the provider service was last modified
    updated_by string
    (string) - Identity of the last updater
    comment String
    User-provided description
    config AiGatewayModelProviderServiceConfig
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    createTime String
    (string) - Time the provider service was created
    createdBy String
    (string) - Creator identity
    effectiveOwner String
    (string) - Owner of the model provider service
    etag String
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    metastoreId String
    (string) - Metastore hosting the provider service
    modelProviderServiceId String
    Name for the model provider service, e.g. "openaiProd"
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    parent String
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    providerConfig AiGatewayModelProviderServiceProviderConfig
    Configure the provider for management through account provider.
    updateTime String
    (string) - Time the provider service was last modified
    updatedBy String
    (string) - Identity of the last updater
    comment string
    User-provided description
    config AiGatewayModelProviderServiceConfig
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    createTime string
    (string) - Time the provider service was created
    createdBy string
    (string) - Creator identity
    effectiveOwner string
    (string) - Owner of the model provider service
    etag string
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    metastoreId string
    (string) - Metastore hosting the provider service
    modelProviderServiceId string
    Name for the model provider service, e.g. "openaiProd"
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    providerConfig AiGatewayModelProviderServiceProviderConfig
    Configure the provider for management through account provider.
    updateTime string
    (string) - Time the provider service was last modified
    updatedBy string
    (string) - Identity of the last updater
    comment str
    User-provided description
    config AiGatewayModelProviderServiceConfigArgs
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    create_time str
    (string) - Time the provider service was created
    created_by str
    (string) - Creator identity
    effective_owner str
    (string) - Owner of the model provider service
    etag str
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    metastore_id str
    (string) - Metastore hosting the provider service
    model_provider_service_id str
    Name for the model provider service, e.g. "openaiProd"
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    parent str
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    provider_config AiGatewayModelProviderServiceProviderConfigArgs
    Configure the provider for management through account provider.
    update_time str
    (string) - Time the provider service was last modified
    updated_by str
    (string) - Identity of the last updater
    comment String
    User-provided description
    config Property Map
    Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
    createTime String
    (string) - Time the provider service was created
    createdBy String
    (string) - Creator identity
    effectiveOwner String
    (string) - Owner of the model provider service
    etag String
    (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
    metastoreId String
    (string) - Metastore hosting the provider service
    modelProviderServiceId String
    Name for the model provider service, e.g. "openaiProd"
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    parent String
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    providerConfig Property Map
    Configure the provider for management through account provider.
    updateTime String
    (string) - Time the provider service was last modified
    updatedBy String
    (string) - Identity of the last updater

    Supporting Types

    AiGatewayModelProviderServiceConfig, AiGatewayModelProviderServiceConfigArgs

    AllowAllTargets bool
    When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
    AmazonBedrock AiGatewayModelProviderServiceConfigAmazonBedrock
    Anthropic AiGatewayModelProviderServiceConfigAnthropic
    AzureOpenai AiGatewayModelProviderServiceConfigAzureOpenai
    Custom AiGatewayModelProviderServiceConfigCustom
    ForwardHeaders bool
    Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
    ForwardQueryParameters bool
    Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
    ForwardUnmanagedPaths bool
    Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
    GeminiEnterprise AiGatewayModelProviderServiceConfigGeminiEnterprise
    InferenceTable AiGatewayModelProviderServiceConfigInferenceTable
    Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
    MicrosoftFoundry AiGatewayModelProviderServiceConfigMicrosoftFoundry
    Openai AiGatewayModelProviderServiceConfigOpenai
    ProviderType string
    External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
    RateLimits List<AiGatewayModelProviderServiceConfigRateLimit>
    Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
    Targets List<AiGatewayModelProviderServiceConfigTarget>
    Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models
    AllowAllTargets bool
    When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
    AmazonBedrock AiGatewayModelProviderServiceConfigAmazonBedrock
    Anthropic AiGatewayModelProviderServiceConfigAnthropic
    AzureOpenai AiGatewayModelProviderServiceConfigAzureOpenai
    Custom AiGatewayModelProviderServiceConfigCustom
    ForwardHeaders bool
    Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
    ForwardQueryParameters bool
    Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
    ForwardUnmanagedPaths bool
    Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
    GeminiEnterprise AiGatewayModelProviderServiceConfigGeminiEnterprise
    InferenceTable AiGatewayModelProviderServiceConfigInferenceTable
    Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
    MicrosoftFoundry AiGatewayModelProviderServiceConfigMicrosoftFoundry
    Openai AiGatewayModelProviderServiceConfigOpenai
    ProviderType string
    External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
    RateLimits []AiGatewayModelProviderServiceConfigRateLimit
    Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
    Targets []AiGatewayModelProviderServiceConfigTarget
    Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models
    allow_all_targets bool
    When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
    amazon_bedrock object
    anthropic object
    azure_openai object
    custom object
    forward_headers bool
    Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
    forward_query_parameters bool
    Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
    forward_unmanaged_paths bool
    Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
    gemini_enterprise object
    inference_table object
    Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
    microsoft_foundry object
    openai object
    provider_type string
    External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
    rate_limits list(object)
    Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
    targets list(object)
    Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models
    allowAllTargets Boolean
    When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
    amazonBedrock AiGatewayModelProviderServiceConfigAmazonBedrock
    anthropic AiGatewayModelProviderServiceConfigAnthropic
    azureOpenai AiGatewayModelProviderServiceConfigAzureOpenai
    custom AiGatewayModelProviderServiceConfigCustom
    forwardHeaders Boolean
    Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
    forwardQueryParameters Boolean
    Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
    forwardUnmanagedPaths Boolean
    Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
    geminiEnterprise AiGatewayModelProviderServiceConfigGeminiEnterprise
    inferenceTable AiGatewayModelProviderServiceConfigInferenceTable
    Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
    microsoftFoundry AiGatewayModelProviderServiceConfigMicrosoftFoundry
    openai AiGatewayModelProviderServiceConfigOpenai
    providerType String
    External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
    rateLimits List<AiGatewayModelProviderServiceConfigRateLimit>
    Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
    targets List<AiGatewayModelProviderServiceConfigTarget>
    Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models
    allowAllTargets boolean
    When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
    amazonBedrock AiGatewayModelProviderServiceConfigAmazonBedrock
    anthropic AiGatewayModelProviderServiceConfigAnthropic
    azureOpenai AiGatewayModelProviderServiceConfigAzureOpenai
    custom AiGatewayModelProviderServiceConfigCustom
    forwardHeaders boolean
    Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
    forwardQueryParameters boolean
    Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
    forwardUnmanagedPaths boolean
    Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
    geminiEnterprise AiGatewayModelProviderServiceConfigGeminiEnterprise
    inferenceTable AiGatewayModelProviderServiceConfigInferenceTable
    Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
    microsoftFoundry AiGatewayModelProviderServiceConfigMicrosoftFoundry
    openai AiGatewayModelProviderServiceConfigOpenai
    providerType string
    External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
    rateLimits AiGatewayModelProviderServiceConfigRateLimit[]
    Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
    targets AiGatewayModelProviderServiceConfigTarget[]
    Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models
    allow_all_targets bool
    When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
    amazon_bedrock AiGatewayModelProviderServiceConfigAmazonBedrock
    anthropic AiGatewayModelProviderServiceConfigAnthropic
    azure_openai AiGatewayModelProviderServiceConfigAzureOpenai
    custom AiGatewayModelProviderServiceConfigCustom
    forward_headers bool
    Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
    forward_query_parameters bool
    Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
    forward_unmanaged_paths bool
    Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
    gemini_enterprise AiGatewayModelProviderServiceConfigGeminiEnterprise
    inference_table AiGatewayModelProviderServiceConfigInferenceTable
    Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
    microsoft_foundry AiGatewayModelProviderServiceConfigMicrosoftFoundry
    openai AiGatewayModelProviderServiceConfigOpenai
    provider_type str
    External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
    rate_limits Sequence[AiGatewayModelProviderServiceConfigRateLimit]
    Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
    targets Sequence[AiGatewayModelProviderServiceConfigTarget]
    Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models
    allowAllTargets Boolean
    When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
    amazonBedrock Property Map
    anthropic Property Map
    azureOpenai Property Map
    custom Property Map
    forwardHeaders Boolean
    Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
    forwardQueryParameters Boolean
    Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
    forwardUnmanagedPaths Boolean
    Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
    geminiEnterprise Property Map
    inferenceTable Property Map
    Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
    microsoftFoundry Property Map
    openai Property Map
    providerType String
    External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
    rateLimits List<Property Map>
    Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
    targets List<Property Map>
    Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models

    AiGatewayModelProviderServiceConfigAmazonBedrock, AiGatewayModelProviderServiceConfigAmazonBedrockArgs

    AiGatewayModelProviderServiceConfigAmazonBedrockDirect, AiGatewayModelProviderServiceConfigAmazonBedrockDirectArgs

    AwsAccessKey AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey
    AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
    Region string
    ServiceCredential AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential
    AwsAccessKey AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey
    AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
    Region string
    ServiceCredential AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential
    aws_access_key object
    AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
    region string
    service_credential object
    awsAccessKey AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey
    AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
    region String
    serviceCredential AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential
    awsAccessKey AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey
    AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
    region string
    serviceCredential AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential
    aws_access_key AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey
    AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
    region str
    service_credential AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential
    awsAccessKey Property Map
    AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
    region String
    serviceCredential Property Map

    AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey, AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeyArgs

    AccessKeyId string
    AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
    SecretAccessKey AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey
    AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext
    AccessKeyId string
    AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
    SecretAccessKey AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey
    AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext
    access_key_id string
    AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
    secret_access_key object
    AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext
    accessKeyId String
    AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
    secretAccessKey AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey
    AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext
    accessKeyId string
    AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
    secretAccessKey AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey
    AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext
    access_key_id str
    AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
    secret_access_key AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey
    AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext
    accessKeyId String
    AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
    secretAccessKey Property Map
    AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext

    AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey, AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeyArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference, AiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential, AiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredentialArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigAnthropic, AiGatewayModelProviderServiceConfigAnthropicArgs

    Direct AiGatewayModelProviderServiceConfigAnthropicDirect
    Relayed AiGatewayModelProviderServiceConfigAnthropicRelayed
    Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct
    Direct AiGatewayModelProviderServiceConfigAnthropicDirect
    Relayed AiGatewayModelProviderServiceConfigAnthropicRelayed
    Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct
    direct object
    relayed object
    Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct
    direct AiGatewayModelProviderServiceConfigAnthropicDirect
    relayed AiGatewayModelProviderServiceConfigAnthropicRelayed
    Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct
    direct AiGatewayModelProviderServiceConfigAnthropicDirect
    relayed AiGatewayModelProviderServiceConfigAnthropicRelayed
    Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct
    direct AiGatewayModelProviderServiceConfigAnthropicDirect
    relayed AiGatewayModelProviderServiceConfigAnthropicRelayed
    Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct
    direct Property Map
    relayed Property Map
    Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct

    AiGatewayModelProviderServiceConfigAnthropicDirect, AiGatewayModelProviderServiceConfigAnthropicDirectArgs

    AiGatewayModelProviderServiceConfigAnthropicDirectApiKey, AiGatewayModelProviderServiceConfigAnthropicDirectApiKeyArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference, AiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigAzureOpenai, AiGatewayModelProviderServiceConfigAzureOpenaiArgs

    AiGatewayModelProviderServiceConfigAzureOpenaiDirect, AiGatewayModelProviderServiceConfigAzureOpenaiDirectArgs

    AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey, AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeyArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference, AiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal, AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalArgs

    ClientId string
    Entra ID client (application) ID. Required on Create
    ClientSecret AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    TenantId string
    Entra ID (Azure AD) tenant ID. Required on Create
    ClientId string
    Entra ID client (application) ID. Required on Create
    ClientSecret AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    TenantId string
    Entra ID (Azure AD) tenant ID. Required on Create
    client_id string
    Entra ID client (application) ID. Required on Create
    client_secret object
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenant_id string
    Entra ID (Azure AD) tenant ID. Required on Create
    clientId String
    Entra ID client (application) ID. Required on Create
    clientSecret AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenantId String
    Entra ID (Azure AD) tenant ID. Required on Create
    clientId string
    Entra ID client (application) ID. Required on Create
    clientSecret AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenantId string
    Entra ID (Azure AD) tenant ID. Required on Create
    client_id str
    Entra ID client (application) ID. Required on Create
    client_secret AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenant_id str
    Entra ID (Azure AD) tenant ID. Required on Create
    clientId String
    Entra ID client (application) ID. Required on Create
    clientSecret Property Map
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenantId String
    Entra ID (Azure AD) tenant ID. Required on Create

    AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret, AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference, AiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential, AiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredentialArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigCustom, AiGatewayModelProviderServiceConfigCustomArgs

    AiGatewayModelProviderServiceConfigCustomDirect, AiGatewayModelProviderServiceConfigCustomDirectArgs

    ApiKey AiGatewayModelProviderServiceConfigCustomDirectApiKey
    BaseUrl string
    HeaderAuth AiGatewayModelProviderServiceConfigCustomDirectHeaderAuth
    Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth
    ApiKey AiGatewayModelProviderServiceConfigCustomDirectApiKey
    BaseUrl string
    HeaderAuth AiGatewayModelProviderServiceConfigCustomDirectHeaderAuth
    Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth
    api_key object
    base_url string
    header_auth object
    Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth
    apiKey AiGatewayModelProviderServiceConfigCustomDirectApiKey
    baseUrl String
    headerAuth AiGatewayModelProviderServiceConfigCustomDirectHeaderAuth
    Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth
    apiKey AiGatewayModelProviderServiceConfigCustomDirectApiKey
    baseUrl string
    headerAuth AiGatewayModelProviderServiceConfigCustomDirectHeaderAuth
    Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth
    api_key AiGatewayModelProviderServiceConfigCustomDirectApiKey
    base_url str
    header_auth AiGatewayModelProviderServiceConfigCustomDirectHeaderAuth
    Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth
    apiKey Property Map
    baseUrl String
    headerAuth Property Map
    Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth

    AiGatewayModelProviderServiceConfigCustomDirectApiKey, AiGatewayModelProviderServiceConfigCustomDirectApiKeyArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference, AiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigCustomDirectHeaderAuth, AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthArgs

    ApiKeyName string
    HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
    ApiKeyValue AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue
    Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext
    ApiKeyName string
    HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
    ApiKeyValue AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue
    Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext
    api_key_name string
    HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
    api_key_value object
    Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext
    apiKeyName String
    HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
    apiKeyValue AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue
    Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext
    apiKeyName string
    HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
    apiKeyValue AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue
    Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext
    api_key_name str
    HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
    api_key_value AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue
    Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext
    apiKeyName String
    HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
    apiKeyValue Property Map
    Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext

    AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue, AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference, AiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigGeminiEnterprise, AiGatewayModelProviderServiceConfigGeminiEnterpriseArgs

    AiGatewayModelProviderServiceConfigGeminiEnterpriseDirect, AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectArgs

    api_key object
    project_id string
    GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
    region string
    service_credential object
    apiKey Property Map
    projectId String
    GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
    region String
    serviceCredential Property Map

    AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey, AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeyArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference, AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredential, AiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredentialArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigInferenceTable, AiGatewayModelProviderServiceConfigInferenceTableArgs

    Parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    IsDeleted bool
    (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
    Table string
    (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
    TableNamePrefix string
    Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed
    Parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    IsDeleted bool
    (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
    Table string
    (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
    TableNamePrefix string
    Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed
    parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    is_deleted bool
    (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
    table string
    (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
    table_name_prefix string
    Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed
    parent String
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    isDeleted Boolean
    (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
    table String
    (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
    tableNamePrefix String
    Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed
    parent string
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    isDeleted boolean
    (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
    table string
    (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
    tableNamePrefix string
    Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed
    parent str
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    is_deleted bool
    (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
    table str
    (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
    table_name_prefix str
    Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed
    parent String
    Name of the parent schema. Format: schemas/{catalog}.{schema}. Each {...} component is capped at 255 characters individually
    isDeleted Boolean
    (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
    table String
    (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
    tableNamePrefix String
    Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed

    AiGatewayModelProviderServiceConfigMicrosoftFoundry, AiGatewayModelProviderServiceConfigMicrosoftFoundryArgs

    AiGatewayModelProviderServiceConfigMicrosoftFoundryDirect, AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectArgs

    AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey, AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeyArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference, AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal, AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalArgs

    ClientId string
    Entra ID client (application) ID. Required on Create
    ClientSecret AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    TenantId string
    Entra ID (Azure AD) tenant ID. Required on Create
    ClientId string
    Entra ID client (application) ID. Required on Create
    ClientSecret AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    TenantId string
    Entra ID (Azure AD) tenant ID. Required on Create
    client_id string
    Entra ID client (application) ID. Required on Create
    client_secret object
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenant_id string
    Entra ID (Azure AD) tenant ID. Required on Create
    clientId String
    Entra ID client (application) ID. Required on Create
    clientSecret AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenantId String
    Entra ID (Azure AD) tenant ID. Required on Create
    clientId string
    Entra ID client (application) ID. Required on Create
    clientSecret AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenantId string
    Entra ID (Azure AD) tenant ID. Required on Create
    client_id str
    Entra ID client (application) ID. Required on Create
    client_secret AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenant_id str
    Entra ID (Azure AD) tenant ID. Required on Create
    clientId String
    Entra ID client (application) ID. Required on Create
    clientSecret Property Map
    Entra ID client secret. Supply the value in client_secret.plaintext
    tenantId String
    Entra ID (Azure AD) tenant ID. Required on Create

    AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret, AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference, AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential, AiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredentialArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigOpenai, AiGatewayModelProviderServiceConfigOpenaiArgs

    AiGatewayModelProviderServiceConfigOpenaiDirect, AiGatewayModelProviderServiceConfigOpenaiDirectArgs

    ApiKey AiGatewayModelProviderServiceConfigOpenaiDirectApiKey
    BaseUrl string
    Organization string
    Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header
    ApiKey AiGatewayModelProviderServiceConfigOpenaiDirectApiKey
    BaseUrl string
    Organization string
    Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header
    api_key object
    base_url string
    organization string
    Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header
    apiKey AiGatewayModelProviderServiceConfigOpenaiDirectApiKey
    baseUrl String
    organization String
    Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header
    apiKey AiGatewayModelProviderServiceConfigOpenaiDirectApiKey
    baseUrl string
    organization string
    Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header
    api_key AiGatewayModelProviderServiceConfigOpenaiDirectApiKey
    base_url str
    organization str
    Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header
    apiKey Property Map
    baseUrl String
    organization String
    Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

    AiGatewayModelProviderServiceConfigOpenaiDirectApiKey, AiGatewayModelProviderServiceConfigOpenaiDirectApiKeyArgs

    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    Plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    SecretReference AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference object
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext string
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext str
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secret_reference AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}
    plaintext String
    Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
    secretReference Property Map
    Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

    AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference, AiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReferenceArgs

    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    Name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name string
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name str
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
    name String
    (string) - Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

    AiGatewayModelProviderServiceConfigRateLimit, AiGatewayModelProviderServiceConfigRateLimitArgs

    Key string
    Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
    RenewalPeriod string
    Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
    Principal string
    Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
    Requests int
    Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
    Tokens int
    Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests
    Key string
    Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
    RenewalPeriod string
    Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
    Principal string
    Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
    Requests int
    Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
    Tokens int
    Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests
    key string
    Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
    renewal_period string
    Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
    principal string
    Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
    requests number
    Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
    tokens number
    Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests
    key String
    Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
    renewalPeriod String
    Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
    principal String
    Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
    requests Integer
    Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
    tokens Integer
    Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests
    key string
    Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
    renewalPeriod string
    Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
    principal string
    Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
    requests number
    Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
    tokens number
    Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests
    key str
    Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
    renewal_period str
    Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
    principal str
    Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
    requests int
    Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
    tokens int
    Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests
    key String
    Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
    renewalPeriod String
    Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
    principal String
    Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
    requests Number
    Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
    tokens Number
    Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests

    AiGatewayModelProviderServiceConfigTarget, AiGatewayModelProviderServiceConfigTargetArgs

    Model string
    Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
    NativeApiTypes List<string>
    Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed
    Model string
    Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
    NativeApiTypes []string
    Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed
    model string
    Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
    native_api_types list(string)
    Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed
    model String
    Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
    nativeApiTypes List<String>
    Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed
    model string
    Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
    nativeApiTypes string[]
    Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed
    model str
    Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
    native_api_types Sequence[str]
    Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed
    model String
    Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
    nativeApiTypes List<String>
    Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed

    AiGatewayModelProviderServiceProviderConfig, AiGatewayModelProviderServiceProviderConfigArgs

    WorkspaceId string
    Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.
    WorkspaceId string
    Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.
    workspace_id string
    Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.
    workspaceId String
    Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.
    workspaceId string
    Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.
    workspace_id str
    Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.
    workspaceId String
    Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo databricks logo
    Viewing docs for Databricks v1.116.0
    published on Tuesday, Oct 20, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-databricks

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial