databricks.getAiGatewayModelProviderService

Databricks v1.116.0, Oct 20 26

Viewing docs for Databricks v1.116.0
published on Tuesday, Oct 20, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

Viewing docs for Databricks v1.116.0
published on Tuesday, Oct 20, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

Example Usage

The following example retrieves the model provider service named customProvider from the main.default schema:

import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const example = databricks.getAiGatewayModelProviderService({
    name: "model-provider-services/main.default.custom_provider",
});
export const providerType = example.then(example => example.config?.providerType);

import pulumi
import pulumi_databricks as databricks

example = databricks.get_ai_gateway_model_provider_service(name="model-provider-services/main.default.custom_provider")
pulumi.export("providerType", example.config.provider_type)

package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := databricks.GetAiGatewayModelProviderService(ctx, &databricks.LookupAiGatewayModelProviderServiceArgs{
			Name: "model-provider-services/main.default.custom_provider",
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("providerType", example.Config.ProviderType)
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var example = Databricks.GetAiGatewayModelProviderService.Invoke(new()
    {
        Name = "model-provider-services/main.default.custom_provider",
    });

    return new Dictionary<string, object?>
    {
        ["providerType"] = example.Apply(getAiGatewayModelProviderServiceResult => getAiGatewayModelProviderServiceResult.Config?.ProviderType),
    };
});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.DatabricksFunctions;
import com.pulumi.databricks.inputs.GetAiGatewayModelProviderServiceArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = DatabricksFunctions.getAiGatewayModelProviderService(GetAiGatewayModelProviderServiceArgs.builder()
            .name("model-provider-services/main.default.custom_provider")
            .build());

        ctx.export("providerType", example.config().providerType());
    }
}

variables:
  example:
    fn::invoke:
      function: databricks:getAiGatewayModelProviderService
      arguments:
        name: model-provider-services/main.default.custom_provider
outputs:
  providerType: ${example.config.providerType}

terraform {
  required_providers {
    databricks = {
      source = "pulumi/databricks"
    }
  }
}

data "databricks_ai_gateway_model_provider_service" "example" {
  name = "model-provider-services/main.default.custom_provider"
}

output "providerType" {
  value = data.databricks_ai_gateway_model_provider_service.example.config.provider_type
}

Using getAiGatewayModelProviderService

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getAiGatewayModelProviderService(args: GetAiGatewayModelProviderServiceArgs, opts?: InvokeOptions): Promise<GetAiGatewayModelProviderServiceResult>
function getAiGatewayModelProviderServiceOutput(args: GetAiGatewayModelProviderServiceOutputArgs, opts?: InvokeOutputOptions): Output<GetAiGatewayModelProviderServiceResult>

def get_ai_gateway_model_provider_service(name: Optional[str] = None,
                                          provider_config: Optional[GetAiGatewayModelProviderServiceProviderConfig] = None,
                                          opts: Optional[InvokeOptions] = None) -> GetAiGatewayModelProviderServiceResult
def get_ai_gateway_model_provider_service_output(name: pulumi.Input[Optional[str]] = None,
                                          provider_config: pulumi.Input[Optional[GetAiGatewayModelProviderServiceProviderConfigArgs]] = None,
                                          opts: Optional[InvokeOutputOptions] = None) -> Output[GetAiGatewayModelProviderServiceResult]

func LookupAiGatewayModelProviderService(ctx *Context, args *LookupAiGatewayModelProviderServiceArgs, opts ...InvokeOption) (*LookupAiGatewayModelProviderServiceResult, error)
func LookupAiGatewayModelProviderServiceOutput(ctx *Context, args *LookupAiGatewayModelProviderServiceOutputArgs, opts ...InvokeOption) LookupAiGatewayModelProviderServiceResultOutput

> Note: This function is named LookupAiGatewayModelProviderService in the Go SDK.

public static class GetAiGatewayModelProviderService 
{
    public static Task<GetAiGatewayModelProviderServiceResult> InvokeAsync(GetAiGatewayModelProviderServiceArgs args, InvokeOptions? opts = null)
    public static Output<GetAiGatewayModelProviderServiceResult> Invoke(GetAiGatewayModelProviderServiceInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetAiGatewayModelProviderServiceResult> Invoke(GetAiGatewayModelProviderServiceInvokeArgs args, InvokeOutputOptions opts)
}

public static CompletableFuture<GetAiGatewayModelProviderServiceResult> getAiGatewayModelProviderService(GetAiGatewayModelProviderServiceArgs args, InvokeOptions options)
public static Output<GetAiGatewayModelProviderServiceResult> getAiGatewayModelProviderService(GetAiGatewayModelProviderServiceArgs args, InvokeOptions options)
public static Output<GetAiGatewayModelProviderServiceResult> getAiGatewayModelProviderService(GetAiGatewayModelProviderServiceArgs args, InvokeOutputOptions options)

fn::invoke:
  function: databricks:index/getAiGatewayModelProviderService:getAiGatewayModelProviderService
  arguments:
    # arguments dictionary

data "databricks_get_ai_gateway_model_provider_service" "name" {
    # arguments
}

The following arguments are supported:

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
ProviderConfig GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
ProviderConfig GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
provider_config object: Configure the provider for management through account provider.

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
providerConfig GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
providerConfig GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
provider_config GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
providerConfig Property Map: Configure the provider for management through account provider.

getAiGatewayModelProviderService Result

The following output properties are available:

Comment string: (string) - User-provided description
Config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
CreateTime string: (string) - Time the provider service was created
CreatedBy string: (string) - Creator identity
EffectiveOwner string: (string) - Owner of the model provider service
Etag string: (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
MetastoreId string: (string) - Metastore hosting the provider service
Name string: (string) - Resource name of the bound Unity Catalog service credential, in the form credentials/{name}. Supply this field when creating the service or rebinding its credential. On read, it reflects the credential's current name
UpdateTime string: (string) - Time the provider service was last modified
UpdatedBy string: (string) - Identity of the last updater
ProviderConfig GetAiGatewayModelProviderServiceProviderConfig

Comment string: (string) - User-provided description
Config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
CreateTime string: (string) - Time the provider service was created
CreatedBy string: (string) - Creator identity
EffectiveOwner string: (string) - Owner of the model provider service
Etag string: (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
MetastoreId string: (string) - Metastore hosting the provider service
Name string: (string) - Resource name of the bound Unity Catalog service credential, in the form credentials/{name}. Supply this field when creating the service or rebinding its credential. On read, it reflects the credential's current name
UpdateTime string: (string) - Time the provider service was last modified
UpdatedBy string: (string) - Identity of the last updater
ProviderConfig GetAiGatewayModelProviderServiceProviderConfig

comment string: (string) - User-provided description
config object: (ModelProviderServiceConfig) - Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
create_time string: (string) - Time the provider service was created
created_by string: (string) - Creator identity
effective_owner string: (string) - Owner of the model provider service
etag string: (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
metastore_id string: (string) - Metastore hosting the provider service
name string: (string) - Resource name of the bound Unity Catalog service credential, in the form credentials/{name}. Supply this field when creating the service or rebinding its credential. On read, it reflects the credential's current name
update_time string: (string) - Time the provider service was last modified
updated_by string: (string) - Identity of the last updater
provider_config object

comment String: (string) - User-provided description
config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
createTime String: (string) - Time the provider service was created
createdBy String: (string) - Creator identity
effectiveOwner String: (string) - Owner of the model provider service
etag String: (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
metastoreId String: (string) - Metastore hosting the provider service
name String: (string) - Resource name of the bound Unity Catalog service credential, in the form credentials/{name}. Supply this field when creating the service or rebinding its credential. On read, it reflects the credential's current name
updateTime String: (string) - Time the provider service was last modified
updatedBy String: (string) - Identity of the last updater
providerConfig GetAiGatewayModelProviderServiceProviderConfig

comment string: (string) - User-provided description
config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
createTime string: (string) - Time the provider service was created
createdBy string: (string) - Creator identity
effectiveOwner string: (string) - Owner of the model provider service
etag string: (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
metastoreId string: (string) - Metastore hosting the provider service
name string: (string) - Resource name of the bound Unity Catalog service credential, in the form credentials/{name}. Supply this field when creating the service or rebinding its credential. On read, it reflects the credential's current name
updateTime string: (string) - Time the provider service was last modified
updatedBy string: (string) - Identity of the last updater
providerConfig GetAiGatewayModelProviderServiceProviderConfig

comment str: (string) - User-provided description
config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
create_time str: (string) - Time the provider service was created
created_by str: (string) - Creator identity
effective_owner str: (string) - Owner of the model provider service
etag str: (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
metastore_id str: (string) - Metastore hosting the provider service
name str: (string) - Resource name of the bound Unity Catalog service credential, in the form credentials/{name}. Supply this field when creating the service or rebinding its credential. On read, it reflects the credential's current name
update_time str: (string) - Time the provider service was last modified
updated_by str: (string) - Identity of the last updater
provider_config GetAiGatewayModelProviderServiceProviderConfig

comment String: (string) - User-provided description
config Property Map: (ModelProviderServiceConfig) - Provider authentication, exposed models, request-forwarding controls, rate limits, and payload logging. Required on Create. On Update, it is required only when config or one of its subpaths appears in updateMask
createTime String: (string) - Time the provider service was created
createdBy String: (string) - Creator identity
effectiveOwner String: (string) - Owner of the model provider service
etag String: (string) - Optimistic concurrency token returned on every read. To make an Update or Delete conditional, pass the last-read value in that request's etag field. In REST responses, this value is a base64 string; URL-encode it when setting the etag query parameter
metastoreId String: (string) - Metastore hosting the provider service
name String: (string) - Resource name of the bound Unity Catalog service credential, in the form credentials/{name}. Supply this field when creating the service or rebinding its credential. On read, it reflects the credential's current name
updateTime String: (string) - Time the provider service was last modified
updatedBy String: (string) - Identity of the last updater
providerConfig Property Map

Supporting Types

GetAiGatewayModelProviderServiceConfig

AllowAllTargets bool: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
AmazonBedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
Anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
AzureOpenai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
Custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
ForwardHeaders bool: (boolean) - Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
ForwardQueryParameters bool: (boolean) - Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
ForwardUnmanagedPaths bool: (boolean) - Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
GeminiEnterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
InferenceTable GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
MicrosoftFoundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
Openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
ProviderType string: (string) - External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
RateLimits List<GetAiGatewayModelProviderServiceConfigRateLimit>: (list of RateLimit) - Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
Targets List<GetAiGatewayModelProviderServiceConfigTarget>: (list of ModelProviderServiceConfigModelTargetConfig) - Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models

AllowAllTargets bool: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
AmazonBedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
Anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
AzureOpenai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
Custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
ForwardHeaders bool: (boolean) - Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
ForwardQueryParameters bool: (boolean) - Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
ForwardUnmanagedPaths bool: (boolean) - Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
GeminiEnterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
InferenceTable GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
MicrosoftFoundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
Openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
ProviderType string: (string) - External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
RateLimits []GetAiGatewayModelProviderServiceConfigRateLimit: (list of RateLimit) - Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
Targets []GetAiGatewayModelProviderServiceConfigTarget: (list of ModelProviderServiceConfigModelTargetConfig) - Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models

allow_all_targets bool: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
amazon_bedrock object: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic object: (ModelProviderServiceConfigAnthropicProviderConfig)
azure_openai object: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom object: (ModelProviderServiceConfigCustomProviderConfig)
forward_headers bool: (boolean) - Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
forward_query_parameters bool: (boolean) - Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
forward_unmanaged_paths bool: (boolean) - Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
gemini_enterprise object: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inference_table object: (InferenceTableConfig) - Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
microsoft_foundry object: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai object: (ModelProviderServiceConfigOpenAiProviderConfig)
provider_type string: (string) - External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
rate_limits list(object): (list of RateLimit) - Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
targets list(object): (list of ModelProviderServiceConfigModelTargetConfig) - Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models

allowAllTargets Boolean: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
amazonBedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
azureOpenai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
forwardHeaders Boolean: (boolean) - Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
forwardQueryParameters Boolean: (boolean) - Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
forwardUnmanagedPaths Boolean: (boolean) - Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
geminiEnterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inferenceTable GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
microsoftFoundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
providerType String: (string) - External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
rateLimits List<GetAiGatewayModelProviderServiceConfigRateLimit>: (list of RateLimit) - Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
targets List<GetAiGatewayModelProviderServiceConfigTarget>: (list of ModelProviderServiceConfigModelTargetConfig) - Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models

allowAllTargets boolean: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
amazonBedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
azureOpenai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
forwardHeaders boolean: (boolean) - Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
forwardQueryParameters boolean: (boolean) - Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
forwardUnmanagedPaths boolean: (boolean) - Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
geminiEnterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inferenceTable GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
microsoftFoundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
providerType string: (string) - External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
rateLimits GetAiGatewayModelProviderServiceConfigRateLimit[]: (list of RateLimit) - Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
targets GetAiGatewayModelProviderServiceConfigTarget[]: (list of ModelProviderServiceConfigModelTargetConfig) - Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models

allow_all_targets bool: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
amazon_bedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
azure_openai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
forward_headers bool: (boolean) - Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
forward_query_parameters bool: (boolean) - Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
forward_unmanaged_paths bool: (boolean) - Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
gemini_enterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inference_table GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
microsoft_foundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
provider_type str: (string) - External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
rate_limits Sequence[GetAiGatewayModelProviderServiceConfigRateLimit]: (list of RateLimit) - Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
targets Sequence[GetAiGatewayModelProviderServiceConfigTarget]: (list of ModelProviderServiceConfigModelTargetConfig) - Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models

allowAllTargets Boolean: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable. Defaults to false
amazonBedrock Property Map: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic Property Map: (ModelProviderServiceConfigAnthropicProviderConfig)
azureOpenai Property Map: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom Property Map: (ModelProviderServiceConfigCustomProviderConfig)
forwardHeaders Boolean: (boolean) - Whether to forward incoming HTTP headers to the upstream provider. Defaults to false and is configured for the entire provider service, not per request. Upstream authentication is configured separately in the provider-specific configuration
forwardQueryParameters Boolean: (boolean) - Whether to forward incoming query parameters to the upstream provider. Defaults to false and is configured for the entire provider service, not per request
forwardUnmanagedPaths Boolean: (boolean) - Whether to proxy paths that AI Gateway does not recognize as configured provider-native API types. Defaults to false. When true, these paths are forwarded unchanged to the upstream provider. When false, only recognized API paths are served. Enabling this broadens the upstream API surface exposed through the provider service
geminiEnterprise Property Map: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inferenceTable Property Map: (InferenceTableConfig) - Payload logging configuration for requests sent directly to this provider service. Requests routed through a model service are captured by that model service's inference table instead
microsoftFoundry Property Map: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai Property Map: (ModelProviderServiceConfigOpenAiProviderConfig)
providerType String: (string) - External model provider. Required on Create and immutable thereafter. Set the matching provider-specific configuration, such as openai, azureOpenai, or amazonBedrock. Possible values are: EXTERNAL_MODEL_PROVIDER_TYPE_AMAZON_BEDROCK, EXTERNAL_MODEL_PROVIDER_TYPE_ANTHROPIC, EXTERNAL_MODEL_PROVIDER_TYPE_AZURE_OPENAI, EXTERNAL_MODEL_PROVIDER_TYPE_CUSTOM, EXTERNAL_MODEL_PROVIDER_TYPE_GEMINI_ENTERPRISE, EXTERNAL_MODEL_PROVIDER_TYPE_MICROSOFT_FOUNDRY, EXTERNAL_MODEL_PROVIDER_TYPE_OPENAI
rateLimits List<Property Map>: (list of RateLimit) - Rate limits for requests sent directly to this provider service. Requests routed through a model service use that model service's rate limits instead
targets List<Property Map>: (list of ModelProviderServiceConfigModelTargetConfig) - Models and provider-native API types exposed by this provider service. Each entry must include at least one nativeApiTypes value. When allowAllTargets is false, at least one entry is required and model service destinations can reference only listed models. When allowAllTargets is true, any upstream model is routable; entries in this list provide API-type metadata without restricting other models

GetAiGatewayModelProviderServiceConfigAmazonBedrock

Direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

Direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect

AwsAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
Region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
ServiceCredential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

AwsAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
Region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
ServiceCredential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

aws_access_key object: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
service_credential object: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

awsAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
region String: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

awsAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

aws_access_key GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
region str: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
service_credential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

awsAccessKey Property Map: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair authentication. Set accessKeyId and secret_access_key.plaintext. Mutually exclusive with serviceCredential
region String: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential Property Map: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey

AccessKeyId string: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
SecretAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext

AccessKeyId string: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
SecretAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext

access_key_id string: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secret_access_key object: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext

accessKeyId String: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secretAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext

accessKeyId string: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secretAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext

access_key_id str: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secret_access_key GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext

accessKeyId String: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secretAccessKey Property Map: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required when creating a service with access-key authentication. Supply the value in secret_access_key.plaintext

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigAnthropic

Direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
Relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct

Direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
Relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
relayed object: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct

direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct

direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct

direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request
relayed Property Map: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed authentication. Each inference request supplies the caller's OAuth token, which is forwarded to Anthropic. No Anthropic credential is stored. Mutually exclusive with direct

GetAiGatewayModelProviderServiceConfigAnthropicDirect

ApiKey GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext

ApiKey GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext

apiKey GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext

apiKey GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext

api_key GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext

GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigAzureOpenai

Direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

Direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect

ApiKey GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
EntraServicePrincipal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
ServiceCredential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

ApiKey GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
EntraServicePrincipal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
ServiceCredential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
base_url string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entra_service_principal object: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
service_credential object: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
serviceCredential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
serviceCredential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

api_key GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
base_url str: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entra_service_principal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
service_credential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal Property Map: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
serviceCredential Property Map: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal

ClientId string: (string) - Entra ID client (application) ID. Required on Create
ClientSecret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
TenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

ClientId string: (string) - Entra ID client (application) ID. Required on Create
ClientSecret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
TenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

client_id string: (string) - Entra ID client (application) ID. Required on Create
client_secret object: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenant_id string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId String: (string) - Entra ID client (application) ID. Required on Create
clientSecret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenantId String: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId string: (string) - Entra ID client (application) ID. Required on Create
clientSecret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

client_id str: (string) - Entra ID client (application) ID. Required on Create
client_secret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenant_id str: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId String: (string) - Entra ID client (application) ID. Required on Create
clientSecret Property Map: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenantId String: (string) - Entra ID (Azure AD) tenant ID. Required on Create

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigCustom

Direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

Direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

GetAiGatewayModelProviderServiceConfigCustomDirect

ApiKey GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
HeaderAuth GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth: (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth

ApiKey GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
HeaderAuth GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth: (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
base_url string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
header_auth object: (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth

apiKey GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
headerAuth GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth: (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth

apiKey GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
headerAuth GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth: (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth

api_key GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
base_url str: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
header_auth GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth: (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
headerAuth Property Map: (ModelProviderServiceConfigCustomProviderApiKeyHeaderAuth) - Header-based API-key auth: the secret is forwarded on outbound requests under a caller-chosen HTTP header rather than as an Authorization bearer token. Set this instead of apiKey for header auth

GetAiGatewayModelProviderServiceConfigCustomDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth

ApiKeyName string: (string) - HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
ApiKeyValue GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue: (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext

ApiKeyName string: (string) - HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
ApiKeyValue GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue: (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext

api_key_name string: (string) - HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
api_key_value object: (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext

apiKeyName String: (string) - HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
apiKeyValue GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue: (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext

apiKeyName string: (string) - HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
apiKeyValue GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue: (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext

api_key_name str: (string) - HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
api_key_value GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue: (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext

apiKeyName String: (string) - HTTP header name that carries the API key on outbound requests (e.g., Ocp-Apim-Subscription-Key). The value forwarded under this header is supplied via apiKeyValue
apiKeyValue Property Map: (ModelProviderServiceConfigProviderSecret) - Secret value forwarded under the apiKeyName header on outbound requests. Supplied as inline plaintext via ProviderSecret.plaintext

GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigGeminiEnterprise

Direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

Direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect

ApiKey GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
ProjectId string: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
Region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
ServiceCredential GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

ApiKey GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
ProjectId string: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
Region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
ServiceCredential GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
project_id string: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
service_credential object: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
projectId String: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region String: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
projectId string: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

api_key GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
project_id str: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region str: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
service_credential GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
projectId String: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region String: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential Property Map: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredential

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigInferenceTable

IsDeleted bool: (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
Parent string: (string) - Parent Unity Catalog schema where the inference table is created, in the form schemas/{catalog}.{schema}. Required when configuring an inference table. After the inference table is created, this field cannot be changed
Table string: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
TableNamePrefix string: (string) - Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed

IsDeleted bool: (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
Parent string: (string) - Parent Unity Catalog schema where the inference table is created, in the form schemas/{catalog}.{schema}. Required when configuring an inference table. After the inference table is created, this field cannot be changed
Table string: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
TableNamePrefix string: (string) - Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed

is_deleted bool: (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
parent string: (string) - Parent Unity Catalog schema where the inference table is created, in the form schemas/{catalog}.{schema}. Required when configuring an inference table. After the inference table is created, this field cannot be changed
table string: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
table_name_prefix string: (string) - Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed

isDeleted Boolean: (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
parent String: (string) - Parent Unity Catalog schema where the inference table is created, in the form schemas/{catalog}.{schema}. Required when configuring an inference table. After the inference table is created, this field cannot be changed
table String: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
tableNamePrefix String: (string) - Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed

isDeleted boolean: (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
parent string: (string) - Parent Unity Catalog schema where the inference table is created, in the form schemas/{catalog}.{schema}. Required when configuring an inference table. After the inference table is created, this field cannot be changed
table string: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
tableNamePrefix string: (string) - Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed

is_deleted bool: (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
parent str: (string) - Parent Unity Catalog schema where the inference table is created, in the form schemas/{catalog}.{schema}. Required when configuring an inference table. After the inference table is created, this field cannot be changed
table str: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
table_name_prefix str: (string) - Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed

isDeleted Boolean: (boolean) - Whether the referenced inference table has been deleted. The configuration remains visible so you can identify the broken dependency. Payload logging cannot continue until the table is restored or the configuration is updated
parent String: (string) - Parent Unity Catalog schema where the inference table is created, in the form schemas/{catalog}.{schema}. Required when configuring an inference table. After the inference table is created, this field cannot be changed
table String: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
tableNamePrefix String: (string) - Prefix used to form the inference table's registered name. AI Gateway appends _payload; for example, tableNamePrefix = "orders" creates ordersPayload. If unset, the prefix defaults to the service name. Read table from the response for the resulting resource name. After the inference table is created, this field cannot be changed

GetAiGatewayModelProviderServiceConfigMicrosoftFoundry

Direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

Direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect

ApiKey GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
EntraServicePrincipal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
ServiceCredential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

ApiKey GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
EntraServicePrincipal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
ServiceCredential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
base_url string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entra_service_principal object: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
service_credential object: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
serviceCredential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
serviceCredential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

api_key GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
base_url str: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entra_service_principal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
service_credential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal Property Map: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID service-principal authentication. Set tenantId, clientId, and client_secret.plaintext. Mutually exclusive with apiKey and serviceCredential
serviceCredential Property Map: (ModelProviderServiceConfigServiceCredential) - Reference to a Unity Catalog service credential authorizing Microsoft Foundry requests. On Create, supply service_credential.name in the form credentials/{name}. Required on Create when using service-credential authentication; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. Only supported on Azure-hosted workspaces

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal

ClientId string: (string) - Entra ID client (application) ID. Required on Create
ClientSecret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
TenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

ClientId string: (string) - Entra ID client (application) ID. Required on Create
ClientSecret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
TenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

client_id string: (string) - Entra ID client (application) ID. Required on Create
client_secret object: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenant_id string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId String: (string) - Entra ID client (application) ID. Required on Create
clientSecret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenantId String: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId string: (string) - Entra ID client (application) ID. Required on Create
clientSecret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

client_id str: (string) - Entra ID client (application) ID. Required on Create
client_secret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenant_id str: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId String: (string) - Entra ID client (application) ID. Required on Create
clientSecret Property Map: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supply the value in client_secret.plaintext
tenantId String: (string) - Entra ID (Azure AD) tenant ID. Required on Create

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigOpenai

Direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

Direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig) - OpenAI configuration with an API key supplied in the request

GetAiGatewayModelProviderServiceConfigOpenaiDirect

ApiKey GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
Organization string: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

ApiKey GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
Organization string: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
base_url string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization string: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

apiKey GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization String: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

apiKey GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization string: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

api_key GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
base_url str: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization str: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required when creating the service. Supply the value in api_key.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization String: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
SecretReference GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference object: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secret_reference GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the enclosing secret object remains present to indicate that a secret is configured
secretReference Property Map: (ModelProviderServiceConfigSecretReference) - Reference to a customer-owned UC Secret that carries this secret value. The value is read at invoke time under the model provider service owner's access and is never copied onto the model provider service, so rotating the UC Secret takes effect with no change to the model provider service. On Create, supply secret_reference.name as secrets/{catalog}.{schema}.{secret}

GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigRateLimit

Key string: (string) - Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
RenewalPeriod string: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
Principal string: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
Requests int: (integer) - Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
Tokens int: (integer) - Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests

Key string: (string) - Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
RenewalPeriod string: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
Principal string: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
Requests int: (integer) - Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
Tokens int: (integer) - Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests

key string: (string) - Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewal_period string: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal string: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
requests number: (integer) - Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
tokens number: (integer) - Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests

key String: (string) - Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewalPeriod String: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal String: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
requests Integer: (integer) - Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
tokens Integer: (integer) - Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests

key string: (string) - Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewalPeriod string: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal string: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
requests number: (integer) - Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
tokens number: (integer) - Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests

key str: (string) - Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewal_period str: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal str: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
requests int: (integer) - Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
tokens int: (integer) - Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests

key String: (string) - Scope of the rate limit. Depending on this value, the limit applies to a principal, the service as a whole, or each user by default. Possible values are: RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewalPeriod String: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal String: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required when key applies to a user, group, or service principal; otherwise it must be unset
requests Number: (integer) - Maximum requests allowed in one renewal period. Leave unset for no request limit. Set to 0 to deny all requests
tokens Number: (integer) - Maximum tokens allowed in one renewal period. Leave unset for no token limit. Set to 0 to deny all requests

GetAiGatewayModelProviderServiceConfigTarget

Model string: (string) - Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
NativeApiTypes List<string>: (list of string) - Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed

Model string: (string) - Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
NativeApiTypes []string: (list of string) - Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed

model string: (string) - Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
native_api_types list(string): (list of string) - Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed

model String: (string) - Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
nativeApiTypes List<String>: (list of string) - Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed

model string: (string) - Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
nativeApiTypes string[]: (list of string) - Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed

model str: (string) - Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
native_api_types Sequence[str]: (list of string) - Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed

model String: (string) - Provider-side model identifier, such as gpt-5 or claude-opus-4-7. This identifies a model at the upstream provider; it is not a Unity Catalog model resource
nativeApiTypes List<String>: (list of string) - Provider-native API types supported by this model, such as openai/v1/chat/completions. At least one value is required. AI Gateway uses these values to translate requests and responses. At most 64 entries of 256 characters each are allowed

GetAiGatewayModelProviderServiceProviderConfig

WorkspaceId string: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

WorkspaceId string: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspace_id string: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspaceId String: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspaceId string: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspace_id str: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspaceId String: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

Package Details

Repository: databricks pulumi/pulumi-databricks
License: Apache-2.0
Notes: This Pulumi package is based on the databricks Terraform Provider.

Viewing docs for Databricks v1.116.0
published on Tuesday, Oct 20, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

databricks.getAiGatewayModelProviderService

On this page

On this page

Example Usage

Using getAiGatewayModelProviderService

getAiGatewayModelProviderService Result

Supporting Types

GetAiGatewayModelProviderServiceConfig

GetAiGatewayModelProviderServiceConfigAmazonBedrock

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKeySecretReference

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential

GetAiGatewayModelProviderServiceConfigAnthropic

GetAiGatewayModelProviderServiceConfigAnthropicDirect

GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey

GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKeySecretReference

GetAiGatewayModelProviderServiceConfigAzureOpenai

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKeySecretReference

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecretSecretReference

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential

GetAiGatewayModelProviderServiceConfigCustom

GetAiGatewayModelProviderServiceConfigCustomDirect

GetAiGatewayModelProviderServiceConfigCustomDirectApiKey

GetAiGatewayModelProviderServiceConfigCustomDirectApiKeySecretReference

GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuth

GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValue

GetAiGatewayModelProviderServiceConfigCustomDirectHeaderAuthApiKeyValueSecretReference

GetAiGatewayModelProviderServiceConfigGeminiEnterprise

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKeySecretReference

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectServiceCredential

GetAiGatewayModelProviderServiceConfigInferenceTable

GetAiGatewayModelProviderServiceConfigMicrosoftFoundry

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKeySecretReference

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecretSecretReference

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential

GetAiGatewayModelProviderServiceConfigOpenai

GetAiGatewayModelProviderServiceConfigOpenaiDirect

GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey

GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKeySecretReference

GetAiGatewayModelProviderServiceConfigRateLimit

GetAiGatewayModelProviderServiceConfigTarget

GetAiGatewayModelProviderServiceProviderConfig

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.