databricks.getAiGatewayModelProviderService

Databricks v1.103.0, Aug 11 26

Viewing docs for Databricks v1.103.0
published on Tuesday, Aug 11, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

Viewing docs for Databricks v1.103.0
published on Tuesday, Aug 11, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

Using getAiGatewayModelProviderService

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getAiGatewayModelProviderService(args: GetAiGatewayModelProviderServiceArgs, opts?: InvokeOptions): Promise<GetAiGatewayModelProviderServiceResult>
function getAiGatewayModelProviderServiceOutput(args: GetAiGatewayModelProviderServiceOutputArgs, opts?: InvokeOptions): Output<GetAiGatewayModelProviderServiceResult>

def get_ai_gateway_model_provider_service(name: Optional[str] = None,
                                          provider_config: Optional[GetAiGatewayModelProviderServiceProviderConfig] = None,
                                          opts: Optional[InvokeOptions] = None) -> GetAiGatewayModelProviderServiceResult
def get_ai_gateway_model_provider_service_output(name: pulumi.Input[Optional[str]] = None,
                                          provider_config: pulumi.Input[Optional[GetAiGatewayModelProviderServiceProviderConfigArgs]] = None,
                                          opts: Optional[InvokeOptions] = None) -> Output[GetAiGatewayModelProviderServiceResult]

func LookupAiGatewayModelProviderService(ctx *Context, args *LookupAiGatewayModelProviderServiceArgs, opts ...InvokeOption) (*LookupAiGatewayModelProviderServiceResult, error)
func LookupAiGatewayModelProviderServiceOutput(ctx *Context, args *LookupAiGatewayModelProviderServiceOutputArgs, opts ...InvokeOption) LookupAiGatewayModelProviderServiceResultOutput

> Note: This function is named LookupAiGatewayModelProviderService in the Go SDK.

public static class GetAiGatewayModelProviderService 
{
    public static Task<GetAiGatewayModelProviderServiceResult> InvokeAsync(GetAiGatewayModelProviderServiceArgs args, InvokeOptions? opts = null)
    public static Output<GetAiGatewayModelProviderServiceResult> Invoke(GetAiGatewayModelProviderServiceInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetAiGatewayModelProviderServiceResult> getAiGatewayModelProviderService(GetAiGatewayModelProviderServiceArgs args, InvokeOptions options)
public static Output<GetAiGatewayModelProviderServiceResult> getAiGatewayModelProviderService(GetAiGatewayModelProviderServiceArgs args, InvokeOptions options)

fn::invoke:
  function: databricks:index/getAiGatewayModelProviderService:getAiGatewayModelProviderService
  arguments:
    # arguments dictionary

data "databricks_get_ai_gateway_model_provider_service" "name" {
    # arguments
}

The following arguments are supported:

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
ProviderConfig GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
ProviderConfig GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
provider_config object: Configure the provider for management through account provider.

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
providerConfig GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
providerConfig GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
provider_config GetAiGatewayModelProviderServiceProviderConfig: Configure the provider for management through account provider.

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete
providerConfig Property Map: Configure the provider for management through account provider.

getAiGatewayModelProviderService Result

The following output properties are available:

BrowseOnly bool: (boolean) - Whether the caller sees only metadata available through the BROWSE privilege
Comment string: (string) - User-provided description
Config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Behavioral configuration: provider connection, model catalog, and passthrough policy. See ModelProviderServiceConfig for the per-field contract. Required on CreateModelProviderService; on Update it is required only when config (or a config.* subpath) appears in updateMask
CreateTime string: (string) - When the provider service was created
CreatedBy string: (string) - Creator identity
EffectiveOwner string: (string) - The resolved owner of the model provider service. Falls back to the caller's identity when owner is not explicitly set on creation
Etag string: (string) - Optimistic concurrency control token. Server-generated from the entity's state and returned on every read. To use it as an if-match precondition on a mutation, echo the last-read value back via the dedicated etag field on the Update / Delete request; the server rejects the mutation if the stored etag differs
MetastoreId string: (string) - Metastore hosting the provider service
Name string: (string) - Resource name of the bound UC service credential, in the AIP-122 form credentials/{name} (a metastore-level single-part credential name). On create the caller supplies the name here. On read it reflects the credential's current name at read time
Owner string: (string) - The owner of the model provider service. Write-only; read owner via effective_owner
UpdateTime string: (string) - When the provider service was last modified
UpdatedBy string: (string) - Identity of the last updater
ProviderConfig GetAiGatewayModelProviderServiceProviderConfig

BrowseOnly bool: (boolean) - Whether the caller sees only metadata available through the BROWSE privilege
Comment string: (string) - User-provided description
Config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Behavioral configuration: provider connection, model catalog, and passthrough policy. See ModelProviderServiceConfig for the per-field contract. Required on CreateModelProviderService; on Update it is required only when config (or a config.* subpath) appears in updateMask
CreateTime string: (string) - When the provider service was created
CreatedBy string: (string) - Creator identity
EffectiveOwner string: (string) - The resolved owner of the model provider service. Falls back to the caller's identity when owner is not explicitly set on creation
Etag string: (string) - Optimistic concurrency control token. Server-generated from the entity's state and returned on every read. To use it as an if-match precondition on a mutation, echo the last-read value back via the dedicated etag field on the Update / Delete request; the server rejects the mutation if the stored etag differs
MetastoreId string: (string) - Metastore hosting the provider service
Name string: (string) - Resource name of the bound UC service credential, in the AIP-122 form credentials/{name} (a metastore-level single-part credential name). On create the caller supplies the name here. On read it reflects the credential's current name at read time
Owner string: (string) - The owner of the model provider service. Write-only; read owner via effective_owner
UpdateTime string: (string) - When the provider service was last modified
UpdatedBy string: (string) - Identity of the last updater
ProviderConfig GetAiGatewayModelProviderServiceProviderConfig

browse_only bool: (boolean) - Whether the caller sees only metadata available through the BROWSE privilege
comment string: (string) - User-provided description
config object: (ModelProviderServiceConfig) - Behavioral configuration: provider connection, model catalog, and passthrough policy. See ModelProviderServiceConfig for the per-field contract. Required on CreateModelProviderService; on Update it is required only when config (or a config.* subpath) appears in updateMask
create_time string: (string) - When the provider service was created
created_by string: (string) - Creator identity
effective_owner string: (string) - The resolved owner of the model provider service. Falls back to the caller's identity when owner is not explicitly set on creation
etag string: (string) - Optimistic concurrency control token. Server-generated from the entity's state and returned on every read. To use it as an if-match precondition on a mutation, echo the last-read value back via the dedicated etag field on the Update / Delete request; the server rejects the mutation if the stored etag differs
metastore_id string: (string) - Metastore hosting the provider service
name string: (string) - Resource name of the bound UC service credential, in the AIP-122 form credentials/{name} (a metastore-level single-part credential name). On create the caller supplies the name here. On read it reflects the credential's current name at read time
owner string: (string) - The owner of the model provider service. Write-only; read owner via effective_owner
update_time string: (string) - When the provider service was last modified
updated_by string: (string) - Identity of the last updater
provider_config object

browseOnly Boolean: (boolean) - Whether the caller sees only metadata available through the BROWSE privilege
comment String: (string) - User-provided description
config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Behavioral configuration: provider connection, model catalog, and passthrough policy. See ModelProviderServiceConfig for the per-field contract. Required on CreateModelProviderService; on Update it is required only when config (or a config.* subpath) appears in updateMask
createTime String: (string) - When the provider service was created
createdBy String: (string) - Creator identity
effectiveOwner String: (string) - The resolved owner of the model provider service. Falls back to the caller's identity when owner is not explicitly set on creation
etag String: (string) - Optimistic concurrency control token. Server-generated from the entity's state and returned on every read. To use it as an if-match precondition on a mutation, echo the last-read value back via the dedicated etag field on the Update / Delete request; the server rejects the mutation if the stored etag differs
metastoreId String: (string) - Metastore hosting the provider service
name String: (string) - Resource name of the bound UC service credential, in the AIP-122 form credentials/{name} (a metastore-level single-part credential name). On create the caller supplies the name here. On read it reflects the credential's current name at read time
owner String: (string) - The owner of the model provider service. Write-only; read owner via effective_owner
updateTime String: (string) - When the provider service was last modified
updatedBy String: (string) - Identity of the last updater
providerConfig GetAiGatewayModelProviderServiceProviderConfig

browseOnly boolean: (boolean) - Whether the caller sees only metadata available through the BROWSE privilege
comment string: (string) - User-provided description
config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Behavioral configuration: provider connection, model catalog, and passthrough policy. See ModelProviderServiceConfig for the per-field contract. Required on CreateModelProviderService; on Update it is required only when config (or a config.* subpath) appears in updateMask
createTime string: (string) - When the provider service was created
createdBy string: (string) - Creator identity
effectiveOwner string: (string) - The resolved owner of the model provider service. Falls back to the caller's identity when owner is not explicitly set on creation
etag string: (string) - Optimistic concurrency control token. Server-generated from the entity's state and returned on every read. To use it as an if-match precondition on a mutation, echo the last-read value back via the dedicated etag field on the Update / Delete request; the server rejects the mutation if the stored etag differs
metastoreId string: (string) - Metastore hosting the provider service
name string: (string) - Resource name of the bound UC service credential, in the AIP-122 form credentials/{name} (a metastore-level single-part credential name). On create the caller supplies the name here. On read it reflects the credential's current name at read time
owner string: (string) - The owner of the model provider service. Write-only; read owner via effective_owner
updateTime string: (string) - When the provider service was last modified
updatedBy string: (string) - Identity of the last updater
providerConfig GetAiGatewayModelProviderServiceProviderConfig

browse_only bool: (boolean) - Whether the caller sees only metadata available through the BROWSE privilege
comment str: (string) - User-provided description
config GetAiGatewayModelProviderServiceConfig: (ModelProviderServiceConfig) - Behavioral configuration: provider connection, model catalog, and passthrough policy. See ModelProviderServiceConfig for the per-field contract. Required on CreateModelProviderService; on Update it is required only when config (or a config.* subpath) appears in updateMask
create_time str: (string) - When the provider service was created
created_by str: (string) - Creator identity
effective_owner str: (string) - The resolved owner of the model provider service. Falls back to the caller's identity when owner is not explicitly set on creation
etag str: (string) - Optimistic concurrency control token. Server-generated from the entity's state and returned on every read. To use it as an if-match precondition on a mutation, echo the last-read value back via the dedicated etag field on the Update / Delete request; the server rejects the mutation if the stored etag differs
metastore_id str: (string) - Metastore hosting the provider service
name str: (string) - Resource name of the bound UC service credential, in the AIP-122 form credentials/{name} (a metastore-level single-part credential name). On create the caller supplies the name here. On read it reflects the credential's current name at read time
owner str: (string) - The owner of the model provider service. Write-only; read owner via effective_owner
update_time str: (string) - When the provider service was last modified
updated_by str: (string) - Identity of the last updater
provider_config GetAiGatewayModelProviderServiceProviderConfig

browseOnly Boolean: (boolean) - Whether the caller sees only metadata available through the BROWSE privilege
comment String: (string) - User-provided description
config Property Map: (ModelProviderServiceConfig) - Behavioral configuration: provider connection, model catalog, and passthrough policy. See ModelProviderServiceConfig for the per-field contract. Required on CreateModelProviderService; on Update it is required only when config (or a config.* subpath) appears in updateMask
createTime String: (string) - When the provider service was created
createdBy String: (string) - Creator identity
effectiveOwner String: (string) - The resolved owner of the model provider service. Falls back to the caller's identity when owner is not explicitly set on creation
etag String: (string) - Optimistic concurrency control token. Server-generated from the entity's state and returned on every read. To use it as an if-match precondition on a mutation, echo the last-read value back via the dedicated etag field on the Update / Delete request; the server rejects the mutation if the stored etag differs
metastoreId String: (string) - Metastore hosting the provider service
name String: (string) - Resource name of the bound UC service credential, in the AIP-122 form credentials/{name} (a metastore-level single-part credential name). On create the caller supplies the name here. On read it reflects the credential's current name at read time
owner String: (string) - The owner of the model provider service. Write-only; read owner via effective_owner
updateTime String: (string) - When the provider service was last modified
updatedBy String: (string) - Identity of the last updater
providerConfig Property Map

Supporting Types

GetAiGatewayModelProviderServiceConfig

AllowAllTargets bool: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable
AmazonBedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
Anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
AzureOpenai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
Custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
ForwardHeaders bool: (boolean) - Whether to forward incoming request headers to the upstream provider. Applies to managed (multi-model) requests as well as passthrough requests served by this provider service. Governance-level decision by the provider service owner; not selectable per inference call
ForwardQueryParameters bool: (boolean) - Whether to forward incoming request query parameters to the upstream provider. Same trust-boundary semantics as forwardHeaders
ForwardUnmanagedPaths bool: (boolean) - Whether to forward request paths that fall outside this service's managed API set to the upstream provider as opaque passthrough. When true, requests addressed to subpaths not recognized by the managed API surface are proxied to the upstream provider over the same provider connection. When false, only managed-API paths are served. Governance-level decision by the provider service owner; expanding this expands the trust boundary that the ModelProviderService exposes
GeminiEnterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
InferenceTable GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Inference table configuration for payload logging when this provider service is invoked directly. When it is invoked through a model service, the model service's own inference table captures the invocation instead. Mirrors ModelServiceConfig.inference_table / AgentServiceConfig.inference_table
MicrosoftFoundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
Openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
ProviderType string: (string) - Provider type discriminator. Required at create time; immutable after. Determines which variant of the provider oneof must be set. May not be changed via Update; attempts to include config.provider_type in UpdateModelProviderServiceRequest.update_mask are rejected.
RateLimits List<GetAiGatewayModelProviderServiceConfigRateLimit>: (list of RateLimit) - Rate limits applied when this provider service is invoked directly. When it is invoked through a model service, the model service's own rateLimits apply instead. Mirrors ModelServiceConfig.rate_limits / McpServiceConfig.rate_limits
Targets List<GetAiGatewayModelProviderServiceConfigTarget>: (list of ModelProviderServiceConfigModelTargetConfig) - Routing targets this provider service exposes (provider-side model identifier + unified API types per entry). Required (>=1) when allowAllTargets = false; optional and additive when allowAllTargets = true. References from ExternalModelConfig.target must match an entry here unless allowAllTargets = true

AllowAllTargets bool: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable
AmazonBedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
Anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
AzureOpenai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
Custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
ForwardHeaders bool: (boolean) - Whether to forward incoming request headers to the upstream provider. Applies to managed (multi-model) requests as well as passthrough requests served by this provider service. Governance-level decision by the provider service owner; not selectable per inference call
ForwardQueryParameters bool: (boolean) - Whether to forward incoming request query parameters to the upstream provider. Same trust-boundary semantics as forwardHeaders
ForwardUnmanagedPaths bool: (boolean) - Whether to forward request paths that fall outside this service's managed API set to the upstream provider as opaque passthrough. When true, requests addressed to subpaths not recognized by the managed API surface are proxied to the upstream provider over the same provider connection. When false, only managed-API paths are served. Governance-level decision by the provider service owner; expanding this expands the trust boundary that the ModelProviderService exposes
GeminiEnterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
InferenceTable GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Inference table configuration for payload logging when this provider service is invoked directly. When it is invoked through a model service, the model service's own inference table captures the invocation instead. Mirrors ModelServiceConfig.inference_table / AgentServiceConfig.inference_table
MicrosoftFoundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
Openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
ProviderType string: (string) - Provider type discriminator. Required at create time; immutable after. Determines which variant of the provider oneof must be set. May not be changed via Update; attempts to include config.provider_type in UpdateModelProviderServiceRequest.update_mask are rejected.
RateLimits []GetAiGatewayModelProviderServiceConfigRateLimit: (list of RateLimit) - Rate limits applied when this provider service is invoked directly. When it is invoked through a model service, the model service's own rateLimits apply instead. Mirrors ModelServiceConfig.rate_limits / McpServiceConfig.rate_limits
Targets []GetAiGatewayModelProviderServiceConfigTarget: (list of ModelProviderServiceConfigModelTargetConfig) - Routing targets this provider service exposes (provider-side model identifier + unified API types per entry). Required (>=1) when allowAllTargets = false; optional and additive when allowAllTargets = true. References from ExternalModelConfig.target must match an entry here unless allowAllTargets = true

allow_all_targets bool: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable
amazon_bedrock object: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic object: (ModelProviderServiceConfigAnthropicProviderConfig)
azure_openai object: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom object: (ModelProviderServiceConfigCustomProviderConfig)
forward_headers bool: (boolean) - Whether to forward incoming request headers to the upstream provider. Applies to managed (multi-model) requests as well as passthrough requests served by this provider service. Governance-level decision by the provider service owner; not selectable per inference call
forward_query_parameters bool: (boolean) - Whether to forward incoming request query parameters to the upstream provider. Same trust-boundary semantics as forwardHeaders
forward_unmanaged_paths bool: (boolean) - Whether to forward request paths that fall outside this service's managed API set to the upstream provider as opaque passthrough. When true, requests addressed to subpaths not recognized by the managed API surface are proxied to the upstream provider over the same provider connection. When false, only managed-API paths are served. Governance-level decision by the provider service owner; expanding this expands the trust boundary that the ModelProviderService exposes
gemini_enterprise object: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inference_table object: (InferenceTableConfig) - Inference table configuration for payload logging when this provider service is invoked directly. When it is invoked through a model service, the model service's own inference table captures the invocation instead. Mirrors ModelServiceConfig.inference_table / AgentServiceConfig.inference_table
microsoft_foundry object: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai object: (ModelProviderServiceConfigOpenAiProviderConfig)
provider_type string: (string) - Provider type discriminator. Required at create time; immutable after. Determines which variant of the provider oneof must be set. May not be changed via Update; attempts to include config.provider_type in UpdateModelProviderServiceRequest.update_mask are rejected.
rate_limits list(object): (list of RateLimit) - Rate limits applied when this provider service is invoked directly. When it is invoked through a model service, the model service's own rateLimits apply instead. Mirrors ModelServiceConfig.rate_limits / McpServiceConfig.rate_limits
targets list(object): (list of ModelProviderServiceConfigModelTargetConfig) - Routing targets this provider service exposes (provider-side model identifier + unified API types per entry). Required (>=1) when allowAllTargets = false; optional and additive when allowAllTargets = true. References from ExternalModelConfig.target must match an entry here unless allowAllTargets = true

allowAllTargets Boolean: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable
amazonBedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
azureOpenai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
forwardHeaders Boolean: (boolean) - Whether to forward incoming request headers to the upstream provider. Applies to managed (multi-model) requests as well as passthrough requests served by this provider service. Governance-level decision by the provider service owner; not selectable per inference call
forwardQueryParameters Boolean: (boolean) - Whether to forward incoming request query parameters to the upstream provider. Same trust-boundary semantics as forwardHeaders
forwardUnmanagedPaths Boolean: (boolean) - Whether to forward request paths that fall outside this service's managed API set to the upstream provider as opaque passthrough. When true, requests addressed to subpaths not recognized by the managed API surface are proxied to the upstream provider over the same provider connection. When false, only managed-API paths are served. Governance-level decision by the provider service owner; expanding this expands the trust boundary that the ModelProviderService exposes
geminiEnterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inferenceTable GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Inference table configuration for payload logging when this provider service is invoked directly. When it is invoked through a model service, the model service's own inference table captures the invocation instead. Mirrors ModelServiceConfig.inference_table / AgentServiceConfig.inference_table
microsoftFoundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
providerType String: (string) - Provider type discriminator. Required at create time; immutable after. Determines which variant of the provider oneof must be set. May not be changed via Update; attempts to include config.provider_type in UpdateModelProviderServiceRequest.update_mask are rejected.
rateLimits List<GetAiGatewayModelProviderServiceConfigRateLimit>: (list of RateLimit) - Rate limits applied when this provider service is invoked directly. When it is invoked through a model service, the model service's own rateLimits apply instead. Mirrors ModelServiceConfig.rate_limits / McpServiceConfig.rate_limits
targets List<GetAiGatewayModelProviderServiceConfigTarget>: (list of ModelProviderServiceConfigModelTargetConfig) - Routing targets this provider service exposes (provider-side model identifier + unified API types per entry). Required (>=1) when allowAllTargets = false; optional and additive when allowAllTargets = true. References from ExternalModelConfig.target must match an entry here unless allowAllTargets = true

allowAllTargets boolean: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable
amazonBedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
azureOpenai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
forwardHeaders boolean: (boolean) - Whether to forward incoming request headers to the upstream provider. Applies to managed (multi-model) requests as well as passthrough requests served by this provider service. Governance-level decision by the provider service owner; not selectable per inference call
forwardQueryParameters boolean: (boolean) - Whether to forward incoming request query parameters to the upstream provider. Same trust-boundary semantics as forwardHeaders
forwardUnmanagedPaths boolean: (boolean) - Whether to forward request paths that fall outside this service's managed API set to the upstream provider as opaque passthrough. When true, requests addressed to subpaths not recognized by the managed API surface are proxied to the upstream provider over the same provider connection. When false, only managed-API paths are served. Governance-level decision by the provider service owner; expanding this expands the trust boundary that the ModelProviderService exposes
geminiEnterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inferenceTable GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Inference table configuration for payload logging when this provider service is invoked directly. When it is invoked through a model service, the model service's own inference table captures the invocation instead. Mirrors ModelServiceConfig.inference_table / AgentServiceConfig.inference_table
microsoftFoundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
providerType string: (string) - Provider type discriminator. Required at create time; immutable after. Determines which variant of the provider oneof must be set. May not be changed via Update; attempts to include config.provider_type in UpdateModelProviderServiceRequest.update_mask are rejected.
rateLimits GetAiGatewayModelProviderServiceConfigRateLimit[]: (list of RateLimit) - Rate limits applied when this provider service is invoked directly. When it is invoked through a model service, the model service's own rateLimits apply instead. Mirrors ModelServiceConfig.rate_limits / McpServiceConfig.rate_limits
targets GetAiGatewayModelProviderServiceConfigTarget[]: (list of ModelProviderServiceConfigModelTargetConfig) - Routing targets this provider service exposes (provider-side model identifier + unified API types per entry). Required (>=1) when allowAllTargets = false; optional and additive when allowAllTargets = true. References from ExternalModelConfig.target must match an entry here unless allowAllTargets = true

allow_all_targets bool: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable
amazon_bedrock GetAiGatewayModelProviderServiceConfigAmazonBedrock: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic GetAiGatewayModelProviderServiceConfigAnthropic: (ModelProviderServiceConfigAnthropicProviderConfig)
azure_openai GetAiGatewayModelProviderServiceConfigAzureOpenai: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom GetAiGatewayModelProviderServiceConfigCustom: (ModelProviderServiceConfigCustomProviderConfig)
forward_headers bool: (boolean) - Whether to forward incoming request headers to the upstream provider. Applies to managed (multi-model) requests as well as passthrough requests served by this provider service. Governance-level decision by the provider service owner; not selectable per inference call
forward_query_parameters bool: (boolean) - Whether to forward incoming request query parameters to the upstream provider. Same trust-boundary semantics as forwardHeaders
forward_unmanaged_paths bool: (boolean) - Whether to forward request paths that fall outside this service's managed API set to the upstream provider as opaque passthrough. When true, requests addressed to subpaths not recognized by the managed API surface are proxied to the upstream provider over the same provider connection. When false, only managed-API paths are served. Governance-level decision by the provider service owner; expanding this expands the trust boundary that the ModelProviderService exposes
gemini_enterprise GetAiGatewayModelProviderServiceConfigGeminiEnterprise: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inference_table GetAiGatewayModelProviderServiceConfigInferenceTable: (InferenceTableConfig) - Inference table configuration for payload logging when this provider service is invoked directly. When it is invoked through a model service, the model service's own inference table captures the invocation instead. Mirrors ModelServiceConfig.inference_table / AgentServiceConfig.inference_table
microsoft_foundry GetAiGatewayModelProviderServiceConfigMicrosoftFoundry: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai GetAiGatewayModelProviderServiceConfigOpenai: (ModelProviderServiceConfigOpenAiProviderConfig)
provider_type str: (string) - Provider type discriminator. Required at create time; immutable after. Determines which variant of the provider oneof must be set. May not be changed via Update; attempts to include config.provider_type in UpdateModelProviderServiceRequest.update_mask are rejected.
rate_limits Sequence[GetAiGatewayModelProviderServiceConfigRateLimit]: (list of RateLimit) - Rate limits applied when this provider service is invoked directly. When it is invoked through a model service, the model service's own rateLimits apply instead. Mirrors ModelServiceConfig.rate_limits / McpServiceConfig.rate_limits
targets Sequence[GetAiGatewayModelProviderServiceConfigTarget]: (list of ModelProviderServiceConfigModelTargetConfig) - Routing targets this provider service exposes (provider-side model identifier + unified API types per entry). Required (>=1) when allowAllTargets = false; optional and additive when allowAllTargets = true. References from ExternalModelConfig.target must match an entry here unless allowAllTargets = true

allowAllTargets Boolean: (boolean) - When true, accepts any model exposed by the upstream provider; targets is not required and does not restrict routability. When false, only models listed in targets are routable
amazonBedrock Property Map: (ModelProviderServiceConfigAmazonBedrockProviderConfig)
anthropic Property Map: (ModelProviderServiceConfigAnthropicProviderConfig)
azureOpenai Property Map: (ModelProviderServiceConfigAzureOpenAiProviderConfig)
custom Property Map: (ModelProviderServiceConfigCustomProviderConfig)
forwardHeaders Boolean: (boolean) - Whether to forward incoming request headers to the upstream provider. Applies to managed (multi-model) requests as well as passthrough requests served by this provider service. Governance-level decision by the provider service owner; not selectable per inference call
forwardQueryParameters Boolean: (boolean) - Whether to forward incoming request query parameters to the upstream provider. Same trust-boundary semantics as forwardHeaders
forwardUnmanagedPaths Boolean: (boolean) - Whether to forward request paths that fall outside this service's managed API set to the upstream provider as opaque passthrough. When true, requests addressed to subpaths not recognized by the managed API surface are proxied to the upstream provider over the same provider connection. When false, only managed-API paths are served. Governance-level decision by the provider service owner; expanding this expands the trust boundary that the ModelProviderService exposes
geminiEnterprise Property Map: (ModelProviderServiceConfigGeminiEnterpriseProviderConfig)
inferenceTable Property Map: (InferenceTableConfig) - Inference table configuration for payload logging when this provider service is invoked directly. When it is invoked through a model service, the model service's own inference table captures the invocation instead. Mirrors ModelServiceConfig.inference_table / AgentServiceConfig.inference_table
microsoftFoundry Property Map: (ModelProviderServiceConfigMicrosoftFoundryProviderConfig)
openai Property Map: (ModelProviderServiceConfigOpenAiProviderConfig)
providerType String: (string) - Provider type discriminator. Required at create time; immutable after. Determines which variant of the provider oneof must be set. May not be changed via Update; attempts to include config.provider_type in UpdateModelProviderServiceRequest.update_mask are rejected.
rateLimits List<Property Map>: (list of RateLimit) - Rate limits applied when this provider service is invoked directly. When it is invoked through a model service, the model service's own rateLimits apply instead. Mirrors ModelServiceConfig.rate_limits / McpServiceConfig.rate_limits
targets List<Property Map>: (list of ModelProviderServiceConfigModelTargetConfig) - Routing targets this provider service exposes (provider-side model identifier + unified API types per entry). Required (>=1) when allowAllTargets = false; optional and additive when allowAllTargets = true. References from ExternalModelConfig.target must match an entry here unless allowAllTargets = true

GetAiGatewayModelProviderServiceConfigAmazonBedrock

Direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

Direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect

AwsAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair auth. Mutually exclusive with serviceCredential. Supersedes the flat awsAccessKeyId / awsSecretAccessKey fields
Region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
ServiceCredential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

AwsAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair auth. Mutually exclusive with serviceCredential. Supersedes the flat awsAccessKeyId / awsSecretAccessKey fields
Region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
ServiceCredential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

aws_access_key object: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair auth. Mutually exclusive with serviceCredential. Supersedes the flat awsAccessKeyId / awsSecretAccessKey fields
region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
service_credential object: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

awsAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair auth. Mutually exclusive with serviceCredential. Supersedes the flat awsAccessKeyId / awsSecretAccessKey fields
region String: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

awsAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair auth. Mutually exclusive with serviceCredential. Supersedes the flat awsAccessKeyId / awsSecretAccessKey fields
region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

aws_access_key GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair auth. Mutually exclusive with serviceCredential. Supersedes the flat awsAccessKeyId / awsSecretAccessKey fields
region str: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
service_credential GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

awsAccessKey Property Map: (ModelProviderServiceConfigAwsAccessKey) - AWS access-key-pair auth. Mutually exclusive with serviceCredential. Supersedes the flat awsAccessKeyId / awsSecretAccessKey fields
region String: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create
serviceCredential Property Map: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey

AccessKeyId string: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
SecretAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required on Create when using access-key auth. Supplied as inline plaintext via ProviderSecret.plaintext

AccessKeyId string: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
SecretAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required on Create when using access-key auth. Supplied as inline plaintext via ProviderSecret.plaintext

access_key_id string: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secret_access_key object: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required on Create when using access-key auth. Supplied as inline plaintext via ProviderSecret.plaintext

accessKeyId String: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secretAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required on Create when using access-key auth. Supplied as inline plaintext via ProviderSecret.plaintext

accessKeyId string: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secretAccessKey GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required on Create when using access-key auth. Supplied as inline plaintext via ProviderSecret.plaintext

access_key_id str: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secret_access_key GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required on Create when using access-key auth. Supplied as inline plaintext via ProviderSecret.plaintext

accessKeyId String: (string) - AWS access key ID. Required on Create when using access-key auth. Treated as username-equivalent (not a secret value): round-trips on reads and is scrubbed from audit logs
secretAccessKey Property Map: (ModelProviderServiceConfigProviderSecret) - AWS secret access key paired with accessKeyId. Required on Create when using access-key auth. Supplied as inline plaintext via ProviderSecret.plaintext

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigAnthropic

Direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)
Relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed (credential-less) form: no Anthropic credential is stored. Each inference request instead carries the caller's own OAuth token, which the platform forwards to Anthropic on outbound requests. Mutually exclusive with direct; no apiKey is required or persisted

Direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)
Relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed (credential-less) form: no Anthropic credential is stored. Each inference request instead carries the caller's own OAuth token, which the platform forwards to Anthropic on outbound requests. Mutually exclusive with direct; no apiKey is required or persisted

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig)
relayed object: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed (credential-less) form: no Anthropic credential is stored. Each inference request instead carries the caller's own OAuth token, which the platform forwards to Anthropic on outbound requests. Mutually exclusive with direct; no apiKey is required or persisted

direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)
relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed (credential-less) form: no Anthropic credential is stored. Each inference request instead carries the caller's own OAuth token, which the platform forwards to Anthropic on outbound requests. Mutually exclusive with direct; no apiKey is required or persisted

direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)
relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed (credential-less) form: no Anthropic credential is stored. Each inference request instead carries the caller's own OAuth token, which the platform forwards to Anthropic on outbound requests. Mutually exclusive with direct; no apiKey is required or persisted

direct GetAiGatewayModelProviderServiceConfigAnthropicDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)
relayed GetAiGatewayModelProviderServiceConfigAnthropicRelayed: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed (credential-less) form: no Anthropic credential is stored. Each inference request instead carries the caller's own OAuth token, which the platform forwards to Anthropic on outbound requests. Mutually exclusive with direct; no apiKey is required or persisted

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig)
relayed Property Map: (ModelProviderServiceConfigAnthropicProviderRelayedConfig) - Relayed (credential-less) form: no Anthropic credential is stored. Each inference request instead carries the caller's own OAuth token, which the platform forwards to Anthropic on outbound requests. Mutually exclusive with direct; no apiKey is required or persisted

GetAiGatewayModelProviderServiceConfigAnthropicDirect

ApiKey GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext

ApiKey GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext

apiKey GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext

apiKey GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext

api_key GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext

GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigAnthropicRelayed

PlanType string: (string) - Which Anthropic subscription tier the relayed token belongs to. Optional; when unset the MPS gets the full governance surface (see TEAM_ENTERPRISE). Immutable after Create, so the tier cannot be flipped in place. Possible values are: ANTHROPIC_RELAYED_PLAN_TYPE_MAX, ANTHROPIC_RELAYED_PLAN_TYPE_TEAM_ENTERPRISE

PlanType string: (string) - Which Anthropic subscription tier the relayed token belongs to. Optional; when unset the MPS gets the full governance surface (see TEAM_ENTERPRISE). Immutable after Create, so the tier cannot be flipped in place. Possible values are: ANTHROPIC_RELAYED_PLAN_TYPE_MAX, ANTHROPIC_RELAYED_PLAN_TYPE_TEAM_ENTERPRISE

plan_type string: (string) - Which Anthropic subscription tier the relayed token belongs to. Optional; when unset the MPS gets the full governance surface (see TEAM_ENTERPRISE). Immutable after Create, so the tier cannot be flipped in place. Possible values are: ANTHROPIC_RELAYED_PLAN_TYPE_MAX, ANTHROPIC_RELAYED_PLAN_TYPE_TEAM_ENTERPRISE

planType String: (string) - Which Anthropic subscription tier the relayed token belongs to. Optional; when unset the MPS gets the full governance surface (see TEAM_ENTERPRISE). Immutable after Create, so the tier cannot be flipped in place. Possible values are: ANTHROPIC_RELAYED_PLAN_TYPE_MAX, ANTHROPIC_RELAYED_PLAN_TYPE_TEAM_ENTERPRISE

planType string: (string) - Which Anthropic subscription tier the relayed token belongs to. Optional; when unset the MPS gets the full governance surface (see TEAM_ENTERPRISE). Immutable after Create, so the tier cannot be flipped in place. Possible values are: ANTHROPIC_RELAYED_PLAN_TYPE_MAX, ANTHROPIC_RELAYED_PLAN_TYPE_TEAM_ENTERPRISE

plan_type str: (string) - Which Anthropic subscription tier the relayed token belongs to. Optional; when unset the MPS gets the full governance surface (see TEAM_ENTERPRISE). Immutable after Create, so the tier cannot be flipped in place. Possible values are: ANTHROPIC_RELAYED_PLAN_TYPE_MAX, ANTHROPIC_RELAYED_PLAN_TYPE_TEAM_ENTERPRISE

planType String: (string) - Which Anthropic subscription tier the relayed token belongs to. Optional; when unset the MPS gets the full governance surface (see TEAM_ENTERPRISE). Immutable after Create, so the tier cannot be flipped in place. Possible values are: ANTHROPIC_RELAYED_PLAN_TYPE_MAX, ANTHROPIC_RELAYED_PLAN_TYPE_TEAM_ENTERPRISE

GetAiGatewayModelProviderServiceConfigAzureOpenai

Direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

Direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect

ApiKey GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
EntraServicePrincipal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
ServiceCredential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

ApiKey GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
EntraServicePrincipal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
ServiceCredential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
base_url string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entra_service_principal object: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
service_credential object: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

apiKey GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
serviceCredential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

apiKey GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
serviceCredential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

api_key GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
base_url str: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entra_service_principal GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
service_credential GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal Property Map: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
serviceCredential Property Map: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal

ClientId string: (string) - Entra ID client (application) ID. Required on Create
ClientSecret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
TenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

ClientId string: (string) - Entra ID client (application) ID. Required on Create
ClientSecret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
TenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

client_id string: (string) - Entra ID client (application) ID. Required on Create
client_secret object: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenant_id string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId String: (string) - Entra ID client (application) ID. Required on Create
clientSecret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenantId String: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId string: (string) - Entra ID client (application) ID. Required on Create
clientSecret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

client_id str: (string) - Entra ID client (application) ID. Required on Create
client_secret GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenant_id str: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId String: (string) - Entra ID client (application) ID. Required on Create
clientSecret Property Map: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenantId String: (string) - Entra ID (Azure AD) tenant ID. Required on Create

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigCustom

Direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

Direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigCustomDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

GetAiGatewayModelProviderServiceConfigCustomDirect

ApiKey GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies

ApiKey GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
base_url string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies

apiKey GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies

apiKey GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies

api_key GetAiGatewayModelProviderServiceConfigCustomDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
base_url str: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies

GetAiGatewayModelProviderServiceConfigCustomDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigGeminiEnterprise

Direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

Direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect

ApiKey GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
ProjectId string: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
Region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create

ApiKey GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
ProjectId string: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
Region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
project_id string: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create

apiKey GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
projectId String: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region String: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create

apiKey GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
projectId string: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region string: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create

api_key GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
project_id str: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region str: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
projectId String: (string) - GCP project ID hosting the Gemini Enterprise endpoint. Required on Create
region String: (string) - GCP region of the Gemini Enterprise endpoint (e.g., us-central1). Required on Create

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigInferenceTable

IsDeleted bool: (boolean) - True when the bound inference TABLE has been deleted but the parent service still references it. The dangling reference is surfaced (not silently dropped) so callers can see the broken dependency. AI Gateway payload logging fails closed in this state
Parent string: (string) - Parent UC schema where the inference table is created. Format: schemas/{catalog}.{schema}. Set at create time and immutable thereafter; changing it on an existing service is rejected
Table string: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
Disabled bool: (boolean) - Indicates whether payload logging is disabled (opt-out). Unset means that payload logging is active (the on-by-default state coincides with the proto zero-value, so the server never fills this field for a client that leaves it unset). Set disabled = true to pause runtime logging while keeping the sub-message attached (preserving parent and tableNamePrefix for a later flip back to active). parent remains required either way
TableNamePrefix string: (string) - Prefix for the inference-table's UC-registered name. The actual leaf name UC stores is <table_name_prefix>_payload; the _payload suffix is appended automatically. To find the actual UC table after Create, read the table field on the response. Defaults to <model_service_name>_payload when unset. Set at create time and immutable thereafter; changing it on an existing service is rejected

IsDeleted bool: (boolean) - True when the bound inference TABLE has been deleted but the parent service still references it. The dangling reference is surfaced (not silently dropped) so callers can see the broken dependency. AI Gateway payload logging fails closed in this state
Parent string: (string) - Parent UC schema where the inference table is created. Format: schemas/{catalog}.{schema}. Set at create time and immutable thereafter; changing it on an existing service is rejected
Table string: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
Disabled bool: (boolean) - Indicates whether payload logging is disabled (opt-out). Unset means that payload logging is active (the on-by-default state coincides with the proto zero-value, so the server never fills this field for a client that leaves it unset). Set disabled = true to pause runtime logging while keeping the sub-message attached (preserving parent and tableNamePrefix for a later flip back to active). parent remains required either way
TableNamePrefix string: (string) - Prefix for the inference-table's UC-registered name. The actual leaf name UC stores is <table_name_prefix>_payload; the _payload suffix is appended automatically. To find the actual UC table after Create, read the table field on the response. Defaults to <model_service_name>_payload when unset. Set at create time and immutable thereafter; changing it on an existing service is rejected

is_deleted bool: (boolean) - True when the bound inference TABLE has been deleted but the parent service still references it. The dangling reference is surfaced (not silently dropped) so callers can see the broken dependency. AI Gateway payload logging fails closed in this state
parent string: (string) - Parent UC schema where the inference table is created. Format: schemas/{catalog}.{schema}. Set at create time and immutable thereafter; changing it on an existing service is rejected
table string: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
disabled bool: (boolean) - Indicates whether payload logging is disabled (opt-out). Unset means that payload logging is active (the on-by-default state coincides with the proto zero-value, so the server never fills this field for a client that leaves it unset). Set disabled = true to pause runtime logging while keeping the sub-message attached (preserving parent and tableNamePrefix for a later flip back to active). parent remains required either way
table_name_prefix string: (string) - Prefix for the inference-table's UC-registered name. The actual leaf name UC stores is <table_name_prefix>_payload; the _payload suffix is appended automatically. To find the actual UC table after Create, read the table field on the response. Defaults to <model_service_name>_payload when unset. Set at create time and immutable thereafter; changing it on an existing service is rejected

isDeleted Boolean: (boolean) - True when the bound inference TABLE has been deleted but the parent service still references it. The dangling reference is surfaced (not silently dropped) so callers can see the broken dependency. AI Gateway payload logging fails closed in this state
parent String: (string) - Parent UC schema where the inference table is created. Format: schemas/{catalog}.{schema}. Set at create time and immutable thereafter; changing it on an existing service is rejected
table String: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
disabled Boolean: (boolean) - Indicates whether payload logging is disabled (opt-out). Unset means that payload logging is active (the on-by-default state coincides with the proto zero-value, so the server never fills this field for a client that leaves it unset). Set disabled = true to pause runtime logging while keeping the sub-message attached (preserving parent and tableNamePrefix for a later flip back to active). parent remains required either way
tableNamePrefix String: (string) - Prefix for the inference-table's UC-registered name. The actual leaf name UC stores is <table_name_prefix>_payload; the _payload suffix is appended automatically. To find the actual UC table after Create, read the table field on the response. Defaults to <model_service_name>_payload when unset. Set at create time and immutable thereafter; changing it on an existing service is rejected

isDeleted boolean: (boolean) - True when the bound inference TABLE has been deleted but the parent service still references it. The dangling reference is surfaced (not silently dropped) so callers can see the broken dependency. AI Gateway payload logging fails closed in this state
parent string: (string) - Parent UC schema where the inference table is created. Format: schemas/{catalog}.{schema}. Set at create time and immutable thereafter; changing it on an existing service is rejected
table string: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
disabled boolean: (boolean) - Indicates whether payload logging is disabled (opt-out). Unset means that payload logging is active (the on-by-default state coincides with the proto zero-value, so the server never fills this field for a client that leaves it unset). Set disabled = true to pause runtime logging while keeping the sub-message attached (preserving parent and tableNamePrefix for a later flip back to active). parent remains required either way
tableNamePrefix string: (string) - Prefix for the inference-table's UC-registered name. The actual leaf name UC stores is <table_name_prefix>_payload; the _payload suffix is appended automatically. To find the actual UC table after Create, read the table field on the response. Defaults to <model_service_name>_payload when unset. Set at create time and immutable thereafter; changing it on an existing service is rejected

is_deleted bool: (boolean) - True when the bound inference TABLE has been deleted but the parent service still references it. The dangling reference is surfaced (not silently dropped) so callers can see the broken dependency. AI Gateway payload logging fails closed in this state
parent str: (string) - Parent UC schema where the inference table is created. Format: schemas/{catalog}.{schema}. Set at create time and immutable thereafter; changing it on an existing service is rejected
table str: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
disabled bool: (boolean) - Indicates whether payload logging is disabled (opt-out). Unset means that payload logging is active (the on-by-default state coincides with the proto zero-value, so the server never fills this field for a client that leaves it unset). Set disabled = true to pause runtime logging while keeping the sub-message attached (preserving parent and tableNamePrefix for a later flip back to active). parent remains required either way
table_name_prefix str: (string) - Prefix for the inference-table's UC-registered name. The actual leaf name UC stores is <table_name_prefix>_payload; the _payload suffix is appended automatically. To find the actual UC table after Create, read the table field on the response. Defaults to <model_service_name>_payload when unset. Set at create time and immutable thereafter; changing it on an existing service is rejected

isDeleted Boolean: (boolean) - True when the bound inference TABLE has been deleted but the parent service still references it. The dangling reference is surfaced (not silently dropped) so callers can see the broken dependency. AI Gateway payload logging fails closed in this state
parent String: (string) - Parent UC schema where the inference table is created. Format: schemas/{catalog}.{schema}. Set at create time and immutable thereafter; changing it on an existing service is rejected
table String: (string) - Resolved UC table for payload logs. Format: tables/{catalog}.{schema}.{table}
disabled Boolean: (boolean) - Indicates whether payload logging is disabled (opt-out). Unset means that payload logging is active (the on-by-default state coincides with the proto zero-value, so the server never fills this field for a client that leaves it unset). Set disabled = true to pause runtime logging while keeping the sub-message attached (preserving parent and tableNamePrefix for a later flip back to active). parent remains required either way
tableNamePrefix String: (string) - Prefix for the inference-table's UC-registered name. The actual leaf name UC stores is <table_name_prefix>_payload; the _payload suffix is appended automatically. To find the actual UC table after Create, read the table field on the response. Defaults to <model_service_name>_payload when unset. Set at create time and immutable thereafter; changing it on an existing service is rejected

GetAiGatewayModelProviderServiceConfigMicrosoftFoundry

Direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

Direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect

ApiKey GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
EntraServicePrincipal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
ServiceCredential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

ApiKey GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
EntraServicePrincipal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
ServiceCredential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
base_url string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entra_service_principal object: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
service_credential object: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

apiKey GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
serviceCredential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

apiKey GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
serviceCredential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

api_key GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
base_url str: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entra_service_principal GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
service_credential GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
entraServicePrincipal Property Map: (ModelProviderServiceConfigEntraServicePrincipal) - Entra ID (service principal) auth. Mutually exclusive with apiKey and serviceCredential. Supersedes the flat tenantId / clientId / clientSecret fields
serviceCredential Property Map: (ModelProviderServiceConfigServiceCredential) - Reference to a UC service credential authorizing Microsoft Foundry requests. On Create the caller supplies service_credential.name in the AIP-122 resource-name form credentials/{name}. Required on Create when using UC-service-credential auth; mutually exclusive with apiKey and entraServicePrincipal. The credential is referenced by name; its value is not carried here. On read the resolved id and isDeleted are also populated. Only supported on Azure-hosted workspaces; Create requests from other clouds are rejected with INVALID_PARAMETER_VALUE

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal

ClientId string: (string) - Entra ID client (application) ID. Required on Create
ClientSecret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
TenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

ClientId string: (string) - Entra ID client (application) ID. Required on Create
ClientSecret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
TenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

client_id string: (string) - Entra ID client (application) ID. Required on Create
client_secret object: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenant_id string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId String: (string) - Entra ID client (application) ID. Required on Create
clientSecret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenantId String: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId string: (string) - Entra ID client (application) ID. Required on Create
clientSecret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenantId string: (string) - Entra ID (Azure AD) tenant ID. Required on Create

client_id str: (string) - Entra ID client (application) ID. Required on Create
client_secret GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenant_id str: (string) - Entra ID (Azure AD) tenant ID. Required on Create

clientId String: (string) - Entra ID client (application) ID. Required on Create
clientSecret Property Map: (ModelProviderServiceConfigProviderSecret) - Entra ID client secret. Supplied as inline plaintext via ProviderSecret.plaintext
tenantId String: (string) - Entra ID (Azure AD) tenant ID. Required on Create

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

Name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name string: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name str: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

name String: Resource name of the provider service. Format: model-provider-services/{catalog}.{schema}.{model_provider_service}. Each {...} component is capped at 255 characters individually. Server-derived on Create from parent + modelProviderServiceId; required and immutable on Update/Get/Delete

GetAiGatewayModelProviderServiceConfigOpenai

Direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

Direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct object: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct GetAiGatewayModelProviderServiceConfigOpenaiDirect: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

direct Property Map: (ModelProviderServiceConfigOpenAiProviderDirectConfig)

GetAiGatewayModelProviderServiceConfigOpenaiDirect

ApiKey GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
Organization string: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

ApiKey GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
BaseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
Organization string: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

api_key object: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
base_url string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization string: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

apiKey GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization String: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

apiKey GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl string: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization string: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

api_key GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
base_url str: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization str: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

apiKey Property Map: (ModelProviderServiceConfigProviderSecret) - OpenAI API key. Required on Create. Supplied as inline plaintext via ProviderSecret.plaintext
baseUrl String: (string) - Optional custom base URL. Defaults to https://api.openai.com/v1. Use for OpenAI-API-compatible third-party endpoints or in-network proxies
organization String: (string) - Optional OpenAI organization ID. When set, the platform forwards it as the OpenAI-Organization header

GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

Plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext string: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext str: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

plaintext String: (string) - Inline plaintext credential. INPUT_ONLY: the value never round-trips on reads. Get and List responses omit plaintext; the field's presence in the read shape only indicates that a secret is configured

GetAiGatewayModelProviderServiceConfigRateLimit

Key string: (string) - Scope key. Determines whether principal is required. Possible values are: RATE_LIMIT_KEY_REQUEST_TAG, RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
RenewalPeriod string: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
Principal string: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required unless key is RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_USER_DEFAULT, or RATE_LIMIT_KEY_REQUEST_TAG (which must not set a principal)
RequestTagKey string: (string) - Request tag key this limit applies to. Required when key is RATE_LIMIT_KEY_REQUEST_TAG, forbidden otherwise
RequestTagValue string: (string) - Request tag value this limit applies to. Only valid when key is RATE_LIMIT_KEY_REQUEST_TAG. Leave unset to apply the limit to every value of requestTagKey (an any-value default); a set value is a specific override for that value
Requests int: (integer) - Max requests allowed within a renewal period. Leave unset for no request limit
Tokens int: (integer) - Max tokens allowed within a renewal period. Leave unset for no token limit

Key string: (string) - Scope key. Determines whether principal is required. Possible values are: RATE_LIMIT_KEY_REQUEST_TAG, RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
RenewalPeriod string: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
Principal string: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required unless key is RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_USER_DEFAULT, or RATE_LIMIT_KEY_REQUEST_TAG (which must not set a principal)
RequestTagKey string: (string) - Request tag key this limit applies to. Required when key is RATE_LIMIT_KEY_REQUEST_TAG, forbidden otherwise
RequestTagValue string: (string) - Request tag value this limit applies to. Only valid when key is RATE_LIMIT_KEY_REQUEST_TAG. Leave unset to apply the limit to every value of requestTagKey (an any-value default); a set value is a specific override for that value
Requests int: (integer) - Max requests allowed within a renewal period. Leave unset for no request limit
Tokens int: (integer) - Max tokens allowed within a renewal period. Leave unset for no token limit

key string: (string) - Scope key. Determines whether principal is required. Possible values are: RATE_LIMIT_KEY_REQUEST_TAG, RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewal_period string: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal string: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required unless key is RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_USER_DEFAULT, or RATE_LIMIT_KEY_REQUEST_TAG (which must not set a principal)
request_tag_key string: (string) - Request tag key this limit applies to. Required when key is RATE_LIMIT_KEY_REQUEST_TAG, forbidden otherwise
request_tag_value string: (string) - Request tag value this limit applies to. Only valid when key is RATE_LIMIT_KEY_REQUEST_TAG. Leave unset to apply the limit to every value of requestTagKey (an any-value default); a set value is a specific override for that value
requests number: (integer) - Max requests allowed within a renewal period. Leave unset for no request limit
tokens number: (integer) - Max tokens allowed within a renewal period. Leave unset for no token limit

key String: (string) - Scope key. Determines whether principal is required. Possible values are: RATE_LIMIT_KEY_REQUEST_TAG, RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewalPeriod String: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal String: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required unless key is RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_USER_DEFAULT, or RATE_LIMIT_KEY_REQUEST_TAG (which must not set a principal)
requestTagKey String: (string) - Request tag key this limit applies to. Required when key is RATE_LIMIT_KEY_REQUEST_TAG, forbidden otherwise
requestTagValue String: (string) - Request tag value this limit applies to. Only valid when key is RATE_LIMIT_KEY_REQUEST_TAG. Leave unset to apply the limit to every value of requestTagKey (an any-value default); a set value is a specific override for that value
requests Integer: (integer) - Max requests allowed within a renewal period. Leave unset for no request limit
tokens Integer: (integer) - Max tokens allowed within a renewal period. Leave unset for no token limit

key string: (string) - Scope key. Determines whether principal is required. Possible values are: RATE_LIMIT_KEY_REQUEST_TAG, RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewalPeriod string: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal string: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required unless key is RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_USER_DEFAULT, or RATE_LIMIT_KEY_REQUEST_TAG (which must not set a principal)
requestTagKey string: (string) - Request tag key this limit applies to. Required when key is RATE_LIMIT_KEY_REQUEST_TAG, forbidden otherwise
requestTagValue string: (string) - Request tag value this limit applies to. Only valid when key is RATE_LIMIT_KEY_REQUEST_TAG. Leave unset to apply the limit to every value of requestTagKey (an any-value default); a set value is a specific override for that value
requests number: (integer) - Max requests allowed within a renewal period. Leave unset for no request limit
tokens number: (integer) - Max tokens allowed within a renewal period. Leave unset for no token limit

key str: (string) - Scope key. Determines whether principal is required. Possible values are: RATE_LIMIT_KEY_REQUEST_TAG, RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewal_period str: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal str: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required unless key is RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_USER_DEFAULT, or RATE_LIMIT_KEY_REQUEST_TAG (which must not set a principal)
request_tag_key str: (string) - Request tag key this limit applies to. Required when key is RATE_LIMIT_KEY_REQUEST_TAG, forbidden otherwise
request_tag_value str: (string) - Request tag value this limit applies to. Only valid when key is RATE_LIMIT_KEY_REQUEST_TAG. Leave unset to apply the limit to every value of requestTagKey (an any-value default); a set value is a specific override for that value
requests int: (integer) - Max requests allowed within a renewal period. Leave unset for no request limit
tokens int: (integer) - Max tokens allowed within a renewal period. Leave unset for no token limit

key String: (string) - Scope key. Determines whether principal is required. Possible values are: RATE_LIMIT_KEY_REQUEST_TAG, RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_SERVICE_PRINCIPAL, RATE_LIMIT_KEY_USER, RATE_LIMIT_KEY_USER_DEFAULT, RATE_LIMIT_KEY_USER_GROUP
renewalPeriod String: (string) - Renewal period. Possible values are: RATE_LIMIT_RENEWAL_PERIOD_HOUR, RATE_LIMIT_RENEWAL_PERIOD_MINUTE
principal String: (string) - Principal this limit applies to: user email, group name, or service principal application ID. Required unless key is RATE_LIMIT_KEY_SERVICE, RATE_LIMIT_KEY_USER_DEFAULT, or RATE_LIMIT_KEY_REQUEST_TAG (which must not set a principal)
requestTagKey String: (string) - Request tag key this limit applies to. Required when key is RATE_LIMIT_KEY_REQUEST_TAG, forbidden otherwise
requestTagValue String: (string) - Request tag value this limit applies to. Only valid when key is RATE_LIMIT_KEY_REQUEST_TAG. Leave unset to apply the limit to every value of requestTagKey (an any-value default); a set value is a specific override for that value
requests Number: (integer) - Max requests allowed within a renewal period. Leave unset for no request limit
tokens Number: (integer) - Max tokens allowed within a renewal period. Leave unset for no token limit

GetAiGatewayModelProviderServiceConfigTarget

Model string: (string) - Provider-side model identifier (e.g. "gpt-5", "claude-opus-4-7"). This is a string on the LLM provider's side, not a UC entity. The UC governance hook for external destinations is the ModelProviderService referenced by ExternalModelConfig.model_provider_service, not the model itself
NativeApiTypes List<string>: (list of string) - Provider-native API types the model supports (e.g. "openai/v1/chat/completions"). Used by the platform for request/response translation from the unified API type. At most 64 entries of at most 256 characters each; the list is persisted into the destination binding's bounded storage envelope

Model string: (string) - Provider-side model identifier (e.g. "gpt-5", "claude-opus-4-7"). This is a string on the LLM provider's side, not a UC entity. The UC governance hook for external destinations is the ModelProviderService referenced by ExternalModelConfig.model_provider_service, not the model itself
NativeApiTypes []string: (list of string) - Provider-native API types the model supports (e.g. "openai/v1/chat/completions"). Used by the platform for request/response translation from the unified API type. At most 64 entries of at most 256 characters each; the list is persisted into the destination binding's bounded storage envelope

model string: (string) - Provider-side model identifier (e.g. "gpt-5", "claude-opus-4-7"). This is a string on the LLM provider's side, not a UC entity. The UC governance hook for external destinations is the ModelProviderService referenced by ExternalModelConfig.model_provider_service, not the model itself
native_api_types list(string): (list of string) - Provider-native API types the model supports (e.g. "openai/v1/chat/completions"). Used by the platform for request/response translation from the unified API type. At most 64 entries of at most 256 characters each; the list is persisted into the destination binding's bounded storage envelope

model String: (string) - Provider-side model identifier (e.g. "gpt-5", "claude-opus-4-7"). This is a string on the LLM provider's side, not a UC entity. The UC governance hook for external destinations is the ModelProviderService referenced by ExternalModelConfig.model_provider_service, not the model itself
nativeApiTypes List<String>: (list of string) - Provider-native API types the model supports (e.g. "openai/v1/chat/completions"). Used by the platform for request/response translation from the unified API type. At most 64 entries of at most 256 characters each; the list is persisted into the destination binding's bounded storage envelope

model string: (string) - Provider-side model identifier (e.g. "gpt-5", "claude-opus-4-7"). This is a string on the LLM provider's side, not a UC entity. The UC governance hook for external destinations is the ModelProviderService referenced by ExternalModelConfig.model_provider_service, not the model itself
nativeApiTypes string[]: (list of string) - Provider-native API types the model supports (e.g. "openai/v1/chat/completions"). Used by the platform for request/response translation from the unified API type. At most 64 entries of at most 256 characters each; the list is persisted into the destination binding's bounded storage envelope

model str: (string) - Provider-side model identifier (e.g. "gpt-5", "claude-opus-4-7"). This is a string on the LLM provider's side, not a UC entity. The UC governance hook for external destinations is the ModelProviderService referenced by ExternalModelConfig.model_provider_service, not the model itself
native_api_types Sequence[str]: (list of string) - Provider-native API types the model supports (e.g. "openai/v1/chat/completions"). Used by the platform for request/response translation from the unified API type. At most 64 entries of at most 256 characters each; the list is persisted into the destination binding's bounded storage envelope

model String: (string) - Provider-side model identifier (e.g. "gpt-5", "claude-opus-4-7"). This is a string on the LLM provider's side, not a UC entity. The UC governance hook for external destinations is the ModelProviderService referenced by ExternalModelConfig.model_provider_service, not the model itself
nativeApiTypes List<String>: (list of string) - Provider-native API types the model supports (e.g. "openai/v1/chat/completions"). Used by the platform for request/response translation from the unified API type. At most 64 entries of at most 256 characters each; the list is persisted into the destination binding's bounded storage envelope

GetAiGatewayModelProviderServiceProviderConfig

WorkspaceId string: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

WorkspaceId string: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspace_id string: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspaceId String: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspaceId string: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspace_id str: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

workspaceId String: Workspace ID which the resource belongs to. This workspace must be part of the account which the provider is configured with.

Package Details

Repository: databricks pulumi/pulumi-databricks
License: Apache-2.0
Notes: This Pulumi package is based on the databricks Terraform Provider.

Viewing docs for Databricks v1.103.0
published on Tuesday, Aug 11, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-databricks

databricks.getAiGatewayModelProviderService

On this page

On this page

Using getAiGatewayModelProviderService

getAiGatewayModelProviderService Result

Supporting Types

GetAiGatewayModelProviderServiceConfig

GetAiGatewayModelProviderServiceConfigAmazonBedrock

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirect

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKey

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectAwsAccessKeySecretAccessKey

GetAiGatewayModelProviderServiceConfigAmazonBedrockDirectServiceCredential

GetAiGatewayModelProviderServiceConfigAnthropic

GetAiGatewayModelProviderServiceConfigAnthropicDirect

GetAiGatewayModelProviderServiceConfigAnthropicDirectApiKey

GetAiGatewayModelProviderServiceConfigAnthropicRelayed

GetAiGatewayModelProviderServiceConfigAzureOpenai

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirect

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectApiKey

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipal

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectEntraServicePrincipalClientSecret

GetAiGatewayModelProviderServiceConfigAzureOpenaiDirectServiceCredential

GetAiGatewayModelProviderServiceConfigCustom

GetAiGatewayModelProviderServiceConfigCustomDirect

GetAiGatewayModelProviderServiceConfigCustomDirectApiKey

GetAiGatewayModelProviderServiceConfigGeminiEnterprise

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirect

GetAiGatewayModelProviderServiceConfigGeminiEnterpriseDirectApiKey

GetAiGatewayModelProviderServiceConfigInferenceTable

GetAiGatewayModelProviderServiceConfigMicrosoftFoundry

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirect

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectApiKey

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipal

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectEntraServicePrincipalClientSecret

GetAiGatewayModelProviderServiceConfigMicrosoftFoundryDirectServiceCredential

GetAiGatewayModelProviderServiceConfigOpenai

GetAiGatewayModelProviderServiceConfigOpenaiDirect

GetAiGatewayModelProviderServiceConfigOpenaiDirectApiKey

GetAiGatewayModelProviderServiceConfigRateLimit

GetAiGatewayModelProviderServiceConfigTarget

GetAiGatewayModelProviderServiceProviderConfig

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.