1. Packages
  2. Konnect Provider
  3. API Docs
  4. EventGatewayClusterPolicyAcls
Viewing docs for konnect 3.11.0
published on Thursday, Mar 12, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

konnect.EventGatewayClusterPolicyAcls

konnect logo
Viewing docs for konnect 3.11.0
published on Thursday, Mar 12, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

    EventGatewayClusterPolicyAcls Resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as konnect from "@pulumi/konnect";

const myEventgatewayclusterpolicyacls = new konnect.EventGatewayClusterPolicyAcls("my_eventgatewayclusterpolicyacls", {
    condition: "context.auth.principal.name == \"this-user\"",
    config: {
        rules: [{
            action: "deny",
            operations: [{
                name: "describe_configs",
            }],
            resourceNames: [{
                match: "...my_match...",
            }],
            resourceType: "transactional_id",
        }],
    },
    description: "...my_description...",
    enabled: false,
    gatewayId: "9524ec7d-36d9-465d-a8c5-83a3c9390458",
    labels: {
        key: "value",
    },
    name: "...my_name...",
    virtualClusterId: "4a444990-e7d1-4dfb-b2bf-2d8e113d1b6e",
});

    import pulumi
import pulumi_konnect as konnect

my_eventgatewayclusterpolicyacls = konnect.EventGatewayClusterPolicyAcls("my_eventgatewayclusterpolicyacls",
    condition="context.auth.principal.name == \"this-user\"",
    config={
        "rules": [{
            "action": "deny",
            "operations": [{
                "name": "describe_configs",
            }],
            "resource_names": [{
                "match": "...my_match...",
            }],
            "resource_type": "transactional_id",
        }],
    },
    description="...my_description...",
    enabled=False,
    gateway_id="9524ec7d-36d9-465d-a8c5-83a3c9390458",
    labels={
        "key": "value",
    },
    name="...my_name...",
    virtual_cluster_id="4a444990-e7d1-4dfb-b2bf-2d8e113d1b6e")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/konnect/v3/konnect"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := konnect.NewEventGatewayClusterPolicyAcls(ctx, "my_eventgatewayclusterpolicyacls", &konnect.EventGatewayClusterPolicyAclsArgs{
			Condition: pulumi.String("context.auth.principal.name == \"this-user\""),
			Config: &konnect.EventGatewayClusterPolicyAclsConfigArgs{
				Rules: konnect.EventGatewayClusterPolicyAclsConfigRuleArray{
					&konnect.EventGatewayClusterPolicyAclsConfigRuleArgs{
						Action: pulumi.String("deny"),
						Operations: konnect.EventGatewayClusterPolicyAclsConfigRuleOperationArray{
							&konnect.EventGatewayClusterPolicyAclsConfigRuleOperationArgs{
								Name: pulumi.String("describe_configs"),
							},
						},
						ResourceNames: konnect.EventGatewayClusterPolicyAclsConfigRuleResourceNameArray{
							&konnect.EventGatewayClusterPolicyAclsConfigRuleResourceNameArgs{
								Match: pulumi.String("...my_match..."),
							},
						},
						ResourceType: pulumi.String("transactional_id"),
					},
				},
			},
			Description: pulumi.String("...my_description..."),
			Enabled:     pulumi.Bool(false),
			GatewayId:   pulumi.String("9524ec7d-36d9-465d-a8c5-83a3c9390458"),
			Labels: pulumi.StringMap{
				"key": pulumi.String("value"),
			},
			Name:             pulumi.String("...my_name..."),
			VirtualClusterId: pulumi.String("4a444990-e7d1-4dfb-b2bf-2d8e113d1b6e"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Konnect = Pulumi.Konnect;

return await Deployment.RunAsync(() => 
{
    var myEventgatewayclusterpolicyacls = new Konnect.EventGatewayClusterPolicyAcls("my_eventgatewayclusterpolicyacls", new()
    {
        Condition = "context.auth.principal.name == \"this-user\"",
        Config = new Konnect.Inputs.EventGatewayClusterPolicyAclsConfigArgs
        {
            Rules = new[]
            {
                new Konnect.Inputs.EventGatewayClusterPolicyAclsConfigRuleArgs
                {
                    Action = "deny",
                    Operations = new[]
                    {
                        new Konnect.Inputs.EventGatewayClusterPolicyAclsConfigRuleOperationArgs
                        {
                            Name = "describe_configs",
                        },
                    },
                    ResourceNames = new[]
                    {
                        new Konnect.Inputs.EventGatewayClusterPolicyAclsConfigRuleResourceNameArgs
                        {
                            Match = "...my_match...",
                        },
                    },
                    ResourceType = "transactional_id",
                },
            },
        },
        Description = "...my_description...",
        Enabled = false,
        GatewayId = "9524ec7d-36d9-465d-a8c5-83a3c9390458",
        Labels = 
        {
            { "key", "value" },
        },
        Name = "...my_name...",
        VirtualClusterId = "4a444990-e7d1-4dfb-b2bf-2d8e113d1b6e",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.EventGatewayClusterPolicyAcls;
import com.pulumi.konnect.EventGatewayClusterPolicyAclsArgs;
import com.pulumi.konnect.inputs.EventGatewayClusterPolicyAclsConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myEventgatewayclusterpolicyacls = new EventGatewayClusterPolicyAcls("myEventgatewayclusterpolicyacls", EventGatewayClusterPolicyAclsArgs.builder()
            .condition("context.auth.principal.name == \"this-user\"")
            .config(EventGatewayClusterPolicyAclsConfigArgs.builder()
                .rules(EventGatewayClusterPolicyAclsConfigRuleArgs.builder()
                    .action("deny")
                    .operations(EventGatewayClusterPolicyAclsConfigRuleOperationArgs.builder()
                        .name("describe_configs")
                        .build())
                    .resourceNames(EventGatewayClusterPolicyAclsConfigRuleResourceNameArgs.builder()
                        .match("...my_match...")
                        .build())
                    .resourceType("transactional_id")
                    .build())
                .build())
            .description("...my_description...")
            .enabled(false)
            .gatewayId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .labels(Map.of("key", "value"))
            .name("...my_name...")
            .virtualClusterId("4a444990-e7d1-4dfb-b2bf-2d8e113d1b6e")
            .build());

    }
}

    resources:
  myEventgatewayclusterpolicyacls:
    type: konnect:EventGatewayClusterPolicyAcls
    name: my_eventgatewayclusterpolicyacls
    properties:
      condition: context.auth.principal.name == "this-user"
      config:
        rules:
          - action: deny
            operations:
              - name: describe_configs
            resourceNames:
              - match: '...my_match...'
            resourceType: transactional_id
      description: '...my_description...'
      enabled: false
      gatewayId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      labels:
        key: value
      name: '...my_name...'
      virtualClusterId: 4a444990-e7d1-4dfb-b2bf-2d8e113d1b6e

    Create EventGatewayClusterPolicyAcls Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new EventGatewayClusterPolicyAcls(name: string, args: EventGatewayClusterPolicyAclsArgs, opts?: CustomResourceOptions);
    @overload
def EventGatewayClusterPolicyAcls(resource_name: str,
                                  args: EventGatewayClusterPolicyAclsArgs,
                                  opts: Optional[ResourceOptions] = None)

@overload
def EventGatewayClusterPolicyAcls(resource_name: str,
                                  opts: Optional[ResourceOptions] = None,
                                  config: Optional[EventGatewayClusterPolicyAclsConfigArgs] = None,
                                  gateway_id: Optional[str] = None,
                                  virtual_cluster_id: Optional[str] = None,
                                  condition: Optional[str] = None,
                                  description: Optional[str] = None,
                                  enabled: Optional[bool] = None,
                                  labels: Optional[Mapping[str, str]] = None,
                                  name: Optional[str] = None)
    func NewEventGatewayClusterPolicyAcls(ctx *Context, name string, args EventGatewayClusterPolicyAclsArgs, opts ...ResourceOption) (*EventGatewayClusterPolicyAcls, error)
    public EventGatewayClusterPolicyAcls(string name, EventGatewayClusterPolicyAclsArgs args, CustomResourceOptions? opts = null)
    public EventGatewayClusterPolicyAcls(String name, EventGatewayClusterPolicyAclsArgs args)
public EventGatewayClusterPolicyAcls(String name, EventGatewayClusterPolicyAclsArgs args, CustomResourceOptions options)

    type: konnect:EventGatewayClusterPolicyAcls
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args EventGatewayClusterPolicyAclsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args EventGatewayClusterPolicyAclsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args EventGatewayClusterPolicyAclsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args EventGatewayClusterPolicyAclsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args EventGatewayClusterPolicyAclsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var eventGatewayClusterPolicyAclsResource = new Konnect.EventGatewayClusterPolicyAcls("eventGatewayClusterPolicyAclsResource", new()
{
    Config = new Konnect.Inputs.EventGatewayClusterPolicyAclsConfigArgs
    {
        Rules = new[]
        {
            new Konnect.Inputs.EventGatewayClusterPolicyAclsConfigRuleArgs
            {
                Action = "string",
                Operations = new[]
                {
                    new Konnect.Inputs.EventGatewayClusterPolicyAclsConfigRuleOperationArgs
                    {
                        Name = "string",
                    },
                },
                ResourceNames = new[]
                {
                    new Konnect.Inputs.EventGatewayClusterPolicyAclsConfigRuleResourceNameArgs
                    {
                        Match = "string",
                    },
                },
                ResourceType = "string",
            },
        },
    },
    GatewayId = "string",
    VirtualClusterId = "string",
    Condition = "string",
    Description = "string",
    Enabled = false,
    Labels = 
    {
        { "string", "string" },
    },
    Name = "string",
});

    example, err := konnect.NewEventGatewayClusterPolicyAcls(ctx, "eventGatewayClusterPolicyAclsResource", &konnect.EventGatewayClusterPolicyAclsArgs{
	Config: &konnect.EventGatewayClusterPolicyAclsConfigArgs{
		Rules: konnect.EventGatewayClusterPolicyAclsConfigRuleArray{
			&konnect.EventGatewayClusterPolicyAclsConfigRuleArgs{
				Action: pulumi.String("string"),
				Operations: konnect.EventGatewayClusterPolicyAclsConfigRuleOperationArray{
					&konnect.EventGatewayClusterPolicyAclsConfigRuleOperationArgs{
						Name: pulumi.String("string"),
					},
				},
				ResourceNames: konnect.EventGatewayClusterPolicyAclsConfigRuleResourceNameArray{
					&konnect.EventGatewayClusterPolicyAclsConfigRuleResourceNameArgs{
						Match: pulumi.String("string"),
					},
				},
				ResourceType: pulumi.String("string"),
			},
		},
	},
	GatewayId:        pulumi.String("string"),
	VirtualClusterId: pulumi.String("string"),
	Condition:        pulumi.String("string"),
	Description:      pulumi.String("string"),
	Enabled:          pulumi.Bool(false),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Name: pulumi.String("string"),
})

    var eventGatewayClusterPolicyAclsResource = new EventGatewayClusterPolicyAcls("eventGatewayClusterPolicyAclsResource", EventGatewayClusterPolicyAclsArgs.builder()
    .config(EventGatewayClusterPolicyAclsConfigArgs.builder()
        .rules(EventGatewayClusterPolicyAclsConfigRuleArgs.builder()
            .action("string")
            .operations(EventGatewayClusterPolicyAclsConfigRuleOperationArgs.builder()
                .name("string")
                .build())
            .resourceNames(EventGatewayClusterPolicyAclsConfigRuleResourceNameArgs.builder()
                .match("string")
                .build())
            .resourceType("string")
            .build())
        .build())
    .gatewayId("string")
    .virtualClusterId("string")
    .condition("string")
    .description("string")
    .enabled(false)
    .labels(Map.of("string", "string"))
    .name("string")
    .build());

    event_gateway_cluster_policy_acls_resource = konnect.EventGatewayClusterPolicyAcls("eventGatewayClusterPolicyAclsResource",
    config={
        "rules": [{
            "action": "string",
            "operations": [{
                "name": "string",
            }],
            "resource_names": [{
                "match": "string",
            }],
            "resource_type": "string",
        }],
    },
    gateway_id="string",
    virtual_cluster_id="string",
    condition="string",
    description="string",
    enabled=False,
    labels={
        "string": "string",
    },
    name="string")

    const eventGatewayClusterPolicyAclsResource = new konnect.EventGatewayClusterPolicyAcls("eventGatewayClusterPolicyAclsResource", {
    config: {
        rules: [{
            action: "string",
            operations: [{
                name: "string",
            }],
            resourceNames: [{
                match: "string",
            }],
            resourceType: "string",
        }],
    },
    gatewayId: "string",
    virtualClusterId: "string",
    condition: "string",
    description: "string",
    enabled: false,
    labels: {
        string: "string",
    },
    name: "string",
});

    type: konnect:EventGatewayClusterPolicyAcls
properties:
    condition: string
    config:
        rules:
            - action: string
              operations:
                - name: string
              resourceNames:
                - match: string
              resourceType: string
    description: string
    enabled: false
    gatewayId: string
    labels:
        string: string
    name: string
    virtualClusterId: string

    EventGatewayClusterPolicyAcls Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The EventGatewayClusterPolicyAcls resource accepts the following input properties:

    Config EventGatewayClusterPolicyAclsConfig
    Apply ACLs to virtual cluster traffic.
    GatewayId string
    The UUID of your Gateway.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    Labels Dictionary<string, string>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    Name string
    A unique user-defined name of the policy.
    Config EventGatewayClusterPolicyAclsConfigArgs
    Apply ACLs to virtual cluster traffic.
    GatewayId string
    The UUID of your Gateway.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    Labels map[string]string
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    Name string
    A unique user-defined name of the policy.
    config EventGatewayClusterPolicyAclsConfig
    Apply ACLs to virtual cluster traffic.
    gatewayId String
    The UUID of your Gateway.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    labels Map<String,String>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name String
    A unique user-defined name of the policy.
    config EventGatewayClusterPolicyAclsConfig
    Apply ACLs to virtual cluster traffic.
    gatewayId string
    The UUID of your Gateway.
    virtualClusterId string
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    description string
    A human-readable description of the policy. Default: ""
    enabled boolean
    Whether the policy is enabled. Default: true
    labels {[key: string]: string}
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name string
    A unique user-defined name of the policy.
    config EventGatewayClusterPolicyAclsConfigArgs
    Apply ACLs to virtual cluster traffic.
    gateway_id str
    The UUID of your Gateway.
    virtual_cluster_id str
    The ID of the Virtual Cluster.
    condition str
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    description str
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    labels Mapping[str, str]
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name str
    A unique user-defined name of the policy.
    config Property Map
    Apply ACLs to virtual cluster traffic.
    gatewayId String
    The UUID of your Gateway.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    labels Map<String>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name String
    A unique user-defined name of the policy.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the EventGatewayClusterPolicyAcls resource produces the following output properties:

    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Id string
    The provider-assigned unique ID for this managed resource.
    ParentPolicyId string
    The unique identifier of the parent policy, if any.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Id string
    The provider-assigned unique ID for this managed resource.
    ParentPolicyId string
    The unique identifier of the parent policy, if any.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    id String
    The provider-assigned unique ID for this managed resource.
    parentPolicyId String
    The unique identifier of the parent policy, if any.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    createdAt string
    An ISO-8601 timestamp representation of entity creation date.
    id string
    The provider-assigned unique ID for this managed resource.
    parentPolicyId string
    The unique identifier of the parent policy, if any.
    updatedAt string
    An ISO-8601 timestamp representation of entity update date.
    created_at str
    An ISO-8601 timestamp representation of entity creation date.
    id str
    The provider-assigned unique ID for this managed resource.
    parent_policy_id str
    The unique identifier of the parent policy, if any.
    updated_at str
    An ISO-8601 timestamp representation of entity update date.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    id String
    The provider-assigned unique ID for this managed resource.
    parentPolicyId String
    The unique identifier of the parent policy, if any.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.

    Look up Existing EventGatewayClusterPolicyAcls Resource

    Get an existing EventGatewayClusterPolicyAcls resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: EventGatewayClusterPolicyAclsState, opts?: CustomResourceOptions): EventGatewayClusterPolicyAcls
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        condition: Optional[str] = None,
        config: Optional[EventGatewayClusterPolicyAclsConfigArgs] = None,
        created_at: Optional[str] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        gateway_id: Optional[str] = None,
        labels: Optional[Mapping[str, str]] = None,
        name: Optional[str] = None,
        parent_policy_id: Optional[str] = None,
        updated_at: Optional[str] = None,
        virtual_cluster_id: Optional[str] = None) -> EventGatewayClusterPolicyAcls
    func GetEventGatewayClusterPolicyAcls(ctx *Context, name string, id IDInput, state *EventGatewayClusterPolicyAclsState, opts ...ResourceOption) (*EventGatewayClusterPolicyAcls, error)
    public static EventGatewayClusterPolicyAcls Get(string name, Input<string> id, EventGatewayClusterPolicyAclsState? state, CustomResourceOptions? opts = null)
    public static EventGatewayClusterPolicyAcls get(String name, Output<String> id, EventGatewayClusterPolicyAclsState state, CustomResourceOptions options)
    resources:  _:    type: konnect:EventGatewayClusterPolicyAcls    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    Config EventGatewayClusterPolicyAclsConfig
    Apply ACLs to virtual cluster traffic.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    GatewayId string
    The UUID of your Gateway.
    Labels Dictionary<string, string>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    Name string
    A unique user-defined name of the policy.
    ParentPolicyId string
    The unique identifier of the parent policy, if any.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    Config EventGatewayClusterPolicyAclsConfigArgs
    Apply ACLs to virtual cluster traffic.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    GatewayId string
    The UUID of your Gateway.
    Labels map[string]string
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    Name string
    A unique user-defined name of the policy.
    ParentPolicyId string
    The unique identifier of the parent policy, if any.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    config EventGatewayClusterPolicyAclsConfig
    Apply ACLs to virtual cluster traffic.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    gatewayId String
    The UUID of your Gateway.
    labels Map<String,String>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name String
    A unique user-defined name of the policy.
    parentPolicyId String
    The unique identifier of the parent policy, if any.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    config EventGatewayClusterPolicyAclsConfig
    Apply ACLs to virtual cluster traffic.
    createdAt string
    An ISO-8601 timestamp representation of entity creation date.
    description string
    A human-readable description of the policy. Default: ""
    enabled boolean
    Whether the policy is enabled. Default: true
    gatewayId string
    The UUID of your Gateway.
    labels {[key: string]: string}
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name string
    A unique user-defined name of the policy.
    parentPolicyId string
    The unique identifier of the parent policy, if any.
    updatedAt string
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId string
    The ID of the Virtual Cluster.
    condition str
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    config EventGatewayClusterPolicyAclsConfigArgs
    Apply ACLs to virtual cluster traffic.
    created_at str
    An ISO-8601 timestamp representation of entity creation date.
    description str
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    gateway_id str
    The UUID of your Gateway.
    labels Mapping[str, str]
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name str
    A unique user-defined name of the policy.
    parent_policy_id str
    The unique identifier of the parent policy, if any.
    updated_at str
    An ISO-8601 timestamp representation of entity update date.
    virtual_cluster_id str
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    config Property Map
    Apply ACLs to virtual cluster traffic.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    gatewayId String
    The UUID of your Gateway.
    labels Map<String>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name String
    A unique user-defined name of the policy.
    parentPolicyId String
    The unique identifier of the parent policy, if any.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId String
    The ID of the Virtual Cluster.

    Supporting Types

    EventGatewayClusterPolicyAclsConfig, EventGatewayClusterPolicyAclsConfigArgs

    Rules List<EventGatewayClusterPolicyAclsConfigRule>
    Every ACL rule in this list applies independently.
    Rules []EventGatewayClusterPolicyAclsConfigRule
    Every ACL rule in this list applies independently.
    rules List<EventGatewayClusterPolicyAclsConfigRule>
    Every ACL rule in this list applies independently.
    rules EventGatewayClusterPolicyAclsConfigRule[]
    Every ACL rule in this list applies independently.
    rules Sequence[EventGatewayClusterPolicyAclsConfigRule]
    Every ACL rule in this list applies independently.
    rules List<Property Map>
    Every ACL rule in this list applies independently.

    EventGatewayClusterPolicyAclsConfigRule, EventGatewayClusterPolicyAclsConfigRuleArgs

    Action string
    How to handle the request if the rule matches. must be one of ["allow", "deny"]
    Operations List<EventGatewayClusterPolicyAclsConfigRuleOperation>
    Types of Kafka operations to match against. Note that not every operation can apply to every resource type.
    ResourceNames List<EventGatewayClusterPolicyAclsConfigRuleResourceName>
    If any of these entries match, the resource name matches for this rule. A maximum of 50 entries are allowed.
    ResourceType string
    This rule applies to access only for type of resource. must be one of ["topic", "group", <span pulumi-lang-nodejs=""transactionalId"" pulumi-lang-dotnet=""TransactionalId"" pulumi-lang-go=""transactionalId"" pulumi-lang-python=""transactional_id"" pulumi-lang-yaml=""transactionalId"" pulumi-lang-java=""transactionalId"">"transactional_id", "cluster"]
    Action string
    How to handle the request if the rule matches. must be one of ["allow", "deny"]
    Operations []EventGatewayClusterPolicyAclsConfigRuleOperation
    Types of Kafka operations to match against. Note that not every operation can apply to every resource type.
    ResourceNames []EventGatewayClusterPolicyAclsConfigRuleResourceName
    If any of these entries match, the resource name matches for this rule. A maximum of 50 entries are allowed.
    ResourceType string
    This rule applies to access only for type of resource. must be one of ["topic", "group", <span pulumi-lang-nodejs=""transactionalId"" pulumi-lang-dotnet=""TransactionalId"" pulumi-lang-go=""transactionalId"" pulumi-lang-python=""transactional_id"" pulumi-lang-yaml=""transactionalId"" pulumi-lang-java=""transactionalId"">"transactional_id", "cluster"]
    action String
    How to handle the request if the rule matches. must be one of ["allow", "deny"]
    operations List<EventGatewayClusterPolicyAclsConfigRuleOperation>
    Types of Kafka operations to match against. Note that not every operation can apply to every resource type.
    resourceNames List<EventGatewayClusterPolicyAclsConfigRuleResourceName>
    If any of these entries match, the resource name matches for this rule. A maximum of 50 entries are allowed.
    resourceType String
    This rule applies to access only for type of resource. must be one of ["topic", "group", <span pulumi-lang-nodejs=""transactionalId"" pulumi-lang-dotnet=""TransactionalId"" pulumi-lang-go=""transactionalId"" pulumi-lang-python=""transactional_id"" pulumi-lang-yaml=""transactionalId"" pulumi-lang-java=""transactionalId"">"transactional_id", "cluster"]
    action string
    How to handle the request if the rule matches. must be one of ["allow", "deny"]
    operations EventGatewayClusterPolicyAclsConfigRuleOperation[]
    Types of Kafka operations to match against. Note that not every operation can apply to every resource type.
    resourceNames EventGatewayClusterPolicyAclsConfigRuleResourceName[]
    If any of these entries match, the resource name matches for this rule. A maximum of 50 entries are allowed.
    resourceType string
    This rule applies to access only for type of resource. must be one of ["topic", "group", <span pulumi-lang-nodejs=""transactionalId"" pulumi-lang-dotnet=""TransactionalId"" pulumi-lang-go=""transactionalId"" pulumi-lang-python=""transactional_id"" pulumi-lang-yaml=""transactionalId"" pulumi-lang-java=""transactionalId"">"transactional_id", "cluster"]
    action str
    How to handle the request if the rule matches. must be one of ["allow", "deny"]
    operations Sequence[EventGatewayClusterPolicyAclsConfigRuleOperation]
    Types of Kafka operations to match against. Note that not every operation can apply to every resource type.
    resource_names Sequence[EventGatewayClusterPolicyAclsConfigRuleResourceName]
    If any of these entries match, the resource name matches for this rule. A maximum of 50 entries are allowed.
    resource_type str
    This rule applies to access only for type of resource. must be one of ["topic", "group", <span pulumi-lang-nodejs=""transactionalId"" pulumi-lang-dotnet=""TransactionalId"" pulumi-lang-go=""transactionalId"" pulumi-lang-python=""transactional_id"" pulumi-lang-yaml=""transactionalId"" pulumi-lang-java=""transactionalId"">"transactional_id", "cluster"]
    action String
    How to handle the request if the rule matches. must be one of ["allow", "deny"]
    operations List<Property Map>
    Types of Kafka operations to match against. Note that not every operation can apply to every resource type.
    resourceNames List<Property Map>
    If any of these entries match, the resource name matches for this rule. A maximum of 50 entries are allowed.
    resourceType String
    This rule applies to access only for type of resource. must be one of ["topic", "group", <span pulumi-lang-nodejs=""transactionalId"" pulumi-lang-dotnet=""TransactionalId"" pulumi-lang-go=""transactionalId"" pulumi-lang-python=""transactional_id"" pulumi-lang-yaml=""transactionalId"" pulumi-lang-java=""transactionalId"">"transactional_id", "cluster"]

    EventGatewayClusterPolicyAclsConfigRuleOperation, EventGatewayClusterPolicyAclsConfigRuleOperationArgs

    Name string
    must be one of ["all", "alter", "alterconfigs", "create", "delete", "describe", "describeconfigs", <span pulumi-lang-nodejs=""idempotentWrite"" pulumi-lang-dotnet=""IdempotentWrite"" pulumi-lang-go=""idempotentWrite"" pulumi-lang-python=""idempotent_write"" pulumi-lang-yaml=""idempotentWrite"" pulumi-lang-java=""idempotentWrite"">"idempotent_write", "read", "write"]
    Name string
    must be one of ["all", "alter", "alterconfigs", "create", "delete", "describe", "describeconfigs", <span pulumi-lang-nodejs=""idempotentWrite"" pulumi-lang-dotnet=""IdempotentWrite"" pulumi-lang-go=""idempotentWrite"" pulumi-lang-python=""idempotent_write"" pulumi-lang-yaml=""idempotentWrite"" pulumi-lang-java=""idempotentWrite"">"idempotent_write", "read", "write"]
    name String
    must be one of ["all", "alter", "alterconfigs", "create", "delete", "describe", "describeconfigs", <span pulumi-lang-nodejs=""idempotentWrite"" pulumi-lang-dotnet=""IdempotentWrite"" pulumi-lang-go=""idempotentWrite"" pulumi-lang-python=""idempotent_write"" pulumi-lang-yaml=""idempotentWrite"" pulumi-lang-java=""idempotentWrite"">"idempotent_write", "read", "write"]
    name string
    must be one of ["all", "alter", "alterconfigs", "create", "delete", "describe", "describeconfigs", <span pulumi-lang-nodejs=""idempotentWrite"" pulumi-lang-dotnet=""IdempotentWrite"" pulumi-lang-go=""idempotentWrite"" pulumi-lang-python=""idempotent_write"" pulumi-lang-yaml=""idempotentWrite"" pulumi-lang-java=""idempotentWrite"">"idempotent_write", "read", "write"]
    name str
    must be one of ["all", "alter", "alterconfigs", "create", "delete", "describe", "describeconfigs", <span pulumi-lang-nodejs=""idempotentWrite"" pulumi-lang-dotnet=""IdempotentWrite"" pulumi-lang-go=""idempotentWrite"" pulumi-lang-python=""idempotent_write"" pulumi-lang-yaml=""idempotentWrite"" pulumi-lang-java=""idempotentWrite"">"idempotent_write", "read", "write"]
    name String
    must be one of ["all", "alter", "alterconfigs", "create", "delete", "describe", "describeconfigs", <span pulumi-lang-nodejs=""idempotentWrite"" pulumi-lang-dotnet=""IdempotentWrite"" pulumi-lang-go=""idempotentWrite"" pulumi-lang-python=""idempotent_write"" pulumi-lang-yaml=""idempotentWrite"" pulumi-lang-java=""idempotentWrite"">"idempotent_write", "read", "write"]

    EventGatewayClusterPolicyAclsConfigRuleResourceName, EventGatewayClusterPolicyAclsConfigRuleResourceNameArgs

    Match string
    Currently supported are exact matches and globs. All * characters are interpreted as globs, i.e. they match zero or more of any character.
    Match string
    Currently supported are exact matches and globs. All * characters are interpreted as globs, i.e. they match zero or more of any character.
    match String
    Currently supported are exact matches and globs. All * characters are interpreted as globs, i.e. they match zero or more of any character.
    match string
    Currently supported are exact matches and globs. All * characters are interpreted as globs, i.e. they match zero or more of any character.
    match str
    Currently supported are exact matches and globs. All * characters are interpreted as globs, i.e. they match zero or more of any character.
    match String
    Currently supported are exact matches and globs. All * characters are interpreted as globs, i.e. they match zero or more of any character.

    Import

    In Terraform v1.5.0 and later, the import block can be used with the id attribute, for example:

    terraform

    import {

    to = konnect_event_gateway_cluster_policy_acls.my_konnect_event_gateway_cluster_policy_acls

    id = jsonencode({

    gateway_id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

virtual_cluster_id = "..."

    })

    }

    The pulumi import command can be used, for example:

    $ pulumi import konnect:index/eventGatewayClusterPolicyAcls:EventGatewayClusterPolicyAcls my_konnect_event_gateway_cluster_policy_acls '{"gateway_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "virtual_cluster_id": "..."}'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    konnect kong/terraform-provider-konnect
    License
    Notes
    This Pulumi package is based on the konnect Terraform Provider.
    konnect logo
    Viewing docs for konnect 3.11.0
    published on Thursday, Mar 12, 2026 by kong
    Schema (JSON)
    kong/terraform-provider-konnect
      Try Pulumi Cloud free. Your team will thank you.