1. Packages
  2. Konnect Provider
  3. API Docs
  4. EventGatewayConsumePolicyDecrypt
Viewing docs for konnect 3.11.0
published on Thursday, Mar 12, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

konnect.EventGatewayConsumePolicyDecrypt

konnect logo
Viewing docs for konnect 3.11.0
published on Thursday, Mar 12, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

    EventGatewayConsumePolicyDecrypt Resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as konnect from "@pulumi/konnect";

const myEventgatewayconsumepolicydecrypt = new konnect.EventGatewayConsumePolicyDecrypt("my_eventgatewayconsumepolicydecrypt", {
    condition: "context.topic.name.endsWith(\"my_suffix\") && record.headers[\"x-flag\"] == \"a-value\"",
    config: {
        failureMode: "passthrough",
        keySources: [{
            aws: {},
        }],
        partOfRecords: ["key"],
    },
    description: "...my_description...",
    enabled: false,
    gatewayId: "9524ec7d-36d9-465d-a8c5-83a3c9390458",
    labels: {
        key: "value",
    },
    name: "...my_name...",
    virtualClusterId: "05c6c607-3c42-45e9-a9e8-3e6338120724",
});

    import pulumi
import pulumi_konnect as konnect

my_eventgatewayconsumepolicydecrypt = konnect.EventGatewayConsumePolicyDecrypt("my_eventgatewayconsumepolicydecrypt",
    condition="context.topic.name.endsWith(\"my_suffix\") && record.headers[\"x-flag\"] == \"a-value\"",
    config={
        "failure_mode": "passthrough",
        "key_sources": [{
            "aws": {},
        }],
        "part_of_records": ["key"],
    },
    description="...my_description...",
    enabled=False,
    gateway_id="9524ec7d-36d9-465d-a8c5-83a3c9390458",
    labels={
        "key": "value",
    },
    name="...my_name...",
    virtual_cluster_id="05c6c607-3c42-45e9-a9e8-3e6338120724")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/konnect/v3/konnect"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := konnect.NewEventGatewayConsumePolicyDecrypt(ctx, "my_eventgatewayconsumepolicydecrypt", &konnect.EventGatewayConsumePolicyDecryptArgs{
			Condition: pulumi.String("context.topic.name.endsWith(\"my_suffix\") && record.headers[\"x-flag\"] == \"a-value\""),
			Config: &konnect.EventGatewayConsumePolicyDecryptConfigArgs{
				FailureMode: pulumi.String("passthrough"),
				KeySources: konnect.EventGatewayConsumePolicyDecryptConfigKeySourceArray{
					&konnect.EventGatewayConsumePolicyDecryptConfigKeySourceArgs{
						Aws: &konnect.EventGatewayConsumePolicyDecryptConfigKeySourceAwsArgs{},
					},
				},
				PartOfRecords: pulumi.StringArray{
					pulumi.String("key"),
				},
			},
			Description: pulumi.String("...my_description..."),
			Enabled:     pulumi.Bool(false),
			GatewayId:   pulumi.String("9524ec7d-36d9-465d-a8c5-83a3c9390458"),
			Labels: pulumi.StringMap{
				"key": pulumi.String("value"),
			},
			Name:             pulumi.String("...my_name..."),
			VirtualClusterId: pulumi.String("05c6c607-3c42-45e9-a9e8-3e6338120724"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Konnect = Pulumi.Konnect;

return await Deployment.RunAsync(() => 
{
    var myEventgatewayconsumepolicydecrypt = new Konnect.EventGatewayConsumePolicyDecrypt("my_eventgatewayconsumepolicydecrypt", new()
    {
        Condition = "context.topic.name.endsWith(\"my_suffix\") && record.headers[\"x-flag\"] == \"a-value\"",
        Config = new Konnect.Inputs.EventGatewayConsumePolicyDecryptConfigArgs
        {
            FailureMode = "passthrough",
            KeySources = new[]
            {
                new Konnect.Inputs.EventGatewayConsumePolicyDecryptConfigKeySourceArgs
                {
                    Aws = null,
                },
            },
            PartOfRecords = new[]
            {
                "key",
            },
        },
        Description = "...my_description...",
        Enabled = false,
        GatewayId = "9524ec7d-36d9-465d-a8c5-83a3c9390458",
        Labels = 
        {
            { "key", "value" },
        },
        Name = "...my_name...",
        VirtualClusterId = "05c6c607-3c42-45e9-a9e8-3e6338120724",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.EventGatewayConsumePolicyDecrypt;
import com.pulumi.konnect.EventGatewayConsumePolicyDecryptArgs;
import com.pulumi.konnect.inputs.EventGatewayConsumePolicyDecryptConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myEventgatewayconsumepolicydecrypt = new EventGatewayConsumePolicyDecrypt("myEventgatewayconsumepolicydecrypt", EventGatewayConsumePolicyDecryptArgs.builder()
            .condition("context.topic.name.endsWith(\"my_suffix\") && record.headers[\"x-flag\"] == \"a-value\"")
            .config(EventGatewayConsumePolicyDecryptConfigArgs.builder()
                .failureMode("passthrough")
                .keySources(EventGatewayConsumePolicyDecryptConfigKeySourceArgs.builder()
                    .aws(EventGatewayConsumePolicyDecryptConfigKeySourceAwsArgs.builder()
                        .build())
                    .build())
                .partOfRecords("key")
                .build())
            .description("...my_description...")
            .enabled(false)
            .gatewayId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .labels(Map.of("key", "value"))
            .name("...my_name...")
            .virtualClusterId("05c6c607-3c42-45e9-a9e8-3e6338120724")
            .build());

    }
}

    resources:
  myEventgatewayconsumepolicydecrypt:
    type: konnect:EventGatewayConsumePolicyDecrypt
    name: my_eventgatewayconsumepolicydecrypt
    properties:
      condition: context.topic.name.endsWith("my_suffix") && record.headers["x-flag"] == "a-value"
      config:
        failureMode: passthrough
        keySources:
          - aws: {}
        partOfRecords:
          - key
      description: '...my_description...'
      enabled: false
      gatewayId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      labels:
        key: value
      name: '...my_name...'
      virtualClusterId: 05c6c607-3c42-45e9-a9e8-3e6338120724

    Create EventGatewayConsumePolicyDecrypt Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new EventGatewayConsumePolicyDecrypt(name: string, args: EventGatewayConsumePolicyDecryptArgs, opts?: CustomResourceOptions);
    @overload
def EventGatewayConsumePolicyDecrypt(resource_name: str,
                                     args: EventGatewayConsumePolicyDecryptArgs,
                                     opts: Optional[ResourceOptions] = None)

@overload
def EventGatewayConsumePolicyDecrypt(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     config: Optional[EventGatewayConsumePolicyDecryptConfigArgs] = None,
                                     gateway_id: Optional[str] = None,
                                     virtual_cluster_id: Optional[str] = None,
                                     condition: Optional[str] = None,
                                     description: Optional[str] = None,
                                     enabled: Optional[bool] = None,
                                     labels: Optional[Mapping[str, str]] = None,
                                     name: Optional[str] = None)
    func NewEventGatewayConsumePolicyDecrypt(ctx *Context, name string, args EventGatewayConsumePolicyDecryptArgs, opts ...ResourceOption) (*EventGatewayConsumePolicyDecrypt, error)
    public EventGatewayConsumePolicyDecrypt(string name, EventGatewayConsumePolicyDecryptArgs args, CustomResourceOptions? opts = null)
    public EventGatewayConsumePolicyDecrypt(String name, EventGatewayConsumePolicyDecryptArgs args)
public EventGatewayConsumePolicyDecrypt(String name, EventGatewayConsumePolicyDecryptArgs args, CustomResourceOptions options)

    type: konnect:EventGatewayConsumePolicyDecrypt
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var eventGatewayConsumePolicyDecryptResource = new Konnect.EventGatewayConsumePolicyDecrypt("eventGatewayConsumePolicyDecryptResource", new()
{
    Config = new Konnect.Inputs.EventGatewayConsumePolicyDecryptConfigArgs
    {
        FailureMode = "string",
        KeySources = new[]
        {
            new Konnect.Inputs.EventGatewayConsumePolicyDecryptConfigKeySourceArgs
            {
                Aws = null,
                Static = null,
            },
        },
        PartOfRecords = new[]
        {
            "string",
        },
    },
    GatewayId = "string",
    VirtualClusterId = "string",
    Condition = "string",
    Description = "string",
    Enabled = false,
    Labels = 
    {
        { "string", "string" },
    },
    Name = "string",
});

    example, err := konnect.NewEventGatewayConsumePolicyDecrypt(ctx, "eventGatewayConsumePolicyDecryptResource", &konnect.EventGatewayConsumePolicyDecryptArgs{
	Config: &konnect.EventGatewayConsumePolicyDecryptConfigArgs{
		FailureMode: pulumi.String("string"),
		KeySources: konnect.EventGatewayConsumePolicyDecryptConfigKeySourceArray{
			&konnect.EventGatewayConsumePolicyDecryptConfigKeySourceArgs{
				Aws:    &konnect.EventGatewayConsumePolicyDecryptConfigKeySourceAwsArgs{},
				Static: &konnect.EventGatewayConsumePolicyDecryptConfigKeySourceStaticArgs{},
			},
		},
		PartOfRecords: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	GatewayId:        pulumi.String("string"),
	VirtualClusterId: pulumi.String("string"),
	Condition:        pulumi.String("string"),
	Description:      pulumi.String("string"),
	Enabled:          pulumi.Bool(false),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Name: pulumi.String("string"),
})

    var eventGatewayConsumePolicyDecryptResource = new EventGatewayConsumePolicyDecrypt("eventGatewayConsumePolicyDecryptResource", EventGatewayConsumePolicyDecryptArgs.builder()
    .config(EventGatewayConsumePolicyDecryptConfigArgs.builder()
        .failureMode("string")
        .keySources(EventGatewayConsumePolicyDecryptConfigKeySourceArgs.builder()
            .aws(EventGatewayConsumePolicyDecryptConfigKeySourceAwsArgs.builder()
                .build())
            .static_(EventGatewayConsumePolicyDecryptConfigKeySourceStaticArgs.builder()
                .build())
            .build())
        .partOfRecords("string")
        .build())
    .gatewayId("string")
    .virtualClusterId("string")
    .condition("string")
    .description("string")
    .enabled(false)
    .labels(Map.of("string", "string"))
    .name("string")
    .build());

    event_gateway_consume_policy_decrypt_resource = konnect.EventGatewayConsumePolicyDecrypt("eventGatewayConsumePolicyDecryptResource",
    config={
        "failure_mode": "string",
        "key_sources": [{
            "aws": {},
            "static": {},
        }],
        "part_of_records": ["string"],
    },
    gateway_id="string",
    virtual_cluster_id="string",
    condition="string",
    description="string",
    enabled=False,
    labels={
        "string": "string",
    },
    name="string")

    const eventGatewayConsumePolicyDecryptResource = new konnect.EventGatewayConsumePolicyDecrypt("eventGatewayConsumePolicyDecryptResource", {
    config: {
        failureMode: "string",
        keySources: [{
            aws: {},
            static: {},
        }],
        partOfRecords: ["string"],
    },
    gatewayId: "string",
    virtualClusterId: "string",
    condition: "string",
    description: "string",
    enabled: false,
    labels: {
        string: "string",
    },
    name: "string",
});

    type: konnect:EventGatewayConsumePolicyDecrypt
properties:
    condition: string
    config:
        failureMode: string
        keySources:
            - aws: {}
              static: {}
        partOfRecords:
            - string
    description: string
    enabled: false
    gatewayId: string
    labels:
        string: string
    name: string
    virtualClusterId: string

    EventGatewayConsumePolicyDecrypt Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The EventGatewayConsumePolicyDecrypt resource accepts the following input properties:

    Config EventGatewayConsumePolicyDecryptConfig
    The configuration of the decrypt policy.
    GatewayId string
    The UUID of your Gateway.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    Labels Dictionary<string, string>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    Name string
    A unique user-defined name of the policy.
    Config EventGatewayConsumePolicyDecryptConfigArgs
    The configuration of the decrypt policy.
    GatewayId string
    The UUID of your Gateway.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    Labels map[string]string
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    Name string
    A unique user-defined name of the policy.
    config EventGatewayConsumePolicyDecryptConfig
    The configuration of the decrypt policy.
    gatewayId String
    The UUID of your Gateway.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    labels Map<String,String>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name String
    A unique user-defined name of the policy.
    config EventGatewayConsumePolicyDecryptConfig
    The configuration of the decrypt policy.
    gatewayId string
    The UUID of your Gateway.
    virtualClusterId string
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    description string
    A human-readable description of the policy. Default: ""
    enabled boolean
    Whether the policy is enabled. Default: true
    labels {[key: string]: string}
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name string
    A unique user-defined name of the policy.
    config EventGatewayConsumePolicyDecryptConfigArgs
    The configuration of the decrypt policy.
    gateway_id str
    The UUID of your Gateway.
    virtual_cluster_id str
    The ID of the Virtual Cluster.
    condition str
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    description str
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    labels Mapping[str, str]
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name str
    A unique user-defined name of the policy.
    config Property Map
    The configuration of the decrypt policy.
    gatewayId String
    The UUID of your Gateway.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    labels Map<String>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name String
    A unique user-defined name of the policy.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the EventGatewayConsumePolicyDecrypt resource produces the following output properties:

    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Id string
    The provider-assigned unique ID for this managed resource.
    ParentPolicyId string
    The unique identifier of the parent policy, if any.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Id string
    The provider-assigned unique ID for this managed resource.
    ParentPolicyId string
    The unique identifier of the parent policy, if any.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    id String
    The provider-assigned unique ID for this managed resource.
    parentPolicyId String
    The unique identifier of the parent policy, if any.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    createdAt string
    An ISO-8601 timestamp representation of entity creation date.
    id string
    The provider-assigned unique ID for this managed resource.
    parentPolicyId string
    The unique identifier of the parent policy, if any.
    updatedAt string
    An ISO-8601 timestamp representation of entity update date.
    created_at str
    An ISO-8601 timestamp representation of entity creation date.
    id str
    The provider-assigned unique ID for this managed resource.
    parent_policy_id str
    The unique identifier of the parent policy, if any.
    updated_at str
    An ISO-8601 timestamp representation of entity update date.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    id String
    The provider-assigned unique ID for this managed resource.
    parentPolicyId String
    The unique identifier of the parent policy, if any.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.

    Look up Existing EventGatewayConsumePolicyDecrypt Resource

    Get an existing EventGatewayConsumePolicyDecrypt resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: EventGatewayConsumePolicyDecryptState, opts?: CustomResourceOptions): EventGatewayConsumePolicyDecrypt
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        condition: Optional[str] = None,
        config: Optional[EventGatewayConsumePolicyDecryptConfigArgs] = None,
        created_at: Optional[str] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        gateway_id: Optional[str] = None,
        labels: Optional[Mapping[str, str]] = None,
        name: Optional[str] = None,
        parent_policy_id: Optional[str] = None,
        updated_at: Optional[str] = None,
        virtual_cluster_id: Optional[str] = None) -> EventGatewayConsumePolicyDecrypt
    func GetEventGatewayConsumePolicyDecrypt(ctx *Context, name string, id IDInput, state *EventGatewayConsumePolicyDecryptState, opts ...ResourceOption) (*EventGatewayConsumePolicyDecrypt, error)
    public static EventGatewayConsumePolicyDecrypt Get(string name, Input<string> id, EventGatewayConsumePolicyDecryptState? state, CustomResourceOptions? opts = null)
    public static EventGatewayConsumePolicyDecrypt get(String name, Output<String> id, EventGatewayConsumePolicyDecryptState state, CustomResourceOptions options)
    resources:  _:    type: konnect:EventGatewayConsumePolicyDecrypt    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    Config EventGatewayConsumePolicyDecryptConfig
    The configuration of the decrypt policy.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    GatewayId string
    The UUID of your Gateway.
    Labels Dictionary<string, string>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    Name string
    A unique user-defined name of the policy.
    ParentPolicyId string
    The unique identifier of the parent policy, if any.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    Config EventGatewayConsumePolicyDecryptConfigArgs
    The configuration of the decrypt policy.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    GatewayId string
    The UUID of your Gateway.
    Labels map[string]string
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    Name string
    A unique user-defined name of the policy.
    ParentPolicyId string
    The unique identifier of the parent policy, if any.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    config EventGatewayConsumePolicyDecryptConfig
    The configuration of the decrypt policy.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    gatewayId String
    The UUID of your Gateway.
    labels Map<String,String>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name String
    A unique user-defined name of the policy.
    parentPolicyId String
    The unique identifier of the parent policy, if any.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    config EventGatewayConsumePolicyDecryptConfig
    The configuration of the decrypt policy.
    createdAt string
    An ISO-8601 timestamp representation of entity creation date.
    description string
    A human-readable description of the policy. Default: ""
    enabled boolean
    Whether the policy is enabled. Default: true
    gatewayId string
    The UUID of your Gateway.
    labels {[key: string]: string}
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name string
    A unique user-defined name of the policy.
    parentPolicyId string
    The unique identifier of the parent policy, if any.
    updatedAt string
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId string
    The ID of the Virtual Cluster.
    condition str
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    config EventGatewayConsumePolicyDecryptConfigArgs
    The configuration of the decrypt policy.
    created_at str
    An ISO-8601 timestamp representation of entity creation date.
    description str
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    gateway_id str
    The UUID of your Gateway.
    labels Mapping[str, str]
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name str
    A unique user-defined name of the policy.
    parent_policy_id str
    The unique identifier of the parent policy, if any.
    updated_at str
    An ISO-8601 timestamp representation of entity update date.
    virtual_cluster_id str
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied. Default: ""
    config Property Map
    The configuration of the decrypt policy.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    gatewayId String
    The UUID of your Gateway.
    labels Map<String>
    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.
    name String
    A unique user-defined name of the policy.
    parentPolicyId String
    The unique identifier of the parent policy, if any.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId String
    The ID of the Virtual Cluster.

    Supporting Types

    EventGatewayConsumePolicyDecryptConfig, EventGatewayConsumePolicyDecryptConfigArgs

    FailureMode string
    Describes how to handle failing encryption or decryption. Use error if the record should be rejected if encryption or decryption fails. Use passthrough to ignore encryption or decryption failure and continue proxying the record. must be one of ["error", "passthrough"]
    KeySources List<EventGatewayConsumePolicyDecryptConfigKeySource>
    Describes how to find a symmetric key for decryption.
    PartOfRecords List<string>
    Describes the parts of a record to decrypt.
    FailureMode string
    Describes how to handle failing encryption or decryption. Use error if the record should be rejected if encryption or decryption fails. Use passthrough to ignore encryption or decryption failure and continue proxying the record. must be one of ["error", "passthrough"]
    KeySources []EventGatewayConsumePolicyDecryptConfigKeySource
    Describes how to find a symmetric key for decryption.
    PartOfRecords []string
    Describes the parts of a record to decrypt.
    failureMode String
    Describes how to handle failing encryption or decryption. Use error if the record should be rejected if encryption or decryption fails. Use passthrough to ignore encryption or decryption failure and continue proxying the record. must be one of ["error", "passthrough"]
    keySources List<EventGatewayConsumePolicyDecryptConfigKeySource>
    Describes how to find a symmetric key for decryption.
    partOfRecords List<String>
    Describes the parts of a record to decrypt.
    failureMode string
    Describes how to handle failing encryption or decryption. Use error if the record should be rejected if encryption or decryption fails. Use passthrough to ignore encryption or decryption failure and continue proxying the record. must be one of ["error", "passthrough"]
    keySources EventGatewayConsumePolicyDecryptConfigKeySource[]
    Describes how to find a symmetric key for decryption.
    partOfRecords string[]
    Describes the parts of a record to decrypt.
    failure_mode str
    Describes how to handle failing encryption or decryption. Use error if the record should be rejected if encryption or decryption fails. Use passthrough to ignore encryption or decryption failure and continue proxying the record. must be one of ["error", "passthrough"]
    key_sources Sequence[EventGatewayConsumePolicyDecryptConfigKeySource]
    Describes how to find a symmetric key for decryption.
    part_of_records Sequence[str]
    Describes the parts of a record to decrypt.
    failureMode String
    Describes how to handle failing encryption or decryption. Use error if the record should be rejected if encryption or decryption fails. Use passthrough to ignore encryption or decryption failure and continue proxying the record. must be one of ["error", "passthrough"]
    keySources List<Property Map>
    Describes how to find a symmetric key for decryption.
    partOfRecords List<String>
    Describes the parts of a record to decrypt.

    EventGatewayConsumePolicyDecryptConfigKeySource, EventGatewayConsumePolicyDecryptConfigKeySourceArgs

    Aws EventGatewayConsumePolicyDecryptConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    Static EventGatewayConsumePolicyDecryptConfigKeySourceStatic
    A key source that uses static symmetric keys.
    Aws EventGatewayConsumePolicyDecryptConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    Static EventGatewayConsumePolicyDecryptConfigKeySourceStatic
    A key source that uses static symmetric keys.
    aws EventGatewayConsumePolicyDecryptConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static_ EventGatewayConsumePolicyDecryptConfigKeySourceStatic
    A key source that uses static symmetric keys.
    aws EventGatewayConsumePolicyDecryptConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static EventGatewayConsumePolicyDecryptConfigKeySourceStatic
    A key source that uses static symmetric keys.
    aws EventGatewayConsumePolicyDecryptConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static EventGatewayConsumePolicyDecryptConfigKeySourceStatic
    A key source that uses static symmetric keys.
    aws Property Map
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static Property Map
    A key source that uses static symmetric keys.

    Import

    In Terraform v1.5.0 and later, the import block can be used with the id attribute, for example:

    terraform

    import {

    to = konnect_event_gateway_consume_policy_decrypt.my_konnect_event_gateway_consume_policy_decrypt

    id = jsonencode({

    gateway_id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

virtual_cluster_id = "..."

    })

    }

    The pulumi import command can be used, for example:

    $ pulumi import konnect:index/eventGatewayConsumePolicyDecrypt:EventGatewayConsumePolicyDecrypt my_konnect_event_gateway_consume_policy_decrypt '{"gateway_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "virtual_cluster_id": "..."}'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    konnect kong/terraform-provider-konnect
    License
    Notes
    This Pulumi package is based on the konnect Terraform Provider.
    konnect logo
    Viewing docs for konnect 3.11.0
    published on Thursday, Mar 12, 2026 by kong
    Schema (JSON)
    kong/terraform-provider-konnect
      Try Pulumi Cloud free. Your team will thank you.