Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Konnect Provider
  4. API Docs
  5. EventGatewayConsumePolicyDecryptFields
Viewing docs for konnect 3.20.0
published on Monday, Jul 6, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

konnect.EventGatewayConsumePolicyDecryptFields

Viewing docs for konnect 3.20.0
published on Monday, Jul 6, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

    EventGatewayConsumePolicyDecryptFields Resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as konnect from "@pulumi/konnect";

const myEventgatewayconsumepolicydecryptfields = new konnect.EventGatewayConsumePolicyDecryptFields("my_eventgatewayconsumepolicydecryptfields", {
    condition: "record.value.content.foo.bar == \"a-value\"",
    config: {
        decryptFields: {
            paths: [{
                match: "someObject.someArray[1].fieldName",
            }],
        },
        failureMode: "mark",
        keySources: [{
            static: {},
        }],
    },
    description: "",
    enabled: true,
    gatewayId: "9524ec7d-36d9-465d-a8c5-83a3c9390458",
    labels: {
        key: "value",
    },
    name: "...my_name...",
    parentPolicyId: "1aaebe8e-3228-4062-baef-830b26256e35",
    virtualClusterId: "502b3102-936c-4278-b1c9-a3dc4c4dacc6",
});

    import pulumi
import pulumi_konnect as konnect

my_eventgatewayconsumepolicydecryptfields = konnect.EventGatewayConsumePolicyDecryptFields("my_eventgatewayconsumepolicydecryptfields",
    condition="record.value.content.foo.bar == \"a-value\"",
    config={
        "decrypt_fields": {
            "paths": [{
                "match": "someObject.someArray[1].fieldName",
            }],
        },
        "failure_mode": "mark",
        "key_sources": [{
            "static": {},
        }],
    },
    description="",
    enabled=True,
    gateway_id="9524ec7d-36d9-465d-a8c5-83a3c9390458",
    labels={
        "key": "value",
    },
    name="...my_name...",
    parent_policy_id="1aaebe8e-3228-4062-baef-830b26256e35",
    virtual_cluster_id="502b3102-936c-4278-b1c9-a3dc4c4dacc6")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/konnect/v3/konnect"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := konnect.NewEventGatewayConsumePolicyDecryptFields(ctx, "my_eventgatewayconsumepolicydecryptfields", &konnect.EventGatewayConsumePolicyDecryptFieldsArgs{
			Condition: pulumi.String("record.value.content.foo.bar == \"a-value\""),
			Config: &konnect.EventGatewayConsumePolicyDecryptFieldsConfigArgs{
				DecryptFields: &konnect.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsArgs{
					Paths: konnect.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArray{
						&konnect.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArgs{
							Match: pulumi.String("someObject.someArray[1].fieldName"),
						},
					},
				},
				FailureMode: pulumi.String("mark"),
				KeySources: konnect.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArray{
					&konnect.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArgs{
						Static: &konnect.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStaticArgs{},
					},
				},
			},
			Description: pulumi.String(""),
			Enabled:     pulumi.Bool(true),
			GatewayId:   pulumi.String("9524ec7d-36d9-465d-a8c5-83a3c9390458"),
			Labels: pulumi.StringMap{
				"key": pulumi.String("value"),
			},
			Name:             pulumi.String("...my_name..."),
			ParentPolicyId:   pulumi.String("1aaebe8e-3228-4062-baef-830b26256e35"),
			VirtualClusterId: pulumi.String("502b3102-936c-4278-b1c9-a3dc4c4dacc6"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Konnect = Pulumi.Konnect;

return await Deployment.RunAsync(() => 
{
    var myEventgatewayconsumepolicydecryptfields = new Konnect.EventGatewayConsumePolicyDecryptFields("my_eventgatewayconsumepolicydecryptfields", new()
    {
        Condition = "record.value.content.foo.bar == \"a-value\"",
        Config = new Konnect.Inputs.EventGatewayConsumePolicyDecryptFieldsConfigArgs
        {
            DecryptFields = new Konnect.Inputs.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsArgs
            {
                Paths = new[]
                {
                    new Konnect.Inputs.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArgs
                    {
                        Match = "someObject.someArray[1].fieldName",
                    },
                },
            },
            FailureMode = "mark",
            KeySources = new[]
            {
                new Konnect.Inputs.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArgs
                {
                    Static = null,
                },
            },
        },
        Description = "",
        Enabled = true,
        GatewayId = "9524ec7d-36d9-465d-a8c5-83a3c9390458",
        Labels = 
        {
            { "key", "value" },
        },
        Name = "...my_name...",
        ParentPolicyId = "1aaebe8e-3228-4062-baef-830b26256e35",
        VirtualClusterId = "502b3102-936c-4278-b1c9-a3dc4c4dacc6",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.EventGatewayConsumePolicyDecryptFields;
import com.pulumi.konnect.EventGatewayConsumePolicyDecryptFieldsArgs;
import com.pulumi.konnect.inputs.EventGatewayConsumePolicyDecryptFieldsConfigArgs;
import com.pulumi.konnect.inputs.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myEventgatewayconsumepolicydecryptfields = new EventGatewayConsumePolicyDecryptFields("myEventgatewayconsumepolicydecryptfields", EventGatewayConsumePolicyDecryptFieldsArgs.builder()
            .condition("record.value.content.foo.bar == \"a-value\"")
            .config(EventGatewayConsumePolicyDecryptFieldsConfigArgs.builder()
                .decryptFields(EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsArgs.builder()
                    .paths(EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArgs.builder()
                        .match("someObject.someArray[1].fieldName")
                        .build())
                    .build())
                .failureMode("mark")
                .keySources(EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArgs.builder()
                    .static_(EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStaticArgs.builder()
                        .build())
                    .build())
                .build())
            .description("")
            .enabled(true)
            .gatewayId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .labels(Map.of("key", "value"))
            .name("...my_name...")
            .parentPolicyId("1aaebe8e-3228-4062-baef-830b26256e35")
            .virtualClusterId("502b3102-936c-4278-b1c9-a3dc4c4dacc6")
            .build());

    }
}

    resources:
  myEventgatewayconsumepolicydecryptfields:
    type: konnect:EventGatewayConsumePolicyDecryptFields
    name: my_eventgatewayconsumepolicydecryptfields
    properties:
      condition: record.value.content.foo.bar == "a-value"
      config:
        decryptFields:
          paths:
            - match: someObject.someArray[1].fieldName
        failureMode: mark
        keySources:
          - static: {}
      description: ""
      enabled: true
      gatewayId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      labels:
        key: value
      name: '...my_name...'
      parentPolicyId: 1aaebe8e-3228-4062-baef-830b26256e35
      virtualClusterId: 502b3102-936c-4278-b1c9-a3dc4c4dacc6

    Example coming soon!

    Create EventGatewayConsumePolicyDecryptFields Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new EventGatewayConsumePolicyDecryptFields(name: string, args: EventGatewayConsumePolicyDecryptFieldsArgs, opts?: CustomResourceOptions);
    @overload
def EventGatewayConsumePolicyDecryptFields(resource_name: str,
                                           args: EventGatewayConsumePolicyDecryptFieldsArgs,
                                           opts: Optional[ResourceOptions] = None)

@overload
def EventGatewayConsumePolicyDecryptFields(resource_name: str,
                                           opts: Optional[ResourceOptions] = None,
                                           config: Optional[EventGatewayConsumePolicyDecryptFieldsConfigArgs] = None,
                                           gateway_id: Optional[str] = None,
                                           parent_policy_id: Optional[str] = None,
                                           virtual_cluster_id: Optional[str] = None,
                                           condition: Optional[str] = None,
                                           description: Optional[str] = None,
                                           enabled: Optional[bool] = None,
                                           labels: Optional[Mapping[str, str]] = None,
                                           name: Optional[str] = None)
    func NewEventGatewayConsumePolicyDecryptFields(ctx *Context, name string, args EventGatewayConsumePolicyDecryptFieldsArgs, opts ...ResourceOption) (*EventGatewayConsumePolicyDecryptFields, error)
    public EventGatewayConsumePolicyDecryptFields(string name, EventGatewayConsumePolicyDecryptFieldsArgs args, CustomResourceOptions? opts = null)
    public EventGatewayConsumePolicyDecryptFields(String name, EventGatewayConsumePolicyDecryptFieldsArgs args)
public EventGatewayConsumePolicyDecryptFields(String name, EventGatewayConsumePolicyDecryptFieldsArgs args, CustomResourceOptions options)

    type: konnect:EventGatewayConsumePolicyDecryptFields
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "konnect_event_gateway_consume_policy_decrypt_fields" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptFieldsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptFieldsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptFieldsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptFieldsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args EventGatewayConsumePolicyDecryptFieldsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var eventGatewayConsumePolicyDecryptFieldsResource = new Konnect.EventGatewayConsumePolicyDecryptFields("eventGatewayConsumePolicyDecryptFieldsResource", new()
{
    Config = new Konnect.Inputs.EventGatewayConsumePolicyDecryptFieldsConfigArgs
    {
        DecryptFields = new Konnect.Inputs.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsArgs
        {
            Paths = new[]
            {
                new Konnect.Inputs.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArgs
                {
                    Match = "string",
                },
            },
        },
        FailureMode = "string",
        KeySources = new[]
        {
            new Konnect.Inputs.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArgs
            {
                Aws = null,
                Static = null,
            },
        },
    },
    GatewayId = "string",
    ParentPolicyId = "string",
    VirtualClusterId = "string",
    Condition = "string",
    Description = "string",
    Enabled = false,
    Labels = 
    {
        { "string", "string" },
    },
    Name = "string",
});

    example, err := konnect.NewEventGatewayConsumePolicyDecryptFields(ctx, "eventGatewayConsumePolicyDecryptFieldsResource", &konnect.EventGatewayConsumePolicyDecryptFieldsArgs{
	Config: &konnect.EventGatewayConsumePolicyDecryptFieldsConfigArgs{
		DecryptFields: &konnect.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsArgs{
			Paths: konnect.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArray{
				&konnect.EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArgs{
					Match: pulumi.String("string"),
				},
			},
		},
		FailureMode: pulumi.String("string"),
		KeySources: konnect.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArray{
			&konnect.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArgs{
				Aws:    &konnect.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceAwsArgs{},
				Static: &konnect.EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStaticArgs{},
			},
		},
	},
	GatewayId:        pulumi.String("string"),
	ParentPolicyId:   pulumi.String("string"),
	VirtualClusterId: pulumi.String("string"),
	Condition:        pulumi.String("string"),
	Description:      pulumi.String("string"),
	Enabled:          pulumi.Bool(false),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Name: pulumi.String("string"),
})

    resource "konnect_event_gateway_consume_policy_decrypt_fields" "eventGatewayConsumePolicyDecryptFieldsResource" {
  lifecycle {
    create_before_destroy = true
  }
  config = {
    decrypt_fields = {
      paths = [{
        match = "string"
      }]
    }
    failure_mode = "string"
    key_sources = [{
      aws    = {}
      static = {}
    }]
  }
  gateway_id         = "string"
  parent_policy_id   = "string"
  virtual_cluster_id = "string"
  condition          = "string"
  description        = "string"
  enabled            = false
  labels = {
    "string" = "string"
  }
  name = "string"
}

    var eventGatewayConsumePolicyDecryptFieldsResource = new EventGatewayConsumePolicyDecryptFields("eventGatewayConsumePolicyDecryptFieldsResource", EventGatewayConsumePolicyDecryptFieldsArgs.builder()
    .config(EventGatewayConsumePolicyDecryptFieldsConfigArgs.builder()
        .decryptFields(EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsArgs.builder()
            .paths(EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArgs.builder()
                .match("string")
                .build())
            .build())
        .failureMode("string")
        .keySources(EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArgs.builder()
            .aws(EventGatewayConsumePolicyDecryptFieldsConfigKeySourceAwsArgs.builder()
                .build())
            .static_(EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStaticArgs.builder()
                .build())
            .build())
        .build())
    .gatewayId("string")
    .parentPolicyId("string")
    .virtualClusterId("string")
    .condition("string")
    .description("string")
    .enabled(false)
    .labels(Map.of("string", "string"))
    .name("string")
    .build());

    event_gateway_consume_policy_decrypt_fields_resource = konnect.EventGatewayConsumePolicyDecryptFields("eventGatewayConsumePolicyDecryptFieldsResource",
    config={
        "decrypt_fields": {
            "paths": [{
                "match": "string",
            }],
        },
        "failure_mode": "string",
        "key_sources": [{
            "aws": {},
            "static": {},
        }],
    },
    gateway_id="string",
    parent_policy_id="string",
    virtual_cluster_id="string",
    condition="string",
    description="string",
    enabled=False,
    labels={
        "string": "string",
    },
    name="string")

    const eventGatewayConsumePolicyDecryptFieldsResource = new konnect.EventGatewayConsumePolicyDecryptFields("eventGatewayConsumePolicyDecryptFieldsResource", {
    config: {
        decryptFields: {
            paths: [{
                match: "string",
            }],
        },
        failureMode: "string",
        keySources: [{
            aws: {},
            static: {},
        }],
    },
    gatewayId: "string",
    parentPolicyId: "string",
    virtualClusterId: "string",
    condition: "string",
    description: "string",
    enabled: false,
    labels: {
        string: "string",
    },
    name: "string",
});

    type: konnect:EventGatewayConsumePolicyDecryptFields
properties:
    condition: string
    config:
        decryptFields:
            paths:
                - match: string
        failureMode: string
        keySources:
            - aws: {}
              static: {}
    description: string
    enabled: false
    gatewayId: string
    labels:
        string: string
    name: string
    parentPolicyId: string
    virtualClusterId: string

    EventGatewayConsumePolicyDecryptFields Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The EventGatewayConsumePolicyDecryptFields resource accepts the following input properties:

    Config EventGatewayConsumePolicyDecryptFieldsConfig
    The configuration of the decrypt parsed record fields policy.
    GatewayId string
    The UUID of your Gateway.
    ParentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    Labels Dictionary<string, string>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    Name string
    A unique user-defined name of the policy.
    Config EventGatewayConsumePolicyDecryptFieldsConfigArgs
    The configuration of the decrypt parsed record fields policy.
    GatewayId string
    The UUID of your Gateway.
    ParentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    Labels map[string]string

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    Name string
    A unique user-defined name of the policy.
    config object
    The configuration of the decrypt parsed record fields policy.
    gateway_id string
    The UUID of your Gateway.
    parent_policy_id string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtual_cluster_id string
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied.
    description string
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    labels map(string)

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name string
    A unique user-defined name of the policy.
    config EventGatewayConsumePolicyDecryptFieldsConfig
    The configuration of the decrypt parsed record fields policy.
    gatewayId String
    The UUID of your Gateway.
    parentPolicyId String
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    labels Map<String,String>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name String
    A unique user-defined name of the policy.
    config EventGatewayConsumePolicyDecryptFieldsConfig
    The configuration of the decrypt parsed record fields policy.
    gatewayId string
    The UUID of your Gateway.
    parentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtualClusterId string
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied.
    description string
    A human-readable description of the policy. Default: ""
    enabled boolean
    Whether the policy is enabled. Default: true
    labels {[key: string]: string}

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name string
    A unique user-defined name of the policy.
    config EventGatewayConsumePolicyDecryptFieldsConfigArgs
    The configuration of the decrypt parsed record fields policy.
    gateway_id str
    The UUID of your Gateway.
    parent_policy_id str
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtual_cluster_id str
    The ID of the Virtual Cluster.
    condition str
    A string containing the boolean expression that determines whether the policy is applied.
    description str
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    labels Mapping[str, str]

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name str
    A unique user-defined name of the policy.
    config Property Map
    The configuration of the decrypt parsed record fields policy.
    gatewayId String
    The UUID of your Gateway.
    parentPolicyId String
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    labels Map<String>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name String
    A unique user-defined name of the policy.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the EventGatewayConsumePolicyDecryptFields resource produces the following output properties:

    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    created_at string
    An ISO-8601 timestamp representation of entity creation date.
    id string
    The provider-assigned unique ID for this managed resource.
    updated_at string
    An ISO-8601 timestamp representation of entity update date.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    createdAt string
    An ISO-8601 timestamp representation of entity creation date.
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    An ISO-8601 timestamp representation of entity update date.
    created_at str
    An ISO-8601 timestamp representation of entity creation date.
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    An ISO-8601 timestamp representation of entity update date.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.

    Look up Existing EventGatewayConsumePolicyDecryptFields Resource

    Get an existing EventGatewayConsumePolicyDecryptFields resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: EventGatewayConsumePolicyDecryptFieldsState, opts?: CustomResourceOptions): EventGatewayConsumePolicyDecryptFields
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        condition: Optional[str] = None,
        config: Optional[EventGatewayConsumePolicyDecryptFieldsConfigArgs] = None,
        created_at: Optional[str] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        gateway_id: Optional[str] = None,
        labels: Optional[Mapping[str, str]] = None,
        name: Optional[str] = None,
        parent_policy_id: Optional[str] = None,
        updated_at: Optional[str] = None,
        virtual_cluster_id: Optional[str] = None) -> EventGatewayConsumePolicyDecryptFields
    func GetEventGatewayConsumePolicyDecryptFields(ctx *Context, name string, id IDInput, state *EventGatewayConsumePolicyDecryptFieldsState, opts ...ResourceOption) (*EventGatewayConsumePolicyDecryptFields, error)
    public static EventGatewayConsumePolicyDecryptFields Get(string name, Input<string> id, EventGatewayConsumePolicyDecryptFieldsState? state, CustomResourceOptions? opts = null)
    public static EventGatewayConsumePolicyDecryptFields get(String name, Output<String> id, EventGatewayConsumePolicyDecryptFieldsState state, CustomResourceOptions options)
    resources:  _:    type: konnect:EventGatewayConsumePolicyDecryptFields    get:      id: ${id}
    import {
  to = konnect_event_gateway_consume_policy_decrypt_fields.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Condition string
    A string containing the boolean expression that determines whether the policy is applied.
    Config EventGatewayConsumePolicyDecryptFieldsConfig
    The configuration of the decrypt parsed record fields policy.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    GatewayId string
    The UUID of your Gateway.
    Labels Dictionary<string, string>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    Name string
    A unique user-defined name of the policy.
    ParentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied.
    Config EventGatewayConsumePolicyDecryptFieldsConfigArgs
    The configuration of the decrypt parsed record fields policy.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    GatewayId string
    The UUID of your Gateway.
    Labels map[string]string

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    Name string
    A unique user-defined name of the policy.
    ParentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied.
    config object
    The configuration of the decrypt parsed record fields policy.
    created_at string
    An ISO-8601 timestamp representation of entity creation date.
    description string
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    gateway_id string
    The UUID of your Gateway.
    labels map(string)

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name string
    A unique user-defined name of the policy.
    parent_policy_id string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updated_at string
    An ISO-8601 timestamp representation of entity update date.
    virtual_cluster_id string
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied.
    config EventGatewayConsumePolicyDecryptFieldsConfig
    The configuration of the decrypt parsed record fields policy.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    gatewayId String
    The UUID of your Gateway.
    labels Map<String,String>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name String
    A unique user-defined name of the policy.
    parentPolicyId String
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied.
    config EventGatewayConsumePolicyDecryptFieldsConfig
    The configuration of the decrypt parsed record fields policy.
    createdAt string
    An ISO-8601 timestamp representation of entity creation date.
    description string
    A human-readable description of the policy. Default: ""
    enabled boolean
    Whether the policy is enabled. Default: true
    gatewayId string
    The UUID of your Gateway.
    labels {[key: string]: string}

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name string
    A unique user-defined name of the policy.
    parentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updatedAt string
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId string
    The ID of the Virtual Cluster.
    condition str
    A string containing the boolean expression that determines whether the policy is applied.
    config EventGatewayConsumePolicyDecryptFieldsConfigArgs
    The configuration of the decrypt parsed record fields policy.
    created_at str
    An ISO-8601 timestamp representation of entity creation date.
    description str
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    gateway_id str
    The UUID of your Gateway.
    labels Mapping[str, str]

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name str
    A unique user-defined name of the policy.
    parent_policy_id str
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updated_at str
    An ISO-8601 timestamp representation of entity update date.
    virtual_cluster_id str
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied.
    config Property Map
    The configuration of the decrypt parsed record fields policy.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    gatewayId String
    The UUID of your Gateway.
    labels Map<String>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name String
    A unique user-defined name of the policy.
    parentPolicyId String
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId String
    The ID of the Virtual Cluster.

    Supporting Types

    EventGatewayConsumePolicyDecryptFieldsConfig, EventGatewayConsumePolicyDecryptFieldsConfigArgs

    DecryptFields EventGatewayConsumePolicyDecryptFieldsConfigDecryptFields
    Selects fields of a parsed record for decryption.
    FailureMode string
    Describes how to handle a failure in a policy applied to consumed records.
    KeySources List<EventGatewayConsumePolicyDecryptFieldsConfigKeySource>
    Describes how to find a symmetric key for decryption.
    DecryptFields EventGatewayConsumePolicyDecryptFieldsConfigDecryptFields
    Selects fields of a parsed record for decryption.
    FailureMode string
    Describes how to handle a failure in a policy applied to consumed records.
    KeySources []EventGatewayConsumePolicyDecryptFieldsConfigKeySource
    Describes how to find a symmetric key for decryption.
    decrypt_fields object
    Selects fields of a parsed record for decryption.
    failure_mode string
    Describes how to handle a failure in a policy applied to consumed records.
    key_sources list(object)
    Describes how to find a symmetric key for decryption.
    decryptFields EventGatewayConsumePolicyDecryptFieldsConfigDecryptFields
    Selects fields of a parsed record for decryption.
    failureMode String
    Describes how to handle a failure in a policy applied to consumed records.
    keySources List<EventGatewayConsumePolicyDecryptFieldsConfigKeySource>
    Describes how to find a symmetric key for decryption.
    decryptFields EventGatewayConsumePolicyDecryptFieldsConfigDecryptFields
    Selects fields of a parsed record for decryption.
    failureMode string
    Describes how to handle a failure in a policy applied to consumed records.
    keySources EventGatewayConsumePolicyDecryptFieldsConfigKeySource[]
    Describes how to find a symmetric key for decryption.
    decrypt_fields EventGatewayConsumePolicyDecryptFieldsConfigDecryptFields
    Selects fields of a parsed record for decryption.
    failure_mode str
    Describes how to handle a failure in a policy applied to consumed records.
    key_sources Sequence[EventGatewayConsumePolicyDecryptFieldsConfigKeySource]
    Describes how to find a symmetric key for decryption.
    decryptFields Property Map
    Selects fields of a parsed record for decryption.
    failureMode String
    Describes how to handle a failure in a policy applied to consumed records.
    keySources List<Property Map>
    Describes how to find a symmetric key for decryption.

    EventGatewayConsumePolicyDecryptFieldsConfigDecryptFields, EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsArgs

    EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPath, EventGatewayConsumePolicyDecryptFieldsConfigDecryptFieldsPathArgs

    Match string
    A field selector. It can select nested fields and array entries.
    Match string
    A field selector. It can select nested fields and array entries.
    match string
    A field selector. It can select nested fields and array entries.
    match String
    A field selector. It can select nested fields and array entries.
    match string
    A field selector. It can select nested fields and array entries.
    match str
    A field selector. It can select nested fields and array entries.
    match String
    A field selector. It can select nested fields and array entries.

    EventGatewayConsumePolicyDecryptFieldsConfigKeySource, EventGatewayConsumePolicyDecryptFieldsConfigKeySourceArgs

    Aws EventGatewayConsumePolicyDecryptFieldsConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    Static EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStatic
    A key source that uses static symmetric keys.
    Aws EventGatewayConsumePolicyDecryptFieldsConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    Static EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStatic
    A key source that uses static symmetric keys.
    aws object
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static object
    A key source that uses static symmetric keys.
    aws EventGatewayConsumePolicyDecryptFieldsConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static_ EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStatic
    A key source that uses static symmetric keys.
    aws EventGatewayConsumePolicyDecryptFieldsConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStatic
    A key source that uses static symmetric keys.
    aws EventGatewayConsumePolicyDecryptFieldsConfigKeySourceAws
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static EventGatewayConsumePolicyDecryptFieldsConfigKeySourceStatic
    A key source that uses static symmetric keys.
    aws Property Map
    A key source that uses an AWS KMS to find a symmetric key. Load KMS credentials from the environment.
    static Property Map
    A key source that uses static symmetric keys.

    Import

    In Terraform v1.5.0 and later, the import block can be used with the id attribute, for example:

    terraform

    import {

    to = konnect_event_gateway_consume_policy_decrypt_fields.my_konnect_event_gateway_consume_policy_decrypt_fields

    id = jsonencode({

    gateway_id         = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

id                 = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

virtual_cluster_id = "..."

    })

    }

    The pulumi import command can be used, for example:

    $ pulumi import konnect:index/eventGatewayConsumePolicyDecryptFields:EventGatewayConsumePolicyDecryptFields my_konnect_event_gateway_consume_policy_decrypt_fields '{"gateway_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "virtual_cluster_id": "..."}'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    konnect kong/terraform-provider-konnect
    License
    Notes
    This Pulumi package is based on the konnect Terraform Provider.
    Viewing docs for konnect 3.20.0
    published on Monday, Jul 6, 2026 by kong
    Schema (JSON)
    kong/terraform-provider-konnect

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial