Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Konnect Provider
  4. API Docs
  5. EventGatewayProducePolicyEncryptFields
Viewing docs for konnect 3.20.0
published on Monday, Jul 6, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

konnect.EventGatewayProducePolicyEncryptFields

Viewing docs for konnect 3.20.0
published on Monday, Jul 6, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

    EventGatewayProducePolicyEncryptFields Resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as konnect from "@pulumi/konnect";

const myEventgatewayproducepolicyencryptfields = new konnect.EventGatewayProducePolicyEncryptFields("my_eventgatewayproducepolicyencryptfields", {
    condition: "record.value.content.foo.bar == \"a-value\"",
    config: {
        encryptFields: [{
            encryptionKey: {
                static: {
                    key: {
                        id: "5bf3a39d-29c8-4db0-a5cf-8b6709e7b297",
                    },
                },
            },
            paths: [{
                match: "someObject.someArray[1].fieldName",
            }],
        }],
        failureMode: "mark",
    },
    description: "",
    enabled: true,
    gatewayId: "9524ec7d-36d9-465d-a8c5-83a3c9390458",
    labels: {
        key: "value",
    },
    name: "...my_name...",
    parentPolicyId: "53589770-fabe-4fbd-9218-75adfeed2fe4",
    virtualClusterId: "5a736330-9764-4c58-8d01-dbcb745874a1",
});

    import pulumi
import pulumi_konnect as konnect

my_eventgatewayproducepolicyencryptfields = konnect.EventGatewayProducePolicyEncryptFields("my_eventgatewayproducepolicyencryptfields",
    condition="record.value.content.foo.bar == \"a-value\"",
    config={
        "encrypt_fields": [{
            "encryption_key": {
                "static": {
                    "key": {
                        "id": "5bf3a39d-29c8-4db0-a5cf-8b6709e7b297",
                    },
                },
            },
            "paths": [{
                "match": "someObject.someArray[1].fieldName",
            }],
        }],
        "failure_mode": "mark",
    },
    description="",
    enabled=True,
    gateway_id="9524ec7d-36d9-465d-a8c5-83a3c9390458",
    labels={
        "key": "value",
    },
    name="...my_name...",
    parent_policy_id="53589770-fabe-4fbd-9218-75adfeed2fe4",
    virtual_cluster_id="5a736330-9764-4c58-8d01-dbcb745874a1")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/konnect/v3/konnect"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := konnect.NewEventGatewayProducePolicyEncryptFields(ctx, "my_eventgatewayproducepolicyencryptfields", &konnect.EventGatewayProducePolicyEncryptFieldsArgs{
			Condition: pulumi.String("record.value.content.foo.bar == \"a-value\""),
			Config: &konnect.EventGatewayProducePolicyEncryptFieldsConfigArgs{
				EncryptFields: konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArray{
					&konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArgs{
						EncryptionKey: &konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyArgs{
							Static: &konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticArgs{
								Key: &konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticKeyArgs{
									Id: pulumi.String("5bf3a39d-29c8-4db0-a5cf-8b6709e7b297"),
								},
							},
						},
						Paths: konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArray{
							&konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArgs{
								Match: pulumi.String("someObject.someArray[1].fieldName"),
							},
						},
					},
				},
				FailureMode: pulumi.String("mark"),
			},
			Description: pulumi.String(""),
			Enabled:     pulumi.Bool(true),
			GatewayId:   pulumi.String("9524ec7d-36d9-465d-a8c5-83a3c9390458"),
			Labels: pulumi.StringMap{
				"key": pulumi.String("value"),
			},
			Name:             pulumi.String("...my_name..."),
			ParentPolicyId:   pulumi.String("53589770-fabe-4fbd-9218-75adfeed2fe4"),
			VirtualClusterId: pulumi.String("5a736330-9764-4c58-8d01-dbcb745874a1"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Konnect = Pulumi.Konnect;

return await Deployment.RunAsync(() => 
{
    var myEventgatewayproducepolicyencryptfields = new Konnect.EventGatewayProducePolicyEncryptFields("my_eventgatewayproducepolicyencryptfields", new()
    {
        Condition = "record.value.content.foo.bar == \"a-value\"",
        Config = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigArgs
        {
            EncryptFields = new[]
            {
                new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArgs
                {
                    EncryptionKey = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyArgs
                    {
                        Static = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticArgs
                        {
                            Key = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticKeyArgs
                            {
                                Id = "5bf3a39d-29c8-4db0-a5cf-8b6709e7b297",
                            },
                        },
                    },
                    Paths = new[]
                    {
                        new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArgs
                        {
                            Match = "someObject.someArray[1].fieldName",
                        },
                    },
                },
            },
            FailureMode = "mark",
        },
        Description = "",
        Enabled = true,
        GatewayId = "9524ec7d-36d9-465d-a8c5-83a3c9390458",
        Labels = 
        {
            { "key", "value" },
        },
        Name = "...my_name...",
        ParentPolicyId = "53589770-fabe-4fbd-9218-75adfeed2fe4",
        VirtualClusterId = "5a736330-9764-4c58-8d01-dbcb745874a1",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.EventGatewayProducePolicyEncryptFields;
import com.pulumi.konnect.EventGatewayProducePolicyEncryptFieldsArgs;
import com.pulumi.konnect.inputs.EventGatewayProducePolicyEncryptFieldsConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myEventgatewayproducepolicyencryptfields = new EventGatewayProducePolicyEncryptFields("myEventgatewayproducepolicyencryptfields", EventGatewayProducePolicyEncryptFieldsArgs.builder()
            .condition("record.value.content.foo.bar == \"a-value\"")
            .config(EventGatewayProducePolicyEncryptFieldsConfigArgs.builder()
                .encryptFields(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArgs.builder()
                    .encryptionKey(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyArgs.builder()
                        .static_(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticArgs.builder()
                            .key(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticKeyArgs.builder()
                                .id("5bf3a39d-29c8-4db0-a5cf-8b6709e7b297")
                                .build())
                            .build())
                        .build())
                    .paths(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArgs.builder()
                        .match("someObject.someArray[1].fieldName")
                        .build())
                    .build())
                .failureMode("mark")
                .build())
            .description("")
            .enabled(true)
            .gatewayId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .labels(Map.of("key", "value"))
            .name("...my_name...")
            .parentPolicyId("53589770-fabe-4fbd-9218-75adfeed2fe4")
            .virtualClusterId("5a736330-9764-4c58-8d01-dbcb745874a1")
            .build());

    }
}

    resources:
  myEventgatewayproducepolicyencryptfields:
    type: konnect:EventGatewayProducePolicyEncryptFields
    name: my_eventgatewayproducepolicyencryptfields
    properties:
      condition: record.value.content.foo.bar == "a-value"
      config:
        encryptFields:
          - encryptionKey:
              static:
                key:
                  id: 5bf3a39d-29c8-4db0-a5cf-8b6709e7b297
            paths:
              - match: someObject.someArray[1].fieldName
        failureMode: mark
      description: ""
      enabled: true
      gatewayId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      labels:
        key: value
      name: '...my_name...'
      parentPolicyId: 53589770-fabe-4fbd-9218-75adfeed2fe4
      virtualClusterId: 5a736330-9764-4c58-8d01-dbcb745874a1

    Example coming soon!

    Create EventGatewayProducePolicyEncryptFields Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new EventGatewayProducePolicyEncryptFields(name: string, args: EventGatewayProducePolicyEncryptFieldsArgs, opts?: CustomResourceOptions);
    @overload
def EventGatewayProducePolicyEncryptFields(resource_name: str,
                                           args: EventGatewayProducePolicyEncryptFieldsArgs,
                                           opts: Optional[ResourceOptions] = None)

@overload
def EventGatewayProducePolicyEncryptFields(resource_name: str,
                                           opts: Optional[ResourceOptions] = None,
                                           config: Optional[EventGatewayProducePolicyEncryptFieldsConfigArgs] = None,
                                           gateway_id: Optional[str] = None,
                                           parent_policy_id: Optional[str] = None,
                                           virtual_cluster_id: Optional[str] = None,
                                           condition: Optional[str] = None,
                                           description: Optional[str] = None,
                                           enabled: Optional[bool] = None,
                                           labels: Optional[Mapping[str, str]] = None,
                                           name: Optional[str] = None)
    func NewEventGatewayProducePolicyEncryptFields(ctx *Context, name string, args EventGatewayProducePolicyEncryptFieldsArgs, opts ...ResourceOption) (*EventGatewayProducePolicyEncryptFields, error)
    public EventGatewayProducePolicyEncryptFields(string name, EventGatewayProducePolicyEncryptFieldsArgs args, CustomResourceOptions? opts = null)
    public EventGatewayProducePolicyEncryptFields(String name, EventGatewayProducePolicyEncryptFieldsArgs args)
public EventGatewayProducePolicyEncryptFields(String name, EventGatewayProducePolicyEncryptFieldsArgs args, CustomResourceOptions options)

    type: konnect:EventGatewayProducePolicyEncryptFields
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "konnect_eventgatewayproducepolicyencryptfields" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args EventGatewayProducePolicyEncryptFieldsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args EventGatewayProducePolicyEncryptFieldsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args EventGatewayProducePolicyEncryptFieldsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args EventGatewayProducePolicyEncryptFieldsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args EventGatewayProducePolicyEncryptFieldsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var eventGatewayProducePolicyEncryptFieldsResource = new Konnect.EventGatewayProducePolicyEncryptFields("eventGatewayProducePolicyEncryptFieldsResource", new()
{
    Config = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigArgs
    {
        EncryptFields = new[]
        {
            new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArgs
            {
                EncryptionKey = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyArgs
                {
                    Aws = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyAwsArgs
                    {
                        Arn = "string",
                    },
                    Static = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticArgs
                    {
                        Key = new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticKeyArgs
                        {
                            Id = "string",
                        },
                    },
                },
                Paths = new[]
                {
                    new Konnect.Inputs.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArgs
                    {
                        Match = "string",
                    },
                },
            },
        },
        FailureMode = "string",
    },
    GatewayId = "string",
    ParentPolicyId = "string",
    VirtualClusterId = "string",
    Condition = "string",
    Description = "string",
    Enabled = false,
    Labels = 
    {
        { "string", "string" },
    },
    Name = "string",
});

    example, err := konnect.NewEventGatewayProducePolicyEncryptFields(ctx, "eventGatewayProducePolicyEncryptFieldsResource", &konnect.EventGatewayProducePolicyEncryptFieldsArgs{
	Config: &konnect.EventGatewayProducePolicyEncryptFieldsConfigArgs{
		EncryptFields: konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArray{
			&konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArgs{
				EncryptionKey: &konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyArgs{
					Aws: &konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyAwsArgs{
						Arn: pulumi.String("string"),
					},
					Static: &konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticArgs{
						Key: &konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticKeyArgs{
							Id: pulumi.String("string"),
						},
					},
				},
				Paths: konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArray{
					&konnect.EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArgs{
						Match: pulumi.String("string"),
					},
				},
			},
		},
		FailureMode: pulumi.String("string"),
	},
	GatewayId:        pulumi.String("string"),
	ParentPolicyId:   pulumi.String("string"),
	VirtualClusterId: pulumi.String("string"),
	Condition:        pulumi.String("string"),
	Description:      pulumi.String("string"),
	Enabled:          pulumi.Bool(false),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Name: pulumi.String("string"),
})

    resource "konnect_eventgatewayproducepolicyencryptfields" "eventGatewayProducePolicyEncryptFieldsResource" {
  config = {
    encrypt_fields = [{
      "encryptionKey" = {
        "aws" = {
          "arn" = "string"
        }
        "static" = {
          "key" = {
            "id" = "string"
          }
        }
      }
      "paths" = [{
        "match" = "string"
      }]
    }]
    failure_mode = "string"
  }
  gateway_id         = "string"
  parent_policy_id   = "string"
  virtual_cluster_id = "string"
  condition          = "string"
  description        = "string"
  enabled            = false
  labels = {
    "string" = "string"
  }
  name = "string"
}

    var eventGatewayProducePolicyEncryptFieldsResource = new EventGatewayProducePolicyEncryptFields("eventGatewayProducePolicyEncryptFieldsResource", EventGatewayProducePolicyEncryptFieldsArgs.builder()
    .config(EventGatewayProducePolicyEncryptFieldsConfigArgs.builder()
        .encryptFields(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArgs.builder()
            .encryptionKey(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyArgs.builder()
                .aws(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyAwsArgs.builder()
                    .arn("string")
                    .build())
                .static_(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticArgs.builder()
                    .key(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticKeyArgs.builder()
                        .id("string")
                        .build())
                    .build())
                .build())
            .paths(EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArgs.builder()
                .match("string")
                .build())
            .build())
        .failureMode("string")
        .build())
    .gatewayId("string")
    .parentPolicyId("string")
    .virtualClusterId("string")
    .condition("string")
    .description("string")
    .enabled(false)
    .labels(Map.of("string", "string"))
    .name("string")
    .build());

    event_gateway_produce_policy_encrypt_fields_resource = konnect.EventGatewayProducePolicyEncryptFields("eventGatewayProducePolicyEncryptFieldsResource",
    config={
        "encrypt_fields": [{
            "encryption_key": {
                "aws": {
                    "arn": "string",
                },
                "static": {
                    "key": {
                        "id": "string",
                    },
                },
            },
            "paths": [{
                "match": "string",
            }],
        }],
        "failure_mode": "string",
    },
    gateway_id="string",
    parent_policy_id="string",
    virtual_cluster_id="string",
    condition="string",
    description="string",
    enabled=False,
    labels={
        "string": "string",
    },
    name="string")

    const eventGatewayProducePolicyEncryptFieldsResource = new konnect.EventGatewayProducePolicyEncryptFields("eventGatewayProducePolicyEncryptFieldsResource", {
    config: {
        encryptFields: [{
            encryptionKey: {
                aws: {
                    arn: "string",
                },
                static: {
                    key: {
                        id: "string",
                    },
                },
            },
            paths: [{
                match: "string",
            }],
        }],
        failureMode: "string",
    },
    gatewayId: "string",
    parentPolicyId: "string",
    virtualClusterId: "string",
    condition: "string",
    description: "string",
    enabled: false,
    labels: {
        string: "string",
    },
    name: "string",
});

    type: konnect:EventGatewayProducePolicyEncryptFields
properties:
    condition: string
    config:
        encryptFields:
            - encryptionKey:
                aws:
                    arn: string
                static:
                    key:
                        id: string
              paths:
                - match: string
        failureMode: string
    description: string
    enabled: false
    gatewayId: string
    labels:
        string: string
    name: string
    parentPolicyId: string
    virtualClusterId: string

    EventGatewayProducePolicyEncryptFields Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The EventGatewayProducePolicyEncryptFields resource accepts the following input properties:

    Config EventGatewayProducePolicyEncryptFieldsConfig
    The configuration of the encrypt parsed record policy.
    GatewayId string
    The UUID of your Gateway.
    ParentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    Labels Dictionary<string, string>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    Name string
    A unique user-defined name of the policy.
    Config EventGatewayProducePolicyEncryptFieldsConfigArgs
    The configuration of the encrypt parsed record policy.
    GatewayId string
    The UUID of your Gateway.
    ParentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    Labels map[string]string

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    Name string
    A unique user-defined name of the policy.
    config object
    The configuration of the encrypt parsed record policy.
    gateway_id string
    The UUID of your Gateway.
    parent_policy_id string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtual_cluster_id string
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied.
    description string
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    labels map(string)

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name string
    A unique user-defined name of the policy.
    config EventGatewayProducePolicyEncryptFieldsConfig
    The configuration of the encrypt parsed record policy.
    gatewayId String
    The UUID of your Gateway.
    parentPolicyId String
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    labels Map<String,String>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name String
    A unique user-defined name of the policy.
    config EventGatewayProducePolicyEncryptFieldsConfig
    The configuration of the encrypt parsed record policy.
    gatewayId string
    The UUID of your Gateway.
    parentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtualClusterId string
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied.
    description string
    A human-readable description of the policy. Default: ""
    enabled boolean
    Whether the policy is enabled. Default: true
    labels {[key: string]: string}

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name string
    A unique user-defined name of the policy.
    config EventGatewayProducePolicyEncryptFieldsConfigArgs
    The configuration of the encrypt parsed record policy.
    gateway_id str
    The UUID of your Gateway.
    parent_policy_id str
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtual_cluster_id str
    The ID of the Virtual Cluster.
    condition str
    A string containing the boolean expression that determines whether the policy is applied.
    description str
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    labels Mapping[str, str]

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name str
    A unique user-defined name of the policy.
    config Property Map
    The configuration of the encrypt parsed record policy.
    gatewayId String
    The UUID of your Gateway.
    parentPolicyId String
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    labels Map<String>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name String
    A unique user-defined name of the policy.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the EventGatewayProducePolicyEncryptFields resource produces the following output properties:

    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    created_at string
    An ISO-8601 timestamp representation of entity creation date.
    id string
    The provider-assigned unique ID for this managed resource.
    updated_at string
    An ISO-8601 timestamp representation of entity update date.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    createdAt string
    An ISO-8601 timestamp representation of entity creation date.
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    An ISO-8601 timestamp representation of entity update date.
    created_at str
    An ISO-8601 timestamp representation of entity creation date.
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    An ISO-8601 timestamp representation of entity update date.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.

    Look up Existing EventGatewayProducePolicyEncryptFields Resource

    Get an existing EventGatewayProducePolicyEncryptFields resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: EventGatewayProducePolicyEncryptFieldsState, opts?: CustomResourceOptions): EventGatewayProducePolicyEncryptFields
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        condition: Optional[str] = None,
        config: Optional[EventGatewayProducePolicyEncryptFieldsConfigArgs] = None,
        created_at: Optional[str] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        gateway_id: Optional[str] = None,
        labels: Optional[Mapping[str, str]] = None,
        name: Optional[str] = None,
        parent_policy_id: Optional[str] = None,
        updated_at: Optional[str] = None,
        virtual_cluster_id: Optional[str] = None) -> EventGatewayProducePolicyEncryptFields
    func GetEventGatewayProducePolicyEncryptFields(ctx *Context, name string, id IDInput, state *EventGatewayProducePolicyEncryptFieldsState, opts ...ResourceOption) (*EventGatewayProducePolicyEncryptFields, error)
    public static EventGatewayProducePolicyEncryptFields Get(string name, Input<string> id, EventGatewayProducePolicyEncryptFieldsState? state, CustomResourceOptions? opts = null)
    public static EventGatewayProducePolicyEncryptFields get(String name, Output<String> id, EventGatewayProducePolicyEncryptFieldsState state, CustomResourceOptions options)
    resources:  _:    type: konnect:EventGatewayProducePolicyEncryptFields    get:      id: ${id}
    import {
  to = konnect_eventgatewayproducepolicyencryptfields.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Condition string
    A string containing the boolean expression that determines whether the policy is applied.
    Config EventGatewayProducePolicyEncryptFieldsConfig
    The configuration of the encrypt parsed record policy.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    GatewayId string
    The UUID of your Gateway.
    Labels Dictionary<string, string>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    Name string
    A unique user-defined name of the policy.
    ParentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    Condition string
    A string containing the boolean expression that determines whether the policy is applied.
    Config EventGatewayProducePolicyEncryptFieldsConfigArgs
    The configuration of the encrypt parsed record policy.
    CreatedAt string
    An ISO-8601 timestamp representation of entity creation date.
    Description string
    A human-readable description of the policy. Default: ""
    Enabled bool
    Whether the policy is enabled. Default: true
    GatewayId string
    The UUID of your Gateway.
    Labels map[string]string

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    Name string
    A unique user-defined name of the policy.
    ParentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    UpdatedAt string
    An ISO-8601 timestamp representation of entity update date.
    VirtualClusterId string
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied.
    config object
    The configuration of the encrypt parsed record policy.
    created_at string
    An ISO-8601 timestamp representation of entity creation date.
    description string
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    gateway_id string
    The UUID of your Gateway.
    labels map(string)

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name string
    A unique user-defined name of the policy.
    parent_policy_id string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updated_at string
    An ISO-8601 timestamp representation of entity update date.
    virtual_cluster_id string
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied.
    config EventGatewayProducePolicyEncryptFieldsConfig
    The configuration of the encrypt parsed record policy.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    gatewayId String
    The UUID of your Gateway.
    labels Map<String,String>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name String
    A unique user-defined name of the policy.
    parentPolicyId String
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId String
    The ID of the Virtual Cluster.
    condition string
    A string containing the boolean expression that determines whether the policy is applied.
    config EventGatewayProducePolicyEncryptFieldsConfig
    The configuration of the encrypt parsed record policy.
    createdAt string
    An ISO-8601 timestamp representation of entity creation date.
    description string
    A human-readable description of the policy. Default: ""
    enabled boolean
    Whether the policy is enabled. Default: true
    gatewayId string
    The UUID of your Gateway.
    labels {[key: string]: string}

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name string
    A unique user-defined name of the policy.
    parentPolicyId string
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updatedAt string
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId string
    The ID of the Virtual Cluster.
    condition str
    A string containing the boolean expression that determines whether the policy is applied.
    config EventGatewayProducePolicyEncryptFieldsConfigArgs
    The configuration of the encrypt parsed record policy.
    created_at str
    An ISO-8601 timestamp representation of entity creation date.
    description str
    A human-readable description of the policy. Default: ""
    enabled bool
    Whether the policy is enabled. Default: true
    gateway_id str
    The UUID of your Gateway.
    labels Mapping[str, str]

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name str
    A unique user-defined name of the policy.
    parent_policy_id str
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updated_at str
    An ISO-8601 timestamp representation of entity update date.
    virtual_cluster_id str
    The ID of the Virtual Cluster.
    condition String
    A string containing the boolean expression that determines whether the policy is applied.
    config Property Map
    The configuration of the encrypt parsed record policy.
    createdAt String
    An ISO-8601 timestamp representation of entity creation date.
    description String
    A human-readable description of the policy. Default: ""
    enabled Boolean
    Whether the policy is enabled. Default: true
    gatewayId String
    The UUID of your Gateway.
    labels Map<String>

    Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types.

    Keys must be of length 1-63 characters, and cannot start with "kong", "konnect", "mesh", "kic", or "_".

    name String
    A unique user-defined name of the policy.
    parentPolicyId String
    The unique identifier of the parent schema validation policy. Requires replacement if changed.
    updatedAt String
    An ISO-8601 timestamp representation of entity update date.
    virtualClusterId String
    The ID of the Virtual Cluster.

    Supporting Types

    EventGatewayProducePolicyEncryptFieldsConfig, EventGatewayProducePolicyEncryptFieldsConfigArgs

    EncryptFields List<EventGatewayProducePolicyEncryptFieldsConfigEncryptField>
    Selects which fields to encrypt and with what keys.
    FailureMode string
    Describes how to handle a failure in a policy applied to produced records.
    EncryptFields []EventGatewayProducePolicyEncryptFieldsConfigEncryptField
    Selects which fields to encrypt and with what keys.
    FailureMode string
    Describes how to handle a failure in a policy applied to produced records.
    encrypt_fields list(object)
    Selects which fields to encrypt and with what keys.
    failure_mode string
    Describes how to handle a failure in a policy applied to produced records.
    encryptFields List<EventGatewayProducePolicyEncryptFieldsConfigEncryptField>
    Selects which fields to encrypt and with what keys.
    failureMode String
    Describes how to handle a failure in a policy applied to produced records.
    encryptFields EventGatewayProducePolicyEncryptFieldsConfigEncryptField[]
    Selects which fields to encrypt and with what keys.
    failureMode string
    Describes how to handle a failure in a policy applied to produced records.
    encrypt_fields Sequence[EventGatewayProducePolicyEncryptFieldsConfigEncryptField]
    Selects which fields to encrypt and with what keys.
    failure_mode str
    Describes how to handle a failure in a policy applied to produced records.
    encryptFields List<Property Map>
    Selects which fields to encrypt and with what keys.
    failureMode String
    Describes how to handle a failure in a policy applied to produced records.

    EventGatewayProducePolicyEncryptFieldsConfigEncryptField, EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldArgs

    encryption_key object
    The key to use for encryption.
    paths list(object)
    encryptionKey Property Map
    The key to use for encryption.
    paths List<Property Map>

    EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKey, EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyArgs

    aws object
    The AWS KMS key to use for encryption.
    static object
    A static encryption key.
    aws Property Map
    The AWS KMS key to use for encryption.
    static Property Map
    A static encryption key.

    EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyAws, EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyAwsArgs

    Arn string
    The AWS KMS key ARN.
    Arn string
    The AWS KMS key ARN.
    arn string
    The AWS KMS key ARN.
    arn String
    The AWS KMS key ARN.
    arn string
    The AWS KMS key ARN.
    arn str
    The AWS KMS key ARN.
    arn String
    The AWS KMS key ARN.

    EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStatic, EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticArgs

    key object
    A static encryption key reference by ID.
    key Property Map
    A static encryption key reference by ID.

    EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticKey, EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldEncryptionKeyStaticKeyArgs

    Id string
    The ID of the static key defined in the key source.
    Id string
    The ID of the static key defined in the key source.
    id string
    The ID of the static key defined in the key source.
    id String
    The ID of the static key defined in the key source.
    id string
    The ID of the static key defined in the key source.
    id str
    The ID of the static key defined in the key source.
    id String
    The ID of the static key defined in the key source.

    EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPath, EventGatewayProducePolicyEncryptFieldsConfigEncryptFieldPathArgs

    Match string
    A field selector. It can select nested fields and array entries.
    Match string
    A field selector. It can select nested fields and array entries.
    match string
    A field selector. It can select nested fields and array entries.
    match String
    A field selector. It can select nested fields and array entries.
    match string
    A field selector. It can select nested fields and array entries.
    match str
    A field selector. It can select nested fields and array entries.
    match String
    A field selector. It can select nested fields and array entries.

    Import

    In Terraform v1.5.0 and later, the import block can be used with the id attribute, for example:

    terraform

    import {

    to = konnect_event_gateway_produce_policy_encrypt_fields.my_konnect_event_gateway_produce_policy_encrypt_fields

    id = jsonencode({

    gateway_id         = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

id                 = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

virtual_cluster_id = "..."

    })

    }

    The pulumi import command can be used, for example:

    $ pulumi import konnect:index/eventGatewayProducePolicyEncryptFields:EventGatewayProducePolicyEncryptFields my_konnect_event_gateway_produce_policy_encrypt_fields '{"gateway_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "virtual_cluster_id": "..."}'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    konnect kong/terraform-provider-konnect
    License
    Notes
    This Pulumi package is based on the konnect Terraform Provider.
    Viewing docs for konnect 3.20.0
    published on Monday, Jul 6, 2026 by kong
    Schema (JSON)
    kong/terraform-provider-konnect

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial