konnect 2.12.0, Jul 22 25

konnect 2.12.0 published on Tuesday, Jul 22, 2025 by kong

konnect.GatewayPluginAiAwsGuardrails

Explore with Pulumi AI

konnect 2.12.0 published on Tuesday, Jul 22, 2025 by kong

Example Usage

Example coming soon!

Example coming soon!

Example coming soon!

Example coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.GatewayPluginAiAwsGuardrails;
import com.pulumi.konnect.GatewayPluginAiAwsGuardrailsArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsConfigArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsConsumerArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsConsumerGroupArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsOrderingArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsOrderingAfterArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsOrderingBeforeArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsPartialArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsRouteArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiAwsGuardrailsServiceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myGatewaypluginaiawsguardrails = new GatewayPluginAiAwsGuardrails("myGatewaypluginaiawsguardrails", GatewayPluginAiAwsGuardrailsArgs.builder()
            .config(GatewayPluginAiAwsGuardrailsConfigArgs.builder()
                .aws_access_key_id("...my_aws_access_key_id...")
                .aws_region("...my_aws_region...")
                .aws_secret_access_key("...my_aws_secret_access_key...")
                .guarding_mode("INPUT")
                .guardrails_id("...my_guardrails_id...")
                .guardrails_version("...my_guardrails_version...")
                .response_buffer_size(4.85)
                .stop_on_error(false)
                .text_source("concatenate_all_content")
                .timeout(4.59)
                .build())
            .consumer(GatewayPluginAiAwsGuardrailsConsumerArgs.builder()
                .id("...my_id...")
                .build())
            .consumerGroup(GatewayPluginAiAwsGuardrailsConsumerGroupArgs.builder()
                .id("...my_id...")
                .build())
            .controlPlaneId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .createdAt(4)
            .enabled(true)
            .gatewayPluginAiAwsGuardrailsId("...my_id...")
            .instanceName("...my_instance_name...")
            .ordering(GatewayPluginAiAwsGuardrailsOrderingArgs.builder()
                .after(GatewayPluginAiAwsGuardrailsOrderingAfterArgs.builder()
                    .access("...")
                    .build())
                .before(GatewayPluginAiAwsGuardrailsOrderingBeforeArgs.builder()
                    .access("...")
                    .build())
                .build())
            .partials(GatewayPluginAiAwsGuardrailsPartialArgs.builder()
                .id("...my_id...")
                .name("...my_name...")
                .path("...my_path...")
                .build())
            .protocols("grpc")
            .route(GatewayPluginAiAwsGuardrailsRouteArgs.builder()
                .id("...my_id...")
                .build())
            .service(GatewayPluginAiAwsGuardrailsServiceArgs.builder()
                .id("...my_id...")
                .build())
            .tags("...")
            .updatedAt(9)
            .build());

    }
}

resources:
  myGatewaypluginaiawsguardrails:
    type: konnect:GatewayPluginAiAwsGuardrails
    properties:
      config:
        aws_access_key_id: '...my_aws_access_key_id...'
        aws_region: '...my_aws_region...'
        aws_secret_access_key: '...my_aws_secret_access_key...'
        guarding_mode: INPUT
        guardrails_id: '...my_guardrails_id...'
        guardrails_version: '...my_guardrails_version...'
        response_buffer_size: 4.85
        stop_on_error: false
        text_source: concatenate_all_content
        timeout: 4.59
      consumer:
        id: '...my_id...'
      consumerGroup:
        id: '...my_id...'
      controlPlaneId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      createdAt: 4
      enabled: true
      gatewayPluginAiAwsGuardrailsId: '...my_id...'
      instanceName: '...my_instance_name...'
      ordering:
        after:
          access:
            - '...'
        before:
          access:
            - '...'
      partials:
        - id: '...my_id...'
          name: '...my_name...'
          path: '...my_path...'
      protocols:
        - grpc
      route:
        id: '...my_id...'
      service:
        id: '...my_id...'
      tags:
        - '...'
      updatedAt: 9

Create GatewayPluginAiAwsGuardrails Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new GatewayPluginAiAwsGuardrails(name: string, args: GatewayPluginAiAwsGuardrailsArgs, opts?: CustomResourceOptions);

@overload
def GatewayPluginAiAwsGuardrails(resource_name: str,
                                 args: GatewayPluginAiAwsGuardrailsArgs,
                                 opts: Optional[ResourceOptions] = None)

@overload
def GatewayPluginAiAwsGuardrails(resource_name: str,
                                 opts: Optional[ResourceOptions] = None,
                                 control_plane_id: Optional[str] = None,
                                 config: Optional[GatewayPluginAiAwsGuardrailsConfigArgs] = None,
                                 gateway_plugin_ai_aws_guardrails_id: Optional[str] = None,
                                 consumer_group: Optional[GatewayPluginAiAwsGuardrailsConsumerGroupArgs] = None,
                                 created_at: Optional[float] = None,
                                 enabled: Optional[bool] = None,
                                 consumer: Optional[GatewayPluginAiAwsGuardrailsConsumerArgs] = None,
                                 instance_name: Optional[str] = None,
                                 ordering: Optional[GatewayPluginAiAwsGuardrailsOrderingArgs] = None,
                                 partials: Optional[Sequence[GatewayPluginAiAwsGuardrailsPartialArgs]] = None,
                                 protocols: Optional[Sequence[str]] = None,
                                 route: Optional[GatewayPluginAiAwsGuardrailsRouteArgs] = None,
                                 service: Optional[GatewayPluginAiAwsGuardrailsServiceArgs] = None,
                                 tags: Optional[Sequence[str]] = None,
                                 updated_at: Optional[float] = None)

func NewGatewayPluginAiAwsGuardrails(ctx *Context, name string, args GatewayPluginAiAwsGuardrailsArgs, opts ...ResourceOption) (*GatewayPluginAiAwsGuardrails, error)

public GatewayPluginAiAwsGuardrails(string name, GatewayPluginAiAwsGuardrailsArgs args, CustomResourceOptions? opts = null)

public GatewayPluginAiAwsGuardrails(String name, GatewayPluginAiAwsGuardrailsArgs args)
public GatewayPluginAiAwsGuardrails(String name, GatewayPluginAiAwsGuardrailsArgs args, CustomResourceOptions options)

type: konnect:GatewayPluginAiAwsGuardrails
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args GatewayPluginAiAwsGuardrailsArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args GatewayPluginAiAwsGuardrailsArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args GatewayPluginAiAwsGuardrailsArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args GatewayPluginAiAwsGuardrailsArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args GatewayPluginAiAwsGuardrailsArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var gatewayPluginAiAwsGuardrailsResource = new Konnect.GatewayPluginAiAwsGuardrails("gatewayPluginAiAwsGuardrailsResource", new()
{
    ControlPlaneId = "string",
    Config = new Konnect.Inputs.GatewayPluginAiAwsGuardrailsConfigArgs
    {
        AwsRegion = "string",
        GuardrailsId = "string",
        GuardrailsVersion = "string",
        AwsAccessKeyId = "string",
        AwsSecretAccessKey = "string",
        GuardingMode = "string",
        ResponseBufferSize = 0,
        StopOnError = false,
        TextSource = "string",
        Timeout = 0,
    },
    GatewayPluginAiAwsGuardrailsId = "string",
    ConsumerGroup = new Konnect.Inputs.GatewayPluginAiAwsGuardrailsConsumerGroupArgs
    {
        Id = "string",
    },
    CreatedAt = 0,
    Enabled = false,
    Consumer = new Konnect.Inputs.GatewayPluginAiAwsGuardrailsConsumerArgs
    {
        Id = "string",
    },
    InstanceName = "string",
    Ordering = new Konnect.Inputs.GatewayPluginAiAwsGuardrailsOrderingArgs
    {
        After = new Konnect.Inputs.GatewayPluginAiAwsGuardrailsOrderingAfterArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
        Before = new Konnect.Inputs.GatewayPluginAiAwsGuardrailsOrderingBeforeArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
    },
    Partials = new[]
    {
        new Konnect.Inputs.GatewayPluginAiAwsGuardrailsPartialArgs
        {
            Id = "string",
            Name = "string",
            Path = "string",
        },
    },
    Protocols = new[]
    {
        "string",
    },
    Route = new Konnect.Inputs.GatewayPluginAiAwsGuardrailsRouteArgs
    {
        Id = "string",
    },
    Service = new Konnect.Inputs.GatewayPluginAiAwsGuardrailsServiceArgs
    {
        Id = "string",
    },
    Tags = new[]
    {
        "string",
    },
    UpdatedAt = 0,
});

example, err := konnect.NewGatewayPluginAiAwsGuardrails(ctx, "gatewayPluginAiAwsGuardrailsResource", &konnect.GatewayPluginAiAwsGuardrailsArgs{
	ControlPlaneId: pulumi.String("string"),
	Config: &konnect.GatewayPluginAiAwsGuardrailsConfigArgs{
		AwsRegion:          pulumi.String("string"),
		GuardrailsId:       pulumi.String("string"),
		GuardrailsVersion:  pulumi.String("string"),
		AwsAccessKeyId:     pulumi.String("string"),
		AwsSecretAccessKey: pulumi.String("string"),
		GuardingMode:       pulumi.String("string"),
		ResponseBufferSize: pulumi.Float64(0),
		StopOnError:        pulumi.Bool(false),
		TextSource:         pulumi.String("string"),
		Timeout:            pulumi.Float64(0),
	},
	GatewayPluginAiAwsGuardrailsId: pulumi.String("string"),
	ConsumerGroup: &konnect.GatewayPluginAiAwsGuardrailsConsumerGroupArgs{
		Id: pulumi.String("string"),
	},
	CreatedAt: pulumi.Float64(0),
	Enabled:   pulumi.Bool(false),
	Consumer: &konnect.GatewayPluginAiAwsGuardrailsConsumerArgs{
		Id: pulumi.String("string"),
	},
	InstanceName: pulumi.String("string"),
	Ordering: &konnect.GatewayPluginAiAwsGuardrailsOrderingArgs{
		After: &konnect.GatewayPluginAiAwsGuardrailsOrderingAfterArgs{
			Accesses: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		Before: &konnect.GatewayPluginAiAwsGuardrailsOrderingBeforeArgs{
			Accesses: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Partials: konnect.GatewayPluginAiAwsGuardrailsPartialArray{
		&konnect.GatewayPluginAiAwsGuardrailsPartialArgs{
			Id:   pulumi.String("string"),
			Name: pulumi.String("string"),
			Path: pulumi.String("string"),
		},
	},
	Protocols: pulumi.StringArray{
		pulumi.String("string"),
	},
	Route: &konnect.GatewayPluginAiAwsGuardrailsRouteArgs{
		Id: pulumi.String("string"),
	},
	Service: &konnect.GatewayPluginAiAwsGuardrailsServiceArgs{
		Id: pulumi.String("string"),
	},
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	UpdatedAt: pulumi.Float64(0),
})

var gatewayPluginAiAwsGuardrailsResource = new GatewayPluginAiAwsGuardrails("gatewayPluginAiAwsGuardrailsResource", GatewayPluginAiAwsGuardrailsArgs.builder()
    .controlPlaneId("string")
    .config(GatewayPluginAiAwsGuardrailsConfigArgs.builder()
        .awsRegion("string")
        .guardrailsId("string")
        .guardrailsVersion("string")
        .awsAccessKeyId("string")
        .awsSecretAccessKey("string")
        .guardingMode("string")
        .responseBufferSize(0.0)
        .stopOnError(false)
        .textSource("string")
        .timeout(0.0)
        .build())
    .gatewayPluginAiAwsGuardrailsId("string")
    .consumerGroup(GatewayPluginAiAwsGuardrailsConsumerGroupArgs.builder()
        .id("string")
        .build())
    .createdAt(0.0)
    .enabled(false)
    .consumer(GatewayPluginAiAwsGuardrailsConsumerArgs.builder()
        .id("string")
        .build())
    .instanceName("string")
    .ordering(GatewayPluginAiAwsGuardrailsOrderingArgs.builder()
        .after(GatewayPluginAiAwsGuardrailsOrderingAfterArgs.builder()
            .accesses("string")
            .build())
        .before(GatewayPluginAiAwsGuardrailsOrderingBeforeArgs.builder()
            .accesses("string")
            .build())
        .build())
    .partials(GatewayPluginAiAwsGuardrailsPartialArgs.builder()
        .id("string")
        .name("string")
        .path("string")
        .build())
    .protocols("string")
    .route(GatewayPluginAiAwsGuardrailsRouteArgs.builder()
        .id("string")
        .build())
    .service(GatewayPluginAiAwsGuardrailsServiceArgs.builder()
        .id("string")
        .build())
    .tags("string")
    .updatedAt(0.0)
    .build());

gateway_plugin_ai_aws_guardrails_resource = konnect.GatewayPluginAiAwsGuardrails("gatewayPluginAiAwsGuardrailsResource",
    control_plane_id="string",
    config={
        "aws_region": "string",
        "guardrails_id": "string",
        "guardrails_version": "string",
        "aws_access_key_id": "string",
        "aws_secret_access_key": "string",
        "guarding_mode": "string",
        "response_buffer_size": 0,
        "stop_on_error": False,
        "text_source": "string",
        "timeout": 0,
    },
    gateway_plugin_ai_aws_guardrails_id="string",
    consumer_group={
        "id": "string",
    },
    created_at=0,
    enabled=False,
    consumer={
        "id": "string",
    },
    instance_name="string",
    ordering={
        "after": {
            "accesses": ["string"],
        },
        "before": {
            "accesses": ["string"],
        },
    },
    partials=[{
        "id": "string",
        "name": "string",
        "path": "string",
    }],
    protocols=["string"],
    route={
        "id": "string",
    },
    service={
        "id": "string",
    },
    tags=["string"],
    updated_at=0)

const gatewayPluginAiAwsGuardrailsResource = new konnect.GatewayPluginAiAwsGuardrails("gatewayPluginAiAwsGuardrailsResource", {
    controlPlaneId: "string",
    config: {
        awsRegion: "string",
        guardrailsId: "string",
        guardrailsVersion: "string",
        awsAccessKeyId: "string",
        awsSecretAccessKey: "string",
        guardingMode: "string",
        responseBufferSize: 0,
        stopOnError: false,
        textSource: "string",
        timeout: 0,
    },
    gatewayPluginAiAwsGuardrailsId: "string",
    consumerGroup: {
        id: "string",
    },
    createdAt: 0,
    enabled: false,
    consumer: {
        id: "string",
    },
    instanceName: "string",
    ordering: {
        after: {
            accesses: ["string"],
        },
        before: {
            accesses: ["string"],
        },
    },
    partials: [{
        id: "string",
        name: "string",
        path: "string",
    }],
    protocols: ["string"],
    route: {
        id: "string",
    },
    service: {
        id: "string",
    },
    tags: ["string"],
    updatedAt: 0,
});

type: konnect:GatewayPluginAiAwsGuardrails
properties:
    config:
        awsAccessKeyId: string
        awsRegion: string
        awsSecretAccessKey: string
        guardingMode: string
        guardrailsId: string
        guardrailsVersion: string
        responseBufferSize: 0
        stopOnError: false
        textSource: string
        timeout: 0
    consumer:
        id: string
    consumerGroup:
        id: string
    controlPlaneId: string
    createdAt: 0
    enabled: false
    gatewayPluginAiAwsGuardrailsId: string
    instanceName: string
    ordering:
        after:
            accesses:
                - string
        before:
            accesses:
                - string
    partials:
        - id: string
          name: string
          path: string
    protocols:
        - string
    route:
        id: string
    service:
        id: string
    tags:
        - string
    updatedAt: 0

GatewayPluginAiAwsGuardrails Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The GatewayPluginAiAwsGuardrails resource accepts the following input properties:

Config GatewayPluginAiAwsGuardrailsConfig
ControlPlaneId string: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
Consumer GatewayPluginAiAwsGuardrailsConsumer: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
ConsumerGroup GatewayPluginAiAwsGuardrailsConsumerGroup: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
CreatedAt double: Unix epoch when the resource was created.
Enabled bool: Whether the plugin is applied.
GatewayPluginAiAwsGuardrailsId string: The ID of this resource.
InstanceName string
Ordering GatewayPluginAiAwsGuardrailsOrdering
Partials List<GatewayPluginAiAwsGuardrailsPartial>
Protocols List<string>: A set of strings representing HTTP protocols.
Route GatewayPluginAiAwsGuardrailsRoute: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAiAwsGuardrailsService: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags List<string>: An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt double: Unix epoch when the resource was last updated.

Config GatewayPluginAiAwsGuardrailsConfigArgs
ControlPlaneId string: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
Consumer GatewayPluginAiAwsGuardrailsConsumerArgs: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
ConsumerGroup GatewayPluginAiAwsGuardrailsConsumerGroupArgs: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
CreatedAt float64: Unix epoch when the resource was created.
Enabled bool: Whether the plugin is applied.
GatewayPluginAiAwsGuardrailsId string: The ID of this resource.
InstanceName string
Ordering GatewayPluginAiAwsGuardrailsOrderingArgs
Partials []GatewayPluginAiAwsGuardrailsPartialArgs
Protocols []string: A set of strings representing HTTP protocols.
Route GatewayPluginAiAwsGuardrailsRouteArgs: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAiAwsGuardrailsServiceArgs: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags []string: An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt float64: Unix epoch when the resource was last updated.

config GatewayPluginAiAwsGuardrailsConfig
controlPlaneId String: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
consumer GatewayPluginAiAwsGuardrailsConsumer: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup GatewayPluginAiAwsGuardrailsConsumerGroup: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
createdAt Double: Unix epoch when the resource was created.
enabled Boolean: Whether the plugin is applied.
gatewayPluginAiAwsGuardrailsId String: The ID of this resource.
instanceName String
ordering GatewayPluginAiAwsGuardrailsOrdering
partials List<GatewayPluginAiAwsGuardrailsPartial>
protocols List<String>: A set of strings representing HTTP protocols.
route GatewayPluginAiAwsGuardrailsRoute: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiAwsGuardrailsService: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>: An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Double: Unix epoch when the resource was last updated.

config GatewayPluginAiAwsGuardrailsConfig
controlPlaneId string: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
consumer GatewayPluginAiAwsGuardrailsConsumer: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup GatewayPluginAiAwsGuardrailsConsumerGroup: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
createdAt number: Unix epoch when the resource was created.
enabled boolean: Whether the plugin is applied.
gatewayPluginAiAwsGuardrailsId string: The ID of this resource.
instanceName string
ordering GatewayPluginAiAwsGuardrailsOrdering
partials GatewayPluginAiAwsGuardrailsPartial[]
protocols string[]: A set of strings representing HTTP protocols.
route GatewayPluginAiAwsGuardrailsRoute: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiAwsGuardrailsService: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags string[]: An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt number: Unix epoch when the resource was last updated.

config GatewayPluginAiAwsGuardrailsConfigArgs
control_plane_id str: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
consumer GatewayPluginAiAwsGuardrailsConsumerArgs: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumer_group GatewayPluginAiAwsGuardrailsConsumerGroupArgs: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
created_at float: Unix epoch when the resource was created.
enabled bool: Whether the plugin is applied.
gateway_plugin_ai_aws_guardrails_id str: The ID of this resource.
instance_name str
ordering GatewayPluginAiAwsGuardrailsOrderingArgs
partials Sequence[GatewayPluginAiAwsGuardrailsPartialArgs]
protocols Sequence[str]: A set of strings representing HTTP protocols.
route GatewayPluginAiAwsGuardrailsRouteArgs: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiAwsGuardrailsServiceArgs: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags Sequence[str]: An optional set of strings associated with the Plugin for grouping and filtering.
updated_at float: Unix epoch when the resource was last updated.

config Property Map
controlPlaneId String: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
consumer Property Map: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup Property Map: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
createdAt Number: Unix epoch when the resource was created.
enabled Boolean: Whether the plugin is applied.
gatewayPluginAiAwsGuardrailsId String: The ID of this resource.
instanceName String
ordering Property Map
partials List<Property Map>
protocols List<String>: A set of strings representing HTTP protocols.
route Property Map: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service Property Map: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>: An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Number: Unix epoch when the resource was last updated.

Outputs

All input properties are implicitly available as output properties. Additionally, the GatewayPluginAiAwsGuardrails resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing GatewayPluginAiAwsGuardrails Resource

Get an existing GatewayPluginAiAwsGuardrails resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: GatewayPluginAiAwsGuardrailsState, opts?: CustomResourceOptions): GatewayPluginAiAwsGuardrails

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        config: Optional[GatewayPluginAiAwsGuardrailsConfigArgs] = None,
        consumer: Optional[GatewayPluginAiAwsGuardrailsConsumerArgs] = None,
        consumer_group: Optional[GatewayPluginAiAwsGuardrailsConsumerGroupArgs] = None,
        control_plane_id: Optional[str] = None,
        created_at: Optional[float] = None,
        enabled: Optional[bool] = None,
        gateway_plugin_ai_aws_guardrails_id: Optional[str] = None,
        instance_name: Optional[str] = None,
        ordering: Optional[GatewayPluginAiAwsGuardrailsOrderingArgs] = None,
        partials: Optional[Sequence[GatewayPluginAiAwsGuardrailsPartialArgs]] = None,
        protocols: Optional[Sequence[str]] = None,
        route: Optional[GatewayPluginAiAwsGuardrailsRouteArgs] = None,
        service: Optional[GatewayPluginAiAwsGuardrailsServiceArgs] = None,
        tags: Optional[Sequence[str]] = None,
        updated_at: Optional[float] = None) -> GatewayPluginAiAwsGuardrails

func GetGatewayPluginAiAwsGuardrails(ctx *Context, name string, id IDInput, state *GatewayPluginAiAwsGuardrailsState, opts ...ResourceOption) (*GatewayPluginAiAwsGuardrails, error)

public static GatewayPluginAiAwsGuardrails Get(string name, Input<string> id, GatewayPluginAiAwsGuardrailsState? state, CustomResourceOptions? opts = null)

public static GatewayPluginAiAwsGuardrails get(String name, Output<String> id, GatewayPluginAiAwsGuardrailsState state, CustomResourceOptions options)

resources:  _:    type: konnect:GatewayPluginAiAwsGuardrails    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Config GatewayPluginAiAwsGuardrailsConfig
Consumer GatewayPluginAiAwsGuardrailsConsumer: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
ConsumerGroup GatewayPluginAiAwsGuardrailsConsumerGroup: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
ControlPlaneId string: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
CreatedAt double: Unix epoch when the resource was created.
Enabled bool: Whether the plugin is applied.
GatewayPluginAiAwsGuardrailsId string: The ID of this resource.
InstanceName string
Ordering GatewayPluginAiAwsGuardrailsOrdering
Partials List<GatewayPluginAiAwsGuardrailsPartial>
Protocols List<string>: A set of strings representing HTTP protocols.
Route GatewayPluginAiAwsGuardrailsRoute: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAiAwsGuardrailsService: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags List<string>: An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt double: Unix epoch when the resource was last updated.

Config GatewayPluginAiAwsGuardrailsConfigArgs
Consumer GatewayPluginAiAwsGuardrailsConsumerArgs: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
ConsumerGroup GatewayPluginAiAwsGuardrailsConsumerGroupArgs: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
ControlPlaneId string: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
CreatedAt float64: Unix epoch when the resource was created.
Enabled bool: Whether the plugin is applied.
GatewayPluginAiAwsGuardrailsId string: The ID of this resource.
InstanceName string
Ordering GatewayPluginAiAwsGuardrailsOrderingArgs
Partials []GatewayPluginAiAwsGuardrailsPartialArgs
Protocols []string: A set of strings representing HTTP protocols.
Route GatewayPluginAiAwsGuardrailsRouteArgs: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAiAwsGuardrailsServiceArgs: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags []string: An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt float64: Unix epoch when the resource was last updated.

config GatewayPluginAiAwsGuardrailsConfig
consumer GatewayPluginAiAwsGuardrailsConsumer: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup GatewayPluginAiAwsGuardrailsConsumerGroup: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
controlPlaneId String: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt Double: Unix epoch when the resource was created.
enabled Boolean: Whether the plugin is applied.
gatewayPluginAiAwsGuardrailsId String: The ID of this resource.
instanceName String
ordering GatewayPluginAiAwsGuardrailsOrdering
partials List<GatewayPluginAiAwsGuardrailsPartial>
protocols List<String>: A set of strings representing HTTP protocols.
route GatewayPluginAiAwsGuardrailsRoute: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiAwsGuardrailsService: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>: An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Double: Unix epoch when the resource was last updated.

config GatewayPluginAiAwsGuardrailsConfig
consumer GatewayPluginAiAwsGuardrailsConsumer: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup GatewayPluginAiAwsGuardrailsConsumerGroup: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
controlPlaneId string: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt number: Unix epoch when the resource was created.
enabled boolean: Whether the plugin is applied.
gatewayPluginAiAwsGuardrailsId string: The ID of this resource.
instanceName string
ordering GatewayPluginAiAwsGuardrailsOrdering
partials GatewayPluginAiAwsGuardrailsPartial[]
protocols string[]: A set of strings representing HTTP protocols.
route GatewayPluginAiAwsGuardrailsRoute: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiAwsGuardrailsService: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags string[]: An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt number: Unix epoch when the resource was last updated.

config GatewayPluginAiAwsGuardrailsConfigArgs
consumer GatewayPluginAiAwsGuardrailsConsumerArgs: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumer_group GatewayPluginAiAwsGuardrailsConsumerGroupArgs: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
control_plane_id str: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
created_at float: Unix epoch when the resource was created.
enabled bool: Whether the plugin is applied.
gateway_plugin_ai_aws_guardrails_id str: The ID of this resource.
instance_name str
ordering GatewayPluginAiAwsGuardrailsOrderingArgs
partials Sequence[GatewayPluginAiAwsGuardrailsPartialArgs]
protocols Sequence[str]: A set of strings representing HTTP protocols.
route GatewayPluginAiAwsGuardrailsRouteArgs: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiAwsGuardrailsServiceArgs: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags Sequence[str]: An optional set of strings associated with the Plugin for grouping and filtering.
updated_at float: Unix epoch when the resource was last updated.

config Property Map
consumer Property Map: If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup Property Map: If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
controlPlaneId String: The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt Number: Unix epoch when the resource was created.
enabled Boolean: Whether the plugin is applied.
gatewayPluginAiAwsGuardrailsId String: The ID of this resource.
instanceName String
ordering Property Map
partials List<Property Map>
protocols List<String>: A set of strings representing HTTP protocols.
route Property Map: If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service Property Map: If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>: An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Number: Unix epoch when the resource was last updated.

Supporting Types

GatewayPluginAiAwsGuardrailsConfig, GatewayPluginAiAwsGuardrailsConfigArgs

AwsRegion string: The AWS region to use for the Bedrock API
GuardrailsId string: The guardrail identifier used in the request to apply the guardrail
GuardrailsVersion string: The guardrail version used in the request to apply the guardrail
AwsAccessKeyId string: The AWS access key ID to use for authentication
AwsSecretAccessKey string: The AWS secret access key to use for authentication
GuardingMode string: The guardrail mode to use for the request. must be one of ["BOTH", "INPUT", "OUTPUT"]
ResponseBufferSize double: The amount of token receiving from upstream to be buffered before sending to the guardrails service. This only applies to the response content guard.
StopOnError bool: Stop processing if an error occurs
TextSource string: Select where to pick the 'text' for the Content Guard Services request. must be one of ["concatenateallcontent", "concatenateusercontent"]
Timeout double: Connection timeout with the bedrock service

AwsRegion string: The AWS region to use for the Bedrock API
GuardrailsId string: The guardrail identifier used in the request to apply the guardrail
GuardrailsVersion string: The guardrail version used in the request to apply the guardrail
AwsAccessKeyId string: The AWS access key ID to use for authentication
AwsSecretAccessKey string: The AWS secret access key to use for authentication
GuardingMode string: The guardrail mode to use for the request. must be one of ["BOTH", "INPUT", "OUTPUT"]
ResponseBufferSize float64: The amount of token receiving from upstream to be buffered before sending to the guardrails service. This only applies to the response content guard.
StopOnError bool: Stop processing if an error occurs
TextSource string: Select where to pick the 'text' for the Content Guard Services request. must be one of ["concatenateallcontent", "concatenateusercontent"]
Timeout float64: Connection timeout with the bedrock service

awsRegion String: The AWS region to use for the Bedrock API
guardrailsId String: The guardrail identifier used in the request to apply the guardrail
guardrailsVersion String: The guardrail version used in the request to apply the guardrail
awsAccessKeyId String: The AWS access key ID to use for authentication
awsSecretAccessKey String: The AWS secret access key to use for authentication
guardingMode String: The guardrail mode to use for the request. must be one of ["BOTH", "INPUT", "OUTPUT"]
responseBufferSize Double: The amount of token receiving from upstream to be buffered before sending to the guardrails service. This only applies to the response content guard.
stopOnError Boolean: Stop processing if an error occurs
textSource String: Select where to pick the 'text' for the Content Guard Services request. must be one of ["concatenateallcontent", "concatenateusercontent"]
timeout Double: Connection timeout with the bedrock service

awsRegion string: The AWS region to use for the Bedrock API
guardrailsId string: The guardrail identifier used in the request to apply the guardrail
guardrailsVersion string: The guardrail version used in the request to apply the guardrail
awsAccessKeyId string: The AWS access key ID to use for authentication
awsSecretAccessKey string: The AWS secret access key to use for authentication
guardingMode string: The guardrail mode to use for the request. must be one of ["BOTH", "INPUT", "OUTPUT"]
responseBufferSize number: The amount of token receiving from upstream to be buffered before sending to the guardrails service. This only applies to the response content guard.
stopOnError boolean: Stop processing if an error occurs
textSource string: Select where to pick the 'text' for the Content Guard Services request. must be one of ["concatenateallcontent", "concatenateusercontent"]
timeout number: Connection timeout with the bedrock service

aws_region str: The AWS region to use for the Bedrock API
guardrails_id str: The guardrail identifier used in the request to apply the guardrail
guardrails_version str: The guardrail version used in the request to apply the guardrail
aws_access_key_id str: The AWS access key ID to use for authentication
aws_secret_access_key str: The AWS secret access key to use for authentication
guarding_mode str: The guardrail mode to use for the request. must be one of ["BOTH", "INPUT", "OUTPUT"]
response_buffer_size float: The amount of token receiving from upstream to be buffered before sending to the guardrails service. This only applies to the response content guard.
stop_on_error bool: Stop processing if an error occurs
text_source str: Select where to pick the 'text' for the Content Guard Services request. must be one of ["concatenateallcontent", "concatenateusercontent"]
timeout float: Connection timeout with the bedrock service

awsRegion String: The AWS region to use for the Bedrock API
guardrailsId String: The guardrail identifier used in the request to apply the guardrail
guardrailsVersion String: The guardrail version used in the request to apply the guardrail
awsAccessKeyId String: The AWS access key ID to use for authentication
awsSecretAccessKey String: The AWS secret access key to use for authentication
guardingMode String: The guardrail mode to use for the request. must be one of ["BOTH", "INPUT", "OUTPUT"]
responseBufferSize Number: The amount of token receiving from upstream to be buffered before sending to the guardrails service. This only applies to the response content guard.
stopOnError Boolean: Stop processing if an error occurs
textSource String: Select where to pick the 'text' for the Content Guard Services request. must be one of ["concatenateallcontent", "concatenateusercontent"]
timeout Number: Connection timeout with the bedrock service

GatewayPluginAiAwsGuardrailsConsumer, GatewayPluginAiAwsGuardrailsConsumerArgs

Id string

Id string

id String

id string

id str

id String

GatewayPluginAiAwsGuardrailsConsumerGroup, GatewayPluginAiAwsGuardrailsConsumerGroupArgs

Id string

Id string

id String

id string

id str

id String

GatewayPluginAiAwsGuardrailsOrdering, GatewayPluginAiAwsGuardrailsOrderingArgs

After GatewayPluginAiAwsGuardrailsOrderingAfter
Before GatewayPluginAiAwsGuardrailsOrderingBefore

After GatewayPluginAiAwsGuardrailsOrderingAfter
Before GatewayPluginAiAwsGuardrailsOrderingBefore

after GatewayPluginAiAwsGuardrailsOrderingAfter
before GatewayPluginAiAwsGuardrailsOrderingBefore

after GatewayPluginAiAwsGuardrailsOrderingAfter
before GatewayPluginAiAwsGuardrailsOrderingBefore

after GatewayPluginAiAwsGuardrailsOrderingAfter
before GatewayPluginAiAwsGuardrailsOrderingBefore

after Property Map
before Property Map

GatewayPluginAiAwsGuardrailsOrderingAfter, GatewayPluginAiAwsGuardrailsOrderingAfterArgs

Accesses List<string>

Accesses []string

accesses List<String>

accesses string[]

accesses Sequence[str]

accesses List<String>

GatewayPluginAiAwsGuardrailsOrderingBefore, GatewayPluginAiAwsGuardrailsOrderingBeforeArgs

Accesses List<string>

Accesses []string

accesses List<String>

accesses string[]

accesses Sequence[str]

accesses List<String>

GatewayPluginAiAwsGuardrailsPartial, GatewayPluginAiAwsGuardrailsPartialArgs

Id string
Name string
Path string

Id string
Name string
Path string

id String
name String
path String

id string
name string
path string

id str
name str
path str

id String
name String
path String

GatewayPluginAiAwsGuardrailsRoute, GatewayPluginAiAwsGuardrailsRouteArgs

Id string

Id string

id String

id string

id str

id String

GatewayPluginAiAwsGuardrailsService, GatewayPluginAiAwsGuardrailsServiceArgs

Id string

Id string

id String

id string

id str

id String

Import

$ pulumi import konnect:index/gatewayPluginAiAwsGuardrails:GatewayPluginAiAwsGuardrails my_konnect_gateway_plugin_ai_aws_guardrails '{"control_plane_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "3473c251-5b6c-4f45-b1ff-7ede735a366d"}'

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: konnect kong/terraform-provider-konnect
License
Notes: This Pulumi package is based on the konnect Terraform Provider.

konnect 2.12.0 published on Tuesday, Jul 22, 2025 by kong

kong/terraform-provider-konnect

konnect.GatewayPluginAiAwsGuardrails

On this page

On this page

Example Usage

Create GatewayPluginAiAwsGuardrails Resource

Constructor syntax

Parameters

Constructor example

GatewayPluginAiAwsGuardrails Resource Properties

Inputs

Outputs

Look up Existing GatewayPluginAiAwsGuardrails Resource

Supporting Types

GatewayPluginAiAwsGuardrailsConfig, GatewayPluginAiAwsGuardrailsConfigArgs

GatewayPluginAiAwsGuardrailsConsumer, GatewayPluginAiAwsGuardrailsConsumerArgs

GatewayPluginAiAwsGuardrailsConsumerGroup, GatewayPluginAiAwsGuardrailsConsumerGroupArgs

GatewayPluginAiAwsGuardrailsOrdering, GatewayPluginAiAwsGuardrailsOrderingArgs

GatewayPluginAiAwsGuardrailsOrderingAfter, GatewayPluginAiAwsGuardrailsOrderingAfterArgs

GatewayPluginAiAwsGuardrailsOrderingBefore, GatewayPluginAiAwsGuardrailsOrderingBeforeArgs

GatewayPluginAiAwsGuardrailsPartial, GatewayPluginAiAwsGuardrailsPartialArgs

GatewayPluginAiAwsGuardrailsRoute, GatewayPluginAiAwsGuardrailsRouteArgs

GatewayPluginAiAwsGuardrailsService, GatewayPluginAiAwsGuardrailsServiceArgs

Import

Package Details

On this page

On this page