1. Packages
  2. Konnect Provider
  3. API Docs
  4. GatewayPluginAiLakeraGuard
konnect 3.5.0 published on Tuesday, Jan 13, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

konnect.GatewayPluginAiLakeraGuard

konnect logo
konnect 3.5.0 published on Tuesday, Jan 13, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

    GatewayPluginAiLakeraGuard Resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as konnect from "@pulumi/konnect";

const myGatewaypluginailakeraguard = new konnect.GatewayPluginAiLakeraGuard("my_gatewaypluginailakeraguard", {
    config: {
        apiKey: "...my_api_key...",
        guardingMode: "INPUT",
        lakeraServiceUrl: "...my_lakera_service_url...",
        projectId: "...my_project_id...",
        requestFailureMessage: "...my_request_failure_message...",
        responseBufferSize: 9.27,
        responseFailureMessage: "...my_response_failure_message...",
        revealFailureCategories: true,
        stopOnError: true,
        textSource: "last_message",
        timeout: 4.57,
        verifySsl: false,
    },
    consumer: {
        id: "...my_id...",
    },
    consumerGroup: {
        id: "...my_id...",
    },
    controlPlaneId: "9524ec7d-36d9-465d-a8c5-83a3c9390458",
    createdAt: 5,
    enabled: false,
    gatewayPluginAiLakeraGuardId: "...my_id...",
    instanceName: "...my_instance_name...",
    ordering: {
        after: {
            accesses: ["..."],
        },
        before: {
            accesses: ["..."],
        },
    },
    partials: [{
        id: "...my_id...",
        name: "...my_name...",
        path: "...my_path...",
    }],
    protocols: ["grpc"],
    route: {
        id: "...my_id...",
    },
    service: {
        id: "...my_id...",
    },
    tags: ["..."],
    updatedAt: 6,
});

    import pulumi
import pulumi_konnect as konnect

my_gatewaypluginailakeraguard = konnect.GatewayPluginAiLakeraGuard("my_gatewaypluginailakeraguard",
    config={
        "api_key": "...my_api_key...",
        "guarding_mode": "INPUT",
        "lakera_service_url": "...my_lakera_service_url...",
        "project_id": "...my_project_id...",
        "request_failure_message": "...my_request_failure_message...",
        "response_buffer_size": 9.27,
        "response_failure_message": "...my_response_failure_message...",
        "reveal_failure_categories": True,
        "stop_on_error": True,
        "text_source": "last_message",
        "timeout": 4.57,
        "verify_ssl": False,
    },
    consumer={
        "id": "...my_id...",
    },
    consumer_group={
        "id": "...my_id...",
    },
    control_plane_id="9524ec7d-36d9-465d-a8c5-83a3c9390458",
    created_at=5,
    enabled=False,
    gateway_plugin_ai_lakera_guard_id="...my_id...",
    instance_name="...my_instance_name...",
    ordering={
        "after": {
            "accesses": ["..."],
        },
        "before": {
            "accesses": ["..."],
        },
    },
    partials=[{
        "id": "...my_id...",
        "name": "...my_name...",
        "path": "...my_path...",
    }],
    protocols=["grpc"],
    route={
        "id": "...my_id...",
    },
    service={
        "id": "...my_id...",
    },
    tags=["..."],
    updated_at=6)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/konnect/v3/konnect"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := konnect.NewGatewayPluginAiLakeraGuard(ctx, "my_gatewaypluginailakeraguard", &konnect.GatewayPluginAiLakeraGuardArgs{
			Config: &konnect.GatewayPluginAiLakeraGuardConfigArgs{
				ApiKey:                  pulumi.String("...my_api_key..."),
				GuardingMode:            pulumi.String("INPUT"),
				LakeraServiceUrl:        pulumi.String("...my_lakera_service_url..."),
				ProjectId:               pulumi.String("...my_project_id..."),
				RequestFailureMessage:   pulumi.String("...my_request_failure_message..."),
				ResponseBufferSize:      pulumi.Float64(9.27),
				ResponseFailureMessage:  pulumi.String("...my_response_failure_message..."),
				RevealFailureCategories: pulumi.Bool(true),
				StopOnError:             pulumi.Bool(true),
				TextSource:              pulumi.String("last_message"),
				Timeout:                 pulumi.Float64(4.57),
				VerifySsl:               pulumi.Bool(false),
			},
			Consumer: &konnect.GatewayPluginAiLakeraGuardConsumerArgs{
				Id: pulumi.String("...my_id..."),
			},
			ConsumerGroup: &konnect.GatewayPluginAiLakeraGuardConsumerGroupArgs{
				Id: pulumi.String("...my_id..."),
			},
			ControlPlaneId:               pulumi.String("9524ec7d-36d9-465d-a8c5-83a3c9390458"),
			CreatedAt:                    pulumi.Float64(5),
			Enabled:                      pulumi.Bool(false),
			GatewayPluginAiLakeraGuardId: pulumi.String("...my_id..."),
			InstanceName:                 pulumi.String("...my_instance_name..."),
			Ordering: &konnect.GatewayPluginAiLakeraGuardOrderingArgs{
				After: &konnect.GatewayPluginAiLakeraGuardOrderingAfterArgs{
					Accesses: pulumi.StringArray{
						pulumi.String("..."),
					},
				},
				Before: &konnect.GatewayPluginAiLakeraGuardOrderingBeforeArgs{
					Accesses: pulumi.StringArray{
						pulumi.String("..."),
					},
				},
			},
			Partials: konnect.GatewayPluginAiLakeraGuardPartialArray{
				&konnect.GatewayPluginAiLakeraGuardPartialArgs{
					Id:   pulumi.String("...my_id..."),
					Name: pulumi.String("...my_name..."),
					Path: pulumi.String("...my_path..."),
				},
			},
			Protocols: pulumi.StringArray{
				pulumi.String("grpc"),
			},
			Route: &konnect.GatewayPluginAiLakeraGuardRouteArgs{
				Id: pulumi.String("...my_id..."),
			},
			Service: &konnect.GatewayPluginAiLakeraGuardServiceArgs{
				Id: pulumi.String("...my_id..."),
			},
			Tags: pulumi.StringArray{
				pulumi.String("..."),
			},
			UpdatedAt: pulumi.Float64(6),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Konnect = Pulumi.Konnect;

return await Deployment.RunAsync(() => 
{
    var myGatewaypluginailakeraguard = new Konnect.GatewayPluginAiLakeraGuard("my_gatewaypluginailakeraguard", new()
    {
        Config = new Konnect.Inputs.GatewayPluginAiLakeraGuardConfigArgs
        {
            ApiKey = "...my_api_key...",
            GuardingMode = "INPUT",
            LakeraServiceUrl = "...my_lakera_service_url...",
            ProjectId = "...my_project_id...",
            RequestFailureMessage = "...my_request_failure_message...",
            ResponseBufferSize = 9.27,
            ResponseFailureMessage = "...my_response_failure_message...",
            RevealFailureCategories = true,
            StopOnError = true,
            TextSource = "last_message",
            Timeout = 4.57,
            VerifySsl = false,
        },
        Consumer = new Konnect.Inputs.GatewayPluginAiLakeraGuardConsumerArgs
        {
            Id = "...my_id...",
        },
        ConsumerGroup = new Konnect.Inputs.GatewayPluginAiLakeraGuardConsumerGroupArgs
        {
            Id = "...my_id...",
        },
        ControlPlaneId = "9524ec7d-36d9-465d-a8c5-83a3c9390458",
        CreatedAt = 5,
        Enabled = false,
        GatewayPluginAiLakeraGuardId = "...my_id...",
        InstanceName = "...my_instance_name...",
        Ordering = new Konnect.Inputs.GatewayPluginAiLakeraGuardOrderingArgs
        {
            After = new Konnect.Inputs.GatewayPluginAiLakeraGuardOrderingAfterArgs
            {
                Accesses = new[]
                {
                    "...",
                },
            },
            Before = new Konnect.Inputs.GatewayPluginAiLakeraGuardOrderingBeforeArgs
            {
                Accesses = new[]
                {
                    "...",
                },
            },
        },
        Partials = new[]
        {
            new Konnect.Inputs.GatewayPluginAiLakeraGuardPartialArgs
            {
                Id = "...my_id...",
                Name = "...my_name...",
                Path = "...my_path...",
            },
        },
        Protocols = new[]
        {
            "grpc",
        },
        Route = new Konnect.Inputs.GatewayPluginAiLakeraGuardRouteArgs
        {
            Id = "...my_id...",
        },
        Service = new Konnect.Inputs.GatewayPluginAiLakeraGuardServiceArgs
        {
            Id = "...my_id...",
        },
        Tags = new[]
        {
            "...",
        },
        UpdatedAt = 6,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.GatewayPluginAiLakeraGuard;
import com.pulumi.konnect.GatewayPluginAiLakeraGuardArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardConfigArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardConsumerArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardConsumerGroupArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardOrderingArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardOrderingAfterArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardOrderingBeforeArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardPartialArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardRouteArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiLakeraGuardServiceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myGatewaypluginailakeraguard = new GatewayPluginAiLakeraGuard("myGatewaypluginailakeraguard", GatewayPluginAiLakeraGuardArgs.builder()
            .config(GatewayPluginAiLakeraGuardConfigArgs.builder()
                .apiKey("...my_api_key...")
                .guardingMode("INPUT")
                .lakeraServiceUrl("...my_lakera_service_url...")
                .projectId("...my_project_id...")
                .requestFailureMessage("...my_request_failure_message...")
                .responseBufferSize(9.27)
                .responseFailureMessage("...my_response_failure_message...")
                .revealFailureCategories(true)
                .stopOnError(true)
                .textSource("last_message")
                .timeout(4.57)
                .verifySsl(false)
                .build())
            .consumer(GatewayPluginAiLakeraGuardConsumerArgs.builder()
                .id("...my_id...")
                .build())
            .consumerGroup(GatewayPluginAiLakeraGuardConsumerGroupArgs.builder()
                .id("...my_id...")
                .build())
            .controlPlaneId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .createdAt(5.0)
            .enabled(false)
            .gatewayPluginAiLakeraGuardId("...my_id...")
            .instanceName("...my_instance_name...")
            .ordering(GatewayPluginAiLakeraGuardOrderingArgs.builder()
                .after(GatewayPluginAiLakeraGuardOrderingAfterArgs.builder()
                    .accesses("...")
                    .build())
                .before(GatewayPluginAiLakeraGuardOrderingBeforeArgs.builder()
                    .accesses("...")
                    .build())
                .build())
            .partials(GatewayPluginAiLakeraGuardPartialArgs.builder()
                .id("...my_id...")
                .name("...my_name...")
                .path("...my_path...")
                .build())
            .protocols("grpc")
            .route(GatewayPluginAiLakeraGuardRouteArgs.builder()
                .id("...my_id...")
                .build())
            .service(GatewayPluginAiLakeraGuardServiceArgs.builder()
                .id("...my_id...")
                .build())
            .tags("...")
            .updatedAt(6.0)
            .build());

    }
}

    resources:
  myGatewaypluginailakeraguard:
    type: konnect:GatewayPluginAiLakeraGuard
    name: my_gatewaypluginailakeraguard
    properties:
      config:
        apiKey: '...my_api_key...'
        guardingMode: INPUT
        lakeraServiceUrl: '...my_lakera_service_url...'
        projectId: '...my_project_id...'
        requestFailureMessage: '...my_request_failure_message...'
        responseBufferSize: 9.27
        responseFailureMessage: '...my_response_failure_message...'
        revealFailureCategories: true
        stopOnError: true
        textSource: last_message
        timeout: 4.57
        verifySsl: false
      consumer:
        id: '...my_id...'
      consumerGroup:
        id: '...my_id...'
      controlPlaneId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      createdAt: 5
      enabled: false
      gatewayPluginAiLakeraGuardId: '...my_id...'
      instanceName: '...my_instance_name...'
      ordering:
        after:
          accesses:
            - '...'
        before:
          accesses:
            - '...'
      partials:
        - id: '...my_id...'
          name: '...my_name...'
          path: '...my_path...'
      protocols:
        - grpc
      route:
        id: '...my_id...'
      service:
        id: '...my_id...'
      tags:
        - '...'
      updatedAt: 6

    Create GatewayPluginAiLakeraGuard Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GatewayPluginAiLakeraGuard(name: string, args: GatewayPluginAiLakeraGuardArgs, opts?: CustomResourceOptions);
    @overload
def GatewayPluginAiLakeraGuard(resource_name: str,
                               args: GatewayPluginAiLakeraGuardArgs,
                               opts: Optional[ResourceOptions] = None)

@overload
def GatewayPluginAiLakeraGuard(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               control_plane_id: Optional[str] = None,
                               gateway_plugin_ai_lakera_guard_id: Optional[str] = None,
                               ordering: Optional[GatewayPluginAiLakeraGuardOrderingArgs] = None,
                               consumer: Optional[GatewayPluginAiLakeraGuardConsumerArgs] = None,
                               created_at: Optional[float] = None,
                               enabled: Optional[bool] = None,
                               config: Optional[GatewayPluginAiLakeraGuardConfigArgs] = None,
                               instance_name: Optional[str] = None,
                               consumer_group: Optional[GatewayPluginAiLakeraGuardConsumerGroupArgs] = None,
                               partials: Optional[Sequence[GatewayPluginAiLakeraGuardPartialArgs]] = None,
                               protocols: Optional[Sequence[str]] = None,
                               route: Optional[GatewayPluginAiLakeraGuardRouteArgs] = None,
                               service: Optional[GatewayPluginAiLakeraGuardServiceArgs] = None,
                               tags: Optional[Sequence[str]] = None,
                               updated_at: Optional[float] = None)
    func NewGatewayPluginAiLakeraGuard(ctx *Context, name string, args GatewayPluginAiLakeraGuardArgs, opts ...ResourceOption) (*GatewayPluginAiLakeraGuard, error)
    public GatewayPluginAiLakeraGuard(string name, GatewayPluginAiLakeraGuardArgs args, CustomResourceOptions? opts = null)
    public GatewayPluginAiLakeraGuard(String name, GatewayPluginAiLakeraGuardArgs args)
public GatewayPluginAiLakeraGuard(String name, GatewayPluginAiLakeraGuardArgs args, CustomResourceOptions options)

    type: konnect:GatewayPluginAiLakeraGuard
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args GatewayPluginAiLakeraGuardArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GatewayPluginAiLakeraGuardArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GatewayPluginAiLakeraGuardArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GatewayPluginAiLakeraGuardArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GatewayPluginAiLakeraGuardArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var gatewayPluginAiLakeraGuardResource = new Konnect.GatewayPluginAiLakeraGuard("gatewayPluginAiLakeraGuardResource", new()
{
    ControlPlaneId = "string",
    GatewayPluginAiLakeraGuardId = "string",
    Ordering = new Konnect.Inputs.GatewayPluginAiLakeraGuardOrderingArgs
    {
        After = new Konnect.Inputs.GatewayPluginAiLakeraGuardOrderingAfterArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
        Before = new Konnect.Inputs.GatewayPluginAiLakeraGuardOrderingBeforeArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
    },
    Consumer = new Konnect.Inputs.GatewayPluginAiLakeraGuardConsumerArgs
    {
        Id = "string",
    },
    CreatedAt = 0,
    Enabled = false,
    Config = new Konnect.Inputs.GatewayPluginAiLakeraGuardConfigArgs
    {
        ApiKey = "string",
        GuardingMode = "string",
        LakeraServiceUrl = "string",
        ProjectId = "string",
        RequestFailureMessage = "string",
        ResponseBufferSize = 0,
        ResponseFailureMessage = "string",
        RevealFailureCategories = false,
        StopOnError = false,
        TextSource = "string",
        Timeout = 0,
        VerifySsl = false,
    },
    InstanceName = "string",
    ConsumerGroup = new Konnect.Inputs.GatewayPluginAiLakeraGuardConsumerGroupArgs
    {
        Id = "string",
    },
    Partials = new[]
    {
        new Konnect.Inputs.GatewayPluginAiLakeraGuardPartialArgs
        {
            Id = "string",
            Name = "string",
            Path = "string",
        },
    },
    Protocols = new[]
    {
        "string",
    },
    Route = new Konnect.Inputs.GatewayPluginAiLakeraGuardRouteArgs
    {
        Id = "string",
    },
    Service = new Konnect.Inputs.GatewayPluginAiLakeraGuardServiceArgs
    {
        Id = "string",
    },
    Tags = new[]
    {
        "string",
    },
    UpdatedAt = 0,
});

    example, err := konnect.NewGatewayPluginAiLakeraGuard(ctx, "gatewayPluginAiLakeraGuardResource", &konnect.GatewayPluginAiLakeraGuardArgs{
	ControlPlaneId:               pulumi.String("string"),
	GatewayPluginAiLakeraGuardId: pulumi.String("string"),
	Ordering: &konnect.GatewayPluginAiLakeraGuardOrderingArgs{
		After: &konnect.GatewayPluginAiLakeraGuardOrderingAfterArgs{
			Accesses: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		Before: &konnect.GatewayPluginAiLakeraGuardOrderingBeforeArgs{
			Accesses: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Consumer: &konnect.GatewayPluginAiLakeraGuardConsumerArgs{
		Id: pulumi.String("string"),
	},
	CreatedAt: pulumi.Float64(0),
	Enabled:   pulumi.Bool(false),
	Config: &konnect.GatewayPluginAiLakeraGuardConfigArgs{
		ApiKey:                  pulumi.String("string"),
		GuardingMode:            pulumi.String("string"),
		LakeraServiceUrl:        pulumi.String("string"),
		ProjectId:               pulumi.String("string"),
		RequestFailureMessage:   pulumi.String("string"),
		ResponseBufferSize:      pulumi.Float64(0),
		ResponseFailureMessage:  pulumi.String("string"),
		RevealFailureCategories: pulumi.Bool(false),
		StopOnError:             pulumi.Bool(false),
		TextSource:              pulumi.String("string"),
		Timeout:                 pulumi.Float64(0),
		VerifySsl:               pulumi.Bool(false),
	},
	InstanceName: pulumi.String("string"),
	ConsumerGroup: &konnect.GatewayPluginAiLakeraGuardConsumerGroupArgs{
		Id: pulumi.String("string"),
	},
	Partials: konnect.GatewayPluginAiLakeraGuardPartialArray{
		&konnect.GatewayPluginAiLakeraGuardPartialArgs{
			Id:   pulumi.String("string"),
			Name: pulumi.String("string"),
			Path: pulumi.String("string"),
		},
	},
	Protocols: pulumi.StringArray{
		pulumi.String("string"),
	},
	Route: &konnect.GatewayPluginAiLakeraGuardRouteArgs{
		Id: pulumi.String("string"),
	},
	Service: &konnect.GatewayPluginAiLakeraGuardServiceArgs{
		Id: pulumi.String("string"),
	},
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	UpdatedAt: pulumi.Float64(0),
})

    var gatewayPluginAiLakeraGuardResource = new GatewayPluginAiLakeraGuard("gatewayPluginAiLakeraGuardResource", GatewayPluginAiLakeraGuardArgs.builder()
    .controlPlaneId("string")
    .gatewayPluginAiLakeraGuardId("string")
    .ordering(GatewayPluginAiLakeraGuardOrderingArgs.builder()
        .after(GatewayPluginAiLakeraGuardOrderingAfterArgs.builder()
            .accesses("string")
            .build())
        .before(GatewayPluginAiLakeraGuardOrderingBeforeArgs.builder()
            .accesses("string")
            .build())
        .build())
    .consumer(GatewayPluginAiLakeraGuardConsumerArgs.builder()
        .id("string")
        .build())
    .createdAt(0.0)
    .enabled(false)
    .config(GatewayPluginAiLakeraGuardConfigArgs.builder()
        .apiKey("string")
        .guardingMode("string")
        .lakeraServiceUrl("string")
        .projectId("string")
        .requestFailureMessage("string")
        .responseBufferSize(0.0)
        .responseFailureMessage("string")
        .revealFailureCategories(false)
        .stopOnError(false)
        .textSource("string")
        .timeout(0.0)
        .verifySsl(false)
        .build())
    .instanceName("string")
    .consumerGroup(GatewayPluginAiLakeraGuardConsumerGroupArgs.builder()
        .id("string")
        .build())
    .partials(GatewayPluginAiLakeraGuardPartialArgs.builder()
        .id("string")
        .name("string")
        .path("string")
        .build())
    .protocols("string")
    .route(GatewayPluginAiLakeraGuardRouteArgs.builder()
        .id("string")
        .build())
    .service(GatewayPluginAiLakeraGuardServiceArgs.builder()
        .id("string")
        .build())
    .tags("string")
    .updatedAt(0.0)
    .build());

    gateway_plugin_ai_lakera_guard_resource = konnect.GatewayPluginAiLakeraGuard("gatewayPluginAiLakeraGuardResource",
    control_plane_id="string",
    gateway_plugin_ai_lakera_guard_id="string",
    ordering={
        "after": {
            "accesses": ["string"],
        },
        "before": {
            "accesses": ["string"],
        },
    },
    consumer={
        "id": "string",
    },
    created_at=0,
    enabled=False,
    config={
        "api_key": "string",
        "guarding_mode": "string",
        "lakera_service_url": "string",
        "project_id": "string",
        "request_failure_message": "string",
        "response_buffer_size": 0,
        "response_failure_message": "string",
        "reveal_failure_categories": False,
        "stop_on_error": False,
        "text_source": "string",
        "timeout": 0,
        "verify_ssl": False,
    },
    instance_name="string",
    consumer_group={
        "id": "string",
    },
    partials=[{
        "id": "string",
        "name": "string",
        "path": "string",
    }],
    protocols=["string"],
    route={
        "id": "string",
    },
    service={
        "id": "string",
    },
    tags=["string"],
    updated_at=0)

    const gatewayPluginAiLakeraGuardResource = new konnect.GatewayPluginAiLakeraGuard("gatewayPluginAiLakeraGuardResource", {
    controlPlaneId: "string",
    gatewayPluginAiLakeraGuardId: "string",
    ordering: {
        after: {
            accesses: ["string"],
        },
        before: {
            accesses: ["string"],
        },
    },
    consumer: {
        id: "string",
    },
    createdAt: 0,
    enabled: false,
    config: {
        apiKey: "string",
        guardingMode: "string",
        lakeraServiceUrl: "string",
        projectId: "string",
        requestFailureMessage: "string",
        responseBufferSize: 0,
        responseFailureMessage: "string",
        revealFailureCategories: false,
        stopOnError: false,
        textSource: "string",
        timeout: 0,
        verifySsl: false,
    },
    instanceName: "string",
    consumerGroup: {
        id: "string",
    },
    partials: [{
        id: "string",
        name: "string",
        path: "string",
    }],
    protocols: ["string"],
    route: {
        id: "string",
    },
    service: {
        id: "string",
    },
    tags: ["string"],
    updatedAt: 0,
});

    type: konnect:GatewayPluginAiLakeraGuard
properties:
    config:
        apiKey: string
        guardingMode: string
        lakeraServiceUrl: string
        projectId: string
        requestFailureMessage: string
        responseBufferSize: 0
        responseFailureMessage: string
        revealFailureCategories: false
        stopOnError: false
        textSource: string
        timeout: 0
        verifySsl: false
    consumer:
        id: string
    consumerGroup:
        id: string
    controlPlaneId: string
    createdAt: 0
    enabled: false
    gatewayPluginAiLakeraGuardId: string
    instanceName: string
    ordering:
        after:
            accesses:
                - string
        before:
            accesses:
                - string
    partials:
        - id: string
          name: string
          path: string
    protocols:
        - string
    route:
        id: string
    service:
        id: string
    tags:
        - string
    updatedAt: 0

    GatewayPluginAiLakeraGuard Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The GatewayPluginAiLakeraGuard resource accepts the following input properties:

    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    Config GatewayPluginAiLakeraGuardConfig
    Consumer GatewayPluginAiLakeraGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    ConsumerGroup GatewayPluginAiLakeraGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    CreatedAt double
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied. Default: true
    GatewayPluginAiLakeraGuardId string
    A string representing a UUID (universally unique identifier).
    InstanceName string
    A unique string representing a UTF-8 encoded name.
    Ordering GatewayPluginAiLakeraGuardOrdering
    Partials List<GatewayPluginAiLakeraGuardPartial>
    A list of partials to be used by the plugin.
    Protocols List<string>
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    Route GatewayPluginAiLakeraGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginAiLakeraGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags List<string>
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt double
    Unix epoch when the resource was last updated.
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    Config GatewayPluginAiLakeraGuardConfigArgs
    Consumer GatewayPluginAiLakeraGuardConsumerArgs
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    ConsumerGroup GatewayPluginAiLakeraGuardConsumerGroupArgs
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    CreatedAt float64
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied. Default: true
    GatewayPluginAiLakeraGuardId string
    A string representing a UUID (universally unique identifier).
    InstanceName string
    A unique string representing a UTF-8 encoded name.
    Ordering GatewayPluginAiLakeraGuardOrderingArgs
    Partials []GatewayPluginAiLakeraGuardPartialArgs
    A list of partials to be used by the plugin.
    Protocols []string
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    Route GatewayPluginAiLakeraGuardRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginAiLakeraGuardServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags []string
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt float64
    Unix epoch when the resource was last updated.
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginAiLakeraGuardConfig
    consumer GatewayPluginAiLakeraGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup GatewayPluginAiLakeraGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    createdAt Double
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied. Default: true
    gatewayPluginAiLakeraGuardId String
    A string representing a UUID (universally unique identifier).
    instanceName String
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginAiLakeraGuardOrdering
    partials List<GatewayPluginAiLakeraGuardPartial>
    A list of partials to be used by the plugin.
    protocols List<String>
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    route GatewayPluginAiLakeraGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiLakeraGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Double
    Unix epoch when the resource was last updated.
    controlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginAiLakeraGuardConfig
    consumer GatewayPluginAiLakeraGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup GatewayPluginAiLakeraGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    createdAt number
    Unix epoch when the resource was created.
    enabled boolean
    Whether the plugin is applied. Default: true
    gatewayPluginAiLakeraGuardId string
    A string representing a UUID (universally unique identifier).
    instanceName string
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginAiLakeraGuardOrdering
    partials GatewayPluginAiLakeraGuardPartial[]
    A list of partials to be used by the plugin.
    protocols string[]
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    route GatewayPluginAiLakeraGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiLakeraGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags string[]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt number
    Unix epoch when the resource was last updated.
    control_plane_id str
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginAiLakeraGuardConfigArgs
    consumer GatewayPluginAiLakeraGuardConsumerArgs
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumer_group GatewayPluginAiLakeraGuardConsumerGroupArgs
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    created_at float
    Unix epoch when the resource was created.
    enabled bool
    Whether the plugin is applied. Default: true
    gateway_plugin_ai_lakera_guard_id str
    A string representing a UUID (universally unique identifier).
    instance_name str
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginAiLakeraGuardOrderingArgs
    partials Sequence[GatewayPluginAiLakeraGuardPartialArgs]
    A list of partials to be used by the plugin.
    protocols Sequence[str]
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    route GatewayPluginAiLakeraGuardRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiLakeraGuardServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags Sequence[str]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updated_at float
    Unix epoch when the resource was last updated.
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config Property Map
    consumer Property Map
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup Property Map
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    createdAt Number
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied. Default: true
    gatewayPluginAiLakeraGuardId String
    A string representing a UUID (universally unique identifier).
    instanceName String
    A unique string representing a UTF-8 encoded name.
    ordering Property Map
    partials List<Property Map>
    A list of partials to be used by the plugin.
    protocols List<String>
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    route Property Map
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service Property Map
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Number
    Unix epoch when the resource was last updated.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GatewayPluginAiLakeraGuard resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing GatewayPluginAiLakeraGuard Resource

    Get an existing GatewayPluginAiLakeraGuard resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: GatewayPluginAiLakeraGuardState, opts?: CustomResourceOptions): GatewayPluginAiLakeraGuard
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        config: Optional[GatewayPluginAiLakeraGuardConfigArgs] = None,
        consumer: Optional[GatewayPluginAiLakeraGuardConsumerArgs] = None,
        consumer_group: Optional[GatewayPluginAiLakeraGuardConsumerGroupArgs] = None,
        control_plane_id: Optional[str] = None,
        created_at: Optional[float] = None,
        enabled: Optional[bool] = None,
        gateway_plugin_ai_lakera_guard_id: Optional[str] = None,
        instance_name: Optional[str] = None,
        ordering: Optional[GatewayPluginAiLakeraGuardOrderingArgs] = None,
        partials: Optional[Sequence[GatewayPluginAiLakeraGuardPartialArgs]] = None,
        protocols: Optional[Sequence[str]] = None,
        route: Optional[GatewayPluginAiLakeraGuardRouteArgs] = None,
        service: Optional[GatewayPluginAiLakeraGuardServiceArgs] = None,
        tags: Optional[Sequence[str]] = None,
        updated_at: Optional[float] = None) -> GatewayPluginAiLakeraGuard
    func GetGatewayPluginAiLakeraGuard(ctx *Context, name string, id IDInput, state *GatewayPluginAiLakeraGuardState, opts ...ResourceOption) (*GatewayPluginAiLakeraGuard, error)
    public static GatewayPluginAiLakeraGuard Get(string name, Input<string> id, GatewayPluginAiLakeraGuardState? state, CustomResourceOptions? opts = null)
    public static GatewayPluginAiLakeraGuard get(String name, Output<String> id, GatewayPluginAiLakeraGuardState state, CustomResourceOptions options)
    resources:  _:    type: konnect:GatewayPluginAiLakeraGuard    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Config GatewayPluginAiLakeraGuardConfig
    Consumer GatewayPluginAiLakeraGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    ConsumerGroup GatewayPluginAiLakeraGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    CreatedAt double
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied. Default: true
    GatewayPluginAiLakeraGuardId string
    A string representing a UUID (universally unique identifier).
    InstanceName string
    A unique string representing a UTF-8 encoded name.
    Ordering GatewayPluginAiLakeraGuardOrdering
    Partials List<GatewayPluginAiLakeraGuardPartial>
    A list of partials to be used by the plugin.
    Protocols List<string>
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    Route GatewayPluginAiLakeraGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginAiLakeraGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags List<string>
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt double
    Unix epoch when the resource was last updated.
    Config GatewayPluginAiLakeraGuardConfigArgs
    Consumer GatewayPluginAiLakeraGuardConsumerArgs
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    ConsumerGroup GatewayPluginAiLakeraGuardConsumerGroupArgs
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    CreatedAt float64
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied. Default: true
    GatewayPluginAiLakeraGuardId string
    A string representing a UUID (universally unique identifier).
    InstanceName string
    A unique string representing a UTF-8 encoded name.
    Ordering GatewayPluginAiLakeraGuardOrderingArgs
    Partials []GatewayPluginAiLakeraGuardPartialArgs
    A list of partials to be used by the plugin.
    Protocols []string
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    Route GatewayPluginAiLakeraGuardRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginAiLakeraGuardServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags []string
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt float64
    Unix epoch when the resource was last updated.
    config GatewayPluginAiLakeraGuardConfig
    consumer GatewayPluginAiLakeraGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup GatewayPluginAiLakeraGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt Double
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied. Default: true
    gatewayPluginAiLakeraGuardId String
    A string representing a UUID (universally unique identifier).
    instanceName String
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginAiLakeraGuardOrdering
    partials List<GatewayPluginAiLakeraGuardPartial>
    A list of partials to be used by the plugin.
    protocols List<String>
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    route GatewayPluginAiLakeraGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiLakeraGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Double
    Unix epoch when the resource was last updated.
    config GatewayPluginAiLakeraGuardConfig
    consumer GatewayPluginAiLakeraGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup GatewayPluginAiLakeraGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    controlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt number
    Unix epoch when the resource was created.
    enabled boolean
    Whether the plugin is applied. Default: true
    gatewayPluginAiLakeraGuardId string
    A string representing a UUID (universally unique identifier).
    instanceName string
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginAiLakeraGuardOrdering
    partials GatewayPluginAiLakeraGuardPartial[]
    A list of partials to be used by the plugin.
    protocols string[]
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    route GatewayPluginAiLakeraGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiLakeraGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags string[]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt number
    Unix epoch when the resource was last updated.
    config GatewayPluginAiLakeraGuardConfigArgs
    consumer GatewayPluginAiLakeraGuardConsumerArgs
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumer_group GatewayPluginAiLakeraGuardConsumerGroupArgs
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    control_plane_id str
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    created_at float
    Unix epoch when the resource was created.
    enabled bool
    Whether the plugin is applied. Default: true
    gateway_plugin_ai_lakera_guard_id str
    A string representing a UUID (universally unique identifier).
    instance_name str
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginAiLakeraGuardOrderingArgs
    partials Sequence[GatewayPluginAiLakeraGuardPartialArgs]
    A list of partials to be used by the plugin.
    protocols Sequence[str]
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    route GatewayPluginAiLakeraGuardRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiLakeraGuardServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags Sequence[str]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updated_at float
    Unix epoch when the resource was last updated.
    config Property Map
    consumer Property Map
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup Property Map
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt Number
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied. Default: true
    gatewayPluginAiLakeraGuardId String
    A string representing a UUID (universally unique identifier).
    instanceName String
    A unique string representing a UTF-8 encoded name.
    ordering Property Map
    partials List<Property Map>
    A list of partials to be used by the plugin.
    protocols List<String>
    A set of strings representing HTTP protocols. Default: ["grpc","grpcs","http","https"]
    route Property Map
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service Property Map
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Number
    Unix epoch when the resource was last updated.

    Supporting Types

    GatewayPluginAiLakeraGuardConfig, GatewayPluginAiLakeraGuardConfigArgs

    ApiKey string
    API key for the Lakera Guard subscription.
    GuardingMode string
    The guardrail mode to use for the request. Default: "INPUT"; must be one of ["BOTH", "INPUT", "OUTPUT"]
    LakeraServiceUrl string
    The guard-operation URL of the Lakera Guard service. Defaults to the SaaS /v2/guard endpoint. It can be set to a locally hosted instance of Lakera Guard. Default: "https://api.lakera.ai/v2/guard"
    ProjectId string
    Project ID to apply filters from. If null, it will use the subscription's default project.
    RequestFailureMessage string
    The message to return when a failure occurs on the request phase. Default: "Request was filtered by Lakera Guard"
    ResponseBufferSize double
    The amount of bytes receiving from upstream to be buffered before sending to the Lakera Guard service. This only applies to the response content guard. Default: 100
    ResponseFailureMessage string
    The message to return when a failure occurs on the response phase. Default: "Response was filtered by Lakera Guard"
    RevealFailureCategories bool
    Whether to reveal failure categories in the response to the caller. They will always be written to the gateway logs, even if set to false. Default: false
    StopOnError bool
    Stop processing if an error occurs. Default: true
    TextSource string
    Select where to pick the 'text' for the Lakera Guard request (when text/generation is selected). Default: "concatenateallcontent"; must be one of ["concatenateallcontent", "concatenateusercontent", <span pulumi-lang-nodejs=""lastMessage"" pulumi-lang-dotnet=""LastMessage"" pulumi-lang-go=""lastMessage"" pulumi-lang-python=""last_message"" pulumi-lang-yaml=""lastMessage"" pulumi-lang-java=""lastMessage"">"last_message"]
    Timeout double
    Connection timeout with the Lakera Guard service. Default: 10000
    VerifySsl bool
    Whether to verify the SSL certificate of the configured Lakera Guard endpoint. Default: true
    ApiKey string
    API key for the Lakera Guard subscription.
    GuardingMode string
    The guardrail mode to use for the request. Default: "INPUT"; must be one of ["BOTH", "INPUT", "OUTPUT"]
    LakeraServiceUrl string
    The guard-operation URL of the Lakera Guard service. Defaults to the SaaS /v2/guard endpoint. It can be set to a locally hosted instance of Lakera Guard. Default: "https://api.lakera.ai/v2/guard"
    ProjectId string
    Project ID to apply filters from. If null, it will use the subscription's default project.
    RequestFailureMessage string
    The message to return when a failure occurs on the request phase. Default: "Request was filtered by Lakera Guard"
    ResponseBufferSize float64
    The amount of bytes receiving from upstream to be buffered before sending to the Lakera Guard service. This only applies to the response content guard. Default: 100
    ResponseFailureMessage string
    The message to return when a failure occurs on the response phase. Default: "Response was filtered by Lakera Guard"
    RevealFailureCategories bool
    Whether to reveal failure categories in the response to the caller. They will always be written to the gateway logs, even if set to false. Default: false
    StopOnError bool
    Stop processing if an error occurs. Default: true
    TextSource string
    Select where to pick the 'text' for the Lakera Guard request (when text/generation is selected). Default: "concatenateallcontent"; must be one of ["concatenateallcontent", "concatenateusercontent", <span pulumi-lang-nodejs=""lastMessage"" pulumi-lang-dotnet=""LastMessage"" pulumi-lang-go=""lastMessage"" pulumi-lang-python=""last_message"" pulumi-lang-yaml=""lastMessage"" pulumi-lang-java=""lastMessage"">"last_message"]
    Timeout float64
    Connection timeout with the Lakera Guard service. Default: 10000
    VerifySsl bool
    Whether to verify the SSL certificate of the configured Lakera Guard endpoint. Default: true
    apiKey String
    API key for the Lakera Guard subscription.
    guardingMode String
    The guardrail mode to use for the request. Default: "INPUT"; must be one of ["BOTH", "INPUT", "OUTPUT"]
    lakeraServiceUrl String
    The guard-operation URL of the Lakera Guard service. Defaults to the SaaS /v2/guard endpoint. It can be set to a locally hosted instance of Lakera Guard. Default: "https://api.lakera.ai/v2/guard"
    projectId String
    Project ID to apply filters from. If null, it will use the subscription's default project.
    requestFailureMessage String
    The message to return when a failure occurs on the request phase. Default: "Request was filtered by Lakera Guard"
    responseBufferSize Double
    The amount of bytes receiving from upstream to be buffered before sending to the Lakera Guard service. This only applies to the response content guard. Default: 100
    responseFailureMessage String
    The message to return when a failure occurs on the response phase. Default: "Response was filtered by Lakera Guard"
    revealFailureCategories Boolean
    Whether to reveal failure categories in the response to the caller. They will always be written to the gateway logs, even if set to false. Default: false
    stopOnError Boolean
    Stop processing if an error occurs. Default: true
    textSource String
    Select where to pick the 'text' for the Lakera Guard request (when text/generation is selected). Default: "concatenateallcontent"; must be one of ["concatenateallcontent", "concatenateusercontent", <span pulumi-lang-nodejs=""lastMessage"" pulumi-lang-dotnet=""LastMessage"" pulumi-lang-go=""lastMessage"" pulumi-lang-python=""last_message"" pulumi-lang-yaml=""lastMessage"" pulumi-lang-java=""lastMessage"">"last_message"]
    timeout Double
    Connection timeout with the Lakera Guard service. Default: 10000
    verifySsl Boolean
    Whether to verify the SSL certificate of the configured Lakera Guard endpoint. Default: true
    apiKey string
    API key for the Lakera Guard subscription.
    guardingMode string
    The guardrail mode to use for the request. Default: "INPUT"; must be one of ["BOTH", "INPUT", "OUTPUT"]
    lakeraServiceUrl string
    The guard-operation URL of the Lakera Guard service. Defaults to the SaaS /v2/guard endpoint. It can be set to a locally hosted instance of Lakera Guard. Default: "https://api.lakera.ai/v2/guard"
    projectId string
    Project ID to apply filters from. If null, it will use the subscription's default project.
    requestFailureMessage string
    The message to return when a failure occurs on the request phase. Default: "Request was filtered by Lakera Guard"
    responseBufferSize number
    The amount of bytes receiving from upstream to be buffered before sending to the Lakera Guard service. This only applies to the response content guard. Default: 100
    responseFailureMessage string
    The message to return when a failure occurs on the response phase. Default: "Response was filtered by Lakera Guard"
    revealFailureCategories boolean
    Whether to reveal failure categories in the response to the caller. They will always be written to the gateway logs, even if set to false. Default: false
    stopOnError boolean
    Stop processing if an error occurs. Default: true
    textSource string
    Select where to pick the 'text' for the Lakera Guard request (when text/generation is selected). Default: "concatenateallcontent"; must be one of ["concatenateallcontent", "concatenateusercontent", <span pulumi-lang-nodejs=""lastMessage"" pulumi-lang-dotnet=""LastMessage"" pulumi-lang-go=""lastMessage"" pulumi-lang-python=""last_message"" pulumi-lang-yaml=""lastMessage"" pulumi-lang-java=""lastMessage"">"last_message"]
    timeout number
    Connection timeout with the Lakera Guard service. Default: 10000
    verifySsl boolean
    Whether to verify the SSL certificate of the configured Lakera Guard endpoint. Default: true
    api_key str
    API key for the Lakera Guard subscription.
    guarding_mode str
    The guardrail mode to use for the request. Default: "INPUT"; must be one of ["BOTH", "INPUT", "OUTPUT"]
    lakera_service_url str
    The guard-operation URL of the Lakera Guard service. Defaults to the SaaS /v2/guard endpoint. It can be set to a locally hosted instance of Lakera Guard. Default: "https://api.lakera.ai/v2/guard"
    project_id str
    Project ID to apply filters from. If null, it will use the subscription's default project.
    request_failure_message str
    The message to return when a failure occurs on the request phase. Default: "Request was filtered by Lakera Guard"
    response_buffer_size float
    The amount of bytes receiving from upstream to be buffered before sending to the Lakera Guard service. This only applies to the response content guard. Default: 100
    response_failure_message str
    The message to return when a failure occurs on the response phase. Default: "Response was filtered by Lakera Guard"
    reveal_failure_categories bool
    Whether to reveal failure categories in the response to the caller. They will always be written to the gateway logs, even if set to false. Default: false
    stop_on_error bool
    Stop processing if an error occurs. Default: true
    text_source str
    Select where to pick the 'text' for the Lakera Guard request (when text/generation is selected). Default: "concatenateallcontent"; must be one of ["concatenateallcontent", "concatenateusercontent", <span pulumi-lang-nodejs=""lastMessage"" pulumi-lang-dotnet=""LastMessage"" pulumi-lang-go=""lastMessage"" pulumi-lang-python=""last_message"" pulumi-lang-yaml=""lastMessage"" pulumi-lang-java=""lastMessage"">"last_message"]
    timeout float
    Connection timeout with the Lakera Guard service. Default: 10000
    verify_ssl bool
    Whether to verify the SSL certificate of the configured Lakera Guard endpoint. Default: true
    apiKey String
    API key for the Lakera Guard subscription.
    guardingMode String
    The guardrail mode to use for the request. Default: "INPUT"; must be one of ["BOTH", "INPUT", "OUTPUT"]
    lakeraServiceUrl String
    The guard-operation URL of the Lakera Guard service. Defaults to the SaaS /v2/guard endpoint. It can be set to a locally hosted instance of Lakera Guard. Default: "https://api.lakera.ai/v2/guard"
    projectId String
    Project ID to apply filters from. If null, it will use the subscription's default project.
    requestFailureMessage String
    The message to return when a failure occurs on the request phase. Default: "Request was filtered by Lakera Guard"
    responseBufferSize Number
    The amount of bytes receiving from upstream to be buffered before sending to the Lakera Guard service. This only applies to the response content guard. Default: 100
    responseFailureMessage String
    The message to return when a failure occurs on the response phase. Default: "Response was filtered by Lakera Guard"
    revealFailureCategories Boolean
    Whether to reveal failure categories in the response to the caller. They will always be written to the gateway logs, even if set to false. Default: false
    stopOnError Boolean
    Stop processing if an error occurs. Default: true
    textSource String
    Select where to pick the 'text' for the Lakera Guard request (when text/generation is selected). Default: "concatenateallcontent"; must be one of ["concatenateallcontent", "concatenateusercontent", <span pulumi-lang-nodejs=""lastMessage"" pulumi-lang-dotnet=""LastMessage"" pulumi-lang-go=""lastMessage"" pulumi-lang-python=""last_message"" pulumi-lang-yaml=""lastMessage"" pulumi-lang-java=""lastMessage"">"last_message"]
    timeout Number
    Connection timeout with the Lakera Guard service. Default: 10000
    verifySsl Boolean
    Whether to verify the SSL certificate of the configured Lakera Guard endpoint. Default: true

    GatewayPluginAiLakeraGuardConsumer, GatewayPluginAiLakeraGuardConsumerArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    GatewayPluginAiLakeraGuardConsumerGroup, GatewayPluginAiLakeraGuardConsumerGroupArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    GatewayPluginAiLakeraGuardOrdering, GatewayPluginAiLakeraGuardOrderingArgs

    GatewayPluginAiLakeraGuardOrderingAfter, GatewayPluginAiLakeraGuardOrderingAfterArgs

    Accesses List<string>
    Accesses []string
    accesses List<String>
    accesses string[]
    accesses Sequence[str]
    accesses List<String>

    GatewayPluginAiLakeraGuardOrderingBefore, GatewayPluginAiLakeraGuardOrderingBeforeArgs

    Accesses List<string>
    Accesses []string
    accesses List<String>
    accesses string[]
    accesses Sequence[str]
    accesses List<String>

    GatewayPluginAiLakeraGuardPartial, GatewayPluginAiLakeraGuardPartialArgs

    Id string
    A string representing a UUID (universally unique identifier).
    Name string
    A unique string representing a UTF-8 encoded name.
    Path string
    Id string
    A string representing a UUID (universally unique identifier).
    Name string
    A unique string representing a UTF-8 encoded name.
    Path string
    id String
    A string representing a UUID (universally unique identifier).
    name String
    A unique string representing a UTF-8 encoded name.
    path String
    id string
    A string representing a UUID (universally unique identifier).
    name string
    A unique string representing a UTF-8 encoded name.
    path string
    id str
    A string representing a UUID (universally unique identifier).
    name str
    A unique string representing a UTF-8 encoded name.
    path str
    id String
    A string representing a UUID (universally unique identifier).
    name String
    A unique string representing a UTF-8 encoded name.
    path String

    GatewayPluginAiLakeraGuardRoute, GatewayPluginAiLakeraGuardRouteArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    GatewayPluginAiLakeraGuardService, GatewayPluginAiLakeraGuardServiceArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    Import

    In Terraform v1.5.0 and later, the import block can be used with the id attribute, for example:

    terraform

    import {

    to = konnect_gateway_plugin_ai_lakera_guard.my_konnect_gateway_plugin_ai_lakera_guard

    id = jsonencode({

    control_plane_id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

id = "3473c251-5b6c-4f45-b1ff-7ede735a366d"

    })

    }

    The pulumi import command can be used, for example:

    $ pulumi import konnect:index/gatewayPluginAiLakeraGuard:GatewayPluginAiLakeraGuard my_konnect_gateway_plugin_ai_lakera_guard '{"control_plane_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "3473c251-5b6c-4f45-b1ff-7ede735a366d"}'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    konnect kong/terraform-provider-konnect
    License
    Notes
    This Pulumi package is based on the konnect Terraform Provider.
    konnect logo
    konnect 3.5.0 published on Tuesday, Jan 13, 2026 by kong
    Schema (JSON)
    kong/terraform-provider-konnect
      Meet Neo: Your AI Platform Teammate