1. Packages
  2. Konnect Provider
  3. API Docs
  4. GatewayPluginAiSemanticPromptGuard
konnect 2.7.1 published on Thursday, May 1, 2025 by kong

konnect.GatewayPluginAiSemanticPromptGuard

Explore with Pulumi AI

konnect logo
konnect 2.7.1 published on Thursday, May 1, 2025 by kong

    GatewayPluginAiSemanticPromptGuard Resource

    Example Usage

    Coming soon!
    
    Coming soon!
    
    Coming soon!
    
    Coming soon!
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.konnect.GatewayPluginAiSemanticPromptGuard;
    import com.pulumi.konnect.GatewayPluginAiSemanticPromptGuardArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsAzureArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsBedrockArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsGeminiArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsHuggingfaceArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigRulesArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigSearchArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbPgvectorArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConsumerArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConsumerGroupArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardOrderingArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardOrderingAfterArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardRouteArgs;
    import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardServiceArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var myGatewaypluginaisemanticpromptguard = new GatewayPluginAiSemanticPromptGuard("myGatewaypluginaisemanticpromptguard", GatewayPluginAiSemanticPromptGuardArgs.builder()
                .config(GatewayPluginAiSemanticPromptGuardConfigArgs.builder()
                    .embeddings(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs.builder()
                        .auth(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs.builder()
                            .allowOverride(false)
                            .awsAccessKeyId("...my_aws_access_key_id...")
                            .awsSecretAccessKey("...my_aws_secret_access_key...")
                            .azureClientId("...my_azure_client_id...")
                            .azureClientSecret("...my_azure_client_secret...")
                            .azureTenantId("...my_azure_tenant_id...")
                            .azureUseManagedIdentity(true)
                            .gcpServiceAccountJson("...my_gcp_service_account_json...")
                            .gcpUseServiceAccount(true)
                            .headerName("...my_header_name...")
                            .headerValue("...my_header_value...")
                            .paramLocation("query")
                            .paramName("...my_param_name...")
                            .paramValue("...my_param_value...")
                            .build())
                        .model(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs.builder()
                            .name("...my_name...")
                            .options(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs.builder()
                                .azure(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsAzureArgs.builder()
                                    .apiVersion("...my_api_version...")
                                    .deploymentId("...my_deployment_id...")
                                    .instance("...my_instance...")
                                    .build())
                                .bedrock(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsBedrockArgs.builder()
                                    .awsAssumeRoleArn("...my_aws_assume_role_arn...")
                                    .awsRegion("...my_aws_region...")
                                    .awsRoleSessionName("...my_aws_role_session_name...")
                                    .awsStsEndpointUrl("...my_aws_sts_endpoint_url...")
                                    .build())
                                .gemini(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsGeminiArgs.builder()
                                    .apiEndpoint("...my_api_endpoint...")
                                    .locationId("...my_location_id...")
                                    .projectId("...my_project_id...")
                                    .build())
                                .huggingface(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsHuggingfaceArgs.builder()
                                    .useCache(false)
                                    .waitForModel(true)
                                    .build())
                                .upstreamUrl("...my_upstream_url...")
                                .build())
                            .provider("mistral")
                            .build())
                        .build())
                    .llm_format("gemini")
                    .rules(GatewayPluginAiSemanticPromptGuardConfigRulesArgs.builder()
                        .allowPrompts("...")
                        .denyPrompts("...")
                        .matchAllConversationHistory(false)
                        .matchAllRoles(false)
                        .maxRequestBodySize(10)
                        .build())
                    .search(GatewayPluginAiSemanticPromptGuardConfigSearchArgs.builder()
                        .threshold(9.87)
                        .build())
                    .vectordb(GatewayPluginAiSemanticPromptGuardConfigVectordbArgs.builder()
                        .dimensions(4)
                        .distanceMetric("euclidean")
                        .pgvector(GatewayPluginAiSemanticPromptGuardConfigVectordbPgvectorArgs.builder()
                            .database("...my_database...")
                            .host("...my_host...")
                            .password("...my_password...")
                            .port(4)
                            .ssl(false)
                            .sslCert("...my_ssl_cert...")
                            .sslCertKey("...my_ssl_cert_key...")
                            .sslRequired(false)
                            .sslVerify(false)
                            .sslVersion("tlsv1_3")
                            .timeout(7.16)
                            .user("...my_user...")
                            .build())
                        .redis(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs.builder()
                            .clusterMaxRedirections(10)
                            .clusterNodes(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs.builder()
                                .ip("...my_ip...")
                                .port(4694)
                                .build())
                            .connectTimeout(927722545)
                            .connectionIsProxied(false)
                            .database(7)
                            .host("...my_host...")
                            .keepaliveBacklog(1501125607)
                            .keepalivePoolSize(114222283)
                            .password("...my_password...")
                            .port(24350)
                            .readTimeout(888592257)
                            .sendTimeout(228434190)
                            .sentinelMaster("...my_sentinel_master...")
                            .sentinelNodes(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs.builder()
                                .host("...my_host...")
                                .port(18183)
                                .build())
                            .sentinelPassword("...my_sentinel_password...")
                            .sentinelRole("any")
                            .sentinelUsername("...my_sentinel_username...")
                            .serverName("...my_server_name...")
                            .ssl(false)
                            .sslVerify(true)
                            .username("...my_username...")
                            .build())
                        .strategy("redis")
                        .threshold(3.9)
                        .build())
                    .build())
                .consumer(GatewayPluginAiSemanticPromptGuardConsumerArgs.builder()
                    .id("...my_id...")
                    .build())
                .consumerGroup(GatewayPluginAiSemanticPromptGuardConsumerGroupArgs.builder()
                    .id("...my_id...")
                    .build())
                .controlPlaneId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
                .createdAt(7)
                .enabled(true)
                .gatewayPluginAiSemanticPromptGuardId("...my_id...")
                .instanceName("...my_instance_name...")
                .ordering(GatewayPluginAiSemanticPromptGuardOrderingArgs.builder()
                    .after(GatewayPluginAiSemanticPromptGuardOrderingAfterArgs.builder()
                        .access("...")
                        .build())
                    .before(GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs.builder()
                        .access("...")
                        .build())
                    .build())
                .protocols("http")
                .route(GatewayPluginAiSemanticPromptGuardRouteArgs.builder()
                    .id("...my_id...")
                    .build())
                .service(GatewayPluginAiSemanticPromptGuardServiceArgs.builder()
                    .id("...my_id...")
                    .build())
                .tags("...")
                .updatedAt(2)
                .build());
    
        }
    }
    
    resources:
      myGatewaypluginaisemanticpromptguard:
        type: konnect:GatewayPluginAiSemanticPromptGuard
        properties:
          config:
            embeddings:
              auth:
                allowOverride: false
                awsAccessKeyId: '...my_aws_access_key_id...'
                awsSecretAccessKey: '...my_aws_secret_access_key...'
                azureClientId: '...my_azure_client_id...'
                azureClientSecret: '...my_azure_client_secret...'
                azureTenantId: '...my_azure_tenant_id...'
                azureUseManagedIdentity: true
                gcpServiceAccountJson: '...my_gcp_service_account_json...'
                gcpUseServiceAccount: true
                headerName: '...my_header_name...'
                headerValue: '...my_header_value...'
                paramLocation: query
                paramName: '...my_param_name...'
                paramValue: '...my_param_value...'
              model:
                name: '...my_name...'
                options:
                  azure:
                    apiVersion: '...my_api_version...'
                    deploymentId: '...my_deployment_id...'
                    instance: '...my_instance...'
                  bedrock:
                    awsAssumeRoleArn: '...my_aws_assume_role_arn...'
                    awsRegion: '...my_aws_region...'
                    awsRoleSessionName: '...my_aws_role_session_name...'
                    awsStsEndpointUrl: '...my_aws_sts_endpoint_url...'
                  gemini:
                    apiEndpoint: '...my_api_endpoint...'
                    locationId: '...my_location_id...'
                    projectId: '...my_project_id...'
                  huggingface:
                    useCache: false
                    waitForModel: true
                  upstreamUrl: '...my_upstream_url...'
                provider: mistral
            llm_format: gemini
            rules:
              allowPrompts:
                - '...'
              denyPrompts:
                - '...'
              matchAllConversationHistory: false
              matchAllRoles: false
              maxRequestBodySize: 10
            search:
              threshold: 9.87
            vectordb:
              dimensions: 4
              distanceMetric: euclidean
              pgvector:
                database: '...my_database...'
                host: '...my_host...'
                password: '...my_password...'
                port: 4
                ssl: false
                sslCert: '...my_ssl_cert...'
                sslCertKey: '...my_ssl_cert_key...'
                sslRequired: false
                sslVerify: false
                sslVersion: tlsv1_3
                timeout: 7.16
                user: '...my_user...'
              redis:
                clusterMaxRedirections: 10
                clusterNodes:
                  - ip: '...my_ip...'
                    port: 4694
                connectTimeout: 9.27722545e+08
                connectionIsProxied: false
                database: 7
                host: '...my_host...'
                keepaliveBacklog: 1.501125607e+09
                keepalivePoolSize: 1.14222283e+08
                password: '...my_password...'
                port: 24350
                readTimeout: 8.88592257e+08
                sendTimeout: 2.2843419e+08
                sentinelMaster: '...my_sentinel_master...'
                sentinelNodes:
                  - host: '...my_host...'
                    port: 18183
                sentinelPassword: '...my_sentinel_password...'
                sentinelRole: any
                sentinelUsername: '...my_sentinel_username...'
                serverName: '...my_server_name...'
                ssl: false
                sslVerify: true
                username: '...my_username...'
              strategy: redis
              threshold: 3.9
          consumer:
            id: '...my_id...'
          consumerGroup:
            id: '...my_id...'
          controlPlaneId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
          createdAt: 7
          enabled: true
          gatewayPluginAiSemanticPromptGuardId: '...my_id...'
          instanceName: '...my_instance_name...'
          ordering:
            after:
              access:
                - '...'
            before:
              access:
                - '...'
          protocols:
            - http
          route:
            id: '...my_id...'
          service:
            id: '...my_id...'
          tags:
            - '...'
          updatedAt: 2
    

    Create GatewayPluginAiSemanticPromptGuard Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GatewayPluginAiSemanticPromptGuard(name: string, args: GatewayPluginAiSemanticPromptGuardArgs, opts?: CustomResourceOptions);
    @overload
    def GatewayPluginAiSemanticPromptGuard(resource_name: str,
                                           args: GatewayPluginAiSemanticPromptGuardArgs,
                                           opts: Optional[ResourceOptions] = None)
    
    @overload
    def GatewayPluginAiSemanticPromptGuard(resource_name: str,
                                           opts: Optional[ResourceOptions] = None,
                                           control_plane_id: Optional[str] = None,
                                           gateway_plugin_ai_semantic_prompt_guard_id: Optional[str] = None,
                                           consumer_group: Optional[GatewayPluginAiSemanticPromptGuardConsumerGroupArgs] = None,
                                           consumer: Optional[GatewayPluginAiSemanticPromptGuardConsumerArgs] = None,
                                           created_at: Optional[float] = None,
                                           enabled: Optional[bool] = None,
                                           config: Optional[GatewayPluginAiSemanticPromptGuardConfigArgs] = None,
                                           instance_name: Optional[str] = None,
                                           ordering: Optional[GatewayPluginAiSemanticPromptGuardOrderingArgs] = None,
                                           protocols: Optional[Sequence[str]] = None,
                                           route: Optional[GatewayPluginAiSemanticPromptGuardRouteArgs] = None,
                                           service: Optional[GatewayPluginAiSemanticPromptGuardServiceArgs] = None,
                                           tags: Optional[Sequence[str]] = None,
                                           updated_at: Optional[float] = None)
    func NewGatewayPluginAiSemanticPromptGuard(ctx *Context, name string, args GatewayPluginAiSemanticPromptGuardArgs, opts ...ResourceOption) (*GatewayPluginAiSemanticPromptGuard, error)
    public GatewayPluginAiSemanticPromptGuard(string name, GatewayPluginAiSemanticPromptGuardArgs args, CustomResourceOptions? opts = null)
    public GatewayPluginAiSemanticPromptGuard(String name, GatewayPluginAiSemanticPromptGuardArgs args)
    public GatewayPluginAiSemanticPromptGuard(String name, GatewayPluginAiSemanticPromptGuardArgs args, CustomResourceOptions options)
    
    type: konnect:GatewayPluginAiSemanticPromptGuard
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args GatewayPluginAiSemanticPromptGuardArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GatewayPluginAiSemanticPromptGuardArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GatewayPluginAiSemanticPromptGuardArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GatewayPluginAiSemanticPromptGuardArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GatewayPluginAiSemanticPromptGuardArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var gatewayPluginAiSemanticPromptGuardResource = new Konnect.GatewayPluginAiSemanticPromptGuard("gatewayPluginAiSemanticPromptGuardResource", new()
    {
        ControlPlaneId = "string",
        GatewayPluginAiSemanticPromptGuardId = "string",
        ConsumerGroup = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
        {
            Id = "string",
        },
        Consumer = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConsumerArgs
        {
            Id = "string",
        },
        CreatedAt = 0,
        Enabled = false,
        Config = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigArgs
        {
            Embeddings = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs
            {
                Auth = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs
                {
                    AllowOverride = false,
                    AwsAccessKeyId = "string",
                    AwsSecretAccessKey = "string",
                    AzureClientId = "string",
                    AzureClientSecret = "string",
                    AzureTenantId = "string",
                    AzureUseManagedIdentity = false,
                    GcpServiceAccountJson = "string",
                    GcpUseServiceAccount = false,
                    HeaderName = "string",
                    HeaderValue = "string",
                    ParamLocation = "string",
                    ParamName = "string",
                    ParamValue = "string",
                },
                Model = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs
                {
                    Name = "string",
                    Options = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs
                    {
                        Azure = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsAzureArgs
                        {
                            ApiVersion = "string",
                            DeploymentId = "string",
                            Instance = "string",
                        },
                        Bedrock = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsBedrockArgs
                        {
                            AwsAssumeRoleArn = "string",
                            AwsRegion = "string",
                            AwsRoleSessionName = "string",
                            AwsStsEndpointUrl = "string",
                        },
                        Gemini = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsGeminiArgs
                        {
                            ApiEndpoint = "string",
                            LocationId = "string",
                            ProjectId = "string",
                        },
                        Huggingface = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsHuggingfaceArgs
                        {
                            UseCache = false,
                            WaitForModel = false,
                        },
                        UpstreamUrl = "string",
                    },
                    Provider = "string",
                },
            },
            LlmFormat = "string",
            Rules = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigRulesArgs
            {
                AllowPrompts = new[]
                {
                    "string",
                },
                DenyPrompts = new[]
                {
                    "string",
                },
                MatchAllConversationHistory = false,
                MatchAllRoles = false,
                MaxRequestBodySize = 0,
            },
            Search = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigSearchArgs
            {
                Threshold = 0,
            },
            Vectordb = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbArgs
            {
                Dimensions = 0,
                DistanceMetric = "string",
                Pgvector = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbPgvectorArgs
                {
                    Database = "string",
                    Host = "string",
                    Password = "string",
                    Port = 0,
                    Ssl = false,
                    SslCert = "string",
                    SslCertKey = "string",
                    SslRequired = false,
                    SslVerify = false,
                    SslVersion = "string",
                    Timeout = 0,
                    User = "string",
                },
                Redis = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs
                {
                    ClusterMaxRedirections = 0,
                    ClusterNodes = new[]
                    {
                        new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs
                        {
                            Ip = "string",
                            Port = 0,
                        },
                    },
                    ConnectTimeout = 0,
                    ConnectionIsProxied = false,
                    Database = 0,
                    Host = "string",
                    KeepaliveBacklog = 0,
                    KeepalivePoolSize = 0,
                    Password = "string",
                    Port = 0,
                    ReadTimeout = 0,
                    SendTimeout = 0,
                    SentinelMaster = "string",
                    SentinelNodes = new[]
                    {
                        new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs
                        {
                            Host = "string",
                            Port = 0,
                        },
                    },
                    SentinelPassword = "string",
                    SentinelRole = "string",
                    SentinelUsername = "string",
                    ServerName = "string",
                    Ssl = false,
                    SslVerify = false,
                    Username = "string",
                },
                Strategy = "string",
                Threshold = 0,
            },
        },
        InstanceName = "string",
        Ordering = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardOrderingArgs
        {
            After = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardOrderingAfterArgs
            {
                Accesses = new[]
                {
                    "string",
                },
            },
            Before = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs
            {
                Accesses = new[]
                {
                    "string",
                },
            },
        },
        Protocols = new[]
        {
            "string",
        },
        Route = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardRouteArgs
        {
            Id = "string",
        },
        Service = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardServiceArgs
        {
            Id = "string",
        },
        Tags = new[]
        {
            "string",
        },
        UpdatedAt = 0,
    });
    
    example, err := konnect.NewGatewayPluginAiSemanticPromptGuard(ctx, "gatewayPluginAiSemanticPromptGuardResource", &konnect.GatewayPluginAiSemanticPromptGuardArgs{
    	ControlPlaneId:                       pulumi.String("string"),
    	GatewayPluginAiSemanticPromptGuardId: pulumi.String("string"),
    	ConsumerGroup: &konnect.GatewayPluginAiSemanticPromptGuardConsumerGroupArgs{
    		Id: pulumi.String("string"),
    	},
    	Consumer: &konnect.GatewayPluginAiSemanticPromptGuardConsumerArgs{
    		Id: pulumi.String("string"),
    	},
    	CreatedAt: pulumi.Float64(0),
    	Enabled:   pulumi.Bool(false),
    	Config: &konnect.GatewayPluginAiSemanticPromptGuardConfigArgs{
    		Embeddings: &konnect.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs{
    			Auth: &konnect.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs{
    				AllowOverride:           pulumi.Bool(false),
    				AwsAccessKeyId:          pulumi.String("string"),
    				AwsSecretAccessKey:      pulumi.String("string"),
    				AzureClientId:           pulumi.String("string"),
    				AzureClientSecret:       pulumi.String("string"),
    				AzureTenantId:           pulumi.String("string"),
    				AzureUseManagedIdentity: pulumi.Bool(false),
    				GcpServiceAccountJson:   pulumi.String("string"),
    				GcpUseServiceAccount:    pulumi.Bool(false),
    				HeaderName:              pulumi.String("string"),
    				HeaderValue:             pulumi.String("string"),
    				ParamLocation:           pulumi.String("string"),
    				ParamName:               pulumi.String("string"),
    				ParamValue:              pulumi.String("string"),
    			},
    			Model: &konnect.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs{
    				Name: pulumi.String("string"),
    				Options: &konnect.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs{
    					Azure: &konnect.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsAzureArgs{
    						ApiVersion:   pulumi.String("string"),
    						DeploymentId: pulumi.String("string"),
    						Instance:     pulumi.String("string"),
    					},
    					Bedrock: &konnect.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsBedrockArgs{
    						AwsAssumeRoleArn:   pulumi.String("string"),
    						AwsRegion:          pulumi.String("string"),
    						AwsRoleSessionName: pulumi.String("string"),
    						AwsStsEndpointUrl:  pulumi.String("string"),
    					},
    					Gemini: &konnect.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsGeminiArgs{
    						ApiEndpoint: pulumi.String("string"),
    						LocationId:  pulumi.String("string"),
    						ProjectId:   pulumi.String("string"),
    					},
    					Huggingface: &konnect.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsHuggingfaceArgs{
    						UseCache:     pulumi.Bool(false),
    						WaitForModel: pulumi.Bool(false),
    					},
    					UpstreamUrl: pulumi.String("string"),
    				},
    				Provider: pulumi.String("string"),
    			},
    		},
    		LlmFormat: pulumi.String("string"),
    		Rules: &konnect.GatewayPluginAiSemanticPromptGuardConfigRulesArgs{
    			AllowPrompts: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			DenyPrompts: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			MatchAllConversationHistory: pulumi.Bool(false),
    			MatchAllRoles:               pulumi.Bool(false),
    			MaxRequestBodySize:          pulumi.Float64(0),
    		},
    		Search: &konnect.GatewayPluginAiSemanticPromptGuardConfigSearchArgs{
    			Threshold: pulumi.Float64(0),
    		},
    		Vectordb: &konnect.GatewayPluginAiSemanticPromptGuardConfigVectordbArgs{
    			Dimensions:     pulumi.Float64(0),
    			DistanceMetric: pulumi.String("string"),
    			Pgvector: &konnect.GatewayPluginAiSemanticPromptGuardConfigVectordbPgvectorArgs{
    				Database:    pulumi.String("string"),
    				Host:        pulumi.String("string"),
    				Password:    pulumi.String("string"),
    				Port:        pulumi.Float64(0),
    				Ssl:         pulumi.Bool(false),
    				SslCert:     pulumi.String("string"),
    				SslCertKey:  pulumi.String("string"),
    				SslRequired: pulumi.Bool(false),
    				SslVerify:   pulumi.Bool(false),
    				SslVersion:  pulumi.String("string"),
    				Timeout:     pulumi.Float64(0),
    				User:        pulumi.String("string"),
    			},
    			Redis: &konnect.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs{
    				ClusterMaxRedirections: pulumi.Float64(0),
    				ClusterNodes: konnect.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArray{
    					&konnect.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs{
    						Ip:   pulumi.String("string"),
    						Port: pulumi.Float64(0),
    					},
    				},
    				ConnectTimeout:      pulumi.Float64(0),
    				ConnectionIsProxied: pulumi.Bool(false),
    				Database:            pulumi.Float64(0),
    				Host:                pulumi.String("string"),
    				KeepaliveBacklog:    pulumi.Float64(0),
    				KeepalivePoolSize:   pulumi.Float64(0),
    				Password:            pulumi.String("string"),
    				Port:                pulumi.Float64(0),
    				ReadTimeout:         pulumi.Float64(0),
    				SendTimeout:         pulumi.Float64(0),
    				SentinelMaster:      pulumi.String("string"),
    				SentinelNodes: konnect.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArray{
    					&konnect.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs{
    						Host: pulumi.String("string"),
    						Port: pulumi.Float64(0),
    					},
    				},
    				SentinelPassword: pulumi.String("string"),
    				SentinelRole:     pulumi.String("string"),
    				SentinelUsername: pulumi.String("string"),
    				ServerName:       pulumi.String("string"),
    				Ssl:              pulumi.Bool(false),
    				SslVerify:        pulumi.Bool(false),
    				Username:         pulumi.String("string"),
    			},
    			Strategy:  pulumi.String("string"),
    			Threshold: pulumi.Float64(0),
    		},
    	},
    	InstanceName: pulumi.String("string"),
    	Ordering: &konnect.GatewayPluginAiSemanticPromptGuardOrderingArgs{
    		After: &konnect.GatewayPluginAiSemanticPromptGuardOrderingAfterArgs{
    			Accesses: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    		},
    		Before: &konnect.GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs{
    			Accesses: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    		},
    	},
    	Protocols: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Route: &konnect.GatewayPluginAiSemanticPromptGuardRouteArgs{
    		Id: pulumi.String("string"),
    	},
    	Service: &konnect.GatewayPluginAiSemanticPromptGuardServiceArgs{
    		Id: pulumi.String("string"),
    	},
    	Tags: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	UpdatedAt: pulumi.Float64(0),
    })
    
    var gatewayPluginAiSemanticPromptGuardResource = new GatewayPluginAiSemanticPromptGuard("gatewayPluginAiSemanticPromptGuardResource", GatewayPluginAiSemanticPromptGuardArgs.builder()
        .controlPlaneId("string")
        .gatewayPluginAiSemanticPromptGuardId("string")
        .consumerGroup(GatewayPluginAiSemanticPromptGuardConsumerGroupArgs.builder()
            .id("string")
            .build())
        .consumer(GatewayPluginAiSemanticPromptGuardConsumerArgs.builder()
            .id("string")
            .build())
        .createdAt(0)
        .enabled(false)
        .config(GatewayPluginAiSemanticPromptGuardConfigArgs.builder()
            .embeddings(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs.builder()
                .auth(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs.builder()
                    .allowOverride(false)
                    .awsAccessKeyId("string")
                    .awsSecretAccessKey("string")
                    .azureClientId("string")
                    .azureClientSecret("string")
                    .azureTenantId("string")
                    .azureUseManagedIdentity(false)
                    .gcpServiceAccountJson("string")
                    .gcpUseServiceAccount(false)
                    .headerName("string")
                    .headerValue("string")
                    .paramLocation("string")
                    .paramName("string")
                    .paramValue("string")
                    .build())
                .model(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs.builder()
                    .name("string")
                    .options(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs.builder()
                        .azure(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsAzureArgs.builder()
                            .apiVersion("string")
                            .deploymentId("string")
                            .instance("string")
                            .build())
                        .bedrock(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsBedrockArgs.builder()
                            .awsAssumeRoleArn("string")
                            .awsRegion("string")
                            .awsRoleSessionName("string")
                            .awsStsEndpointUrl("string")
                            .build())
                        .gemini(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsGeminiArgs.builder()
                            .apiEndpoint("string")
                            .locationId("string")
                            .projectId("string")
                            .build())
                        .huggingface(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsHuggingfaceArgs.builder()
                            .useCache(false)
                            .waitForModel(false)
                            .build())
                        .upstreamUrl("string")
                        .build())
                    .provider("string")
                    .build())
                .build())
            .llmFormat("string")
            .rules(GatewayPluginAiSemanticPromptGuardConfigRulesArgs.builder()
                .allowPrompts("string")
                .denyPrompts("string")
                .matchAllConversationHistory(false)
                .matchAllRoles(false)
                .maxRequestBodySize(0)
                .build())
            .search(GatewayPluginAiSemanticPromptGuardConfigSearchArgs.builder()
                .threshold(0)
                .build())
            .vectordb(GatewayPluginAiSemanticPromptGuardConfigVectordbArgs.builder()
                .dimensions(0)
                .distanceMetric("string")
                .pgvector(GatewayPluginAiSemanticPromptGuardConfigVectordbPgvectorArgs.builder()
                    .database("string")
                    .host("string")
                    .password("string")
                    .port(0)
                    .ssl(false)
                    .sslCert("string")
                    .sslCertKey("string")
                    .sslRequired(false)
                    .sslVerify(false)
                    .sslVersion("string")
                    .timeout(0)
                    .user("string")
                    .build())
                .redis(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs.builder()
                    .clusterMaxRedirections(0)
                    .clusterNodes(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs.builder()
                        .ip("string")
                        .port(0)
                        .build())
                    .connectTimeout(0)
                    .connectionIsProxied(false)
                    .database(0)
                    .host("string")
                    .keepaliveBacklog(0)
                    .keepalivePoolSize(0)
                    .password("string")
                    .port(0)
                    .readTimeout(0)
                    .sendTimeout(0)
                    .sentinelMaster("string")
                    .sentinelNodes(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs.builder()
                        .host("string")
                        .port(0)
                        .build())
                    .sentinelPassword("string")
                    .sentinelRole("string")
                    .sentinelUsername("string")
                    .serverName("string")
                    .ssl(false)
                    .sslVerify(false)
                    .username("string")
                    .build())
                .strategy("string")
                .threshold(0)
                .build())
            .build())
        .instanceName("string")
        .ordering(GatewayPluginAiSemanticPromptGuardOrderingArgs.builder()
            .after(GatewayPluginAiSemanticPromptGuardOrderingAfterArgs.builder()
                .accesses("string")
                .build())
            .before(GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs.builder()
                .accesses("string")
                .build())
            .build())
        .protocols("string")
        .route(GatewayPluginAiSemanticPromptGuardRouteArgs.builder()
            .id("string")
            .build())
        .service(GatewayPluginAiSemanticPromptGuardServiceArgs.builder()
            .id("string")
            .build())
        .tags("string")
        .updatedAt(0)
        .build());
    
    gateway_plugin_ai_semantic_prompt_guard_resource = konnect.GatewayPluginAiSemanticPromptGuard("gatewayPluginAiSemanticPromptGuardResource",
        control_plane_id="string",
        gateway_plugin_ai_semantic_prompt_guard_id="string",
        consumer_group={
            "id": "string",
        },
        consumer={
            "id": "string",
        },
        created_at=0,
        enabled=False,
        config={
            "embeddings": {
                "auth": {
                    "allow_override": False,
                    "aws_access_key_id": "string",
                    "aws_secret_access_key": "string",
                    "azure_client_id": "string",
                    "azure_client_secret": "string",
                    "azure_tenant_id": "string",
                    "azure_use_managed_identity": False,
                    "gcp_service_account_json": "string",
                    "gcp_use_service_account": False,
                    "header_name": "string",
                    "header_value": "string",
                    "param_location": "string",
                    "param_name": "string",
                    "param_value": "string",
                },
                "model": {
                    "name": "string",
                    "options": {
                        "azure": {
                            "api_version": "string",
                            "deployment_id": "string",
                            "instance": "string",
                        },
                        "bedrock": {
                            "aws_assume_role_arn": "string",
                            "aws_region": "string",
                            "aws_role_session_name": "string",
                            "aws_sts_endpoint_url": "string",
                        },
                        "gemini": {
                            "api_endpoint": "string",
                            "location_id": "string",
                            "project_id": "string",
                        },
                        "huggingface": {
                            "use_cache": False,
                            "wait_for_model": False,
                        },
                        "upstream_url": "string",
                    },
                    "provider": "string",
                },
            },
            "llm_format": "string",
            "rules": {
                "allow_prompts": ["string"],
                "deny_prompts": ["string"],
                "match_all_conversation_history": False,
                "match_all_roles": False,
                "max_request_body_size": 0,
            },
            "search": {
                "threshold": 0,
            },
            "vectordb": {
                "dimensions": 0,
                "distance_metric": "string",
                "pgvector": {
                    "database": "string",
                    "host": "string",
                    "password": "string",
                    "port": 0,
                    "ssl": False,
                    "ssl_cert": "string",
                    "ssl_cert_key": "string",
                    "ssl_required": False,
                    "ssl_verify": False,
                    "ssl_version": "string",
                    "timeout": 0,
                    "user": "string",
                },
                "redis": {
                    "cluster_max_redirections": 0,
                    "cluster_nodes": [{
                        "ip": "string",
                        "port": 0,
                    }],
                    "connect_timeout": 0,
                    "connection_is_proxied": False,
                    "database": 0,
                    "host": "string",
                    "keepalive_backlog": 0,
                    "keepalive_pool_size": 0,
                    "password": "string",
                    "port": 0,
                    "read_timeout": 0,
                    "send_timeout": 0,
                    "sentinel_master": "string",
                    "sentinel_nodes": [{
                        "host": "string",
                        "port": 0,
                    }],
                    "sentinel_password": "string",
                    "sentinel_role": "string",
                    "sentinel_username": "string",
                    "server_name": "string",
                    "ssl": False,
                    "ssl_verify": False,
                    "username": "string",
                },
                "strategy": "string",
                "threshold": 0,
            },
        },
        instance_name="string",
        ordering={
            "after": {
                "accesses": ["string"],
            },
            "before": {
                "accesses": ["string"],
            },
        },
        protocols=["string"],
        route={
            "id": "string",
        },
        service={
            "id": "string",
        },
        tags=["string"],
        updated_at=0)
    
    const gatewayPluginAiSemanticPromptGuardResource = new konnect.GatewayPluginAiSemanticPromptGuard("gatewayPluginAiSemanticPromptGuardResource", {
        controlPlaneId: "string",
        gatewayPluginAiSemanticPromptGuardId: "string",
        consumerGroup: {
            id: "string",
        },
        consumer: {
            id: "string",
        },
        createdAt: 0,
        enabled: false,
        config: {
            embeddings: {
                auth: {
                    allowOverride: false,
                    awsAccessKeyId: "string",
                    awsSecretAccessKey: "string",
                    azureClientId: "string",
                    azureClientSecret: "string",
                    azureTenantId: "string",
                    azureUseManagedIdentity: false,
                    gcpServiceAccountJson: "string",
                    gcpUseServiceAccount: false,
                    headerName: "string",
                    headerValue: "string",
                    paramLocation: "string",
                    paramName: "string",
                    paramValue: "string",
                },
                model: {
                    name: "string",
                    options: {
                        azure: {
                            apiVersion: "string",
                            deploymentId: "string",
                            instance: "string",
                        },
                        bedrock: {
                            awsAssumeRoleArn: "string",
                            awsRegion: "string",
                            awsRoleSessionName: "string",
                            awsStsEndpointUrl: "string",
                        },
                        gemini: {
                            apiEndpoint: "string",
                            locationId: "string",
                            projectId: "string",
                        },
                        huggingface: {
                            useCache: false,
                            waitForModel: false,
                        },
                        upstreamUrl: "string",
                    },
                    provider: "string",
                },
            },
            llmFormat: "string",
            rules: {
                allowPrompts: ["string"],
                denyPrompts: ["string"],
                matchAllConversationHistory: false,
                matchAllRoles: false,
                maxRequestBodySize: 0,
            },
            search: {
                threshold: 0,
            },
            vectordb: {
                dimensions: 0,
                distanceMetric: "string",
                pgvector: {
                    database: "string",
                    host: "string",
                    password: "string",
                    port: 0,
                    ssl: false,
                    sslCert: "string",
                    sslCertKey: "string",
                    sslRequired: false,
                    sslVerify: false,
                    sslVersion: "string",
                    timeout: 0,
                    user: "string",
                },
                redis: {
                    clusterMaxRedirections: 0,
                    clusterNodes: [{
                        ip: "string",
                        port: 0,
                    }],
                    connectTimeout: 0,
                    connectionIsProxied: false,
                    database: 0,
                    host: "string",
                    keepaliveBacklog: 0,
                    keepalivePoolSize: 0,
                    password: "string",
                    port: 0,
                    readTimeout: 0,
                    sendTimeout: 0,
                    sentinelMaster: "string",
                    sentinelNodes: [{
                        host: "string",
                        port: 0,
                    }],
                    sentinelPassword: "string",
                    sentinelRole: "string",
                    sentinelUsername: "string",
                    serverName: "string",
                    ssl: false,
                    sslVerify: false,
                    username: "string",
                },
                strategy: "string",
                threshold: 0,
            },
        },
        instanceName: "string",
        ordering: {
            after: {
                accesses: ["string"],
            },
            before: {
                accesses: ["string"],
            },
        },
        protocols: ["string"],
        route: {
            id: "string",
        },
        service: {
            id: "string",
        },
        tags: ["string"],
        updatedAt: 0,
    });
    
    type: konnect:GatewayPluginAiSemanticPromptGuard
    properties:
        config:
            embeddings:
                auth:
                    allowOverride: false
                    awsAccessKeyId: string
                    awsSecretAccessKey: string
                    azureClientId: string
                    azureClientSecret: string
                    azureTenantId: string
                    azureUseManagedIdentity: false
                    gcpServiceAccountJson: string
                    gcpUseServiceAccount: false
                    headerName: string
                    headerValue: string
                    paramLocation: string
                    paramName: string
                    paramValue: string
                model:
                    name: string
                    options:
                        azure:
                            apiVersion: string
                            deploymentId: string
                            instance: string
                        bedrock:
                            awsAssumeRoleArn: string
                            awsRegion: string
                            awsRoleSessionName: string
                            awsStsEndpointUrl: string
                        gemini:
                            apiEndpoint: string
                            locationId: string
                            projectId: string
                        huggingface:
                            useCache: false
                            waitForModel: false
                        upstreamUrl: string
                    provider: string
            llmFormat: string
            rules:
                allowPrompts:
                    - string
                denyPrompts:
                    - string
                matchAllConversationHistory: false
                matchAllRoles: false
                maxRequestBodySize: 0
            search:
                threshold: 0
            vectordb:
                dimensions: 0
                distanceMetric: string
                pgvector:
                    database: string
                    host: string
                    password: string
                    port: 0
                    ssl: false
                    sslCert: string
                    sslCertKey: string
                    sslRequired: false
                    sslVerify: false
                    sslVersion: string
                    timeout: 0
                    user: string
                redis:
                    clusterMaxRedirections: 0
                    clusterNodes:
                        - ip: string
                          port: 0
                    connectTimeout: 0
                    connectionIsProxied: false
                    database: 0
                    host: string
                    keepaliveBacklog: 0
                    keepalivePoolSize: 0
                    password: string
                    port: 0
                    readTimeout: 0
                    sendTimeout: 0
                    sentinelMaster: string
                    sentinelNodes:
                        - host: string
                          port: 0
                    sentinelPassword: string
                    sentinelRole: string
                    sentinelUsername: string
                    serverName: string
                    ssl: false
                    sslVerify: false
                    username: string
                strategy: string
                threshold: 0
        consumer:
            id: string
        consumerGroup:
            id: string
        controlPlaneId: string
        createdAt: 0
        enabled: false
        gatewayPluginAiSemanticPromptGuardId: string
        instanceName: string
        ordering:
            after:
                accesses:
                    - string
            before:
                accesses:
                    - string
        protocols:
            - string
        route:
            id: string
        service:
            id: string
        tags:
            - string
        updatedAt: 0
    

    GatewayPluginAiSemanticPromptGuard Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The GatewayPluginAiSemanticPromptGuard resource accepts the following input properties:

    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    Config GatewayPluginAiSemanticPromptGuardConfig
    Consumer GatewayPluginAiSemanticPromptGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    ConsumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    CreatedAt double
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied.
    GatewayPluginAiSemanticPromptGuardId string
    The ID of this resource.
    InstanceName string
    Ordering GatewayPluginAiSemanticPromptGuardOrdering
    Protocols List<string>
    A set of strings representing HTTP protocols.
    Route GatewayPluginAiSemanticPromptGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginAiSemanticPromptGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags List<string>
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt double
    Unix epoch when the resource was last updated.
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    Config GatewayPluginAiSemanticPromptGuardConfigArgs
    Consumer GatewayPluginAiSemanticPromptGuardConsumerArgs
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    ConsumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    CreatedAt float64
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied.
    GatewayPluginAiSemanticPromptGuardId string
    The ID of this resource.
    InstanceName string
    Ordering GatewayPluginAiSemanticPromptGuardOrderingArgs
    Protocols []string
    A set of strings representing HTTP protocols.
    Route GatewayPluginAiSemanticPromptGuardRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginAiSemanticPromptGuardServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags []string
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt float64
    Unix epoch when the resource was last updated.
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginAiSemanticPromptGuardConfig
    consumer GatewayPluginAiSemanticPromptGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    createdAt Double
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied.
    gatewayPluginAiSemanticPromptGuardId String
    The ID of this resource.
    instanceName String
    ordering GatewayPluginAiSemanticPromptGuardOrdering
    protocols List<String>
    A set of strings representing HTTP protocols.
    route GatewayPluginAiSemanticPromptGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiSemanticPromptGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Double
    Unix epoch when the resource was last updated.
    controlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginAiSemanticPromptGuardConfig
    consumer GatewayPluginAiSemanticPromptGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    createdAt number
    Unix epoch when the resource was created.
    enabled boolean
    Whether the plugin is applied.
    gatewayPluginAiSemanticPromptGuardId string
    The ID of this resource.
    instanceName string
    ordering GatewayPluginAiSemanticPromptGuardOrdering
    protocols string[]
    A set of strings representing HTTP protocols.
    route GatewayPluginAiSemanticPromptGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiSemanticPromptGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags string[]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt number
    Unix epoch when the resource was last updated.
    control_plane_id str
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginAiSemanticPromptGuardConfigArgs
    consumer GatewayPluginAiSemanticPromptGuardConsumerArgs
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumer_group GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    created_at float
    Unix epoch when the resource was created.
    enabled bool
    Whether the plugin is applied.
    gateway_plugin_ai_semantic_prompt_guard_id str
    The ID of this resource.
    instance_name str
    ordering GatewayPluginAiSemanticPromptGuardOrderingArgs
    protocols Sequence[str]
    A set of strings representing HTTP protocols.
    route GatewayPluginAiSemanticPromptGuardRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiSemanticPromptGuardServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags Sequence[str]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updated_at float
    Unix epoch when the resource was last updated.
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config Property Map
    consumer Property Map
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup Property Map
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    createdAt Number
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied.
    gatewayPluginAiSemanticPromptGuardId String
    The ID of this resource.
    instanceName String
    ordering Property Map
    protocols List<String>
    A set of strings representing HTTP protocols.
    route Property Map
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service Property Map
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Number
    Unix epoch when the resource was last updated.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GatewayPluginAiSemanticPromptGuard resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing GatewayPluginAiSemanticPromptGuard Resource

    Get an existing GatewayPluginAiSemanticPromptGuard resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: GatewayPluginAiSemanticPromptGuardState, opts?: CustomResourceOptions): GatewayPluginAiSemanticPromptGuard
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            config: Optional[GatewayPluginAiSemanticPromptGuardConfigArgs] = None,
            consumer: Optional[GatewayPluginAiSemanticPromptGuardConsumerArgs] = None,
            consumer_group: Optional[GatewayPluginAiSemanticPromptGuardConsumerGroupArgs] = None,
            control_plane_id: Optional[str] = None,
            created_at: Optional[float] = None,
            enabled: Optional[bool] = None,
            gateway_plugin_ai_semantic_prompt_guard_id: Optional[str] = None,
            instance_name: Optional[str] = None,
            ordering: Optional[GatewayPluginAiSemanticPromptGuardOrderingArgs] = None,
            protocols: Optional[Sequence[str]] = None,
            route: Optional[GatewayPluginAiSemanticPromptGuardRouteArgs] = None,
            service: Optional[GatewayPluginAiSemanticPromptGuardServiceArgs] = None,
            tags: Optional[Sequence[str]] = None,
            updated_at: Optional[float] = None) -> GatewayPluginAiSemanticPromptGuard
    func GetGatewayPluginAiSemanticPromptGuard(ctx *Context, name string, id IDInput, state *GatewayPluginAiSemanticPromptGuardState, opts ...ResourceOption) (*GatewayPluginAiSemanticPromptGuard, error)
    public static GatewayPluginAiSemanticPromptGuard Get(string name, Input<string> id, GatewayPluginAiSemanticPromptGuardState? state, CustomResourceOptions? opts = null)
    public static GatewayPluginAiSemanticPromptGuard get(String name, Output<String> id, GatewayPluginAiSemanticPromptGuardState state, CustomResourceOptions options)
    resources:  _:    type: konnect:GatewayPluginAiSemanticPromptGuard    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Config GatewayPluginAiSemanticPromptGuardConfig
    Consumer GatewayPluginAiSemanticPromptGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    ConsumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    CreatedAt double
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied.
    GatewayPluginAiSemanticPromptGuardId string
    The ID of this resource.
    InstanceName string
    Ordering GatewayPluginAiSemanticPromptGuardOrdering
    Protocols List<string>
    A set of strings representing HTTP protocols.
    Route GatewayPluginAiSemanticPromptGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginAiSemanticPromptGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags List<string>
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt double
    Unix epoch when the resource was last updated.
    Config GatewayPluginAiSemanticPromptGuardConfigArgs
    Consumer GatewayPluginAiSemanticPromptGuardConsumerArgs
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    ConsumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    CreatedAt float64
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied.
    GatewayPluginAiSemanticPromptGuardId string
    The ID of this resource.
    InstanceName string
    Ordering GatewayPluginAiSemanticPromptGuardOrderingArgs
    Protocols []string
    A set of strings representing HTTP protocols.
    Route GatewayPluginAiSemanticPromptGuardRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginAiSemanticPromptGuardServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags []string
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt float64
    Unix epoch when the resource was last updated.
    config GatewayPluginAiSemanticPromptGuardConfig
    consumer GatewayPluginAiSemanticPromptGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt Double
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied.
    gatewayPluginAiSemanticPromptGuardId String
    The ID of this resource.
    instanceName String
    ordering GatewayPluginAiSemanticPromptGuardOrdering
    protocols List<String>
    A set of strings representing HTTP protocols.
    route GatewayPluginAiSemanticPromptGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiSemanticPromptGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Double
    Unix epoch when the resource was last updated.
    config GatewayPluginAiSemanticPromptGuardConfig
    consumer GatewayPluginAiSemanticPromptGuardConsumer
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    controlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt number
    Unix epoch when the resource was created.
    enabled boolean
    Whether the plugin is applied.
    gatewayPluginAiSemanticPromptGuardId string
    The ID of this resource.
    instanceName string
    ordering GatewayPluginAiSemanticPromptGuardOrdering
    protocols string[]
    A set of strings representing HTTP protocols.
    route GatewayPluginAiSemanticPromptGuardRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiSemanticPromptGuardService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags string[]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt number
    Unix epoch when the resource was last updated.
    config GatewayPluginAiSemanticPromptGuardConfigArgs
    consumer GatewayPluginAiSemanticPromptGuardConsumerArgs
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumer_group GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    control_plane_id str
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    created_at float
    Unix epoch when the resource was created.
    enabled bool
    Whether the plugin is applied.
    gateway_plugin_ai_semantic_prompt_guard_id str
    The ID of this resource.
    instance_name str
    ordering GatewayPluginAiSemanticPromptGuardOrderingArgs
    protocols Sequence[str]
    A set of strings representing HTTP protocols.
    route GatewayPluginAiSemanticPromptGuardRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginAiSemanticPromptGuardServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags Sequence[str]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updated_at float
    Unix epoch when the resource was last updated.
    config Property Map
    consumer Property Map
    If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
    consumerGroup Property Map
    If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt Number
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied.
    gatewayPluginAiSemanticPromptGuardId String
    The ID of this resource.
    instanceName String
    ordering Property Map
    protocols List<String>
    A set of strings representing HTTP protocols.
    route Property Map
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service Property Map
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Number
    Unix epoch when the resource was last updated.

    Supporting Types

    GatewayPluginAiSemanticPromptGuardConfig, GatewayPluginAiSemanticPromptGuardConfigArgs

    embeddings Property Map
    llmFormat String
    LLM input and output format and schema to use. must be one of ["bedrock", "gemini", "openai"]
    rules Property Map
    search Property Map
    vectordb Property Map

    GatewayPluginAiSemanticPromptGuardConfigEmbeddings, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs

    GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuth, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs

    AllowOverride bool
    If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
    AwsAccessKeyId string
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
    AwsSecretAccessKey string
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
    AzureClientId string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
    AzureClientSecret string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
    AzureTenantId string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
    AzureUseManagedIdentity bool
    Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
    GcpServiceAccountJson string
    Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
    GcpUseServiceAccount bool
    Use service account auth for GCP-based providers and models.
    HeaderName string
    If AI model requires authentication via Authorization or API key header, specify its name here.
    HeaderValue string
    Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
    ParamLocation string
    Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
    ParamName string
    If AI model requires authentication via query parameter, specify its name here.
    ParamValue string
    Specify the full parameter value for 'param_name'.
    AllowOverride bool
    If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
    AwsAccessKeyId string
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
    AwsSecretAccessKey string
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
    AzureClientId string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
    AzureClientSecret string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
    AzureTenantId string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
    AzureUseManagedIdentity bool
    Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
    GcpServiceAccountJson string
    Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
    GcpUseServiceAccount bool
    Use service account auth for GCP-based providers and models.
    HeaderName string
    If AI model requires authentication via Authorization or API key header, specify its name here.
    HeaderValue string
    Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
    ParamLocation string
    Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
    ParamName string
    If AI model requires authentication via query parameter, specify its name here.
    ParamValue string
    Specify the full parameter value for 'param_name'.
    allowOverride Boolean
    If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
    awsAccessKeyId String
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
    awsSecretAccessKey String
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
    azureClientId String
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
    azureClientSecret String
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
    azureTenantId String
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
    azureUseManagedIdentity Boolean
    Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
    gcpServiceAccountJson String
    Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
    gcpUseServiceAccount Boolean
    Use service account auth for GCP-based providers and models.
    headerName String
    If AI model requires authentication via Authorization or API key header, specify its name here.
    headerValue String
    Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
    paramLocation String
    Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
    paramName String
    If AI model requires authentication via query parameter, specify its name here.
    paramValue String
    Specify the full parameter value for 'param_name'.
    allowOverride boolean
    If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
    awsAccessKeyId string
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
    awsSecretAccessKey string
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
    azureClientId string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
    azureClientSecret string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
    azureTenantId string
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
    azureUseManagedIdentity boolean
    Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
    gcpServiceAccountJson string
    Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
    gcpUseServiceAccount boolean
    Use service account auth for GCP-based providers and models.
    headerName string
    If AI model requires authentication via Authorization or API key header, specify its name here.
    headerValue string
    Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
    paramLocation string
    Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
    paramName string
    If AI model requires authentication via query parameter, specify its name here.
    paramValue string
    Specify the full parameter value for 'param_name'.
    allow_override bool
    If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
    aws_access_key_id str
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
    aws_secret_access_key str
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
    azure_client_id str
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
    azure_client_secret str
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
    azure_tenant_id str
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
    azure_use_managed_identity bool
    Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
    gcp_service_account_json str
    Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
    gcp_use_service_account bool
    Use service account auth for GCP-based providers and models.
    header_name str
    If AI model requires authentication via Authorization or API key header, specify its name here.
    header_value str
    Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
    param_location str
    Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
    param_name str
    If AI model requires authentication via query parameter, specify its name here.
    param_value str
    Specify the full parameter value for 'param_name'.
    allowOverride Boolean
    If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
    awsAccessKeyId String
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
    awsSecretAccessKey String
    Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
    azureClientId String
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
    azureClientSecret String
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
    azureTenantId String
    If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
    azureUseManagedIdentity Boolean
    Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
    gcpServiceAccountJson String
    Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
    gcpUseServiceAccount Boolean
    Use service account auth for GCP-based providers and models.
    headerName String
    If AI model requires authentication via Authorization or API key header, specify its name here.
    headerValue String
    Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
    paramLocation String
    Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
    paramName String
    If AI model requires authentication via query parameter, specify its name here.
    paramValue String
    Specify the full parameter value for 'param_name'.

    GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModel, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs

    Name string
    Model name to execute.
    Options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
    Key/value settings for the model
    Provider string
    AI provider format to use for embeddings API. must be one of ["azure", "bedrock", "gemini", "huggingface", "mistral", "openai"]
    Name string
    Model name to execute.
    Options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
    Key/value settings for the model
    Provider string
    AI provider format to use for embeddings API. must be one of ["azure", "bedrock", "gemini", "huggingface", "mistral", "openai"]
    name String
    Model name to execute.
    options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
    Key/value settings for the model
    provider String
    AI provider format to use for embeddings API. must be one of ["azure", "bedrock", "gemini", "huggingface", "mistral", "openai"]
    name string
    Model name to execute.
    options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
    Key/value settings for the model
    provider string
    AI provider format to use for embeddings API. must be one of ["azure", "bedrock", "gemini", "huggingface", "mistral", "openai"]
    name str
    Model name to execute.
    options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
    Key/value settings for the model
    provider str
    AI provider format to use for embeddings API. must be one of ["azure", "bedrock", "gemini", "huggingface", "mistral", "openai"]
    name String
    Model name to execute.
    options Property Map
    Key/value settings for the model
    provider String
    AI provider format to use for embeddings API. must be one of ["azure", "bedrock", "gemini", "huggingface", "mistral", "openai"]

    GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs

    GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsAzure, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsAzureArgs

    ApiVersion string
    'api-version' for Azure OpenAI instances.
    DeploymentId string
    Deployment ID for Azure OpenAI instances.
    Instance string
    Instance name for Azure OpenAI hosted models.
    ApiVersion string
    'api-version' for Azure OpenAI instances.
    DeploymentId string
    Deployment ID for Azure OpenAI instances.
    Instance string
    Instance name for Azure OpenAI hosted models.
    apiVersion String
    'api-version' for Azure OpenAI instances.
    deploymentId String
    Deployment ID for Azure OpenAI instances.
    instance String
    Instance name for Azure OpenAI hosted models.
    apiVersion string
    'api-version' for Azure OpenAI instances.
    deploymentId string
    Deployment ID for Azure OpenAI instances.
    instance string
    Instance name for Azure OpenAI hosted models.
    api_version str
    'api-version' for Azure OpenAI instances.
    deployment_id str
    Deployment ID for Azure OpenAI instances.
    instance str
    Instance name for Azure OpenAI hosted models.
    apiVersion String
    'api-version' for Azure OpenAI instances.
    deploymentId String
    Deployment ID for Azure OpenAI instances.
    instance String
    Instance name for Azure OpenAI hosted models.

    GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsBedrock, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsBedrockArgs

    AwsAssumeRoleArn string
    If using AWS providers (Bedrock) you can assume a different role after authentication with the current IAM context is successful.
    AwsRegion string
    If using AWS providers (Bedrock) you can override the AWS_REGION environment variable by setting this option.
    AwsRoleSessionName string
    If using AWS providers (Bedrock), set the identifier of the assumed role session.
    AwsStsEndpointUrl string
    If using AWS providers (Bedrock), override the STS endpoint URL when assuming a different role.
    AwsAssumeRoleArn string
    If using AWS providers (Bedrock) you can assume a different role after authentication with the current IAM context is successful.
    AwsRegion string
    If using AWS providers (Bedrock) you can override the AWS_REGION environment variable by setting this option.
    AwsRoleSessionName string
    If using AWS providers (Bedrock), set the identifier of the assumed role session.
    AwsStsEndpointUrl string
    If using AWS providers (Bedrock), override the STS endpoint URL when assuming a different role.
    awsAssumeRoleArn String
    If using AWS providers (Bedrock) you can assume a different role after authentication with the current IAM context is successful.
    awsRegion String
    If using AWS providers (Bedrock) you can override the AWS_REGION environment variable by setting this option.
    awsRoleSessionName String
    If using AWS providers (Bedrock), set the identifier of the assumed role session.
    awsStsEndpointUrl String
    If using AWS providers (Bedrock), override the STS endpoint URL when assuming a different role.
    awsAssumeRoleArn string
    If using AWS providers (Bedrock) you can assume a different role after authentication with the current IAM context is successful.
    awsRegion string
    If using AWS providers (Bedrock) you can override the AWS_REGION environment variable by setting this option.
    awsRoleSessionName string
    If using AWS providers (Bedrock), set the identifier of the assumed role session.
    awsStsEndpointUrl string
    If using AWS providers (Bedrock), override the STS endpoint URL when assuming a different role.
    aws_assume_role_arn str
    If using AWS providers (Bedrock) you can assume a different role after authentication with the current IAM context is successful.
    aws_region str
    If using AWS providers (Bedrock) you can override the AWS_REGION environment variable by setting this option.
    aws_role_session_name str
    If using AWS providers (Bedrock), set the identifier of the assumed role session.
    aws_sts_endpoint_url str
    If using AWS providers (Bedrock), override the STS endpoint URL when assuming a different role.
    awsAssumeRoleArn String
    If using AWS providers (Bedrock) you can assume a different role after authentication with the current IAM context is successful.
    awsRegion String
    If using AWS providers (Bedrock) you can override the AWS_REGION environment variable by setting this option.
    awsRoleSessionName String
    If using AWS providers (Bedrock), set the identifier of the assumed role session.
    awsStsEndpointUrl String
    If using AWS providers (Bedrock), override the STS endpoint URL when assuming a different role.

    GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsGemini, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsGeminiArgs

    ApiEndpoint string
    If running Gemini on Vertex, specify the regional API endpoint (hostname only).
    LocationId string
    If running Gemini on Vertex, specify the location ID.
    ProjectId string
    If running Gemini on Vertex, specify the project ID.
    ApiEndpoint string
    If running Gemini on Vertex, specify the regional API endpoint (hostname only).
    LocationId string
    If running Gemini on Vertex, specify the location ID.
    ProjectId string
    If running Gemini on Vertex, specify the project ID.
    apiEndpoint String
    If running Gemini on Vertex, specify the regional API endpoint (hostname only).
    locationId String
    If running Gemini on Vertex, specify the location ID.
    projectId String
    If running Gemini on Vertex, specify the project ID.
    apiEndpoint string
    If running Gemini on Vertex, specify the regional API endpoint (hostname only).
    locationId string
    If running Gemini on Vertex, specify the location ID.
    projectId string
    If running Gemini on Vertex, specify the project ID.
    api_endpoint str
    If running Gemini on Vertex, specify the regional API endpoint (hostname only).
    location_id str
    If running Gemini on Vertex, specify the location ID.
    project_id str
    If running Gemini on Vertex, specify the project ID.
    apiEndpoint String
    If running Gemini on Vertex, specify the regional API endpoint (hostname only).
    locationId String
    If running Gemini on Vertex, specify the location ID.
    projectId String
    If running Gemini on Vertex, specify the project ID.

    GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsHuggingface, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsHuggingfaceArgs

    UseCache bool
    Use the cache layer on the inference API
    WaitForModel bool
    Wait for the model if it is not ready
    UseCache bool
    Use the cache layer on the inference API
    WaitForModel bool
    Wait for the model if it is not ready
    useCache Boolean
    Use the cache layer on the inference API
    waitForModel Boolean
    Wait for the model if it is not ready
    useCache boolean
    Use the cache layer on the inference API
    waitForModel boolean
    Wait for the model if it is not ready
    use_cache bool
    Use the cache layer on the inference API
    wait_for_model bool
    Wait for the model if it is not ready
    useCache Boolean
    Use the cache layer on the inference API
    waitForModel Boolean
    Wait for the model if it is not ready

    GatewayPluginAiSemanticPromptGuardConfigRules, GatewayPluginAiSemanticPromptGuardConfigRulesArgs

    AllowPrompts List<string>
    List of prompts to allow.
    DenyPrompts List<string>
    List of prompts to deny.
    MatchAllConversationHistory bool
    If false, will ignore all previous chat prompts from the conversation history.
    MatchAllRoles bool
    If true, will match all roles in addition to 'user' role in conversation history.
    MaxRequestBodySize double
    max allowed body size allowed to be introspected
    AllowPrompts []string
    List of prompts to allow.
    DenyPrompts []string
    List of prompts to deny.
    MatchAllConversationHistory bool
    If false, will ignore all previous chat prompts from the conversation history.
    MatchAllRoles bool
    If true, will match all roles in addition to 'user' role in conversation history.
    MaxRequestBodySize float64
    max allowed body size allowed to be introspected
    allowPrompts List<String>
    List of prompts to allow.
    denyPrompts List<String>
    List of prompts to deny.
    matchAllConversationHistory Boolean
    If false, will ignore all previous chat prompts from the conversation history.
    matchAllRoles Boolean
    If true, will match all roles in addition to 'user' role in conversation history.
    maxRequestBodySize Double
    max allowed body size allowed to be introspected
    allowPrompts string[]
    List of prompts to allow.
    denyPrompts string[]
    List of prompts to deny.
    matchAllConversationHistory boolean
    If false, will ignore all previous chat prompts from the conversation history.
    matchAllRoles boolean
    If true, will match all roles in addition to 'user' role in conversation history.
    maxRequestBodySize number
    max allowed body size allowed to be introspected
    allow_prompts Sequence[str]
    List of prompts to allow.
    deny_prompts Sequence[str]
    List of prompts to deny.
    match_all_conversation_history bool
    If false, will ignore all previous chat prompts from the conversation history.
    match_all_roles bool
    If true, will match all roles in addition to 'user' role in conversation history.
    max_request_body_size float
    max allowed body size allowed to be introspected
    allowPrompts List<String>
    List of prompts to allow.
    denyPrompts List<String>
    List of prompts to deny.
    matchAllConversationHistory Boolean
    If false, will ignore all previous chat prompts from the conversation history.
    matchAllRoles Boolean
    If true, will match all roles in addition to 'user' role in conversation history.
    maxRequestBodySize Number
    max allowed body size allowed to be introspected

    GatewayPluginAiSemanticPromptGuardConfigSearch, GatewayPluginAiSemanticPromptGuardConfigSearchArgs

    Threshold double
    Threshold for the similarity score to be considered a match.
    Threshold float64
    Threshold for the similarity score to be considered a match.
    threshold Double
    Threshold for the similarity score to be considered a match.
    threshold number
    Threshold for the similarity score to be considered a match.
    threshold float
    Threshold for the similarity score to be considered a match.
    threshold Number
    Threshold for the similarity score to be considered a match.

    GatewayPluginAiSemanticPromptGuardConfigVectordb, GatewayPluginAiSemanticPromptGuardConfigVectordbArgs

    Dimensions double
    the desired dimensionality for the vectors
    DistanceMetric string
    the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
    Pgvector GatewayPluginAiSemanticPromptGuardConfigVectordbPgvector
    Redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
    Strategy string
    which vector database driver to use. must be one of ["pgvector", "redis"]
    Threshold double
    the default similarity threshold for accepting semantic search results (float)
    Dimensions float64
    the desired dimensionality for the vectors
    DistanceMetric string
    the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
    Pgvector GatewayPluginAiSemanticPromptGuardConfigVectordbPgvector
    Redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
    Strategy string
    which vector database driver to use. must be one of ["pgvector", "redis"]
    Threshold float64
    the default similarity threshold for accepting semantic search results (float)
    dimensions Double
    the desired dimensionality for the vectors
    distanceMetric String
    the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
    pgvector GatewayPluginAiSemanticPromptGuardConfigVectordbPgvector
    redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
    strategy String
    which vector database driver to use. must be one of ["pgvector", "redis"]
    threshold Double
    the default similarity threshold for accepting semantic search results (float)
    dimensions number
    the desired dimensionality for the vectors
    distanceMetric string
    the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
    pgvector GatewayPluginAiSemanticPromptGuardConfigVectordbPgvector
    redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
    strategy string
    which vector database driver to use. must be one of ["pgvector", "redis"]
    threshold number
    the default similarity threshold for accepting semantic search results (float)
    dimensions float
    the desired dimensionality for the vectors
    distance_metric str
    the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
    pgvector GatewayPluginAiSemanticPromptGuardConfigVectordbPgvector
    redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
    strategy str
    which vector database driver to use. must be one of ["pgvector", "redis"]
    threshold float
    the default similarity threshold for accepting semantic search results (float)
    dimensions Number
    the desired dimensionality for the vectors
    distanceMetric String
    the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
    pgvector Property Map
    redis Property Map
    strategy String
    which vector database driver to use. must be one of ["pgvector", "redis"]
    threshold Number
    the default similarity threshold for accepting semantic search results (float)

    GatewayPluginAiSemanticPromptGuardConfigVectordbPgvector, GatewayPluginAiSemanticPromptGuardConfigVectordbPgvectorArgs

    Database string
    the database of the pgvector database
    Host string
    the host of the pgvector database
    Password string
    the password of the pgvector database
    Port double
    the port of the pgvector database
    Ssl bool
    whether to use ssl for the pgvector database
    SslCert string
    the path of ssl cert to use for the pgvector database
    SslCertKey string
    the path of ssl cert key to use for the pgvector database
    SslRequired bool
    whether ssl is required for the pgvector database
    SslVerify bool
    whether to verify ssl for the pgvector database
    SslVersion string
    the ssl version to use for the pgvector database. must be one of ["any", "tlsv12", "tlsv13"]
    Timeout double
    the timeout of the pgvector database
    User string
    the user of the pgvector database
    Database string
    the database of the pgvector database
    Host string
    the host of the pgvector database
    Password string
    the password of the pgvector database
    Port float64
    the port of the pgvector database
    Ssl bool
    whether to use ssl for the pgvector database
    SslCert string
    the path of ssl cert to use for the pgvector database
    SslCertKey string
    the path of ssl cert key to use for the pgvector database
    SslRequired bool
    whether ssl is required for the pgvector database
    SslVerify bool
    whether to verify ssl for the pgvector database
    SslVersion string
    the ssl version to use for the pgvector database. must be one of ["any", "tlsv12", "tlsv13"]
    Timeout float64
    the timeout of the pgvector database
    User string
    the user of the pgvector database
    database String
    the database of the pgvector database
    host String
    the host of the pgvector database
    password String
    the password of the pgvector database
    port Double
    the port of the pgvector database
    ssl Boolean
    whether to use ssl for the pgvector database
    sslCert String
    the path of ssl cert to use for the pgvector database
    sslCertKey String
    the path of ssl cert key to use for the pgvector database
    sslRequired Boolean
    whether ssl is required for the pgvector database
    sslVerify Boolean
    whether to verify ssl for the pgvector database
    sslVersion String
    the ssl version to use for the pgvector database. must be one of ["any", "tlsv12", "tlsv13"]
    timeout Double
    the timeout of the pgvector database
    user String
    the user of the pgvector database
    database string
    the database of the pgvector database
    host string
    the host of the pgvector database
    password string
    the password of the pgvector database
    port number
    the port of the pgvector database
    ssl boolean
    whether to use ssl for the pgvector database
    sslCert string
    the path of ssl cert to use for the pgvector database
    sslCertKey string
    the path of ssl cert key to use for the pgvector database
    sslRequired boolean
    whether ssl is required for the pgvector database
    sslVerify boolean
    whether to verify ssl for the pgvector database
    sslVersion string
    the ssl version to use for the pgvector database. must be one of ["any", "tlsv12", "tlsv13"]
    timeout number
    the timeout of the pgvector database
    user string
    the user of the pgvector database
    database str
    the database of the pgvector database
    host str
    the host of the pgvector database
    password str
    the password of the pgvector database
    port float
    the port of the pgvector database
    ssl bool
    whether to use ssl for the pgvector database
    ssl_cert str
    the path of ssl cert to use for the pgvector database
    ssl_cert_key str
    the path of ssl cert key to use for the pgvector database
    ssl_required bool
    whether ssl is required for the pgvector database
    ssl_verify bool
    whether to verify ssl for the pgvector database
    ssl_version str
    the ssl version to use for the pgvector database. must be one of ["any", "tlsv12", "tlsv13"]
    timeout float
    the timeout of the pgvector database
    user str
    the user of the pgvector database
    database String
    the database of the pgvector database
    host String
    the host of the pgvector database
    password String
    the password of the pgvector database
    port Number
    the port of the pgvector database
    ssl Boolean
    whether to use ssl for the pgvector database
    sslCert String
    the path of ssl cert to use for the pgvector database
    sslCertKey String
    the path of ssl cert key to use for the pgvector database
    sslRequired Boolean
    whether ssl is required for the pgvector database
    sslVerify Boolean
    whether to verify ssl for the pgvector database
    sslVersion String
    the ssl version to use for the pgvector database. must be one of ["any", "tlsv12", "tlsv13"]
    timeout Number
    the timeout of the pgvector database
    user String
    the user of the pgvector database

    GatewayPluginAiSemanticPromptGuardConfigVectordbRedis, GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs

    ClusterMaxRedirections double
    Maximum retry attempts for redirection.
    ClusterNodes List<GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode>
    Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
    ConnectTimeout double
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    ConnectionIsProxied bool
    If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
    Database double
    Database to use for the Redis connection when using the redis strategy
    Host string
    A string representing a host name, such as example.com.
    KeepaliveBacklog double
    Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
    KeepalivePoolSize double
    The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
    Password string
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    Port double
    An integer representing a port number between 0 and 65535, inclusive.
    ReadTimeout double
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    SendTimeout double
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    SentinelMaster string
    Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
    SentinelNodes List<GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode>
    Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
    SentinelPassword string
    Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
    SentinelRole string
    Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
    SentinelUsername string
    Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
    ServerName string
    A string representing an SNI (server name indication) value for TLS.
    Ssl bool
    If set to true, uses SSL to connect to Redis.
    SslVerify bool
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
    Username string
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    ClusterMaxRedirections float64
    Maximum retry attempts for redirection.
    ClusterNodes []GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode
    Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
    ConnectTimeout float64
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    ConnectionIsProxied bool
    If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
    Database float64
    Database to use for the Redis connection when using the redis strategy
    Host string
    A string representing a host name, such as example.com.
    KeepaliveBacklog float64
    Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
    KeepalivePoolSize float64
    The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
    Password string
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    Port float64
    An integer representing a port number between 0 and 65535, inclusive.
    ReadTimeout float64
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    SendTimeout float64
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    SentinelMaster string
    Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
    SentinelNodes []GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode
    Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
    SentinelPassword string
    Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
    SentinelRole string
    Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
    SentinelUsername string
    Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
    ServerName string
    A string representing an SNI (server name indication) value for TLS.
    Ssl bool
    If set to true, uses SSL to connect to Redis.
    SslVerify bool
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
    Username string
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    clusterMaxRedirections Double
    Maximum retry attempts for redirection.
    clusterNodes List<GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode>
    Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
    connectTimeout Double
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    connectionIsProxied Boolean
    If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
    database Double
    Database to use for the Redis connection when using the redis strategy
    host String
    A string representing a host name, such as example.com.
    keepaliveBacklog Double
    Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
    keepalivePoolSize Double
    The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
    password String
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    port Double
    An integer representing a port number between 0 and 65535, inclusive.
    readTimeout Double
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    sendTimeout Double
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    sentinelMaster String
    Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
    sentinelNodes List<GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode>
    Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
    sentinelPassword String
    Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
    sentinelRole String
    Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
    sentinelUsername String
    Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
    serverName String
    A string representing an SNI (server name indication) value for TLS.
    ssl Boolean
    If set to true, uses SSL to connect to Redis.
    sslVerify Boolean
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
    username String
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    clusterMaxRedirections number
    Maximum retry attempts for redirection.
    clusterNodes GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode[]
    Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
    connectTimeout number
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    connectionIsProxied boolean
    If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
    database number
    Database to use for the Redis connection when using the redis strategy
    host string
    A string representing a host name, such as example.com.
    keepaliveBacklog number
    Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
    keepalivePoolSize number
    The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
    password string
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    port number
    An integer representing a port number between 0 and 65535, inclusive.
    readTimeout number
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    sendTimeout number
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    sentinelMaster string
    Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
    sentinelNodes GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode[]
    Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
    sentinelPassword string
    Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
    sentinelRole string
    Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
    sentinelUsername string
    Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
    serverName string
    A string representing an SNI (server name indication) value for TLS.
    ssl boolean
    If set to true, uses SSL to connect to Redis.
    sslVerify boolean
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
    username string
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    cluster_max_redirections float
    Maximum retry attempts for redirection.
    cluster_nodes Sequence[GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode]
    Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
    connect_timeout float
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    connection_is_proxied bool
    If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
    database float
    Database to use for the Redis connection when using the redis strategy
    host str
    A string representing a host name, such as example.com.
    keepalive_backlog float
    Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
    keepalive_pool_size float
    The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
    password str
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    port float
    An integer representing a port number between 0 and 65535, inclusive.
    read_timeout float
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    send_timeout float
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    sentinel_master str
    Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
    sentinel_nodes Sequence[GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode]
    Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
    sentinel_password str
    Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
    sentinel_role str
    Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
    sentinel_username str
    Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
    server_name str
    A string representing an SNI (server name indication) value for TLS.
    ssl bool
    If set to true, uses SSL to connect to Redis.
    ssl_verify bool
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
    username str
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    clusterMaxRedirections Number
    Maximum retry attempts for redirection.
    clusterNodes List<Property Map>
    Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
    connectTimeout Number
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    connectionIsProxied Boolean
    If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
    database Number
    Database to use for the Redis connection when using the redis strategy
    host String
    A string representing a host name, such as example.com.
    keepaliveBacklog Number
    Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
    keepalivePoolSize Number
    The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
    password String
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    port Number
    An integer representing a port number between 0 and 65535, inclusive.
    readTimeout Number
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    sendTimeout Number
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
    sentinelMaster String
    Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
    sentinelNodes List<Property Map>
    Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
    sentinelPassword String
    Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
    sentinelRole String
    Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
    sentinelUsername String
    Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
    serverName String
    A string representing an SNI (server name indication) value for TLS.
    ssl Boolean
    If set to true, uses SSL to connect to Redis.
    sslVerify Boolean
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
    username String
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.

    GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode, GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs

    Ip string
    A string representing a host name, such as example.com.
    Port double
    An integer representing a port number between 0 and 65535, inclusive.
    Ip string
    A string representing a host name, such as example.com.
    Port float64
    An integer representing a port number between 0 and 65535, inclusive.
    ip String
    A string representing a host name, such as example.com.
    port Double
    An integer representing a port number between 0 and 65535, inclusive.
    ip string
    A string representing a host name, such as example.com.
    port number
    An integer representing a port number between 0 and 65535, inclusive.
    ip str
    A string representing a host name, such as example.com.
    port float
    An integer representing a port number between 0 and 65535, inclusive.
    ip String
    A string representing a host name, such as example.com.
    port Number
    An integer representing a port number between 0 and 65535, inclusive.

    GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode, GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs

    Host string
    A string representing a host name, such as example.com.
    Port double
    An integer representing a port number between 0 and 65535, inclusive.
    Host string
    A string representing a host name, such as example.com.
    Port float64
    An integer representing a port number between 0 and 65535, inclusive.
    host String
    A string representing a host name, such as example.com.
    port Double
    An integer representing a port number between 0 and 65535, inclusive.
    host string
    A string representing a host name, such as example.com.
    port number
    An integer representing a port number between 0 and 65535, inclusive.
    host str
    A string representing a host name, such as example.com.
    port float
    An integer representing a port number between 0 and 65535, inclusive.
    host String
    A string representing a host name, such as example.com.
    port Number
    An integer representing a port number between 0 and 65535, inclusive.

    GatewayPluginAiSemanticPromptGuardConsumer, GatewayPluginAiSemanticPromptGuardConsumerArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    GatewayPluginAiSemanticPromptGuardConsumerGroup, GatewayPluginAiSemanticPromptGuardConsumerGroupArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    GatewayPluginAiSemanticPromptGuardOrdering, GatewayPluginAiSemanticPromptGuardOrderingArgs

    GatewayPluginAiSemanticPromptGuardOrderingAfter, GatewayPluginAiSemanticPromptGuardOrderingAfterArgs

    Accesses List<string>
    Accesses []string
    accesses List<String>
    accesses string[]
    accesses Sequence[str]
    accesses List<String>

    GatewayPluginAiSemanticPromptGuardOrderingBefore, GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs

    Accesses List<string>
    Accesses []string
    accesses List<String>
    accesses string[]
    accesses Sequence[str]
    accesses List<String>

    GatewayPluginAiSemanticPromptGuardRoute, GatewayPluginAiSemanticPromptGuardRouteArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    GatewayPluginAiSemanticPromptGuardService, GatewayPluginAiSemanticPromptGuardServiceArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    Import

    $ pulumi import konnect:index/gatewayPluginAiSemanticPromptGuard:GatewayPluginAiSemanticPromptGuard my_konnect_gateway_plugin_ai_semantic_prompt_guard "{ \"control_plane_id\": \"9524ec7d-36d9-465d-a8c5-83a3c9390458\", \"id\": \"3473c251-5b6c-4f45-b1ff-7ede735a366d\"}"
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    konnect kong/terraform-provider-konnect
    License
    Notes
    This Pulumi package is based on the konnect Terraform Provider.
    konnect logo
    konnect 2.7.1 published on Thursday, May 1, 2025 by kong