1. Packages
  2. Konnect Provider
  3. API Docs
  4. GatewayPluginBasicAuth
konnect 3.5.0 published on Tuesday, Jan 13, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

konnect.GatewayPluginBasicAuth

konnect logo
konnect 3.5.0 published on Tuesday, Jan 13, 2026 by kong
Schema (JSON)
kong/terraform-provider-konnect

    GatewayPluginBasicAuth Resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as konnect from "@pulumi/konnect";

const myGatewaypluginbasicauth = new konnect.GatewayPluginBasicAuth("my_gatewaypluginbasicauth", {
    config: {
        anonymous: "...my_anonymous...",
        bruteForceProtection: {
            redis: {
                cloudAuthentication: {
                    authProvider: "azure",
                    awsAccessKeyId: "...my_aws_access_key_id...",
                    awsAssumeRoleArn: "...my_aws_assume_role_arn...",
                    awsCacheName: "...my_aws_cache_name...",
                    awsIsServerless: true,
                    awsRegion: "...my_aws_region...",
                    awsRoleSessionName: "...my_aws_role_session_name...",
                    awsSecretAccessKey: "...my_aws_secret_access_key...",
                    azureClientId: "...my_azure_client_id...",
                    azureClientSecret: "...my_azure_client_secret...",
                    azureTenantId: "...my_azure_tenant_id...",
                    gcpServiceAccountJson: "...my_gcp_service_account_json...",
                },
                database: 2,
                host: "...my_host...",
                password: "...my_password...",
                port: 18528,
                serverName: "...my_server_name...",
                ssl: true,
                sslVerify: true,
                timeout: 1835674936,
                username: "...my_username...",
            },
            strategy: "redis",
        },
        hideCredentials: false,
        realm: "...my_realm...",
    },
    controlPlaneId: "9524ec7d-36d9-465d-a8c5-83a3c9390458",
    createdAt: 6,
    enabled: false,
    gatewayPluginBasicAuthId: "...my_id...",
    instanceName: "...my_instance_name...",
    ordering: {
        after: {
            accesses: ["..."],
        },
        before: {
            accesses: ["..."],
        },
    },
    partials: [{
        id: "...my_id...",
        name: "...my_name...",
        path: "...my_path...",
    }],
    protocols: ["http"],
    route: {
        id: "...my_id...",
    },
    service: {
        id: "...my_id...",
    },
    tags: ["..."],
    updatedAt: 10,
});

    import pulumi
import pulumi_konnect as konnect

my_gatewaypluginbasicauth = konnect.GatewayPluginBasicAuth("my_gatewaypluginbasicauth",
    config={
        "anonymous": "...my_anonymous...",
        "brute_force_protection": {
            "redis": {
                "cloud_authentication": {
                    "auth_provider": "azure",
                    "aws_access_key_id": "...my_aws_access_key_id...",
                    "aws_assume_role_arn": "...my_aws_assume_role_arn...",
                    "aws_cache_name": "...my_aws_cache_name...",
                    "aws_is_serverless": True,
                    "aws_region": "...my_aws_region...",
                    "aws_role_session_name": "...my_aws_role_session_name...",
                    "aws_secret_access_key": "...my_aws_secret_access_key...",
                    "azure_client_id": "...my_azure_client_id...",
                    "azure_client_secret": "...my_azure_client_secret...",
                    "azure_tenant_id": "...my_azure_tenant_id...",
                    "gcp_service_account_json": "...my_gcp_service_account_json...",
                },
                "database": 2,
                "host": "...my_host...",
                "password": "...my_password...",
                "port": 18528,
                "server_name": "...my_server_name...",
                "ssl": True,
                "ssl_verify": True,
                "timeout": 1835674936,
                "username": "...my_username...",
            },
            "strategy": "redis",
        },
        "hide_credentials": False,
        "realm": "...my_realm...",
    },
    control_plane_id="9524ec7d-36d9-465d-a8c5-83a3c9390458",
    created_at=6,
    enabled=False,
    gateway_plugin_basic_auth_id="...my_id...",
    instance_name="...my_instance_name...",
    ordering={
        "after": {
            "accesses": ["..."],
        },
        "before": {
            "accesses": ["..."],
        },
    },
    partials=[{
        "id": "...my_id...",
        "name": "...my_name...",
        "path": "...my_path...",
    }],
    protocols=["http"],
    route={
        "id": "...my_id...",
    },
    service={
        "id": "...my_id...",
    },
    tags=["..."],
    updated_at=10)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/konnect/v3/konnect"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := konnect.NewGatewayPluginBasicAuth(ctx, "my_gatewaypluginbasicauth", &konnect.GatewayPluginBasicAuthArgs{
			Config: &konnect.GatewayPluginBasicAuthConfigArgs{
				Anonymous: pulumi.String("...my_anonymous..."),
				BruteForceProtection: &konnect.GatewayPluginBasicAuthConfigBruteForceProtectionArgs{
					Redis: &konnect.GatewayPluginBasicAuthConfigBruteForceProtectionRedisArgs{
						CloudAuthentication: &konnect.GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthenticationArgs{
							AuthProvider:          pulumi.String("azure"),
							AwsAccessKeyId:        pulumi.String("...my_aws_access_key_id..."),
							AwsAssumeRoleArn:      pulumi.String("...my_aws_assume_role_arn..."),
							AwsCacheName:          pulumi.String("...my_aws_cache_name..."),
							AwsIsServerless:       pulumi.Bool(true),
							AwsRegion:             pulumi.String("...my_aws_region..."),
							AwsRoleSessionName:    pulumi.String("...my_aws_role_session_name..."),
							AwsSecretAccessKey:    pulumi.String("...my_aws_secret_access_key..."),
							AzureClientId:         pulumi.String("...my_azure_client_id..."),
							AzureClientSecret:     pulumi.String("...my_azure_client_secret..."),
							AzureTenantId:         pulumi.String("...my_azure_tenant_id..."),
							GcpServiceAccountJson: pulumi.String("...my_gcp_service_account_json..."),
						},
						Database:   pulumi.Float64(2),
						Host:       pulumi.String("...my_host..."),
						Password:   pulumi.String("...my_password..."),
						Port:       pulumi.Float64(18528),
						ServerName: pulumi.String("...my_server_name..."),
						Ssl:        pulumi.Bool(true),
						SslVerify:  pulumi.Bool(true),
						Timeout:    pulumi.Float64(1835674936),
						Username:   pulumi.String("...my_username..."),
					},
					Strategy: pulumi.String("redis"),
				},
				HideCredentials: pulumi.Bool(false),
				Realm:           pulumi.String("...my_realm..."),
			},
			ControlPlaneId:           pulumi.String("9524ec7d-36d9-465d-a8c5-83a3c9390458"),
			CreatedAt:                pulumi.Float64(6),
			Enabled:                  pulumi.Bool(false),
			GatewayPluginBasicAuthId: pulumi.String("...my_id..."),
			InstanceName:             pulumi.String("...my_instance_name..."),
			Ordering: &konnect.GatewayPluginBasicAuthOrderingArgs{
				After: &konnect.GatewayPluginBasicAuthOrderingAfterArgs{
					Accesses: pulumi.StringArray{
						pulumi.String("..."),
					},
				},
				Before: &konnect.GatewayPluginBasicAuthOrderingBeforeArgs{
					Accesses: pulumi.StringArray{
						pulumi.String("..."),
					},
				},
			},
			Partials: konnect.GatewayPluginBasicAuthPartialArray{
				&konnect.GatewayPluginBasicAuthPartialArgs{
					Id:   pulumi.String("...my_id..."),
					Name: pulumi.String("...my_name..."),
					Path: pulumi.String("...my_path..."),
				},
			},
			Protocols: pulumi.StringArray{
				pulumi.String("http"),
			},
			Route: &konnect.GatewayPluginBasicAuthRouteArgs{
				Id: pulumi.String("...my_id..."),
			},
			Service: &konnect.GatewayPluginBasicAuthServiceArgs{
				Id: pulumi.String("...my_id..."),
			},
			Tags: pulumi.StringArray{
				pulumi.String("..."),
			},
			UpdatedAt: pulumi.Float64(10),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Konnect = Pulumi.Konnect;

return await Deployment.RunAsync(() => 
{
    var myGatewaypluginbasicauth = new Konnect.GatewayPluginBasicAuth("my_gatewaypluginbasicauth", new()
    {
        Config = new Konnect.Inputs.GatewayPluginBasicAuthConfigArgs
        {
            Anonymous = "...my_anonymous...",
            BruteForceProtection = new Konnect.Inputs.GatewayPluginBasicAuthConfigBruteForceProtectionArgs
            {
                Redis = new Konnect.Inputs.GatewayPluginBasicAuthConfigBruteForceProtectionRedisArgs
                {
                    CloudAuthentication = new Konnect.Inputs.GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthenticationArgs
                    {
                        AuthProvider = "azure",
                        AwsAccessKeyId = "...my_aws_access_key_id...",
                        AwsAssumeRoleArn = "...my_aws_assume_role_arn...",
                        AwsCacheName = "...my_aws_cache_name...",
                        AwsIsServerless = true,
                        AwsRegion = "...my_aws_region...",
                        AwsRoleSessionName = "...my_aws_role_session_name...",
                        AwsSecretAccessKey = "...my_aws_secret_access_key...",
                        AzureClientId = "...my_azure_client_id...",
                        AzureClientSecret = "...my_azure_client_secret...",
                        AzureTenantId = "...my_azure_tenant_id...",
                        GcpServiceAccountJson = "...my_gcp_service_account_json...",
                    },
                    Database = 2,
                    Host = "...my_host...",
                    Password = "...my_password...",
                    Port = 18528,
                    ServerName = "...my_server_name...",
                    Ssl = true,
                    SslVerify = true,
                    Timeout = 1835674936,
                    Username = "...my_username...",
                },
                Strategy = "redis",
            },
            HideCredentials = false,
            Realm = "...my_realm...",
        },
        ControlPlaneId = "9524ec7d-36d9-465d-a8c5-83a3c9390458",
        CreatedAt = 6,
        Enabled = false,
        GatewayPluginBasicAuthId = "...my_id...",
        InstanceName = "...my_instance_name...",
        Ordering = new Konnect.Inputs.GatewayPluginBasicAuthOrderingArgs
        {
            After = new Konnect.Inputs.GatewayPluginBasicAuthOrderingAfterArgs
            {
                Accesses = new[]
                {
                    "...",
                },
            },
            Before = new Konnect.Inputs.GatewayPluginBasicAuthOrderingBeforeArgs
            {
                Accesses = new[]
                {
                    "...",
                },
            },
        },
        Partials = new[]
        {
            new Konnect.Inputs.GatewayPluginBasicAuthPartialArgs
            {
                Id = "...my_id...",
                Name = "...my_name...",
                Path = "...my_path...",
            },
        },
        Protocols = new[]
        {
            "http",
        },
        Route = new Konnect.Inputs.GatewayPluginBasicAuthRouteArgs
        {
            Id = "...my_id...",
        },
        Service = new Konnect.Inputs.GatewayPluginBasicAuthServiceArgs
        {
            Id = "...my_id...",
        },
        Tags = new[]
        {
            "...",
        },
        UpdatedAt = 10,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.GatewayPluginBasicAuth;
import com.pulumi.konnect.GatewayPluginBasicAuthArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthConfigArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthConfigBruteForceProtectionArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthConfigBruteForceProtectionRedisArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthenticationArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthOrderingArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthOrderingAfterArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthOrderingBeforeArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthPartialArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthRouteArgs;
import com.pulumi.konnect.inputs.GatewayPluginBasicAuthServiceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myGatewaypluginbasicauth = new GatewayPluginBasicAuth("myGatewaypluginbasicauth", GatewayPluginBasicAuthArgs.builder()
            .config(GatewayPluginBasicAuthConfigArgs.builder()
                .anonymous("...my_anonymous...")
                .bruteForceProtection(GatewayPluginBasicAuthConfigBruteForceProtectionArgs.builder()
                    .redis(GatewayPluginBasicAuthConfigBruteForceProtectionRedisArgs.builder()
                        .cloudAuthentication(GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthenticationArgs.builder()
                            .authProvider("azure")
                            .awsAccessKeyId("...my_aws_access_key_id...")
                            .awsAssumeRoleArn("...my_aws_assume_role_arn...")
                            .awsCacheName("...my_aws_cache_name...")
                            .awsIsServerless(true)
                            .awsRegion("...my_aws_region...")
                            .awsRoleSessionName("...my_aws_role_session_name...")
                            .awsSecretAccessKey("...my_aws_secret_access_key...")
                            .azureClientId("...my_azure_client_id...")
                            .azureClientSecret("...my_azure_client_secret...")
                            .azureTenantId("...my_azure_tenant_id...")
                            .gcpServiceAccountJson("...my_gcp_service_account_json...")
                            .build())
                        .database(2.0)
                        .host("...my_host...")
                        .password("...my_password...")
                        .port(18528.0)
                        .serverName("...my_server_name...")
                        .ssl(true)
                        .sslVerify(true)
                        .timeout(1835674936.0)
                        .username("...my_username...")
                        .build())
                    .strategy("redis")
                    .build())
                .hideCredentials(false)
                .realm("...my_realm...")
                .build())
            .controlPlaneId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .createdAt(6.0)
            .enabled(false)
            .gatewayPluginBasicAuthId("...my_id...")
            .instanceName("...my_instance_name...")
            .ordering(GatewayPluginBasicAuthOrderingArgs.builder()
                .after(GatewayPluginBasicAuthOrderingAfterArgs.builder()
                    .accesses("...")
                    .build())
                .before(GatewayPluginBasicAuthOrderingBeforeArgs.builder()
                    .accesses("...")
                    .build())
                .build())
            .partials(GatewayPluginBasicAuthPartialArgs.builder()
                .id("...my_id...")
                .name("...my_name...")
                .path("...my_path...")
                .build())
            .protocols("http")
            .route(GatewayPluginBasicAuthRouteArgs.builder()
                .id("...my_id...")
                .build())
            .service(GatewayPluginBasicAuthServiceArgs.builder()
                .id("...my_id...")
                .build())
            .tags("...")
            .updatedAt(10.0)
            .build());

    }
}

    resources:
  myGatewaypluginbasicauth:
    type: konnect:GatewayPluginBasicAuth
    name: my_gatewaypluginbasicauth
    properties:
      config:
        anonymous: '...my_anonymous...'
        bruteForceProtection:
          redis:
            cloudAuthentication:
              authProvider: azure
              awsAccessKeyId: '...my_aws_access_key_id...'
              awsAssumeRoleArn: '...my_aws_assume_role_arn...'
              awsCacheName: '...my_aws_cache_name...'
              awsIsServerless: true
              awsRegion: '...my_aws_region...'
              awsRoleSessionName: '...my_aws_role_session_name...'
              awsSecretAccessKey: '...my_aws_secret_access_key...'
              azureClientId: '...my_azure_client_id...'
              azureClientSecret: '...my_azure_client_secret...'
              azureTenantId: '...my_azure_tenant_id...'
              gcpServiceAccountJson: '...my_gcp_service_account_json...'
            database: 2
            host: '...my_host...'
            password: '...my_password...'
            port: 18528
            serverName: '...my_server_name...'
            ssl: true
            sslVerify: true
            timeout: 1.835674936e+09
            username: '...my_username...'
          strategy: redis
        hideCredentials: false
        realm: '...my_realm...'
      controlPlaneId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      createdAt: 6
      enabled: false
      gatewayPluginBasicAuthId: '...my_id...'
      instanceName: '...my_instance_name...'
      ordering:
        after:
          accesses:
            - '...'
        before:
          accesses:
            - '...'
      partials:
        - id: '...my_id...'
          name: '...my_name...'
          path: '...my_path...'
      protocols:
        - http
      route:
        id: '...my_id...'
      service:
        id: '...my_id...'
      tags:
        - '...'
      updatedAt: 10

    Create GatewayPluginBasicAuth Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GatewayPluginBasicAuth(name: string, args: GatewayPluginBasicAuthArgs, opts?: CustomResourceOptions);
    @overload
def GatewayPluginBasicAuth(resource_name: str,
                           args: GatewayPluginBasicAuthArgs,
                           opts: Optional[ResourceOptions] = None)

@overload
def GatewayPluginBasicAuth(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           control_plane_id: Optional[str] = None,
                           ordering: Optional[GatewayPluginBasicAuthOrderingArgs] = None,
                           created_at: Optional[float] = None,
                           enabled: Optional[bool] = None,
                           gateway_plugin_basic_auth_id: Optional[str] = None,
                           instance_name: Optional[str] = None,
                           config: Optional[GatewayPluginBasicAuthConfigArgs] = None,
                           partials: Optional[Sequence[GatewayPluginBasicAuthPartialArgs]] = None,
                           protocols: Optional[Sequence[str]] = None,
                           route: Optional[GatewayPluginBasicAuthRouteArgs] = None,
                           service: Optional[GatewayPluginBasicAuthServiceArgs] = None,
                           tags: Optional[Sequence[str]] = None,
                           updated_at: Optional[float] = None)
    func NewGatewayPluginBasicAuth(ctx *Context, name string, args GatewayPluginBasicAuthArgs, opts ...ResourceOption) (*GatewayPluginBasicAuth, error)
    public GatewayPluginBasicAuth(string name, GatewayPluginBasicAuthArgs args, CustomResourceOptions? opts = null)
    public GatewayPluginBasicAuth(String name, GatewayPluginBasicAuthArgs args)
public GatewayPluginBasicAuth(String name, GatewayPluginBasicAuthArgs args, CustomResourceOptions options)

    type: konnect:GatewayPluginBasicAuth
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args GatewayPluginBasicAuthArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GatewayPluginBasicAuthArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GatewayPluginBasicAuthArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GatewayPluginBasicAuthArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GatewayPluginBasicAuthArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var gatewayPluginBasicAuthResource = new Konnect.GatewayPluginBasicAuth("gatewayPluginBasicAuthResource", new()
{
    ControlPlaneId = "string",
    Ordering = new Konnect.Inputs.GatewayPluginBasicAuthOrderingArgs
    {
        After = new Konnect.Inputs.GatewayPluginBasicAuthOrderingAfterArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
        Before = new Konnect.Inputs.GatewayPluginBasicAuthOrderingBeforeArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
    },
    CreatedAt = 0,
    Enabled = false,
    GatewayPluginBasicAuthId = "string",
    InstanceName = "string",
    Config = new Konnect.Inputs.GatewayPluginBasicAuthConfigArgs
    {
        Anonymous = "string",
        BruteForceProtection = new Konnect.Inputs.GatewayPluginBasicAuthConfigBruteForceProtectionArgs
        {
            Redis = new Konnect.Inputs.GatewayPluginBasicAuthConfigBruteForceProtectionRedisArgs
            {
                CloudAuthentication = new Konnect.Inputs.GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthenticationArgs
                {
                    AuthProvider = "string",
                    AwsAccessKeyId = "string",
                    AwsAssumeRoleArn = "string",
                    AwsCacheName = "string",
                    AwsIsServerless = false,
                    AwsRegion = "string",
                    AwsRoleSessionName = "string",
                    AwsSecretAccessKey = "string",
                    AzureClientId = "string",
                    AzureClientSecret = "string",
                    AzureTenantId = "string",
                    GcpServiceAccountJson = "string",
                },
                Database = 0,
                Host = "string",
                Password = "string",
                Port = 0,
                ServerName = "string",
                Ssl = false,
                SslVerify = false,
                Timeout = 0,
                Username = "string",
            },
            Strategy = "string",
        },
        HideCredentials = false,
        Realm = "string",
    },
    Partials = new[]
    {
        new Konnect.Inputs.GatewayPluginBasicAuthPartialArgs
        {
            Id = "string",
            Name = "string",
            Path = "string",
        },
    },
    Protocols = new[]
    {
        "string",
    },
    Route = new Konnect.Inputs.GatewayPluginBasicAuthRouteArgs
    {
        Id = "string",
    },
    Service = new Konnect.Inputs.GatewayPluginBasicAuthServiceArgs
    {
        Id = "string",
    },
    Tags = new[]
    {
        "string",
    },
    UpdatedAt = 0,
});

    example, err := konnect.NewGatewayPluginBasicAuth(ctx, "gatewayPluginBasicAuthResource", &konnect.GatewayPluginBasicAuthArgs{
	ControlPlaneId: pulumi.String("string"),
	Ordering: &konnect.GatewayPluginBasicAuthOrderingArgs{
		After: &konnect.GatewayPluginBasicAuthOrderingAfterArgs{
			Accesses: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		Before: &konnect.GatewayPluginBasicAuthOrderingBeforeArgs{
			Accesses: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	CreatedAt:                pulumi.Float64(0),
	Enabled:                  pulumi.Bool(false),
	GatewayPluginBasicAuthId: pulumi.String("string"),
	InstanceName:             pulumi.String("string"),
	Config: &konnect.GatewayPluginBasicAuthConfigArgs{
		Anonymous: pulumi.String("string"),
		BruteForceProtection: &konnect.GatewayPluginBasicAuthConfigBruteForceProtectionArgs{
			Redis: &konnect.GatewayPluginBasicAuthConfigBruteForceProtectionRedisArgs{
				CloudAuthentication: &konnect.GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthenticationArgs{
					AuthProvider:          pulumi.String("string"),
					AwsAccessKeyId:        pulumi.String("string"),
					AwsAssumeRoleArn:      pulumi.String("string"),
					AwsCacheName:          pulumi.String("string"),
					AwsIsServerless:       pulumi.Bool(false),
					AwsRegion:             pulumi.String("string"),
					AwsRoleSessionName:    pulumi.String("string"),
					AwsSecretAccessKey:    pulumi.String("string"),
					AzureClientId:         pulumi.String("string"),
					AzureClientSecret:     pulumi.String("string"),
					AzureTenantId:         pulumi.String("string"),
					GcpServiceAccountJson: pulumi.String("string"),
				},
				Database:   pulumi.Float64(0),
				Host:       pulumi.String("string"),
				Password:   pulumi.String("string"),
				Port:       pulumi.Float64(0),
				ServerName: pulumi.String("string"),
				Ssl:        pulumi.Bool(false),
				SslVerify:  pulumi.Bool(false),
				Timeout:    pulumi.Float64(0),
				Username:   pulumi.String("string"),
			},
			Strategy: pulumi.String("string"),
		},
		HideCredentials: pulumi.Bool(false),
		Realm:           pulumi.String("string"),
	},
	Partials: konnect.GatewayPluginBasicAuthPartialArray{
		&konnect.GatewayPluginBasicAuthPartialArgs{
			Id:   pulumi.String("string"),
			Name: pulumi.String("string"),
			Path: pulumi.String("string"),
		},
	},
	Protocols: pulumi.StringArray{
		pulumi.String("string"),
	},
	Route: &konnect.GatewayPluginBasicAuthRouteArgs{
		Id: pulumi.String("string"),
	},
	Service: &konnect.GatewayPluginBasicAuthServiceArgs{
		Id: pulumi.String("string"),
	},
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	UpdatedAt: pulumi.Float64(0),
})

    var gatewayPluginBasicAuthResource = new GatewayPluginBasicAuth("gatewayPluginBasicAuthResource", GatewayPluginBasicAuthArgs.builder()
    .controlPlaneId("string")
    .ordering(GatewayPluginBasicAuthOrderingArgs.builder()
        .after(GatewayPluginBasicAuthOrderingAfterArgs.builder()
            .accesses("string")
            .build())
        .before(GatewayPluginBasicAuthOrderingBeforeArgs.builder()
            .accesses("string")
            .build())
        .build())
    .createdAt(0.0)
    .enabled(false)
    .gatewayPluginBasicAuthId("string")
    .instanceName("string")
    .config(GatewayPluginBasicAuthConfigArgs.builder()
        .anonymous("string")
        .bruteForceProtection(GatewayPluginBasicAuthConfigBruteForceProtectionArgs.builder()
            .redis(GatewayPluginBasicAuthConfigBruteForceProtectionRedisArgs.builder()
                .cloudAuthentication(GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthenticationArgs.builder()
                    .authProvider("string")
                    .awsAccessKeyId("string")
                    .awsAssumeRoleArn("string")
                    .awsCacheName("string")
                    .awsIsServerless(false)
                    .awsRegion("string")
                    .awsRoleSessionName("string")
                    .awsSecretAccessKey("string")
                    .azureClientId("string")
                    .azureClientSecret("string")
                    .azureTenantId("string")
                    .gcpServiceAccountJson("string")
                    .build())
                .database(0.0)
                .host("string")
                .password("string")
                .port(0.0)
                .serverName("string")
                .ssl(false)
                .sslVerify(false)
                .timeout(0.0)
                .username("string")
                .build())
            .strategy("string")
            .build())
        .hideCredentials(false)
        .realm("string")
        .build())
    .partials(GatewayPluginBasicAuthPartialArgs.builder()
        .id("string")
        .name("string")
        .path("string")
        .build())
    .protocols("string")
    .route(GatewayPluginBasicAuthRouteArgs.builder()
        .id("string")
        .build())
    .service(GatewayPluginBasicAuthServiceArgs.builder()
        .id("string")
        .build())
    .tags("string")
    .updatedAt(0.0)
    .build());

    gateway_plugin_basic_auth_resource = konnect.GatewayPluginBasicAuth("gatewayPluginBasicAuthResource",
    control_plane_id="string",
    ordering={
        "after": {
            "accesses": ["string"],
        },
        "before": {
            "accesses": ["string"],
        },
    },
    created_at=0,
    enabled=False,
    gateway_plugin_basic_auth_id="string",
    instance_name="string",
    config={
        "anonymous": "string",
        "brute_force_protection": {
            "redis": {
                "cloud_authentication": {
                    "auth_provider": "string",
                    "aws_access_key_id": "string",
                    "aws_assume_role_arn": "string",
                    "aws_cache_name": "string",
                    "aws_is_serverless": False,
                    "aws_region": "string",
                    "aws_role_session_name": "string",
                    "aws_secret_access_key": "string",
                    "azure_client_id": "string",
                    "azure_client_secret": "string",
                    "azure_tenant_id": "string",
                    "gcp_service_account_json": "string",
                },
                "database": 0,
                "host": "string",
                "password": "string",
                "port": 0,
                "server_name": "string",
                "ssl": False,
                "ssl_verify": False,
                "timeout": 0,
                "username": "string",
            },
            "strategy": "string",
        },
        "hide_credentials": False,
        "realm": "string",
    },
    partials=[{
        "id": "string",
        "name": "string",
        "path": "string",
    }],
    protocols=["string"],
    route={
        "id": "string",
    },
    service={
        "id": "string",
    },
    tags=["string"],
    updated_at=0)

    const gatewayPluginBasicAuthResource = new konnect.GatewayPluginBasicAuth("gatewayPluginBasicAuthResource", {
    controlPlaneId: "string",
    ordering: {
        after: {
            accesses: ["string"],
        },
        before: {
            accesses: ["string"],
        },
    },
    createdAt: 0,
    enabled: false,
    gatewayPluginBasicAuthId: "string",
    instanceName: "string",
    config: {
        anonymous: "string",
        bruteForceProtection: {
            redis: {
                cloudAuthentication: {
                    authProvider: "string",
                    awsAccessKeyId: "string",
                    awsAssumeRoleArn: "string",
                    awsCacheName: "string",
                    awsIsServerless: false,
                    awsRegion: "string",
                    awsRoleSessionName: "string",
                    awsSecretAccessKey: "string",
                    azureClientId: "string",
                    azureClientSecret: "string",
                    azureTenantId: "string",
                    gcpServiceAccountJson: "string",
                },
                database: 0,
                host: "string",
                password: "string",
                port: 0,
                serverName: "string",
                ssl: false,
                sslVerify: false,
                timeout: 0,
                username: "string",
            },
            strategy: "string",
        },
        hideCredentials: false,
        realm: "string",
    },
    partials: [{
        id: "string",
        name: "string",
        path: "string",
    }],
    protocols: ["string"],
    route: {
        id: "string",
    },
    service: {
        id: "string",
    },
    tags: ["string"],
    updatedAt: 0,
});

    type: konnect:GatewayPluginBasicAuth
properties:
    config:
        anonymous: string
        bruteForceProtection:
            redis:
                cloudAuthentication:
                    authProvider: string
                    awsAccessKeyId: string
                    awsAssumeRoleArn: string
                    awsCacheName: string
                    awsIsServerless: false
                    awsRegion: string
                    awsRoleSessionName: string
                    awsSecretAccessKey: string
                    azureClientId: string
                    azureClientSecret: string
                    azureTenantId: string
                    gcpServiceAccountJson: string
                database: 0
                host: string
                password: string
                port: 0
                serverName: string
                ssl: false
                sslVerify: false
                timeout: 0
                username: string
            strategy: string
        hideCredentials: false
        realm: string
    controlPlaneId: string
    createdAt: 0
    enabled: false
    gatewayPluginBasicAuthId: string
    instanceName: string
    ordering:
        after:
            accesses:
                - string
        before:
            accesses:
                - string
    partials:
        - id: string
          name: string
          path: string
    protocols:
        - string
    route:
        id: string
    service:
        id: string
    tags:
        - string
    updatedAt: 0

    GatewayPluginBasicAuth Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The GatewayPluginBasicAuth resource accepts the following input properties:

    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    Config GatewayPluginBasicAuthConfig
    CreatedAt double
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied. Default: true
    GatewayPluginBasicAuthId string
    A string representing a UUID (universally unique identifier).
    InstanceName string
    A unique string representing a UTF-8 encoded name.
    Ordering GatewayPluginBasicAuthOrdering
    Partials List<GatewayPluginBasicAuthPartial>
    A list of partials to be used by the plugin.
    Protocols List<string>
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    Route GatewayPluginBasicAuthRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginBasicAuthService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags List<string>
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt double
    Unix epoch when the resource was last updated.
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    Config GatewayPluginBasicAuthConfigArgs
    CreatedAt float64
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied. Default: true
    GatewayPluginBasicAuthId string
    A string representing a UUID (universally unique identifier).
    InstanceName string
    A unique string representing a UTF-8 encoded name.
    Ordering GatewayPluginBasicAuthOrderingArgs
    Partials []GatewayPluginBasicAuthPartialArgs
    A list of partials to be used by the plugin.
    Protocols []string
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    Route GatewayPluginBasicAuthRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginBasicAuthServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags []string
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt float64
    Unix epoch when the resource was last updated.
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginBasicAuthConfig
    createdAt Double
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied. Default: true
    gatewayPluginBasicAuthId String
    A string representing a UUID (universally unique identifier).
    instanceName String
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginBasicAuthOrdering
    partials List<GatewayPluginBasicAuthPartial>
    A list of partials to be used by the plugin.
    protocols List<String>
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    route GatewayPluginBasicAuthRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginBasicAuthService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Double
    Unix epoch when the resource was last updated.
    controlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginBasicAuthConfig
    createdAt number
    Unix epoch when the resource was created.
    enabled boolean
    Whether the plugin is applied. Default: true
    gatewayPluginBasicAuthId string
    A string representing a UUID (universally unique identifier).
    instanceName string
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginBasicAuthOrdering
    partials GatewayPluginBasicAuthPartial[]
    A list of partials to be used by the plugin.
    protocols string[]
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    route GatewayPluginBasicAuthRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginBasicAuthService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags string[]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt number
    Unix epoch when the resource was last updated.
    control_plane_id str
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config GatewayPluginBasicAuthConfigArgs
    created_at float
    Unix epoch when the resource was created.
    enabled bool
    Whether the plugin is applied. Default: true
    gateway_plugin_basic_auth_id str
    A string representing a UUID (universally unique identifier).
    instance_name str
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginBasicAuthOrderingArgs
    partials Sequence[GatewayPluginBasicAuthPartialArgs]
    A list of partials to be used by the plugin.
    protocols Sequence[str]
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    route GatewayPluginBasicAuthRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginBasicAuthServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags Sequence[str]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updated_at float
    Unix epoch when the resource was last updated.
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    config Property Map
    createdAt Number
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied. Default: true
    gatewayPluginBasicAuthId String
    A string representing a UUID (universally unique identifier).
    instanceName String
    A unique string representing a UTF-8 encoded name.
    ordering Property Map
    partials List<Property Map>
    A list of partials to be used by the plugin.
    protocols List<String>
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    route Property Map
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service Property Map
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Number
    Unix epoch when the resource was last updated.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GatewayPluginBasicAuth resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing GatewayPluginBasicAuth Resource

    Get an existing GatewayPluginBasicAuth resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: GatewayPluginBasicAuthState, opts?: CustomResourceOptions): GatewayPluginBasicAuth
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        config: Optional[GatewayPluginBasicAuthConfigArgs] = None,
        control_plane_id: Optional[str] = None,
        created_at: Optional[float] = None,
        enabled: Optional[bool] = None,
        gateway_plugin_basic_auth_id: Optional[str] = None,
        instance_name: Optional[str] = None,
        ordering: Optional[GatewayPluginBasicAuthOrderingArgs] = None,
        partials: Optional[Sequence[GatewayPluginBasicAuthPartialArgs]] = None,
        protocols: Optional[Sequence[str]] = None,
        route: Optional[GatewayPluginBasicAuthRouteArgs] = None,
        service: Optional[GatewayPluginBasicAuthServiceArgs] = None,
        tags: Optional[Sequence[str]] = None,
        updated_at: Optional[float] = None) -> GatewayPluginBasicAuth
    func GetGatewayPluginBasicAuth(ctx *Context, name string, id IDInput, state *GatewayPluginBasicAuthState, opts ...ResourceOption) (*GatewayPluginBasicAuth, error)
    public static GatewayPluginBasicAuth Get(string name, Input<string> id, GatewayPluginBasicAuthState? state, CustomResourceOptions? opts = null)
    public static GatewayPluginBasicAuth get(String name, Output<String> id, GatewayPluginBasicAuthState state, CustomResourceOptions options)
    resources:  _:    type: konnect:GatewayPluginBasicAuth    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Config GatewayPluginBasicAuthConfig
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    CreatedAt double
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied. Default: true
    GatewayPluginBasicAuthId string
    A string representing a UUID (universally unique identifier).
    InstanceName string
    A unique string representing a UTF-8 encoded name.
    Ordering GatewayPluginBasicAuthOrdering
    Partials List<GatewayPluginBasicAuthPartial>
    A list of partials to be used by the plugin.
    Protocols List<string>
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    Route GatewayPluginBasicAuthRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginBasicAuthService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags List<string>
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt double
    Unix epoch when the resource was last updated.
    Config GatewayPluginBasicAuthConfigArgs
    ControlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    CreatedAt float64
    Unix epoch when the resource was created.
    Enabled bool
    Whether the plugin is applied. Default: true
    GatewayPluginBasicAuthId string
    A string representing a UUID (universally unique identifier).
    InstanceName string
    A unique string representing a UTF-8 encoded name.
    Ordering GatewayPluginBasicAuthOrderingArgs
    Partials []GatewayPluginBasicAuthPartialArgs
    A list of partials to be used by the plugin.
    Protocols []string
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    Route GatewayPluginBasicAuthRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    Service GatewayPluginBasicAuthServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    Tags []string
    An optional set of strings associated with the Plugin for grouping and filtering.
    UpdatedAt float64
    Unix epoch when the resource was last updated.
    config GatewayPluginBasicAuthConfig
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt Double
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied. Default: true
    gatewayPluginBasicAuthId String
    A string representing a UUID (universally unique identifier).
    instanceName String
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginBasicAuthOrdering
    partials List<GatewayPluginBasicAuthPartial>
    A list of partials to be used by the plugin.
    protocols List<String>
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    route GatewayPluginBasicAuthRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginBasicAuthService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Double
    Unix epoch when the resource was last updated.
    config GatewayPluginBasicAuthConfig
    controlPlaneId string
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt number
    Unix epoch when the resource was created.
    enabled boolean
    Whether the plugin is applied. Default: true
    gatewayPluginBasicAuthId string
    A string representing a UUID (universally unique identifier).
    instanceName string
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginBasicAuthOrdering
    partials GatewayPluginBasicAuthPartial[]
    A list of partials to be used by the plugin.
    protocols string[]
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    route GatewayPluginBasicAuthRoute
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginBasicAuthService
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags string[]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt number
    Unix epoch when the resource was last updated.
    config GatewayPluginBasicAuthConfigArgs
    control_plane_id str
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    created_at float
    Unix epoch when the resource was created.
    enabled bool
    Whether the plugin is applied. Default: true
    gateway_plugin_basic_auth_id str
    A string representing a UUID (universally unique identifier).
    instance_name str
    A unique string representing a UTF-8 encoded name.
    ordering GatewayPluginBasicAuthOrderingArgs
    partials Sequence[GatewayPluginBasicAuthPartialArgs]
    A list of partials to be used by the plugin.
    protocols Sequence[str]
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    route GatewayPluginBasicAuthRouteArgs
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service GatewayPluginBasicAuthServiceArgs
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags Sequence[str]
    An optional set of strings associated with the Plugin for grouping and filtering.
    updated_at float
    Unix epoch when the resource was last updated.
    config Property Map
    controlPlaneId String
    The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
    createdAt Number
    Unix epoch when the resource was created.
    enabled Boolean
    Whether the plugin is applied. Default: true
    gatewayPluginBasicAuthId String
    A string representing a UUID (universally unique identifier).
    instanceName String
    A unique string representing a UTF-8 encoded name.
    ordering Property Map
    partials List<Property Map>
    A list of partials to be used by the plugin.
    protocols List<String>
    A list of the request protocols that will trigger this plugin. The default value, as well as the possible values allowed on this field, may change depending on the plugin type. For example, plugins that only work in stream mode will only support tcp and tls. Default: ["grpc","grpcs","http","https","ws","wss"]
    route Property Map
    If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
    service Property Map
    If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
    tags List<String>
    An optional set of strings associated with the Plugin for grouping and filtering.
    updatedAt Number
    Unix epoch when the resource was last updated.

    Supporting Types

    GatewayPluginBasicAuthConfig, GatewayPluginBasicAuthConfigArgs

    Anonymous string
    An optional string (Consumer UUID or username) value to use as an “anonymous” consumer if authentication fails. If empty (default null), the request will fail with an authentication failure 4xx. Please note that this value must refer to the Consumer id or username attribute, and not its custom_id.
    BruteForceProtection GatewayPluginBasicAuthConfigBruteForceProtection
    HideCredentials bool
    An optional boolean value telling the plugin to show or hide the credential from the upstream service. If true, the plugin will strip the credential from the request (i.e. the Authorization header) before proxying it. Default: false
    Realm string
    When authentication fails the plugin sends WWW-Authenticate header with realm attribute value. Default: "service"
    Anonymous string
    An optional string (Consumer UUID or username) value to use as an “anonymous” consumer if authentication fails. If empty (default null), the request will fail with an authentication failure 4xx. Please note that this value must refer to the Consumer id or username attribute, and not its custom_id.
    BruteForceProtection GatewayPluginBasicAuthConfigBruteForceProtection
    HideCredentials bool
    An optional boolean value telling the plugin to show or hide the credential from the upstream service. If true, the plugin will strip the credential from the request (i.e. the Authorization header) before proxying it. Default: false
    Realm string
    When authentication fails the plugin sends WWW-Authenticate header with realm attribute value. Default: "service"
    anonymous String
    An optional string (Consumer UUID or username) value to use as an “anonymous” consumer if authentication fails. If empty (default null), the request will fail with an authentication failure 4xx. Please note that this value must refer to the Consumer id or username attribute, and not its custom_id.
    bruteForceProtection GatewayPluginBasicAuthConfigBruteForceProtection
    hideCredentials Boolean
    An optional boolean value telling the plugin to show or hide the credential from the upstream service. If true, the plugin will strip the credential from the request (i.e. the Authorization header) before proxying it. Default: false
    realm String
    When authentication fails the plugin sends WWW-Authenticate header with realm attribute value. Default: "service"
    anonymous string
    An optional string (Consumer UUID or username) value to use as an “anonymous” consumer if authentication fails. If empty (default null), the request will fail with an authentication failure 4xx. Please note that this value must refer to the Consumer id or username attribute, and not its custom_id.
    bruteForceProtection GatewayPluginBasicAuthConfigBruteForceProtection
    hideCredentials boolean
    An optional boolean value telling the plugin to show or hide the credential from the upstream service. If true, the plugin will strip the credential from the request (i.e. the Authorization header) before proxying it. Default: false
    realm string
    When authentication fails the plugin sends WWW-Authenticate header with realm attribute value. Default: "service"
    anonymous str
    An optional string (Consumer UUID or username) value to use as an “anonymous” consumer if authentication fails. If empty (default null), the request will fail with an authentication failure 4xx. Please note that this value must refer to the Consumer id or username attribute, and not its custom_id.
    brute_force_protection GatewayPluginBasicAuthConfigBruteForceProtection
    hide_credentials bool
    An optional boolean value telling the plugin to show or hide the credential from the upstream service. If true, the plugin will strip the credential from the request (i.e. the Authorization header) before proxying it. Default: false
    realm str
    When authentication fails the plugin sends WWW-Authenticate header with realm attribute value. Default: "service"
    anonymous String
    An optional string (Consumer UUID or username) value to use as an “anonymous” consumer if authentication fails. If empty (default null), the request will fail with an authentication failure 4xx. Please note that this value must refer to the Consumer id or username attribute, and not its custom_id.
    bruteForceProtection Property Map
    hideCredentials Boolean
    An optional boolean value telling the plugin to show or hide the credential from the upstream service. If true, the plugin will strip the credential from the request (i.e. the Authorization header) before proxying it. Default: false
    realm String
    When authentication fails the plugin sends WWW-Authenticate header with realm attribute value. Default: "service"

    GatewayPluginBasicAuthConfigBruteForceProtection, GatewayPluginBasicAuthConfigBruteForceProtectionArgs

    Redis GatewayPluginBasicAuthConfigBruteForceProtectionRedis
    Redis configuration
    Strategy string
    The brute force protection strategy to use for retrieving and incrementing the limits. Available values are: cluster, redis, memory, and off. Default: "off"; must be one of ["cluster", "memory", "off", "redis"]
    Redis GatewayPluginBasicAuthConfigBruteForceProtectionRedis
    Redis configuration
    Strategy string
    The brute force protection strategy to use for retrieving and incrementing the limits. Available values are: cluster, redis, memory, and off. Default: "off"; must be one of ["cluster", "memory", "off", "redis"]
    redis GatewayPluginBasicAuthConfigBruteForceProtectionRedis
    Redis configuration
    strategy String
    The brute force protection strategy to use for retrieving and incrementing the limits. Available values are: cluster, redis, memory, and off. Default: "off"; must be one of ["cluster", "memory", "off", "redis"]
    redis GatewayPluginBasicAuthConfigBruteForceProtectionRedis
    Redis configuration
    strategy string
    The brute force protection strategy to use for retrieving and incrementing the limits. Available values are: cluster, redis, memory, and off. Default: "off"; must be one of ["cluster", "memory", "off", "redis"]
    redis GatewayPluginBasicAuthConfigBruteForceProtectionRedis
    Redis configuration
    strategy str
    The brute force protection strategy to use for retrieving and incrementing the limits. Available values are: cluster, redis, memory, and off. Default: "off"; must be one of ["cluster", "memory", "off", "redis"]
    redis Property Map
    Redis configuration
    strategy String
    The brute force protection strategy to use for retrieving and incrementing the limits. Available values are: cluster, redis, memory, and off. Default: "off"; must be one of ["cluster", "memory", "off", "redis"]

    GatewayPluginBasicAuthConfigBruteForceProtectionRedis, GatewayPluginBasicAuthConfigBruteForceProtectionRedisArgs

    CloudAuthentication GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthentication
    Cloud auth related configs for connecting to a Cloud Provider's Redis instance.
    Database double
    Database to use for the Redis connection when using the redis strategy. Default: 0
    Host string
    A string representing a host name, such as example.com.
    Password string
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    Port double
    An integer representing a port number between 0 and 65535, inclusive. Default: 6379
    ServerName string
    A string representing an SNI (server name indication) value for TLS.
    Ssl bool
    If set to true, uses SSL to connect to Redis. Default: false
    SslVerify bool
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly. Default: false
    Timeout double
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2. Default: 2000
    Username string
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    CloudAuthentication GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthentication
    Cloud auth related configs for connecting to a Cloud Provider's Redis instance.
    Database float64
    Database to use for the Redis connection when using the redis strategy. Default: 0
    Host string
    A string representing a host name, such as example.com.
    Password string
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    Port float64
    An integer representing a port number between 0 and 65535, inclusive. Default: 6379
    ServerName string
    A string representing an SNI (server name indication) value for TLS.
    Ssl bool
    If set to true, uses SSL to connect to Redis. Default: false
    SslVerify bool
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly. Default: false
    Timeout float64
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2. Default: 2000
    Username string
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    cloudAuthentication GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthentication
    Cloud auth related configs for connecting to a Cloud Provider's Redis instance.
    database Double
    Database to use for the Redis connection when using the redis strategy. Default: 0
    host String
    A string representing a host name, such as example.com.
    password String
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    port Double
    An integer representing a port number between 0 and 65535, inclusive. Default: 6379
    serverName String
    A string representing an SNI (server name indication) value for TLS.
    ssl Boolean
    If set to true, uses SSL to connect to Redis. Default: false
    sslVerify Boolean
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly. Default: false
    timeout Double
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2. Default: 2000
    username String
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    cloudAuthentication GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthentication
    Cloud auth related configs for connecting to a Cloud Provider's Redis instance.
    database number
    Database to use for the Redis connection when using the redis strategy. Default: 0
    host string
    A string representing a host name, such as example.com.
    password string
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    port number
    An integer representing a port number between 0 and 65535, inclusive. Default: 6379
    serverName string
    A string representing an SNI (server name indication) value for TLS.
    ssl boolean
    If set to true, uses SSL to connect to Redis. Default: false
    sslVerify boolean
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly. Default: false
    timeout number
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2. Default: 2000
    username string
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    cloud_authentication GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthentication
    Cloud auth related configs for connecting to a Cloud Provider's Redis instance.
    database float
    Database to use for the Redis connection when using the redis strategy. Default: 0
    host str
    A string representing a host name, such as example.com.
    password str
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    port float
    An integer representing a port number between 0 and 65535, inclusive. Default: 6379
    server_name str
    A string representing an SNI (server name indication) value for TLS.
    ssl bool
    If set to true, uses SSL to connect to Redis. Default: false
    ssl_verify bool
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly. Default: false
    timeout float
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2. Default: 2000
    username str
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
    cloudAuthentication Property Map
    Cloud auth related configs for connecting to a Cloud Provider's Redis instance.
    database Number
    Database to use for the Redis connection when using the redis strategy. Default: 0
    host String
    A string representing a host name, such as example.com.
    password String
    Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
    port Number
    An integer representing a port number between 0 and 65535, inclusive. Default: 6379
    serverName String
    A string representing an SNI (server name indication) value for TLS.
    ssl Boolean
    If set to true, uses SSL to connect to Redis. Default: false
    sslVerify Boolean
    If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly. Default: false
    timeout Number
    An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2. Default: 2000
    username String
    Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.

    GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthentication, GatewayPluginBasicAuthConfigBruteForceProtectionRedisCloudAuthenticationArgs

    AuthProvider string
    Auth providers to be used to authenticate to a Cloud Provider's Redis instance. must be one of ["aws", "azure", "gcp"]
    AwsAccessKeyId string
    AWS Access Key ID to be used for authentication when auth_provider is set to aws.
    AwsAssumeRoleArn string
    The ARN of the IAM role to assume for generating ElastiCache IAM authentication tokens.
    AwsCacheName string
    The name of the AWS Elasticache cluster when auth_provider is set to aws.
    AwsIsServerless bool
    This flag specifies whether the cluster is serverless when auth_provider is set to aws. Default: true
    AwsRegion string
    The region of the AWS ElastiCache cluster when auth_provider is set to aws.
    AwsRoleSessionName string
    The session name for the temporary credentials when assuming the IAM role.
    AwsSecretAccessKey string
    AWS Secret Access Key to be used for authentication when auth_provider is set to aws.
    AzureClientId string
    Azure Client ID to be used for authentication when auth_provider is set to azure.
    AzureClientSecret string
    Azure Client Secret to be used for authentication when auth_provider is set to azure.
    AzureTenantId string
    Azure Tenant ID to be used for authentication when auth_provider is set to azure.
    GcpServiceAccountJson string
    GCP Service Account JSON to be used for authentication when auth_provider is set to gcp.
    AuthProvider string
    Auth providers to be used to authenticate to a Cloud Provider's Redis instance. must be one of ["aws", "azure", "gcp"]
    AwsAccessKeyId string
    AWS Access Key ID to be used for authentication when auth_provider is set to aws.
    AwsAssumeRoleArn string
    The ARN of the IAM role to assume for generating ElastiCache IAM authentication tokens.
    AwsCacheName string
    The name of the AWS Elasticache cluster when auth_provider is set to aws.
    AwsIsServerless bool
    This flag specifies whether the cluster is serverless when auth_provider is set to aws. Default: true
    AwsRegion string
    The region of the AWS ElastiCache cluster when auth_provider is set to aws.
    AwsRoleSessionName string
    The session name for the temporary credentials when assuming the IAM role.
    AwsSecretAccessKey string
    AWS Secret Access Key to be used for authentication when auth_provider is set to aws.
    AzureClientId string
    Azure Client ID to be used for authentication when auth_provider is set to azure.
    AzureClientSecret string
    Azure Client Secret to be used for authentication when auth_provider is set to azure.
    AzureTenantId string
    Azure Tenant ID to be used for authentication when auth_provider is set to azure.
    GcpServiceAccountJson string
    GCP Service Account JSON to be used for authentication when auth_provider is set to gcp.
    authProvider String
    Auth providers to be used to authenticate to a Cloud Provider's Redis instance. must be one of ["aws", "azure", "gcp"]
    awsAccessKeyId String
    AWS Access Key ID to be used for authentication when auth_provider is set to aws.
    awsAssumeRoleArn String
    The ARN of the IAM role to assume for generating ElastiCache IAM authentication tokens.
    awsCacheName String
    The name of the AWS Elasticache cluster when auth_provider is set to aws.
    awsIsServerless Boolean
    This flag specifies whether the cluster is serverless when auth_provider is set to aws. Default: true
    awsRegion String
    The region of the AWS ElastiCache cluster when auth_provider is set to aws.
    awsRoleSessionName String
    The session name for the temporary credentials when assuming the IAM role.
    awsSecretAccessKey String
    AWS Secret Access Key to be used for authentication when auth_provider is set to aws.
    azureClientId String
    Azure Client ID to be used for authentication when auth_provider is set to azure.
    azureClientSecret String
    Azure Client Secret to be used for authentication when auth_provider is set to azure.
    azureTenantId String
    Azure Tenant ID to be used for authentication when auth_provider is set to azure.
    gcpServiceAccountJson String
    GCP Service Account JSON to be used for authentication when auth_provider is set to gcp.
    authProvider string
    Auth providers to be used to authenticate to a Cloud Provider's Redis instance. must be one of ["aws", "azure", "gcp"]
    awsAccessKeyId string
    AWS Access Key ID to be used for authentication when auth_provider is set to aws.
    awsAssumeRoleArn string
    The ARN of the IAM role to assume for generating ElastiCache IAM authentication tokens.
    awsCacheName string
    The name of the AWS Elasticache cluster when auth_provider is set to aws.
    awsIsServerless boolean
    This flag specifies whether the cluster is serverless when auth_provider is set to aws. Default: true
    awsRegion string
    The region of the AWS ElastiCache cluster when auth_provider is set to aws.
    awsRoleSessionName string
    The session name for the temporary credentials when assuming the IAM role.
    awsSecretAccessKey string
    AWS Secret Access Key to be used for authentication when auth_provider is set to aws.
    azureClientId string
    Azure Client ID to be used for authentication when auth_provider is set to azure.
    azureClientSecret string
    Azure Client Secret to be used for authentication when auth_provider is set to azure.
    azureTenantId string
    Azure Tenant ID to be used for authentication when auth_provider is set to azure.
    gcpServiceAccountJson string
    GCP Service Account JSON to be used for authentication when auth_provider is set to gcp.
    auth_provider str
    Auth providers to be used to authenticate to a Cloud Provider's Redis instance. must be one of ["aws", "azure", "gcp"]
    aws_access_key_id str
    AWS Access Key ID to be used for authentication when auth_provider is set to aws.
    aws_assume_role_arn str
    The ARN of the IAM role to assume for generating ElastiCache IAM authentication tokens.
    aws_cache_name str
    The name of the AWS Elasticache cluster when auth_provider is set to aws.
    aws_is_serverless bool
    This flag specifies whether the cluster is serverless when auth_provider is set to aws. Default: true
    aws_region str
    The region of the AWS ElastiCache cluster when auth_provider is set to aws.
    aws_role_session_name str
    The session name for the temporary credentials when assuming the IAM role.
    aws_secret_access_key str
    AWS Secret Access Key to be used for authentication when auth_provider is set to aws.
    azure_client_id str
    Azure Client ID to be used for authentication when auth_provider is set to azure.
    azure_client_secret str
    Azure Client Secret to be used for authentication when auth_provider is set to azure.
    azure_tenant_id str
    Azure Tenant ID to be used for authentication when auth_provider is set to azure.
    gcp_service_account_json str
    GCP Service Account JSON to be used for authentication when auth_provider is set to gcp.
    authProvider String
    Auth providers to be used to authenticate to a Cloud Provider's Redis instance. must be one of ["aws", "azure", "gcp"]
    awsAccessKeyId String
    AWS Access Key ID to be used for authentication when auth_provider is set to aws.
    awsAssumeRoleArn String
    The ARN of the IAM role to assume for generating ElastiCache IAM authentication tokens.
    awsCacheName String
    The name of the AWS Elasticache cluster when auth_provider is set to aws.
    awsIsServerless Boolean
    This flag specifies whether the cluster is serverless when auth_provider is set to aws. Default: true
    awsRegion String
    The region of the AWS ElastiCache cluster when auth_provider is set to aws.
    awsRoleSessionName String
    The session name for the temporary credentials when assuming the IAM role.
    awsSecretAccessKey String
    AWS Secret Access Key to be used for authentication when auth_provider is set to aws.
    azureClientId String
    Azure Client ID to be used for authentication when auth_provider is set to azure.
    azureClientSecret String
    Azure Client Secret to be used for authentication when auth_provider is set to azure.
    azureTenantId String
    Azure Tenant ID to be used for authentication when auth_provider is set to azure.
    gcpServiceAccountJson String
    GCP Service Account JSON to be used for authentication when auth_provider is set to gcp.

    GatewayPluginBasicAuthOrdering, GatewayPluginBasicAuthOrderingArgs

    GatewayPluginBasicAuthOrderingAfter, GatewayPluginBasicAuthOrderingAfterArgs

    Accesses List<string>
    Accesses []string
    accesses List<String>
    accesses string[]
    accesses Sequence[str]
    accesses List<String>

    GatewayPluginBasicAuthOrderingBefore, GatewayPluginBasicAuthOrderingBeforeArgs

    Accesses List<string>
    Accesses []string
    accesses List<String>
    accesses string[]
    accesses Sequence[str]
    accesses List<String>

    GatewayPluginBasicAuthPartial, GatewayPluginBasicAuthPartialArgs

    Id string
    A string representing a UUID (universally unique identifier).
    Name string
    A unique string representing a UTF-8 encoded name.
    Path string
    Id string
    A string representing a UUID (universally unique identifier).
    Name string
    A unique string representing a UTF-8 encoded name.
    Path string
    id String
    A string representing a UUID (universally unique identifier).
    name String
    A unique string representing a UTF-8 encoded name.
    path String
    id string
    A string representing a UUID (universally unique identifier).
    name string
    A unique string representing a UTF-8 encoded name.
    path string
    id str
    A string representing a UUID (universally unique identifier).
    name str
    A unique string representing a UTF-8 encoded name.
    path str
    id String
    A string representing a UUID (universally unique identifier).
    name String
    A unique string representing a UTF-8 encoded name.
    path String

    GatewayPluginBasicAuthRoute, GatewayPluginBasicAuthRouteArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    GatewayPluginBasicAuthService, GatewayPluginBasicAuthServiceArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    Import

    In Terraform v1.5.0 and later, the import block can be used with the id attribute, for example:

    terraform

    import {

    to = konnect_gateway_plugin_basic_auth.my_konnect_gateway_plugin_basic_auth

    id = jsonencode({

    control_plane_id = "9524ec7d-36d9-465d-a8c5-83a3c9390458"

id = "3473c251-5b6c-4f45-b1ff-7ede735a366d"

    })

    }

    The pulumi import command can be used, for example:

    $ pulumi import konnect:index/gatewayPluginBasicAuth:GatewayPluginBasicAuth my_konnect_gateway_plugin_basic_auth '{"control_plane_id": "9524ec7d-36d9-465d-a8c5-83a3c9390458", "id": "3473c251-5b6c-4f45-b1ff-7ede735a366d"}'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    konnect kong/terraform-provider-konnect
    License
    Notes
    This Pulumi package is based on the konnect Terraform Provider.
    konnect logo
    konnect 3.5.0 published on Tuesday, Jan 13, 2026 by kong
    Schema (JSON)
    kong/terraform-provider-konnect
      Meet Neo: Your AI Platform Teammate