Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Konnect Provider
  3. API Docs
  4. GatewayPluginAiSemanticPromptGuard
konnect 2.4.1 published on Thursday, Mar 13, 2025 by kong
kong/terraform-provider-konnect

konnect.GatewayPluginAiSemanticPromptGuard

Explore with Pulumi AI

konnect 2.4.1 published on Thursday, Mar 13, 2025 by kong
kong/terraform-provider-konnect

GatewayPluginAiSemanticPromptGuard Resource

Example Usage

Coming soon!

Coming soon!

Coming soon!

Coming soon!

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.konnect.GatewayPluginAiSemanticPromptGuard;
import com.pulumi.konnect.GatewayPluginAiSemanticPromptGuardArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigRulesArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigSearchArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConsumerArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardConsumerGroupArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardOrderingArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardOrderingAfterArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardRouteArgs;
import com.pulumi.konnect.inputs.GatewayPluginAiSemanticPromptGuardServiceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var myGatewaypluginaisemanticpromptguard = new GatewayPluginAiSemanticPromptGuard("myGatewaypluginaisemanticpromptguard", GatewayPluginAiSemanticPromptGuardArgs.builder()
            .config(GatewayPluginAiSemanticPromptGuardConfigArgs.builder()
                .embeddings(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs.builder()
                    .auth(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs.builder()
                        .allowOverride(false)
                        .awsAccessKeyId("...my_aws_access_key_id...")
                        .awsSecretAccessKey("...my_aws_secret_access_key...")
                        .azureClientId("...my_azure_client_id...")
                        .azureClientSecret("...my_azure_client_secret...")
                        .azureTenantId("...my_azure_tenant_id...")
                        .azureUseManagedIdentity(true)
                        .gcpServiceAccountJson("...my_gcp_service_account_json...")
                        .gcpUseServiceAccount(true)
                        .headerName("...my_header_name...")
                        .headerValue("...my_header_value...")
                        .paramLocation("query")
                        .paramName("...my_param_name...")
                        .paramValue("...my_param_value...")
                        .build())
                    .model(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs.builder()
                        .name("...my_name...")
                        .options(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs.builder()
                            .upstreamUrl("...my_upstream_url...")
                            .build())
                        .provider("openai")
                        .build())
                    .build())
                .rules(GatewayPluginAiSemanticPromptGuardConfigRulesArgs.builder()
                    .allowPrompts("...")
                    .denyPrompts("...")
                    .matchAllConversationHistory(false)
                    .matchAllRoles(false)
                    .maxRequestBodySize(10)
                    .build())
                .search(GatewayPluginAiSemanticPromptGuardConfigSearchArgs.builder()
                    .threshold(9.87)
                    .build())
                .vectordb(GatewayPluginAiSemanticPromptGuardConfigVectordbArgs.builder()
                    .dimensions(4)
                    .distanceMetric("euclidean")
                    .redis(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs.builder()
                        .clusterMaxRedirections(10)
                        .clusterNodes(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs.builder()
                            .ip("...my_ip...")
                            .port(4694)
                            .build())
                        .connectTimeout(927722545)
                        .connectionIsProxied(false)
                        .database(7)
                        .host("...my_host...")
                        .keepaliveBacklog(1501125607)
                        .keepalivePoolSize(114222283)
                        .password("...my_password...")
                        .port(24350)
                        .readTimeout(888592257)
                        .sendTimeout(228434190)
                        .sentinelMaster("...my_sentinel_master...")
                        .sentinelNodes(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs.builder()
                            .host("...my_host...")
                            .port(18183)
                            .build())
                        .sentinelPassword("...my_sentinel_password...")
                        .sentinelRole("any")
                        .sentinelUsername("...my_sentinel_username...")
                        .serverName("...my_server_name...")
                        .ssl(false)
                        .sslVerify(true)
                        .username("...my_username...")
                        .build())
                    .strategy("redis")
                    .threshold(3.9)
                    .build())
                .build())
            .consumer(GatewayPluginAiSemanticPromptGuardConsumerArgs.builder()
                .id("...my_id...")
                .build())
            .consumerGroup(GatewayPluginAiSemanticPromptGuardConsumerGroupArgs.builder()
                .id("...my_id...")
                .build())
            .controlPlaneId("9524ec7d-36d9-465d-a8c5-83a3c9390458")
            .enabled(true)
            .gatewayPluginAiSemanticPromptGuardId("...my_id...")
            .instanceName("...my_instance_name...")
            .ordering(GatewayPluginAiSemanticPromptGuardOrderingArgs.builder()
                .after(GatewayPluginAiSemanticPromptGuardOrderingAfterArgs.builder()
                    .access("...")
                    .build())
                .before(GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs.builder()
                    .access("...")
                    .build())
                .build())
            .protocols("http")
            .route(GatewayPluginAiSemanticPromptGuardRouteArgs.builder()
                .id("...my_id...")
                .build())
            .service(GatewayPluginAiSemanticPromptGuardServiceArgs.builder()
                .id("...my_id...")
                .build())
            .tags("...")
            .build());

    }
}
Copy
resources:
  myGatewaypluginaisemanticpromptguard:
    type: konnect:GatewayPluginAiSemanticPromptGuard
    properties:
      config:
        embeddings:
          auth:
            allowOverride: false
            awsAccessKeyId: '...my_aws_access_key_id...'
            awsSecretAccessKey: '...my_aws_secret_access_key...'
            azureClientId: '...my_azure_client_id...'
            azureClientSecret: '...my_azure_client_secret...'
            azureTenantId: '...my_azure_tenant_id...'
            azureUseManagedIdentity: true
            gcpServiceAccountJson: '...my_gcp_service_account_json...'
            gcpUseServiceAccount: true
            headerName: '...my_header_name...'
            headerValue: '...my_header_value...'
            paramLocation: query
            paramName: '...my_param_name...'
            paramValue: '...my_param_value...'
          model:
            name: '...my_name...'
            options:
              upstreamUrl: '...my_upstream_url...'
            provider: openai
        rules:
          allowPrompts:
            - '...'
          denyPrompts:
            - '...'
          matchAllConversationHistory: false
          matchAllRoles: false
          maxRequestBodySize: 10
        search:
          threshold: 9.87
        vectordb:
          dimensions: 4
          distanceMetric: euclidean
          redis:
            clusterMaxRedirections: 10
            clusterNodes:
              - ip: '...my_ip...'
                port: 4694
            connectTimeout: 9.27722545e+08
            connectionIsProxied: false
            database: 7
            host: '...my_host...'
            keepaliveBacklog: 1.501125607e+09
            keepalivePoolSize: 1.14222283e+08
            password: '...my_password...'
            port: 24350
            readTimeout: 8.88592257e+08
            sendTimeout: 2.2843419e+08
            sentinelMaster: '...my_sentinel_master...'
            sentinelNodes:
              - host: '...my_host...'
                port: 18183
            sentinelPassword: '...my_sentinel_password...'
            sentinelRole: any
            sentinelUsername: '...my_sentinel_username...'
            serverName: '...my_server_name...'
            ssl: false
            sslVerify: true
            username: '...my_username...'
          strategy: redis
          threshold: 3.9
      consumer:
        id: '...my_id...'
      consumerGroup:
        id: '...my_id...'
      controlPlaneId: 9524ec7d-36d9-465d-a8c5-83a3c9390458
      enabled: true
      gatewayPluginAiSemanticPromptGuardId: '...my_id...'
      instanceName: '...my_instance_name...'
      ordering:
        after:
          access:
            - '...'
        before:
          access:
            - '...'
      protocols:
        - http
      route:
        id: '...my_id...'
      service:
        id: '...my_id...'
      tags:
        - '...'
Copy

Create GatewayPluginAiSemanticPromptGuard Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new GatewayPluginAiSemanticPromptGuard(name: string, args: GatewayPluginAiSemanticPromptGuardArgs, opts?: CustomResourceOptions);
@overload
def GatewayPluginAiSemanticPromptGuard(resource_name: str,
                                       args: GatewayPluginAiSemanticPromptGuardArgs,
                                       opts: Optional[ResourceOptions] = None)

@overload
def GatewayPluginAiSemanticPromptGuard(resource_name: str,
                                       opts: Optional[ResourceOptions] = None,
                                       config: Optional[GatewayPluginAiSemanticPromptGuardConfigArgs] = None,
                                       control_plane_id: Optional[str] = None,
                                       consumer: Optional[GatewayPluginAiSemanticPromptGuardConsumerArgs] = None,
                                       consumer_group: Optional[GatewayPluginAiSemanticPromptGuardConsumerGroupArgs] = None,
                                       enabled: Optional[bool] = None,
                                       gateway_plugin_ai_semantic_prompt_guard_id: Optional[str] = None,
                                       instance_name: Optional[str] = None,
                                       ordering: Optional[GatewayPluginAiSemanticPromptGuardOrderingArgs] = None,
                                       protocols: Optional[Sequence[str]] = None,
                                       route: Optional[GatewayPluginAiSemanticPromptGuardRouteArgs] = None,
                                       service: Optional[GatewayPluginAiSemanticPromptGuardServiceArgs] = None,
                                       tags: Optional[Sequence[str]] = None)
func NewGatewayPluginAiSemanticPromptGuard(ctx *Context, name string, args GatewayPluginAiSemanticPromptGuardArgs, opts ...ResourceOption) (*GatewayPluginAiSemanticPromptGuard, error)
public GatewayPluginAiSemanticPromptGuard(string name, GatewayPluginAiSemanticPromptGuardArgs args, CustomResourceOptions? opts = null)
public GatewayPluginAiSemanticPromptGuard(String name, GatewayPluginAiSemanticPromptGuardArgs args)
public GatewayPluginAiSemanticPromptGuard(String name, GatewayPluginAiSemanticPromptGuardArgs args, CustomResourceOptions options)

type: konnect:GatewayPluginAiSemanticPromptGuard
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. GatewayPluginAiSemanticPromptGuardArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. GatewayPluginAiSemanticPromptGuardArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. GatewayPluginAiSemanticPromptGuardArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. GatewayPluginAiSemanticPromptGuardArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. GatewayPluginAiSemanticPromptGuardArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var gatewayPluginAiSemanticPromptGuardResource = new Konnect.GatewayPluginAiSemanticPromptGuard("gatewayPluginAiSemanticPromptGuardResource", new()
{
    Config = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigArgs
    {
        Embeddings = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs
        {
            Auth = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs
            {
                AllowOverride = false,
                AwsAccessKeyId = "string",
                AwsSecretAccessKey = "string",
                AzureClientId = "string",
                AzureClientSecret = "string",
                AzureTenantId = "string",
                AzureUseManagedIdentity = false,
                GcpServiceAccountJson = "string",
                GcpUseServiceAccount = false,
                HeaderName = "string",
                HeaderValue = "string",
                ParamLocation = "string",
                ParamName = "string",
                ParamValue = "string",
            },
            Model = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs
            {
                Name = "string",
                Options = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs
                {
                    UpstreamUrl = "string",
                },
                Provider = "string",
            },
        },
        Rules = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigRulesArgs
        {
            AllowPrompts = new[]
            {
                "string",
            },
            DenyPrompts = new[]
            {
                "string",
            },
            MatchAllConversationHistory = false,
            MatchAllRoles = false,
            MaxRequestBodySize = 0,
        },
        Search = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigSearchArgs
        {
            Threshold = 0,
        },
        Vectordb = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbArgs
        {
            Dimensions = 0,
            DistanceMetric = "string",
            Redis = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs
            {
                ClusterMaxRedirections = 0,
                ClusterNodes = new[]
                {
                    new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs
                    {
                        Ip = "string",
                        Port = 0,
                    },
                },
                ConnectTimeout = 0,
                ConnectionIsProxied = false,
                Database = 0,
                Host = "string",
                KeepaliveBacklog = 0,
                KeepalivePoolSize = 0,
                Password = "string",
                Port = 0,
                ReadTimeout = 0,
                SendTimeout = 0,
                SentinelMaster = "string",
                SentinelNodes = new[]
                {
                    new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs
                    {
                        Host = "string",
                        Port = 0,
                    },
                },
                SentinelPassword = "string",
                SentinelRole = "string",
                SentinelUsername = "string",
                ServerName = "string",
                Ssl = false,
                SslVerify = false,
                Username = "string",
            },
            Strategy = "string",
            Threshold = 0,
        },
    },
    ControlPlaneId = "string",
    Consumer = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConsumerArgs
    {
        Id = "string",
    },
    ConsumerGroup = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
    {
        Id = "string",
    },
    Enabled = false,
    GatewayPluginAiSemanticPromptGuardId = "string",
    InstanceName = "string",
    Ordering = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardOrderingArgs
    {
        After = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardOrderingAfterArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
        Before = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs
        {
            Accesses = new[]
            {
                "string",
            },
        },
    },
    Protocols = new[]
    {
        "string",
    },
    Route = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardRouteArgs
    {
        Id = "string",
    },
    Service = new Konnect.Inputs.GatewayPluginAiSemanticPromptGuardServiceArgs
    {
        Id = "string",
    },
    Tags = new[]
    {
        "string",
    },
});
Copy
example, err := konnect.NewGatewayPluginAiSemanticPromptGuard(ctx, "gatewayPluginAiSemanticPromptGuardResource", &konnect.GatewayPluginAiSemanticPromptGuardArgs{
Config: &.GatewayPluginAiSemanticPromptGuardConfigArgs{
Embeddings: &.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs{
Auth: &.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs{
AllowOverride: pulumi.Bool(false),
AwsAccessKeyId: pulumi.String("string"),
AwsSecretAccessKey: pulumi.String("string"),
AzureClientId: pulumi.String("string"),
AzureClientSecret: pulumi.String("string"),
AzureTenantId: pulumi.String("string"),
AzureUseManagedIdentity: pulumi.Bool(false),
GcpServiceAccountJson: pulumi.String("string"),
GcpUseServiceAccount: pulumi.Bool(false),
HeaderName: pulumi.String("string"),
HeaderValue: pulumi.String("string"),
ParamLocation: pulumi.String("string"),
ParamName: pulumi.String("string"),
ParamValue: pulumi.String("string"),
},
Model: &.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs{
Name: pulumi.String("string"),
Options: &.GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs{
UpstreamUrl: pulumi.String("string"),
},
Provider: pulumi.String("string"),
},
},
Rules: &.GatewayPluginAiSemanticPromptGuardConfigRulesArgs{
AllowPrompts: pulumi.StringArray{
pulumi.String("string"),
},
DenyPrompts: pulumi.StringArray{
pulumi.String("string"),
},
MatchAllConversationHistory: pulumi.Bool(false),
MatchAllRoles: pulumi.Bool(false),
MaxRequestBodySize: pulumi.Float64(0),
},
Search: &.GatewayPluginAiSemanticPromptGuardConfigSearchArgs{
Threshold: pulumi.Float64(0),
},
Vectordb: &.GatewayPluginAiSemanticPromptGuardConfigVectordbArgs{
Dimensions: pulumi.Float64(0),
DistanceMetric: pulumi.String("string"),
Redis: &.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs{
ClusterMaxRedirections: pulumi.Float64(0),
ClusterNodes: .GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArray{
&.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs{
Ip: pulumi.String("string"),
Port: pulumi.Float64(0),
},
},
ConnectTimeout: pulumi.Float64(0),
ConnectionIsProxied: pulumi.Bool(false),
Database: pulumi.Float64(0),
Host: pulumi.String("string"),
KeepaliveBacklog: pulumi.Float64(0),
KeepalivePoolSize: pulumi.Float64(0),
Password: pulumi.String("string"),
Port: pulumi.Float64(0),
ReadTimeout: pulumi.Float64(0),
SendTimeout: pulumi.Float64(0),
SentinelMaster: pulumi.String("string"),
SentinelNodes: .GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArray{
&.GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs{
Host: pulumi.String("string"),
Port: pulumi.Float64(0),
},
},
SentinelPassword: pulumi.String("string"),
SentinelRole: pulumi.String("string"),
SentinelUsername: pulumi.String("string"),
ServerName: pulumi.String("string"),
Ssl: pulumi.Bool(false),
SslVerify: pulumi.Bool(false),
Username: pulumi.String("string"),
},
Strategy: pulumi.String("string"),
Threshold: pulumi.Float64(0),
},
},
ControlPlaneId: pulumi.String("string"),
Consumer: &.GatewayPluginAiSemanticPromptGuardConsumerArgs{
Id: pulumi.String("string"),
},
ConsumerGroup: &.GatewayPluginAiSemanticPromptGuardConsumerGroupArgs{
Id: pulumi.String("string"),
},
Enabled: pulumi.Bool(false),
GatewayPluginAiSemanticPromptGuardId: pulumi.String("string"),
InstanceName: pulumi.String("string"),
Ordering: &.GatewayPluginAiSemanticPromptGuardOrderingArgs{
After: &.GatewayPluginAiSemanticPromptGuardOrderingAfterArgs{
Accesses: pulumi.StringArray{
pulumi.String("string"),
},
},
Before: &.GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs{
Accesses: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
Route: &.GatewayPluginAiSemanticPromptGuardRouteArgs{
Id: pulumi.String("string"),
},
Service: &.GatewayPluginAiSemanticPromptGuardServiceArgs{
Id: pulumi.String("string"),
},
Tags: pulumi.StringArray{
pulumi.String("string"),
},
})
Copy
var gatewayPluginAiSemanticPromptGuardResource = new GatewayPluginAiSemanticPromptGuard("gatewayPluginAiSemanticPromptGuardResource", GatewayPluginAiSemanticPromptGuardArgs.builder()
    .config(GatewayPluginAiSemanticPromptGuardConfigArgs.builder()
        .embeddings(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs.builder()
            .auth(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs.builder()
                .allowOverride(false)
                .awsAccessKeyId("string")
                .awsSecretAccessKey("string")
                .azureClientId("string")
                .azureClientSecret("string")
                .azureTenantId("string")
                .azureUseManagedIdentity(false)
                .gcpServiceAccountJson("string")
                .gcpUseServiceAccount(false)
                .headerName("string")
                .headerValue("string")
                .paramLocation("string")
                .paramName("string")
                .paramValue("string")
                .build())
            .model(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs.builder()
                .name("string")
                .options(GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs.builder()
                    .upstreamUrl("string")
                    .build())
                .provider("string")
                .build())
            .build())
        .rules(GatewayPluginAiSemanticPromptGuardConfigRulesArgs.builder()
            .allowPrompts("string")
            .denyPrompts("string")
            .matchAllConversationHistory(false)
            .matchAllRoles(false)
            .maxRequestBodySize(0)
            .build())
        .search(GatewayPluginAiSemanticPromptGuardConfigSearchArgs.builder()
            .threshold(0)
            .build())
        .vectordb(GatewayPluginAiSemanticPromptGuardConfigVectordbArgs.builder()
            .dimensions(0)
            .distanceMetric("string")
            .redis(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs.builder()
                .clusterMaxRedirections(0)
                .clusterNodes(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs.builder()
                    .ip("string")
                    .port(0)
                    .build())
                .connectTimeout(0)
                .connectionIsProxied(false)
                .database(0)
                .host("string")
                .keepaliveBacklog(0)
                .keepalivePoolSize(0)
                .password("string")
                .port(0)
                .readTimeout(0)
                .sendTimeout(0)
                .sentinelMaster("string")
                .sentinelNodes(GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs.builder()
                    .host("string")
                    .port(0)
                    .build())
                .sentinelPassword("string")
                .sentinelRole("string")
                .sentinelUsername("string")
                .serverName("string")
                .ssl(false)
                .sslVerify(false)
                .username("string")
                .build())
            .strategy("string")
            .threshold(0)
            .build())
        .build())
    .controlPlaneId("string")
    .consumer(GatewayPluginAiSemanticPromptGuardConsumerArgs.builder()
        .id("string")
        .build())
    .consumerGroup(GatewayPluginAiSemanticPromptGuardConsumerGroupArgs.builder()
        .id("string")
        .build())
    .enabled(false)
    .gatewayPluginAiSemanticPromptGuardId("string")
    .instanceName("string")
    .ordering(GatewayPluginAiSemanticPromptGuardOrderingArgs.builder()
        .after(GatewayPluginAiSemanticPromptGuardOrderingAfterArgs.builder()
            .accesses("string")
            .build())
        .before(GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs.builder()
            .accesses("string")
            .build())
        .build())
    .protocols("string")
    .route(GatewayPluginAiSemanticPromptGuardRouteArgs.builder()
        .id("string")
        .build())
    .service(GatewayPluginAiSemanticPromptGuardServiceArgs.builder()
        .id("string")
        .build())
    .tags("string")
    .build());
Copy
gateway_plugin_ai_semantic_prompt_guard_resource = konnect.GatewayPluginAiSemanticPromptGuard("gatewayPluginAiSemanticPromptGuardResource",
    config={
        "embeddings": {
            "auth": {
                "allow_override": False,
                "aws_access_key_id": "string",
                "aws_secret_access_key": "string",
                "azure_client_id": "string",
                "azure_client_secret": "string",
                "azure_tenant_id": "string",
                "azure_use_managed_identity": False,
                "gcp_service_account_json": "string",
                "gcp_use_service_account": False,
                "header_name": "string",
                "header_value": "string",
                "param_location": "string",
                "param_name": "string",
                "param_value": "string",
            },
            "model": {
                "name": "string",
                "options": {
                    "upstream_url": "string",
                },
                "provider": "string",
            },
        },
        "rules": {
            "allow_prompts": ["string"],
            "deny_prompts": ["string"],
            "match_all_conversation_history": False,
            "match_all_roles": False,
            "max_request_body_size": 0,
        },
        "search": {
            "threshold": 0,
        },
        "vectordb": {
            "dimensions": 0,
            "distance_metric": "string",
            "redis": {
                "cluster_max_redirections": 0,
                "cluster_nodes": [{
                    "ip": "string",
                    "port": 0,
                }],
                "connect_timeout": 0,
                "connection_is_proxied": False,
                "database": 0,
                "host": "string",
                "keepalive_backlog": 0,
                "keepalive_pool_size": 0,
                "password": "string",
                "port": 0,
                "read_timeout": 0,
                "send_timeout": 0,
                "sentinel_master": "string",
                "sentinel_nodes": [{
                    "host": "string",
                    "port": 0,
                }],
                "sentinel_password": "string",
                "sentinel_role": "string",
                "sentinel_username": "string",
                "server_name": "string",
                "ssl": False,
                "ssl_verify": False,
                "username": "string",
            },
            "strategy": "string",
            "threshold": 0,
        },
    },
    control_plane_id="string",
    consumer={
        "id": "string",
    },
    consumer_group={
        "id": "string",
    },
    enabled=False,
    gateway_plugin_ai_semantic_prompt_guard_id="string",
    instance_name="string",
    ordering={
        "after": {
            "accesses": ["string"],
        },
        "before": {
            "accesses": ["string"],
        },
    },
    protocols=["string"],
    route={
        "id": "string",
    },
    service={
        "id": "string",
    },
    tags=["string"])
Copy
const gatewayPluginAiSemanticPromptGuardResource = new konnect.GatewayPluginAiSemanticPromptGuard("gatewayPluginAiSemanticPromptGuardResource", {
    config: {
        embeddings: {
            auth: {
                allowOverride: false,
                awsAccessKeyId: "string",
                awsSecretAccessKey: "string",
                azureClientId: "string",
                azureClientSecret: "string",
                azureTenantId: "string",
                azureUseManagedIdentity: false,
                gcpServiceAccountJson: "string",
                gcpUseServiceAccount: false,
                headerName: "string",
                headerValue: "string",
                paramLocation: "string",
                paramName: "string",
                paramValue: "string",
            },
            model: {
                name: "string",
                options: {
                    upstreamUrl: "string",
                },
                provider: "string",
            },
        },
        rules: {
            allowPrompts: ["string"],
            denyPrompts: ["string"],
            matchAllConversationHistory: false,
            matchAllRoles: false,
            maxRequestBodySize: 0,
        },
        search: {
            threshold: 0,
        },
        vectordb: {
            dimensions: 0,
            distanceMetric: "string",
            redis: {
                clusterMaxRedirections: 0,
                clusterNodes: [{
                    ip: "string",
                    port: 0,
                }],
                connectTimeout: 0,
                connectionIsProxied: false,
                database: 0,
                host: "string",
                keepaliveBacklog: 0,
                keepalivePoolSize: 0,
                password: "string",
                port: 0,
                readTimeout: 0,
                sendTimeout: 0,
                sentinelMaster: "string",
                sentinelNodes: [{
                    host: "string",
                    port: 0,
                }],
                sentinelPassword: "string",
                sentinelRole: "string",
                sentinelUsername: "string",
                serverName: "string",
                ssl: false,
                sslVerify: false,
                username: "string",
            },
            strategy: "string",
            threshold: 0,
        },
    },
    controlPlaneId: "string",
    consumer: {
        id: "string",
    },
    consumerGroup: {
        id: "string",
    },
    enabled: false,
    gatewayPluginAiSemanticPromptGuardId: "string",
    instanceName: "string",
    ordering: {
        after: {
            accesses: ["string"],
        },
        before: {
            accesses: ["string"],
        },
    },
    protocols: ["string"],
    route: {
        id: "string",
    },
    service: {
        id: "string",
    },
    tags: ["string"],
});
Copy
type: konnect:GatewayPluginAiSemanticPromptGuard
properties:
    config:
        embeddings:
            auth:
                allowOverride: false
                awsAccessKeyId: string
                awsSecretAccessKey: string
                azureClientId: string
                azureClientSecret: string
                azureTenantId: string
                azureUseManagedIdentity: false
                gcpServiceAccountJson: string
                gcpUseServiceAccount: false
                headerName: string
                headerValue: string
                paramLocation: string
                paramName: string
                paramValue: string
            model:
                name: string
                options:
                    upstreamUrl: string
                provider: string
        rules:
            allowPrompts:
                - string
            denyPrompts:
                - string
            matchAllConversationHistory: false
            matchAllRoles: false
            maxRequestBodySize: 0
        search:
            threshold: 0
        vectordb:
            dimensions: 0
            distanceMetric: string
            redis:
                clusterMaxRedirections: 0
                clusterNodes:
                    - ip: string
                      port: 0
                connectTimeout: 0
                connectionIsProxied: false
                database: 0
                host: string
                keepaliveBacklog: 0
                keepalivePoolSize: 0
                password: string
                port: 0
                readTimeout: 0
                sendTimeout: 0
                sentinelMaster: string
                sentinelNodes:
                    - host: string
                      port: 0
                sentinelPassword: string
                sentinelRole: string
                sentinelUsername: string
                serverName: string
                ssl: false
                sslVerify: false
                username: string
            strategy: string
            threshold: 0
    consumer:
        id: string
    consumerGroup:
        id: string
    controlPlaneId: string
    enabled: false
    gatewayPluginAiSemanticPromptGuardId: string
    instanceName: string
    ordering:
        after:
            accesses:
                - string
        before:
            accesses:
                - string
    protocols:
        - string
    route:
        id: string
    service:
        id: string
    tags:
        - string
Copy

GatewayPluginAiSemanticPromptGuard Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The GatewayPluginAiSemanticPromptGuard resource accepts the following input properties:

Config This property is required. GatewayPluginAiSemanticPromptGuardConfig
ControlPlaneId This property is required. string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
Consumer GatewayPluginAiSemanticPromptGuardConsumer
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
ConsumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
Enabled bool
Whether the plugin is applied.
GatewayPluginAiSemanticPromptGuardId string
The ID of this resource.
InstanceName string
Ordering GatewayPluginAiSemanticPromptGuardOrdering
Protocols List<string>
A set of strings representing HTTP protocols.
Route GatewayPluginAiSemanticPromptGuardRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAiSemanticPromptGuardService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags List<string>
An optional set of strings associated with the Plugin for grouping and filtering.
Config This property is required. GatewayPluginAiSemanticPromptGuardConfigArgs
ControlPlaneId This property is required. string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
Consumer GatewayPluginAiSemanticPromptGuardConsumerArgs
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
ConsumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
Enabled bool
Whether the plugin is applied.
GatewayPluginAiSemanticPromptGuardId string
The ID of this resource.
InstanceName string
Ordering GatewayPluginAiSemanticPromptGuardOrderingArgs
Protocols []string
A set of strings representing HTTP protocols.
Route GatewayPluginAiSemanticPromptGuardRouteArgs
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAiSemanticPromptGuardServiceArgs
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags []string
An optional set of strings associated with the Plugin for grouping and filtering.
config This property is required. GatewayPluginAiSemanticPromptGuardConfig
controlPlaneId This property is required. String
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
consumer GatewayPluginAiSemanticPromptGuardConsumer
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
enabled Boolean
Whether the plugin is applied.
gatewayPluginAiSemanticPromptGuardId String
The ID of this resource.
instanceName String
ordering GatewayPluginAiSemanticPromptGuardOrdering
protocols List<String>
A set of strings representing HTTP protocols.
route GatewayPluginAiSemanticPromptGuardRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiSemanticPromptGuardService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>
An optional set of strings associated with the Plugin for grouping and filtering.
config This property is required. GatewayPluginAiSemanticPromptGuardConfig
controlPlaneId This property is required. string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
consumer GatewayPluginAiSemanticPromptGuardConsumer
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
enabled boolean
Whether the plugin is applied.
gatewayPluginAiSemanticPromptGuardId string
The ID of this resource.
instanceName string
ordering GatewayPluginAiSemanticPromptGuardOrdering
protocols string[]
A set of strings representing HTTP protocols.
route GatewayPluginAiSemanticPromptGuardRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiSemanticPromptGuardService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags string[]
An optional set of strings associated with the Plugin for grouping and filtering.
config This property is required. GatewayPluginAiSemanticPromptGuardConfigArgs
control_plane_id This property is required. str
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
consumer GatewayPluginAiSemanticPromptGuardConsumerArgs
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumer_group GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
enabled bool
Whether the plugin is applied.
gateway_plugin_ai_semantic_prompt_guard_id str
The ID of this resource.
instance_name str
ordering GatewayPluginAiSemanticPromptGuardOrderingArgs
protocols Sequence[str]
A set of strings representing HTTP protocols.
route GatewayPluginAiSemanticPromptGuardRouteArgs
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiSemanticPromptGuardServiceArgs
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags Sequence[str]
An optional set of strings associated with the Plugin for grouping and filtering.
config This property is required. Property Map
controlPlaneId This property is required. String
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
consumer Property Map
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup Property Map
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
enabled Boolean
Whether the plugin is applied.
gatewayPluginAiSemanticPromptGuardId String
The ID of this resource.
instanceName String
ordering Property Map
protocols List<String>
A set of strings representing HTTP protocols.
route Property Map
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service Property Map
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>
An optional set of strings associated with the Plugin for grouping and filtering.

Outputs

All input properties are implicitly available as output properties. Additionally, the GatewayPluginAiSemanticPromptGuard resource produces the following output properties:

CreatedAt double
Unix epoch when the resource was created.
Id string
The provider-assigned unique ID for this managed resource.
UpdatedAt double
Unix epoch when the resource was last updated.
CreatedAt float64
Unix epoch when the resource was created.
Id string
The provider-assigned unique ID for this managed resource.
UpdatedAt float64
Unix epoch when the resource was last updated.
createdAt Double
Unix epoch when the resource was created.
id String
The provider-assigned unique ID for this managed resource.
updatedAt Double
Unix epoch when the resource was last updated.
createdAt number
Unix epoch when the resource was created.
id string
The provider-assigned unique ID for this managed resource.
updatedAt number
Unix epoch when the resource was last updated.
created_at float
Unix epoch when the resource was created.
id str
The provider-assigned unique ID for this managed resource.
updated_at float
Unix epoch when the resource was last updated.
createdAt Number
Unix epoch when the resource was created.
id String
The provider-assigned unique ID for this managed resource.
updatedAt Number
Unix epoch when the resource was last updated.

Look up Existing GatewayPluginAiSemanticPromptGuard Resource

Get an existing GatewayPluginAiSemanticPromptGuard resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: GatewayPluginAiSemanticPromptGuardState, opts?: CustomResourceOptions): GatewayPluginAiSemanticPromptGuard
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        config: Optional[GatewayPluginAiSemanticPromptGuardConfigArgs] = None,
        consumer: Optional[GatewayPluginAiSemanticPromptGuardConsumerArgs] = None,
        consumer_group: Optional[GatewayPluginAiSemanticPromptGuardConsumerGroupArgs] = None,
        control_plane_id: Optional[str] = None,
        created_at: Optional[float] = None,
        enabled: Optional[bool] = None,
        gateway_plugin_ai_semantic_prompt_guard_id: Optional[str] = None,
        instance_name: Optional[str] = None,
        ordering: Optional[GatewayPluginAiSemanticPromptGuardOrderingArgs] = None,
        protocols: Optional[Sequence[str]] = None,
        route: Optional[GatewayPluginAiSemanticPromptGuardRouteArgs] = None,
        service: Optional[GatewayPluginAiSemanticPromptGuardServiceArgs] = None,
        tags: Optional[Sequence[str]] = None,
        updated_at: Optional[float] = None) -> GatewayPluginAiSemanticPromptGuard
func GetGatewayPluginAiSemanticPromptGuard(ctx *Context, name string, id IDInput, state *GatewayPluginAiSemanticPromptGuardState, opts ...ResourceOption) (*GatewayPluginAiSemanticPromptGuard, error)
public static GatewayPluginAiSemanticPromptGuard Get(string name, Input<string> id, GatewayPluginAiSemanticPromptGuardState? state, CustomResourceOptions? opts = null)
public static GatewayPluginAiSemanticPromptGuard get(String name, Output<String> id, GatewayPluginAiSemanticPromptGuardState state, CustomResourceOptions options)
resources:  _:    type: konnect:GatewayPluginAiSemanticPromptGuard    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Config GatewayPluginAiSemanticPromptGuardConfig
Consumer GatewayPluginAiSemanticPromptGuardConsumer
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
ConsumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
ControlPlaneId string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
CreatedAt double
Unix epoch when the resource was created.
Enabled bool
Whether the plugin is applied.
GatewayPluginAiSemanticPromptGuardId string
The ID of this resource.
InstanceName string
Ordering GatewayPluginAiSemanticPromptGuardOrdering
Protocols List<string>
A set of strings representing HTTP protocols.
Route GatewayPluginAiSemanticPromptGuardRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAiSemanticPromptGuardService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags List<string>
An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt double
Unix epoch when the resource was last updated.
Config GatewayPluginAiSemanticPromptGuardConfigArgs
Consumer GatewayPluginAiSemanticPromptGuardConsumerArgs
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
ConsumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
ControlPlaneId string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
CreatedAt float64
Unix epoch when the resource was created.
Enabled bool
Whether the plugin is applied.
GatewayPluginAiSemanticPromptGuardId string
The ID of this resource.
InstanceName string
Ordering GatewayPluginAiSemanticPromptGuardOrderingArgs
Protocols []string
A set of strings representing HTTP protocols.
Route GatewayPluginAiSemanticPromptGuardRouteArgs
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
Service GatewayPluginAiSemanticPromptGuardServiceArgs
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
Tags []string
An optional set of strings associated with the Plugin for grouping and filtering.
UpdatedAt float64
Unix epoch when the resource was last updated.
config GatewayPluginAiSemanticPromptGuardConfig
consumer GatewayPluginAiSemanticPromptGuardConsumer
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
controlPlaneId String
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt Double
Unix epoch when the resource was created.
enabled Boolean
Whether the plugin is applied.
gatewayPluginAiSemanticPromptGuardId String
The ID of this resource.
instanceName String
ordering GatewayPluginAiSemanticPromptGuardOrdering
protocols List<String>
A set of strings representing HTTP protocols.
route GatewayPluginAiSemanticPromptGuardRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiSemanticPromptGuardService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Double
Unix epoch when the resource was last updated.
config GatewayPluginAiSemanticPromptGuardConfig
consumer GatewayPluginAiSemanticPromptGuardConsumer
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup GatewayPluginAiSemanticPromptGuardConsumerGroup
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
controlPlaneId string
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt number
Unix epoch when the resource was created.
enabled boolean
Whether the plugin is applied.
gatewayPluginAiSemanticPromptGuardId string
The ID of this resource.
instanceName string
ordering GatewayPluginAiSemanticPromptGuardOrdering
protocols string[]
A set of strings representing HTTP protocols.
route GatewayPluginAiSemanticPromptGuardRoute
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiSemanticPromptGuardService
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags string[]
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt number
Unix epoch when the resource was last updated.
config GatewayPluginAiSemanticPromptGuardConfigArgs
consumer GatewayPluginAiSemanticPromptGuardConsumerArgs
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumer_group GatewayPluginAiSemanticPromptGuardConsumerGroupArgs
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
control_plane_id str
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
created_at float
Unix epoch when the resource was created.
enabled bool
Whether the plugin is applied.
gateway_plugin_ai_semantic_prompt_guard_id str
The ID of this resource.
instance_name str
ordering GatewayPluginAiSemanticPromptGuardOrderingArgs
protocols Sequence[str]
A set of strings representing HTTP protocols.
route GatewayPluginAiSemanticPromptGuardRouteArgs
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service GatewayPluginAiSemanticPromptGuardServiceArgs
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags Sequence[str]
An optional set of strings associated with the Plugin for grouping and filtering.
updated_at float
Unix epoch when the resource was last updated.
config Property Map
consumer Property Map
If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.
consumerGroup Property Map
If set, the plugin will activate only for requests where the specified consumer group has been authenticated. (Note that some plugins can not be restricted to consumers groups this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer Groups
controlPlaneId String
The UUID of your control plane. This variable is available in the Konnect manager. Requires replacement if changed.
createdAt Number
Unix epoch when the resource was created.
enabled Boolean
Whether the plugin is applied.
gatewayPluginAiSemanticPromptGuardId String
The ID of this resource.
instanceName String
ordering Property Map
protocols List<String>
A set of strings representing HTTP protocols.
route Property Map
If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the route being used.
service Property Map
If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.
tags List<String>
An optional set of strings associated with the Plugin for grouping and filtering.
updatedAt Number
Unix epoch when the resource was last updated.

Supporting Types

GatewayPluginAiSemanticPromptGuardConfig
, GatewayPluginAiSemanticPromptGuardConfigArgs

GatewayPluginAiSemanticPromptGuardConfigEmbeddings
, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsArgs

GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuth
, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsAuthArgs

AllowOverride bool
If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
AwsAccessKeyId string
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
AwsSecretAccessKey string
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
AzureClientId string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
AzureClientSecret string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
AzureTenantId string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
AzureUseManagedIdentity bool
Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
GcpServiceAccountJson string
Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
GcpUseServiceAccount bool
Use service account auth for GCP-based providers and models.
HeaderName string
If AI model requires authentication via Authorization or API key header, specify its name here.
HeaderValue string
Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
ParamLocation string
Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
ParamName string
If AI model requires authentication via query parameter, specify its name here.
ParamValue string
Specify the full parameter value for 'param_name'.
AllowOverride bool
If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
AwsAccessKeyId string
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
AwsSecretAccessKey string
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
AzureClientId string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
AzureClientSecret string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
AzureTenantId string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
AzureUseManagedIdentity bool
Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
GcpServiceAccountJson string
Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
GcpUseServiceAccount bool
Use service account auth for GCP-based providers and models.
HeaderName string
If AI model requires authentication via Authorization or API key header, specify its name here.
HeaderValue string
Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
ParamLocation string
Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
ParamName string
If AI model requires authentication via query parameter, specify its name here.
ParamValue string
Specify the full parameter value for 'param_name'.
allowOverride Boolean
If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
awsAccessKeyId String
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
awsSecretAccessKey String
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
azureClientId String
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
azureClientSecret String
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
azureTenantId String
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
azureUseManagedIdentity Boolean
Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
gcpServiceAccountJson String
Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
gcpUseServiceAccount Boolean
Use service account auth for GCP-based providers and models.
headerName String
If AI model requires authentication via Authorization or API key header, specify its name here.
headerValue String
Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
paramLocation String
Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
paramName String
If AI model requires authentication via query parameter, specify its name here.
paramValue String
Specify the full parameter value for 'param_name'.
allowOverride boolean
If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
awsAccessKeyId string
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
awsSecretAccessKey string
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
azureClientId string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
azureClientSecret string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
azureTenantId string
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
azureUseManagedIdentity boolean
Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
gcpServiceAccountJson string
Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
gcpUseServiceAccount boolean
Use service account auth for GCP-based providers and models.
headerName string
If AI model requires authentication via Authorization or API key header, specify its name here.
headerValue string
Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
paramLocation string
Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
paramName string
If AI model requires authentication via query parameter, specify its name here.
paramValue string
Specify the full parameter value for 'param_name'.
allow_override bool
If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
aws_access_key_id str
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
aws_secret_access_key str
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
azure_client_id str
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
azure_client_secret str
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
azure_tenant_id str
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
azure_use_managed_identity bool
Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
gcp_service_account_json str
Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
gcp_use_service_account bool
Use service account auth for GCP-based providers and models.
header_name str
If AI model requires authentication via Authorization or API key header, specify its name here.
header_value str
Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
param_location str
Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
param_name str
If AI model requires authentication via query parameter, specify its name here.
param_value str
Specify the full parameter value for 'param_name'.
allowOverride Boolean
If enabled, the authorization header or parameter can be overridden in the request by the value configured in the plugin.
awsAccessKeyId String
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSACCESSKEY_ID environment variable for this plugin instance.
awsSecretAccessKey String
Set this if you are using an AWS provider (Bedrock) and you are authenticating using static IAM User credentials. Setting this will override the AWSSECRETACCESS_KEY environment variable for this plugin instance.
azureClientId String
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client ID.
azureClientSecret String
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the client secret.
azureTenantId String
If azureusemanaged_identity is set to true, and you need to use a different user-assigned identity for this LLM instance, set the tenant ID.
azureUseManagedIdentity Boolean
Set true to use the Azure Cloud Managed Identity (or user-assigned identity) to authenticate with Azure-provider models.
gcpServiceAccountJson String
Set this field to the full JSON of the GCP service account to authenticate, if required. If null (and gcpuseservice_account is true), Kong will attempt to read from environment variable GCP_SERVICE_ACCOUNT.
gcpUseServiceAccount Boolean
Use service account auth for GCP-based providers and models.
headerName String
If AI model requires authentication via Authorization or API key header, specify its name here.
headerValue String
Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.
paramLocation String
Specify whether the 'paramname' and 'paramvalue' options go in a query string, or the POST form/JSON body. must be one of ["body", "query"]
paramName String
If AI model requires authentication via query parameter, specify its name here.
paramValue String
Specify the full parameter value for 'param_name'.

GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModel
, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelArgs

Name string
Model name to execute.
Options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
Key/value settings for the model
Provider string
AI provider format to use for embeddings API. must be one of ["mistral", "openai"]
Name string
Model name to execute.
Options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
Key/value settings for the model
Provider string
AI provider format to use for embeddings API. must be one of ["mistral", "openai"]
name String
Model name to execute.
options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
Key/value settings for the model
provider String
AI provider format to use for embeddings API. must be one of ["mistral", "openai"]
name string
Model name to execute.
options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
Key/value settings for the model
provider string
AI provider format to use for embeddings API. must be one of ["mistral", "openai"]
name str
Model name to execute.
options GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
Key/value settings for the model
provider str
AI provider format to use for embeddings API. must be one of ["mistral", "openai"]
name String
Model name to execute.
options Property Map
Key/value settings for the model
provider String
AI provider format to use for embeddings API. must be one of ["mistral", "openai"]

GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptions
, GatewayPluginAiSemanticPromptGuardConfigEmbeddingsModelOptionsArgs

UpstreamUrl string
upstream url for the embeddings
UpstreamUrl string
upstream url for the embeddings
upstreamUrl String
upstream url for the embeddings
upstreamUrl string
upstream url for the embeddings
upstream_url str
upstream url for the embeddings
upstreamUrl String
upstream url for the embeddings

GatewayPluginAiSemanticPromptGuardConfigRules
, GatewayPluginAiSemanticPromptGuardConfigRulesArgs

AllowPrompts List<string>
List of prompts to allow.
DenyPrompts List<string>
List of prompts to deny.
MatchAllConversationHistory bool
If false, will ignore all previous chat prompts from the conversation history.
MatchAllRoles bool
If true, will match all roles in addition to 'user' role in conversation history.
MaxRequestBodySize double
max allowed body size allowed to be introspected
AllowPrompts []string
List of prompts to allow.
DenyPrompts []string
List of prompts to deny.
MatchAllConversationHistory bool
If false, will ignore all previous chat prompts from the conversation history.
MatchAllRoles bool
If true, will match all roles in addition to 'user' role in conversation history.
MaxRequestBodySize float64
max allowed body size allowed to be introspected
allowPrompts List<String>
List of prompts to allow.
denyPrompts List<String>
List of prompts to deny.
matchAllConversationHistory Boolean
If false, will ignore all previous chat prompts from the conversation history.
matchAllRoles Boolean
If true, will match all roles in addition to 'user' role in conversation history.
maxRequestBodySize Double
max allowed body size allowed to be introspected
allowPrompts string[]
List of prompts to allow.
denyPrompts string[]
List of prompts to deny.
matchAllConversationHistory boolean
If false, will ignore all previous chat prompts from the conversation history.
matchAllRoles boolean
If true, will match all roles in addition to 'user' role in conversation history.
maxRequestBodySize number
max allowed body size allowed to be introspected
allow_prompts Sequence[str]
List of prompts to allow.
deny_prompts Sequence[str]
List of prompts to deny.
match_all_conversation_history bool
If false, will ignore all previous chat prompts from the conversation history.
match_all_roles bool
If true, will match all roles in addition to 'user' role in conversation history.
max_request_body_size float
max allowed body size allowed to be introspected
allowPrompts List<String>
List of prompts to allow.
denyPrompts List<String>
List of prompts to deny.
matchAllConversationHistory Boolean
If false, will ignore all previous chat prompts from the conversation history.
matchAllRoles Boolean
If true, will match all roles in addition to 'user' role in conversation history.
maxRequestBodySize Number
max allowed body size allowed to be introspected

GatewayPluginAiSemanticPromptGuardConfigSearch
, GatewayPluginAiSemanticPromptGuardConfigSearchArgs

Threshold double
Threshold for the similarity score to be considered a match.
Threshold float64
Threshold for the similarity score to be considered a match.
threshold Double
Threshold for the similarity score to be considered a match.
threshold number
Threshold for the similarity score to be considered a match.
threshold float
Threshold for the similarity score to be considered a match.
threshold Number
Threshold for the similarity score to be considered a match.

GatewayPluginAiSemanticPromptGuardConfigVectordb
, GatewayPluginAiSemanticPromptGuardConfigVectordbArgs

Dimensions double
the desired dimensionality for the vectors
DistanceMetric string
the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
Redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
Strategy string
which vector database driver to use. must be "redis"
Threshold double
the default similarity threshold for accepting semantic search results (float)
Dimensions float64
the desired dimensionality for the vectors
DistanceMetric string
the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
Redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
Strategy string
which vector database driver to use. must be "redis"
Threshold float64
the default similarity threshold for accepting semantic search results (float)
dimensions Double
the desired dimensionality for the vectors
distanceMetric String
the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
strategy String
which vector database driver to use. must be "redis"
threshold Double
the default similarity threshold for accepting semantic search results (float)
dimensions number
the desired dimensionality for the vectors
distanceMetric string
the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
strategy string
which vector database driver to use. must be "redis"
threshold number
the default similarity threshold for accepting semantic search results (float)
dimensions float
the desired dimensionality for the vectors
distance_metric str
the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
redis GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
strategy str
which vector database driver to use. must be "redis"
threshold float
the default similarity threshold for accepting semantic search results (float)
dimensions Number
the desired dimensionality for the vectors
distanceMetric String
the distance metric to use for vector searches. must be one of ["cosine", "euclidean"]
redis Property Map
strategy String
which vector database driver to use. must be "redis"
threshold Number
the default similarity threshold for accepting semantic search results (float)

GatewayPluginAiSemanticPromptGuardConfigVectordbRedis
, GatewayPluginAiSemanticPromptGuardConfigVectordbRedisArgs

ClusterMaxRedirections double
Maximum retry attempts for redirection.
ClusterNodes List<GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode>
Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
ConnectTimeout double
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
ConnectionIsProxied bool
If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
Database double
Database to use for the Redis connection when using the redis strategy
Host string
A string representing a host name, such as example.com.
KeepaliveBacklog double
Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
KeepalivePoolSize double
The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
Password string
Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
Port double
An integer representing a port number between 0 and 65535, inclusive.
ReadTimeout double
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
SendTimeout double
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
SentinelMaster string
Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
SentinelNodes List<GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode>
Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
SentinelPassword string
Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
SentinelRole string
Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
SentinelUsername string
Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
ServerName string
A string representing an SNI (server name indication) value for TLS.
Ssl bool
If set to true, uses SSL to connect to Redis.
SslVerify bool
If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
Username string
Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
ClusterMaxRedirections float64
Maximum retry attempts for redirection.
ClusterNodes []GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode
Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
ConnectTimeout float64
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
ConnectionIsProxied bool
If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
Database float64
Database to use for the Redis connection when using the redis strategy
Host string
A string representing a host name, such as example.com.
KeepaliveBacklog float64
Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
KeepalivePoolSize float64
The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
Password string
Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
Port float64
An integer representing a port number between 0 and 65535, inclusive.
ReadTimeout float64
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
SendTimeout float64
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
SentinelMaster string
Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
SentinelNodes []GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode
Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
SentinelPassword string
Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
SentinelRole string
Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
SentinelUsername string
Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
ServerName string
A string representing an SNI (server name indication) value for TLS.
Ssl bool
If set to true, uses SSL to connect to Redis.
SslVerify bool
If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
Username string
Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
clusterMaxRedirections Double
Maximum retry attempts for redirection.
clusterNodes List<GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode>
Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
connectTimeout Double
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
connectionIsProxied Boolean
If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
database Double
Database to use for the Redis connection when using the redis strategy
host String
A string representing a host name, such as example.com.
keepaliveBacklog Double
Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
keepalivePoolSize Double
The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
password String
Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
port Double
An integer representing a port number between 0 and 65535, inclusive.
readTimeout Double
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
sendTimeout Double
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
sentinelMaster String
Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
sentinelNodes List<GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode>
Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
sentinelPassword String
Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
sentinelRole String
Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
sentinelUsername String
Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
serverName String
A string representing an SNI (server name indication) value for TLS.
ssl Boolean
If set to true, uses SSL to connect to Redis.
sslVerify Boolean
If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
username String
Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
clusterMaxRedirections number
Maximum retry attempts for redirection.
clusterNodes GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode[]
Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
connectTimeout number
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
connectionIsProxied boolean
If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
database number
Database to use for the Redis connection when using the redis strategy
host string
A string representing a host name, such as example.com.
keepaliveBacklog number
Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
keepalivePoolSize number
The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
password string
Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
port number
An integer representing a port number between 0 and 65535, inclusive.
readTimeout number
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
sendTimeout number
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
sentinelMaster string
Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
sentinelNodes GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode[]
Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
sentinelPassword string
Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
sentinelRole string
Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
sentinelUsername string
Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
serverName string
A string representing an SNI (server name indication) value for TLS.
ssl boolean
If set to true, uses SSL to connect to Redis.
sslVerify boolean
If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
username string
Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
cluster_max_redirections float
Maximum retry attempts for redirection.
cluster_nodes Sequence[GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode]
Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
connect_timeout float
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
connection_is_proxied bool
If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
database float
Database to use for the Redis connection when using the redis strategy
host str
A string representing a host name, such as example.com.
keepalive_backlog float
Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
keepalive_pool_size float
The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
password str
Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
port float
An integer representing a port number between 0 and 65535, inclusive.
read_timeout float
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
send_timeout float
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
sentinel_master str
Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
sentinel_nodes Sequence[GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode]
Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
sentinel_password str
Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
sentinel_role str
Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
sentinel_username str
Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
server_name str
A string representing an SNI (server name indication) value for TLS.
ssl bool
If set to true, uses SSL to connect to Redis.
ssl_verify bool
If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
username str
Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.
clusterMaxRedirections Number
Maximum retry attempts for redirection.
clusterNodes List<Property Map>
Cluster addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Cluster. The minimum length of the array is 1 element.
connectTimeout Number
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
connectionIsProxied Boolean
If the connection to Redis is proxied (e.g. Envoy), set it true. Set the host and port to point to the proxy address.
database Number
Database to use for the Redis connection when using the redis strategy
host String
A string representing a host name, such as example.com.
keepaliveBacklog Number
Limits the total number of opened connections for a pool. If the connection pool is full, connection queues above the limit go into the backlog queue. If the backlog queue is full, subsequent connect operations fail and return nil. Queued operations (subject to set timeouts) resume once the number of connections in the pool is less than keepalive_pool_size. If latency is high or throughput is low, try increasing this value. Empirically, this value is larger than keepalive_pool_size.
keepalivePoolSize Number
The size limit for every cosocket connection pool associated with every remote server, per worker process. If neither keepalive_pool_size nor keepalive_backlog is specified, no pool is created. If keepalive_pool_size isn't specified but keepalive_backlog is specified, then the pool uses the default value. Try to increase (e.g. 512) this value if latency is high or throughput is low.
password String
Password to use for Redis connections. If undefined, no AUTH commands are sent to Redis.
port Number
An integer representing a port number between 0 and 65535, inclusive.
readTimeout Number
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
sendTimeout Number
An integer representing a timeout in milliseconds. Must be between 0 and 2^31-2.
sentinelMaster String
Sentinel master to use for Redis connections. Defining this value implies using Redis Sentinel.
sentinelNodes List<Property Map>
Sentinel node addresses to use for Redis connections when the redis strategy is defined. Defining this field implies using a Redis Sentinel. The minimum length of the array is 1 element.
sentinelPassword String
Sentinel password to authenticate with a Redis Sentinel instance. If undefined, no AUTH commands are sent to Redis Sentinels.
sentinelRole String
Sentinel role to use for Redis connections when the redis strategy is defined. Defining this value implies using Redis Sentinel. must be one of ["any", "master", "slave"]
sentinelUsername String
Sentinel username to authenticate with a Redis Sentinel instance. If undefined, ACL authentication won't be performed. This requires Redis v6.2.0+.
serverName String
A string representing an SNI (server name indication) value for TLS.
ssl Boolean
If set to true, uses SSL to connect to Redis.
sslVerify Boolean
If set to true, verifies the validity of the server SSL certificate. If setting this parameter, also configure lua_ssl_trusted_certificate in kong.conf to specify the CA (or server) certificate used by your Redis server. You may also need to configure lua_ssl_verify_depth accordingly.
username String
Username to use for Redis connections. If undefined, ACL authentication won't be performed. This requires Redis v6.0.0+. To be compatible with Redis v5.x.y, you can set it to default.

GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNode
, GatewayPluginAiSemanticPromptGuardConfigVectordbRedisClusterNodeArgs

Ip string
A string representing a host name, such as example.com.
Port double
An integer representing a port number between 0 and 65535, inclusive.
Ip string
A string representing a host name, such as example.com.
Port float64
An integer representing a port number between 0 and 65535, inclusive.
ip String
A string representing a host name, such as example.com.
port Double
An integer representing a port number between 0 and 65535, inclusive.
ip string
A string representing a host name, such as example.com.
port number
An integer representing a port number between 0 and 65535, inclusive.
ip str
A string representing a host name, such as example.com.
port float
An integer representing a port number between 0 and 65535, inclusive.
ip String
A string representing a host name, such as example.com.
port Number
An integer representing a port number between 0 and 65535, inclusive.

GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNode
, GatewayPluginAiSemanticPromptGuardConfigVectordbRedisSentinelNodeArgs

Host string
A string representing a host name, such as example.com.
Port double
An integer representing a port number between 0 and 65535, inclusive.
Host string
A string representing a host name, such as example.com.
Port float64
An integer representing a port number between 0 and 65535, inclusive.
host String
A string representing a host name, such as example.com.
port Double
An integer representing a port number between 0 and 65535, inclusive.
host string
A string representing a host name, such as example.com.
port number
An integer representing a port number between 0 and 65535, inclusive.
host str
A string representing a host name, such as example.com.
port float
An integer representing a port number between 0 and 65535, inclusive.
host String
A string representing a host name, such as example.com.
port Number
An integer representing a port number between 0 and 65535, inclusive.

GatewayPluginAiSemanticPromptGuardConsumer
, GatewayPluginAiSemanticPromptGuardConsumerArgs

Id string
Id string
id String
id string
id str
id String

GatewayPluginAiSemanticPromptGuardConsumerGroup
, GatewayPluginAiSemanticPromptGuardConsumerGroupArgs

Id string
Id string
id String
id string
id str
id String

GatewayPluginAiSemanticPromptGuardOrdering
, GatewayPluginAiSemanticPromptGuardOrderingArgs

GatewayPluginAiSemanticPromptGuardOrderingAfter
, GatewayPluginAiSemanticPromptGuardOrderingAfterArgs

Accesses List<string>
Accesses []string
accesses List<String>
accesses string[]
accesses Sequence[str]
accesses List<String>

GatewayPluginAiSemanticPromptGuardOrderingBefore
, GatewayPluginAiSemanticPromptGuardOrderingBeforeArgs

Accesses List<string>
Accesses []string
accesses List<String>
accesses string[]
accesses Sequence[str]
accesses List<String>

GatewayPluginAiSemanticPromptGuardRoute
, GatewayPluginAiSemanticPromptGuardRouteArgs

Id string
Id string
id String
id string
id str
id String

GatewayPluginAiSemanticPromptGuardService
, GatewayPluginAiSemanticPromptGuardServiceArgs

Id string
Id string
id String
id string
id str
id String

Import

$ pulumi import konnect:index/gatewayPluginAiSemanticPromptGuard:GatewayPluginAiSemanticPromptGuard my_konnect_gateway_plugin_ai_semantic_prompt_guard "{ \"control_plane_id\": \"9524ec7d-36d9-465d-a8c5-83a3c9390458\", \"plugin_id\": \"3473c251-5b6c-4f45-b1ff-7ede735a366d\"}"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
konnect kong/terraform-provider-konnect
License
Notes
This Pulumi package is based on the konnect Terraform Provider.
konnect 2.4.1 published on Thursday, Mar 13, 2025 by kong
kong/terraform-provider-konnect