---
title: Vaults
description: |
  Vaults allow you to securely store and then reference secrets from within other entities,
  ensuring that secrets aren't visible in plaintext throughout the platform.
url: "/gateway/entities/vault/"
canonical_url: "/gateway/entities/vault/"
content_type: reference
products:
- Kong Gateway
tools:
- Admin API
- Konnect API
- KIC
- deck
- Terraform
tags:
- secrets-management
canonical: true
works_on:
- on-prem
- konnect


---

# Vaults










## What is a Vault?

Vaults allow you to securely store and then reference secrets from within other entities. This ensures that secrets aren't visible in plaintext throughout the platform, in places such as `kong.conf`,
declarative configuration files, logs, or the UI.

For example, you could store a certificate and a key in a Vault, then reference them from a [Certificate entity](/gateway/entities/certificate/). This way, the certificate and key are not stored in the entity directly and are more secure.

## How do I add secrets to a Vault?

You can add secrets to Vaults in one of the following ways:
* Environment variables
* Konnect Config Store
* Supported third-party backend vault

## What can be stored as a secret?

You can store and reference the following as secrets in a Vault:

* All [values](/gateway/manage-kong-conf/)<sup>1</sup> set in `kong.conf` are referenceable. For example:
  * Data store usernames and passwords, used with PostgreSQL and Redis
  * Private X.509 certificates
* Certificates and keys stored in the [Certificate Kong Gateway entity](/gateway/entities/certificate/)
* [Kong Gateway license](/gateway/entities/license/)<sup>2</sup>
* Referenceable plugin fields, such as third-party API keys (see table below for all values)


> **Konnect Config Store limitations:**
> * <sup>1</sup>: You can't reference secrets stored in a [Konnect Config Store](/how-to/configure-the-konnect-config-store/) Vault in `kong.conf` because Konnect resolves the secret after Kong Gateway connects to the Control Plane. For this same reason, you can't use Konnect Config Store secrets directly in Lua code via the Kong PDK, for example.
> * <sup>2</sup>: In Konnect, the Kong Gateway license is managed and stored by Konnect, and doesn't need to be stored manually in any Vault.

### Referenceable plugin fields

The following plugin fields can be stored and referenced as secrets:


#### Gateway 3.15


##### Access Control Enforcement Plugin
Plugin: [Access Control Enforcement](/plugins/ace/)
Plugin slug: ace
Referenceable Plugin Fields: |
    * config.rate_limiting.redis.cloud_authentication.auth_provider
    * config.rate_limiting.redis.cloud_authentication.aws_access_key_id
    * config.rate_limiting.redis.cloud_authentication.aws_assume_role_arn
    * config.rate_limiting.redis.cloud_authentication.aws_cache_name
    * config.rate_limiting.redis.cloud_authentication.aws_region
    * config.rate_limiting.redis.cloud_authentication.aws_role_session_name
    * config.rate_limiting.redis.cloud_authentication.aws_secret_access_key
    * config.rate_limiting.redis.cloud_authentication.azure_client_id
    * config.rate_limiting.redis.cloud_authentication.azure_client_secret
    * config.rate_limiting.redis.cloud_authentication.azure_tenant_id
    * config.rate_limiting.redis.cloud_authentication.gcp_service_account_json
    * config.rate_limiting.redis.host
    * config.rate_limiting.redis.password
    * config.rate_limiting.redis.port
    * config.rate_limiting.redis.sentinel_password
    * config.rate_limiting.redis.sentinel_username
    * config.rate_limiting.redis.server_name
    * config.rate_limiting.redis.username


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.cloud_authentication.auth_provider
    * config.storage_config.redis.cloud_authentication.aws_access_key_id
    * config.storage_config.redis.cloud_authentication.aws_assume_role_arn
    * config.storage_config.redis.cloud_authentication.aws_cache_name
    * config.storage_config.redis.cloud_authentication.aws_region
    * config.storage_config.redis.cloud_authentication.aws_role_session_name
    * config.storage_config.redis.cloud_authentication.aws_secret_access_key
    * config.storage_config.redis.cloud_authentication.azure_client_id
    * config.storage_config.redis.cloud_authentication.azure_client_secret
    * config.storage_config.redis.cloud_authentication.azure_tenant_id
    * config.storage_config.redis.cloud_authentication.gcp_service_account_json
    * config.storage_config.redis.host
    * config.storage_config.redis.password
    * config.storage_config.redis.port
    * config.storage_config.redis.server_name
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI AWS Guardrails Plugin
Plugin: [AI AWS Guardrails](/plugins/ai-aws-guardrails/)
Plugin slug: ai-aws-guardrails
Referenceable Plugin Fields: |
    * config.aws_access_key_id
    * config.aws_secret_access_key


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI Custom Guardrail Plugin
Plugin: [AI Custom Guardrail](/plugins/ai-custom-guardrail/)
Plugin slug: ai-custom-guardrail
Referenceable Plugin Fields: |
    * config.params
    * config.params.additionalProperties
    * config.request.auth.name
    * config.request.auth.value
    * config.request.body
    * config.request.body.additionalProperties
    * config.request.headers
    * config.request.headers.additionalProperties
    * config.request.queries
    * config.request.queries.additionalProperties


##### AI GCP Model Armor Plugin
Plugin: [AI GCP Model Armor](/plugins/ai-gcp-model-armor/)
Plugin slug: ai-gcp-model-armor
Referenceable Plugin Fields: |
    * config.gcp_metadata_url
    * config.gcp_oauth_token_url
    * config.gcp_service_account_json


##### AI Lakera Guard Plugin
Plugin: [AI Lakera Guard](/plugins/ai-lakera-guard/)
Plugin slug: ai-lakera-guard
Referenceable Plugin Fields: |
    * config.api_key
    * config.lakera_service_url
    * config.project_id


##### AI LLM as Judge Plugin
Plugin: [AI LLM as Judge](/plugins/ai-llm-as-judge/)
Plugin slug: ai-llm-as-judge
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_metadata_url
    * config.llm.auth.gcp_oauth_token_url
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI MCP OAuth2 Plugin
Plugin: [AI MCP OAuth2](/plugins/ai-mcp-oauth2/)
Plugin slug: ai-mcp-oauth2
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk
    * config.client_secret
    * config.token_exchange.client_id
    * config.token_exchange.client_secret


##### AI MCP Proxy Plugin
Plugin: [AI MCP Proxy](/plugins/ai-mcp-proxy/)
Plugin slug: ai-mcp-proxy
Referenceable Plugin Fields: |
    * config.server.session.client.secrets
    * config.server.session.redis.cloud_authentication.auth_provider
    * config.server.session.redis.cloud_authentication.aws_access_key_id
    * config.server.session.redis.cloud_authentication.aws_assume_role_arn
    * config.server.session.redis.cloud_authentication.aws_cache_name
    * config.server.session.redis.cloud_authentication.aws_region
    * config.server.session.redis.cloud_authentication.aws_role_session_name
    * config.server.session.redis.cloud_authentication.aws_secret_access_key
    * config.server.session.redis.cloud_authentication.azure_client_id
    * config.server.session.redis.cloud_authentication.azure_client_secret
    * config.server.session.redis.cloud_authentication.azure_tenant_id
    * config.server.session.redis.cloud_authentication.gcp_service_account_json
    * config.server.session.redis.host
    * config.server.session.redis.password
    * config.server.session.redis.port
    * config.server.session.redis.sentinel_password
    * config.server.session.redis.sentinel_username
    * config.server.session.redis.server_name
    * config.server.session.redis.username


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.aws_access_key_id
    * config.auth.aws_secret_access_key
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.gcp_metadata_url
    * config.auth.gcp_oauth_token_url
    * config.auth.gcp_service_account_json
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Proxy Advanced Plugin
Plugin: [AI Proxy Advanced](/plugins/ai-proxy-advanced/)
Plugin slug: ai-proxy-advanced
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.targets.auth.aws_access_key_id
    * config.targets.auth.aws_secret_access_key
    * config.targets.auth.azure_client_id
    * config.targets.auth.azure_client_secret
    * config.targets.auth.azure_tenant_id
    * config.targets.auth.gcp_metadata_url
    * config.targets.auth.gcp_oauth_token_url
    * config.targets.auth.gcp_service_account_json
    * config.targets.auth.header_name
    * config.targets.auth.header_value
    * config.targets.auth.param_name
    * config.targets.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI RAG Injector Plugin
Plugin: [AI RAG Injector](/plugins/ai-rag-injector/)
Plugin slug: ai-rag-injector
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_metadata_url
    * config.llm.auth.gcp_oauth_token_url
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_metadata_url
    * config.llm.auth.gcp_oauth_token_url
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Semantic Cache Plugin
Plugin: [AI Semantic Cache](/plugins/ai-semantic-cache/)
Plugin slug: ai-semantic-cache
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Semantic Prompt Guard Plugin
Plugin: [AI Semantic Prompt Guard](/plugins/ai-semantic-prompt-guard/)
Plugin slug: ai-semantic-prompt-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Semantic Response Guard Plugin
Plugin: [AI Semantic Response Guard](/plugins/ai-semantic-response-guard/)
Plugin slug: ai-semantic-response-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Basic Auth Plugin
Plugin: [Basic Auth](/plugins/basic-auth/)
Plugin slug: basic-auth
Referenceable Plugin Fields: |
    * config.brute_force_protection.redis.cloud_authentication.auth_provider
    * config.brute_force_protection.redis.cloud_authentication.aws_access_key_id
    * config.brute_force_protection.redis.cloud_authentication.aws_assume_role_arn
    * config.brute_force_protection.redis.cloud_authentication.aws_cache_name
    * config.brute_force_protection.redis.cloud_authentication.aws_region
    * config.brute_force_protection.redis.cloud_authentication.aws_role_session_name
    * config.brute_force_protection.redis.cloud_authentication.aws_secret_access_key
    * config.brute_force_protection.redis.cloud_authentication.azure_client_id
    * config.brute_force_protection.redis.cloud_authentication.azure_client_secret
    * config.brute_force_protection.redis.cloud_authentication.azure_tenant_id
    * config.brute_force_protection.redis.cloud_authentication.gcp_service_account_json
    * config.brute_force_protection.redis.host
    * config.brute_force_protection.redis.password
    * config.brute_force_protection.redis.port
    * config.brute_force_protection.redis.server_name
    * config.brute_force_protection.redis.username


##### Confluent Plugin
Plugin: [Confluent](/plugins/confluent/)
Plugin slug: confluent
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.oauthbearer.client_id
    * config.oauthbearer.client_secret
    * config.oauthbearer.token_endpoint_url
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### Confluent Consume Plugin
Plugin: [Confluent Consume](/plugins/confluent-consume/)
Plugin slug: confluent-consume
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.oauthbearer.client_id
    * config.oauthbearer.client_secret
    * config.oauthbearer.token_endpoint_url
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.oauth2.client_id
    * config.topics.schema_registry.confluent.authentication.oauth2.client_secret
    * config.topics.schema_registry.confluent.authentication.oauth2.password
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.username


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Datakit Plugin
Plugin: [Datakit](/plugins/datakit/)
Plugin slug: datakit
Referenceable Plugin Fields: |
    * config.resources.cache.redis.cloud_authentication.auth_provider
    * config.resources.cache.redis.cloud_authentication.aws_access_key_id
    * config.resources.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.resources.cache.redis.cloud_authentication.aws_cache_name
    * config.resources.cache.redis.cloud_authentication.aws_region
    * config.resources.cache.redis.cloud_authentication.aws_role_session_name
    * config.resources.cache.redis.cloud_authentication.aws_secret_access_key
    * config.resources.cache.redis.cloud_authentication.azure_client_id
    * config.resources.cache.redis.cloud_authentication.azure_client_secret
    * config.resources.cache.redis.cloud_authentication.azure_tenant_id
    * config.resources.cache.redis.cloud_authentication.gcp_service_account_json
    * config.resources.cache.redis.host
    * config.resources.cache.redis.password
    * config.resources.cache.redis.port
    * config.resources.cache.redis.sentinel_password
    * config.resources.cache.redis.sentinel_username
    * config.resources.cache.redis.server_name
    * config.resources.cache.redis.username
    * config.resources.vault
    * config.resources.vault.additionalProperties


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Consume Plugin
Plugin: [Kafka Consume](/plugins/kafka-consume/)
Plugin slug: kafka-consume
Referenceable Plugin Fields: |
    * config.authentication.oauthbearer.client_id
    * config.authentication.oauthbearer.client_secret
    * config.authentication.oauthbearer.token_endpoint_url
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.oauth2.client_id
    * config.topics.schema_registry.confluent.authentication.oauth2.client_secret
    * config.topics.schema_registry.confluent.authentication.oauth2.password
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.username


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.oauthbearer.client_id
    * config.authentication.oauthbearer.client_secret
    * config.authentication.oauthbearer.token_endpoint_url
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.oauthbearer.client_id
    * config.authentication.oauthbearer.client_secret
    * config.authentication.oauthbearer.token_endpoint_url
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### Metering & Billing Plugin
Plugin: [Metering & Billing](/plugins/metering-and-billing/)
Plugin slug: metering-and-billing
Referenceable Plugin Fields: |
    * config.api_token
    * config.ingest_endpoint


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.cluster_cache_redis.cloud_authentication.auth_provider
    * config.cluster_cache_redis.cloud_authentication.aws_access_key_id
    * config.cluster_cache_redis.cloud_authentication.aws_assume_role_arn
    * config.cluster_cache_redis.cloud_authentication.aws_cache_name
    * config.cluster_cache_redis.cloud_authentication.aws_region
    * config.cluster_cache_redis.cloud_authentication.aws_role_session_name
    * config.cluster_cache_redis.cloud_authentication.aws_secret_access_key
    * config.cluster_cache_redis.cloud_authentication.azure_client_id
    * config.cluster_cache_redis.cloud_authentication.azure_client_secret
    * config.cluster_cache_redis.cloud_authentication.azure_tenant_id
    * config.cluster_cache_redis.cloud_authentication.gcp_service_account_json
    * config.cluster_cache_redis.host
    * config.cluster_cache_redis.password
    * config.cluster_cache_redis.port
    * config.cluster_cache_redis.sentinel_password
    * config.cluster_cache_redis.sentinel_username
    * config.cluster_cache_redis.server_name
    * config.cluster_cache_redis.username
    * config.extra_jwks_uris
    * config.http_proxy_authorization
    * config.https_proxy_authorization
    * config.introspection_endpoint
    * config.introspection_headers_values
    * config.issuer
    * config.issuers_allowed
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username
    * config.scopes
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.access_logs.endpoint
    * config.logs_endpoint
    * config.metrics.endpoint
    * config.traces_endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.server_name
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Request Callout Plugin
Plugin: [Request Callout](/plugins/request-callout/)
Plugin slug: request-callout
Referenceable Plugin Fields: |
    * config.cache.redis.cloud_authentication.auth_provider
    * config.cache.redis.cloud_authentication.aws_access_key_id
    * config.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.cache.redis.cloud_authentication.aws_cache_name
    * config.cache.redis.cloud_authentication.aws_region
    * config.cache.redis.cloud_authentication.aws_role_session_name
    * config.cache.redis.cloud_authentication.aws_secret_access_key
    * config.cache.redis.cloud_authentication.azure_client_id
    * config.cache.redis.cloud_authentication.azure_client_secret
    * config.cache.redis.cloud_authentication.azure_tenant_id
    * config.cache.redis.cloud_authentication.gcp_service_account_json
    * config.cache.redis.host
    * config.cache.redis.password
    * config.cache.redis.port
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.server_name
    * config.cache.redis.username
    * config.callouts.request.body.custom
    * config.callouts.request.body.custom.additionalProperties
    * config.callouts.request.headers.custom
    * config.callouts.request.headers.custom.additionalProperties
    * config.callouts.request.http_opts.proxy.auth_password
    * config.callouts.request.http_opts.proxy.auth_username
    * config.callouts.request.query.custom
    * config.callouts.request.query.custom.additionalProperties
    * config.callouts.request.url
    * config.upstream.body.custom
    * config.upstream.body.custom.additionalProperties
    * config.upstream.headers.custom
    * config.upstream.headers.custom.additionalProperties
    * config.upstream.query.custom
    * config.upstream.query.custom.additionalProperties


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.server_name
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_secret


##### Service Protection Plugin
Plugin: [Service Protection](/plugins/service-protection/)
Plugin slug: service-protection
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret


##### Solace Consume Plugin
Plugin: [Solace Consume](/plugins/solace-consume/)
Plugin slug: solace-consume
Referenceable Plugin Fields: |
    * config.flow.properties
    * config.flow.properties.additionalProperties
    * config.session.authentication.access_token
    * config.session.authentication.client_credentials.client_id
    * config.session.authentication.client_credentials.client_secret
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Solace Log Plugin
Plugin: [Solace Log](/plugins/solace-log/)
Plugin slug: solace-log
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.client_credentials.client_id
    * config.session.authentication.client_credentials.client_secret
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Solace Upstream Plugin
Plugin: [Solace Upstream](/plugins/solace-upstream/)
Plugin slug: solace-upstream
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.client_credentials.client_id
    * config.session.authentication.client_credentials.client_secret
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Standard Webhooks Plugin
Plugin: [Standard Webhooks](/plugins/standard-webhooks/)
Plugin slug: standard-webhooks
Referenceable Plugin Fields: |
    * config.secret_v1


##### Upstream OAuth Plugin
Plugin: [Upstream OAuth](/plugins/upstream-oauth/)
Plugin slug: upstream-oauth
Referenceable Plugin Fields: |
    * config.cache.redis.cloud_authentication.auth_provider
    * config.cache.redis.cloud_authentication.aws_access_key_id
    * config.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.cache.redis.cloud_authentication.aws_cache_name
    * config.cache.redis.cloud_authentication.aws_region
    * config.cache.redis.cloud_authentication.aws_role_session_name
    * config.cache.redis.cloud_authentication.aws_secret_access_key
    * config.cache.redis.cloud_authentication.azure_client_id
    * config.cache.redis.cloud_authentication.azure_client_secret
    * config.cache.redis.cloud_authentication.azure_tenant_id
    * config.cache.redis.cloud_authentication.gcp_service_account_json
    * config.cache.redis.host
    * config.cache.redis.password
    * config.cache.redis.port
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.server_name
    * config.cache.redis.username
    * config.oauth.client_id
    * config.oauth.client_secret
    * config.oauth.password
    * config.oauth.token_headers
    * config.oauth.token_headers.additionalProperties
    * config.oauth.token_post_args
    * config.oauth.token_post_args.additionalProperties
    * config.oauth.username



#### Gateway 3.14 LTS


##### Access Control Enforcement Plugin
Plugin: [Access Control Enforcement](/plugins/ace/)
Plugin slug: ace
Referenceable Plugin Fields: |
    * config.rate_limiting.redis.cloud_authentication.auth_provider
    * config.rate_limiting.redis.cloud_authentication.aws_access_key_id
    * config.rate_limiting.redis.cloud_authentication.aws_assume_role_arn
    * config.rate_limiting.redis.cloud_authentication.aws_cache_name
    * config.rate_limiting.redis.cloud_authentication.aws_region
    * config.rate_limiting.redis.cloud_authentication.aws_role_session_name
    * config.rate_limiting.redis.cloud_authentication.aws_secret_access_key
    * config.rate_limiting.redis.cloud_authentication.azure_client_id
    * config.rate_limiting.redis.cloud_authentication.azure_client_secret
    * config.rate_limiting.redis.cloud_authentication.azure_tenant_id
    * config.rate_limiting.redis.cloud_authentication.gcp_service_account_json
    * config.rate_limiting.redis.host
    * config.rate_limiting.redis.password
    * config.rate_limiting.redis.port
    * config.rate_limiting.redis.sentinel_password
    * config.rate_limiting.redis.sentinel_username
    * config.rate_limiting.redis.server_name
    * config.rate_limiting.redis.username


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.cloud_authentication.auth_provider
    * config.storage_config.redis.cloud_authentication.aws_access_key_id
    * config.storage_config.redis.cloud_authentication.aws_assume_role_arn
    * config.storage_config.redis.cloud_authentication.aws_cache_name
    * config.storage_config.redis.cloud_authentication.aws_region
    * config.storage_config.redis.cloud_authentication.aws_role_session_name
    * config.storage_config.redis.cloud_authentication.aws_secret_access_key
    * config.storage_config.redis.cloud_authentication.azure_client_id
    * config.storage_config.redis.cloud_authentication.azure_client_secret
    * config.storage_config.redis.cloud_authentication.azure_tenant_id
    * config.storage_config.redis.cloud_authentication.gcp_service_account_json
    * config.storage_config.redis.host
    * config.storage_config.redis.password
    * config.storage_config.redis.port
    * config.storage_config.redis.server_name
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI AWS Guardrails Plugin
Plugin: [AI AWS Guardrails](/plugins/ai-aws-guardrails/)
Plugin slug: ai-aws-guardrails
Referenceable Plugin Fields: |
    * config.aws_access_key_id
    * config.aws_secret_access_key


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI Custom Guardrail Plugin
Plugin: [AI Custom Guardrail](/plugins/ai-custom-guardrail/)
Plugin slug: ai-custom-guardrail
Referenceable Plugin Fields: |
    * config.params
    * config.params.additionalProperties
    * config.request.auth.name
    * config.request.auth.value
    * config.request.body
    * config.request.body.additionalProperties
    * config.request.headers
    * config.request.headers.additionalProperties
    * config.request.queries
    * config.request.queries.additionalProperties


##### AI GCP Model Armor Plugin
Plugin: [AI GCP Model Armor](/plugins/ai-gcp-model-armor/)
Plugin slug: ai-gcp-model-armor
Referenceable Plugin Fields: |
    * config.gcp_metadata_url
    * config.gcp_oauth_token_url
    * config.gcp_service_account_json


##### AI Lakera Guard Plugin
Plugin: [AI Lakera Guard](/plugins/ai-lakera-guard/)
Plugin slug: ai-lakera-guard
Referenceable Plugin Fields: |
    * config.api_key
    * config.lakera_service_url
    * config.project_id


##### AI LLM as Judge Plugin
Plugin: [AI LLM as Judge](/plugins/ai-llm-as-judge/)
Plugin slug: ai-llm-as-judge
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_metadata_url
    * config.llm.auth.gcp_oauth_token_url
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI MCP OAuth2 Plugin
Plugin: [AI MCP OAuth2](/plugins/ai-mcp-oauth2/)
Plugin slug: ai-mcp-oauth2
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk
    * config.client_secret
    * config.token_exchange.client_id
    * config.token_exchange.client_secret


##### AI MCP Proxy Plugin
Plugin: [AI MCP Proxy](/plugins/ai-mcp-proxy/)
Plugin slug: ai-mcp-proxy
Referenceable Plugin Fields: |
    * config.server.session.client.secrets
    * config.server.session.redis.cloud_authentication.auth_provider
    * config.server.session.redis.cloud_authentication.aws_access_key_id
    * config.server.session.redis.cloud_authentication.aws_assume_role_arn
    * config.server.session.redis.cloud_authentication.aws_cache_name
    * config.server.session.redis.cloud_authentication.aws_region
    * config.server.session.redis.cloud_authentication.aws_role_session_name
    * config.server.session.redis.cloud_authentication.aws_secret_access_key
    * config.server.session.redis.cloud_authentication.azure_client_id
    * config.server.session.redis.cloud_authentication.azure_client_secret
    * config.server.session.redis.cloud_authentication.azure_tenant_id
    * config.server.session.redis.cloud_authentication.gcp_service_account_json
    * config.server.session.redis.host
    * config.server.session.redis.password
    * config.server.session.redis.port
    * config.server.session.redis.sentinel_password
    * config.server.session.redis.sentinel_username
    * config.server.session.redis.server_name
    * config.server.session.redis.username


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.aws_access_key_id
    * config.auth.aws_secret_access_key
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.gcp_metadata_url
    * config.auth.gcp_oauth_token_url
    * config.auth.gcp_service_account_json
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Proxy Advanced Plugin
Plugin: [AI Proxy Advanced](/plugins/ai-proxy-advanced/)
Plugin slug: ai-proxy-advanced
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.targets.auth.aws_access_key_id
    * config.targets.auth.aws_secret_access_key
    * config.targets.auth.azure_client_id
    * config.targets.auth.azure_client_secret
    * config.targets.auth.azure_tenant_id
    * config.targets.auth.gcp_metadata_url
    * config.targets.auth.gcp_oauth_token_url
    * config.targets.auth.gcp_service_account_json
    * config.targets.auth.header_name
    * config.targets.auth.header_value
    * config.targets.auth.param_name
    * config.targets.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI RAG Injector Plugin
Plugin: [AI RAG Injector](/plugins/ai-rag-injector/)
Plugin slug: ai-rag-injector
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_metadata_url
    * config.llm.auth.gcp_oauth_token_url
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_metadata_url
    * config.llm.auth.gcp_oauth_token_url
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Semantic Cache Plugin
Plugin: [AI Semantic Cache](/plugins/ai-semantic-cache/)
Plugin slug: ai-semantic-cache
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Semantic Prompt Guard Plugin
Plugin: [AI Semantic Prompt Guard](/plugins/ai-semantic-prompt-guard/)
Plugin slug: ai-semantic-prompt-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Semantic Response Guard Plugin
Plugin: [AI Semantic Response Guard](/plugins/ai-semantic-response-guard/)
Plugin slug: ai-semantic-response-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_metadata_url
    * config.embeddings.auth.gcp_oauth_token_url
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Basic Auth Plugin
Plugin: [Basic Auth](/plugins/basic-auth/)
Plugin slug: basic-auth
Referenceable Plugin Fields: |
    * config.brute_force_protection.redis.cloud_authentication.auth_provider
    * config.brute_force_protection.redis.cloud_authentication.aws_access_key_id
    * config.brute_force_protection.redis.cloud_authentication.aws_assume_role_arn
    * config.brute_force_protection.redis.cloud_authentication.aws_cache_name
    * config.brute_force_protection.redis.cloud_authentication.aws_region
    * config.brute_force_protection.redis.cloud_authentication.aws_role_session_name
    * config.brute_force_protection.redis.cloud_authentication.aws_secret_access_key
    * config.brute_force_protection.redis.cloud_authentication.azure_client_id
    * config.brute_force_protection.redis.cloud_authentication.azure_client_secret
    * config.brute_force_protection.redis.cloud_authentication.azure_tenant_id
    * config.brute_force_protection.redis.cloud_authentication.gcp_service_account_json
    * config.brute_force_protection.redis.host
    * config.brute_force_protection.redis.password
    * config.brute_force_protection.redis.port
    * config.brute_force_protection.redis.server_name
    * config.brute_force_protection.redis.username


##### Confluent Plugin
Plugin: [Confluent](/plugins/confluent/)
Plugin slug: confluent
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### Confluent Consume Plugin
Plugin: [Confluent Consume](/plugins/confluent-consume/)
Plugin slug: confluent-consume
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.oauth2.client_id
    * config.topics.schema_registry.confluent.authentication.oauth2.client_secret
    * config.topics.schema_registry.confluent.authentication.oauth2.password
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.username


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Datakit Plugin
Plugin: [Datakit](/plugins/datakit/)
Plugin slug: datakit
Referenceable Plugin Fields: |
    * config.resources.cache.redis.cloud_authentication.auth_provider
    * config.resources.cache.redis.cloud_authentication.aws_access_key_id
    * config.resources.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.resources.cache.redis.cloud_authentication.aws_cache_name
    * config.resources.cache.redis.cloud_authentication.aws_region
    * config.resources.cache.redis.cloud_authentication.aws_role_session_name
    * config.resources.cache.redis.cloud_authentication.aws_secret_access_key
    * config.resources.cache.redis.cloud_authentication.azure_client_id
    * config.resources.cache.redis.cloud_authentication.azure_client_secret
    * config.resources.cache.redis.cloud_authentication.azure_tenant_id
    * config.resources.cache.redis.cloud_authentication.gcp_service_account_json
    * config.resources.cache.redis.host
    * config.resources.cache.redis.password
    * config.resources.cache.redis.port
    * config.resources.cache.redis.sentinel_password
    * config.resources.cache.redis.sentinel_username
    * config.resources.cache.redis.server_name
    * config.resources.cache.redis.username
    * config.resources.vault
    * config.resources.vault.additionalProperties


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Consume Plugin
Plugin: [Kafka Consume](/plugins/kafka-consume/)
Plugin slug: kafka-consume
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.oauth2.client_id
    * config.topics.schema_registry.confluent.authentication.oauth2.client_secret
    * config.topics.schema_registry.confluent.authentication.oauth2.password
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.username


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### Metering & Billing Plugin
Plugin: [Metering & Billing](/plugins/metering-and-billing/)
Plugin slug: metering-and-billing
Referenceable Plugin Fields: |
    * config.api_token
    * config.ingest_endpoint


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.cluster_cache_redis.cloud_authentication.auth_provider
    * config.cluster_cache_redis.cloud_authentication.aws_access_key_id
    * config.cluster_cache_redis.cloud_authentication.aws_assume_role_arn
    * config.cluster_cache_redis.cloud_authentication.aws_cache_name
    * config.cluster_cache_redis.cloud_authentication.aws_region
    * config.cluster_cache_redis.cloud_authentication.aws_role_session_name
    * config.cluster_cache_redis.cloud_authentication.aws_secret_access_key
    * config.cluster_cache_redis.cloud_authentication.azure_client_id
    * config.cluster_cache_redis.cloud_authentication.azure_client_secret
    * config.cluster_cache_redis.cloud_authentication.azure_tenant_id
    * config.cluster_cache_redis.cloud_authentication.gcp_service_account_json
    * config.cluster_cache_redis.host
    * config.cluster_cache_redis.password
    * config.cluster_cache_redis.port
    * config.cluster_cache_redis.sentinel_password
    * config.cluster_cache_redis.sentinel_username
    * config.cluster_cache_redis.server_name
    * config.cluster_cache_redis.username
    * config.extra_jwks_uris
    * config.http_proxy_authorization
    * config.https_proxy_authorization
    * config.introspection_endpoint
    * config.introspection_headers_values
    * config.issuer
    * config.issuers_allowed
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username
    * config.scopes
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.access_logs.endpoint
    * config.logs_endpoint
    * config.metrics.endpoint
    * config.traces_endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.server_name
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Request Callout Plugin
Plugin: [Request Callout](/plugins/request-callout/)
Plugin slug: request-callout
Referenceable Plugin Fields: |
    * config.cache.redis.cloud_authentication.auth_provider
    * config.cache.redis.cloud_authentication.aws_access_key_id
    * config.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.cache.redis.cloud_authentication.aws_cache_name
    * config.cache.redis.cloud_authentication.aws_region
    * config.cache.redis.cloud_authentication.aws_role_session_name
    * config.cache.redis.cloud_authentication.aws_secret_access_key
    * config.cache.redis.cloud_authentication.azure_client_id
    * config.cache.redis.cloud_authentication.azure_client_secret
    * config.cache.redis.cloud_authentication.azure_tenant_id
    * config.cache.redis.cloud_authentication.gcp_service_account_json
    * config.cache.redis.host
    * config.cache.redis.password
    * config.cache.redis.port
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.server_name
    * config.cache.redis.username
    * config.callouts.request.body.custom
    * config.callouts.request.body.custom.additionalProperties
    * config.callouts.request.headers.custom
    * config.callouts.request.headers.custom.additionalProperties
    * config.callouts.request.http_opts.proxy.auth_password
    * config.callouts.request.http_opts.proxy.auth_username
    * config.callouts.request.query.custom
    * config.callouts.request.query.custom.additionalProperties
    * config.callouts.request.url
    * config.upstream.body.custom
    * config.upstream.body.custom.additionalProperties
    * config.upstream.headers.custom
    * config.upstream.headers.custom.additionalProperties
    * config.upstream.query.custom
    * config.upstream.query.custom.additionalProperties


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.server_name
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_secret


##### Service Protection Plugin
Plugin: [Service Protection](/plugins/service-protection/)
Plugin slug: service-protection
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret


##### Solace Consume Plugin
Plugin: [Solace Consume](/plugins/solace-consume/)
Plugin slug: solace-consume
Referenceable Plugin Fields: |
    * config.flow.properties
    * config.flow.properties.additionalProperties
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Solace Log Plugin
Plugin: [Solace Log](/plugins/solace-log/)
Plugin slug: solace-log
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Solace Upstream Plugin
Plugin: [Solace Upstream](/plugins/solace-upstream/)
Plugin slug: solace-upstream
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Standard Webhooks Plugin
Plugin: [Standard Webhooks](/plugins/standard-webhooks/)
Plugin slug: standard-webhooks
Referenceable Plugin Fields: |
    * config.secret_v1


##### Upstream OAuth Plugin
Plugin: [Upstream OAuth](/plugins/upstream-oauth/)
Plugin slug: upstream-oauth
Referenceable Plugin Fields: |
    * config.cache.redis.cloud_authentication.auth_provider
    * config.cache.redis.cloud_authentication.aws_access_key_id
    * config.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.cache.redis.cloud_authentication.aws_cache_name
    * config.cache.redis.cloud_authentication.aws_region
    * config.cache.redis.cloud_authentication.aws_role_session_name
    * config.cache.redis.cloud_authentication.aws_secret_access_key
    * config.cache.redis.cloud_authentication.azure_client_id
    * config.cache.redis.cloud_authentication.azure_client_secret
    * config.cache.redis.cloud_authentication.azure_tenant_id
    * config.cache.redis.cloud_authentication.gcp_service_account_json
    * config.cache.redis.host
    * config.cache.redis.password
    * config.cache.redis.port
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.server_name
    * config.cache.redis.username
    * config.oauth.client_id
    * config.oauth.client_secret
    * config.oauth.password
    * config.oauth.token_headers
    * config.oauth.token_headers.additionalProperties
    * config.oauth.token_post_args
    * config.oauth.token_post_args.additionalProperties
    * config.oauth.username



#### Gateway 3.13


##### Access Control Enforcement Plugin
Plugin: [Access Control Enforcement](/plugins/ace/)
Plugin slug: ace
Referenceable Plugin Fields: |
    * config.rate_limiting.redis.cloud_authentication.auth_provider
    * config.rate_limiting.redis.cloud_authentication.aws_access_key_id
    * config.rate_limiting.redis.cloud_authentication.aws_assume_role_arn
    * config.rate_limiting.redis.cloud_authentication.aws_cache_name
    * config.rate_limiting.redis.cloud_authentication.aws_region
    * config.rate_limiting.redis.cloud_authentication.aws_role_session_name
    * config.rate_limiting.redis.cloud_authentication.aws_secret_access_key
    * config.rate_limiting.redis.cloud_authentication.azure_client_id
    * config.rate_limiting.redis.cloud_authentication.azure_client_secret
    * config.rate_limiting.redis.cloud_authentication.azure_tenant_id
    * config.rate_limiting.redis.cloud_authentication.gcp_service_account_json
    * config.rate_limiting.redis.host
    * config.rate_limiting.redis.password
    * config.rate_limiting.redis.port
    * config.rate_limiting.redis.sentinel_password
    * config.rate_limiting.redis.sentinel_username
    * config.rate_limiting.redis.server_name
    * config.rate_limiting.redis.username


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.cloud_authentication.auth_provider
    * config.storage_config.redis.cloud_authentication.aws_access_key_id
    * config.storage_config.redis.cloud_authentication.aws_assume_role_arn
    * config.storage_config.redis.cloud_authentication.aws_cache_name
    * config.storage_config.redis.cloud_authentication.aws_region
    * config.storage_config.redis.cloud_authentication.aws_role_session_name
    * config.storage_config.redis.cloud_authentication.aws_secret_access_key
    * config.storage_config.redis.cloud_authentication.azure_client_id
    * config.storage_config.redis.cloud_authentication.azure_client_secret
    * config.storage_config.redis.cloud_authentication.azure_tenant_id
    * config.storage_config.redis.cloud_authentication.gcp_service_account_json
    * config.storage_config.redis.host
    * config.storage_config.redis.password
    * config.storage_config.redis.port
    * config.storage_config.redis.server_name
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI AWS Guardrails Plugin
Plugin: [AI AWS Guardrails](/plugins/ai-aws-guardrails/)
Plugin slug: ai-aws-guardrails
Referenceable Plugin Fields: |
    * config.aws_access_key_id
    * config.aws_secret_access_key


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI GCP Model Armor Plugin
Plugin: [AI GCP Model Armor](/plugins/ai-gcp-model-armor/)
Plugin slug: ai-gcp-model-armor
Referenceable Plugin Fields: |
    * config.gcp_service_account_json


##### AI Lakera Guard Plugin
Plugin: [AI Lakera Guard](/plugins/ai-lakera-guard/)
Plugin slug: ai-lakera-guard
Referenceable Plugin Fields: |
    * config.api_key
    * config.lakera_service_url
    * config.project_id


##### AI LLM as Judge Plugin
Plugin: [AI LLM as Judge](/plugins/ai-llm-as-judge/)
Plugin slug: ai-llm-as-judge
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI MCP OAuth2 Plugin
Plugin: [AI MCP OAuth2](/plugins/ai-mcp-oauth2/)
Plugin slug: ai-mcp-oauth2
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk
    * config.client_secret


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.aws_access_key_id
    * config.auth.aws_secret_access_key
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.gcp_service_account_json
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Proxy Advanced Plugin
Plugin: [AI Proxy Advanced](/plugins/ai-proxy-advanced/)
Plugin slug: ai-proxy-advanced
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.targets.auth.aws_access_key_id
    * config.targets.auth.aws_secret_access_key
    * config.targets.auth.azure_client_id
    * config.targets.auth.azure_client_secret
    * config.targets.auth.azure_tenant_id
    * config.targets.auth.gcp_service_account_json
    * config.targets.auth.header_name
    * config.targets.auth.header_value
    * config.targets.auth.param_name
    * config.targets.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI RAG Injector Plugin
Plugin: [AI RAG Injector](/plugins/ai-rag-injector/)
Plugin slug: ai-rag-injector
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Semantic Cache Plugin
Plugin: [AI Semantic Cache](/plugins/ai-semantic-cache/)
Plugin slug: ai-semantic-cache
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Semantic Prompt Guard Plugin
Plugin: [AI Semantic Prompt Guard](/plugins/ai-semantic-prompt-guard/)
Plugin slug: ai-semantic-prompt-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AI Semantic Response Guard Plugin
Plugin: [AI Semantic Response Guard](/plugins/ai-semantic-response-guard/)
Plugin slug: ai-semantic-response-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.cloud_authentication.auth_provider
    * config.vectordb.redis.cloud_authentication.aws_access_key_id
    * config.vectordb.redis.cloud_authentication.aws_assume_role_arn
    * config.vectordb.redis.cloud_authentication.aws_cache_name
    * config.vectordb.redis.cloud_authentication.aws_region
    * config.vectordb.redis.cloud_authentication.aws_role_session_name
    * config.vectordb.redis.cloud_authentication.aws_secret_access_key
    * config.vectordb.redis.cloud_authentication.azure_client_id
    * config.vectordb.redis.cloud_authentication.azure_client_secret
    * config.vectordb.redis.cloud_authentication.azure_tenant_id
    * config.vectordb.redis.cloud_authentication.gcp_service_account_json
    * config.vectordb.redis.host
    * config.vectordb.redis.password
    * config.vectordb.redis.port
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.server_name
    * config.vectordb.redis.username


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Basic Auth Plugin
Plugin: [Basic Auth](/plugins/basic-auth/)
Plugin slug: basic-auth
Referenceable Plugin Fields: |
    * config.brute_force_protection.redis.cloud_authentication.auth_provider
    * config.brute_force_protection.redis.cloud_authentication.aws_access_key_id
    * config.brute_force_protection.redis.cloud_authentication.aws_assume_role_arn
    * config.brute_force_protection.redis.cloud_authentication.aws_cache_name
    * config.brute_force_protection.redis.cloud_authentication.aws_region
    * config.brute_force_protection.redis.cloud_authentication.aws_role_session_name
    * config.brute_force_protection.redis.cloud_authentication.aws_secret_access_key
    * config.brute_force_protection.redis.cloud_authentication.azure_client_id
    * config.brute_force_protection.redis.cloud_authentication.azure_client_secret
    * config.brute_force_protection.redis.cloud_authentication.azure_tenant_id
    * config.brute_force_protection.redis.cloud_authentication.gcp_service_account_json
    * config.brute_force_protection.redis.host
    * config.brute_force_protection.redis.password
    * config.brute_force_protection.redis.port
    * config.brute_force_protection.redis.server_name
    * config.brute_force_protection.redis.username


##### Confluent Plugin
Plugin: [Confluent](/plugins/confluent/)
Plugin slug: confluent
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### Confluent Consume Plugin
Plugin: [Confluent Consume](/plugins/confluent-consume/)
Plugin slug: confluent-consume
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.oauth2.client_id
    * config.topics.schema_registry.confluent.authentication.oauth2.client_secret
    * config.topics.schema_registry.confluent.authentication.oauth2.password
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.username


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Datakit Plugin
Plugin: [Datakit](/plugins/datakit/)
Plugin slug: datakit
Referenceable Plugin Fields: |
    * config.resources.cache.redis.cloud_authentication.auth_provider
    * config.resources.cache.redis.cloud_authentication.aws_access_key_id
    * config.resources.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.resources.cache.redis.cloud_authentication.aws_cache_name
    * config.resources.cache.redis.cloud_authentication.aws_region
    * config.resources.cache.redis.cloud_authentication.aws_role_session_name
    * config.resources.cache.redis.cloud_authentication.aws_secret_access_key
    * config.resources.cache.redis.cloud_authentication.azure_client_id
    * config.resources.cache.redis.cloud_authentication.azure_client_secret
    * config.resources.cache.redis.cloud_authentication.azure_tenant_id
    * config.resources.cache.redis.cloud_authentication.gcp_service_account_json
    * config.resources.cache.redis.host
    * config.resources.cache.redis.password
    * config.resources.cache.redis.port
    * config.resources.cache.redis.sentinel_password
    * config.resources.cache.redis.sentinel_username
    * config.resources.cache.redis.server_name
    * config.resources.cache.redis.username
    * config.resources.vault
    * config.resources.vault.additionalProperties


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Consume Plugin
Plugin: [Kafka Consume](/plugins/kafka-consume/)
Plugin slug: kafka-consume
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.oauth2.client_id
    * config.topics.schema_registry.confluent.authentication.oauth2.client_secret
    * config.topics.schema_registry.confluent.authentication.oauth2.password
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.username


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.cluster_cache_redis.cloud_authentication.auth_provider
    * config.cluster_cache_redis.cloud_authentication.aws_access_key_id
    * config.cluster_cache_redis.cloud_authentication.aws_assume_role_arn
    * config.cluster_cache_redis.cloud_authentication.aws_cache_name
    * config.cluster_cache_redis.cloud_authentication.aws_region
    * config.cluster_cache_redis.cloud_authentication.aws_role_session_name
    * config.cluster_cache_redis.cloud_authentication.aws_secret_access_key
    * config.cluster_cache_redis.cloud_authentication.azure_client_id
    * config.cluster_cache_redis.cloud_authentication.azure_client_secret
    * config.cluster_cache_redis.cloud_authentication.azure_tenant_id
    * config.cluster_cache_redis.cloud_authentication.gcp_service_account_json
    * config.cluster_cache_redis.host
    * config.cluster_cache_redis.password
    * config.cluster_cache_redis.port
    * config.cluster_cache_redis.sentinel_password
    * config.cluster_cache_redis.sentinel_username
    * config.cluster_cache_redis.server_name
    * config.cluster_cache_redis.username
    * config.http_proxy_authorization
    * config.https_proxy_authorization
    * config.introspection_headers_values
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username
    * config.scopes
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.access_logs_endpoint
    * config.logs_endpoint
    * config.metrics.endpoint
    * config.traces_endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.server_name
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Request Callout Plugin
Plugin: [Request Callout](/plugins/request-callout/)
Plugin slug: request-callout
Referenceable Plugin Fields: |
    * config.cache.redis.cloud_authentication.auth_provider
    * config.cache.redis.cloud_authentication.aws_access_key_id
    * config.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.cache.redis.cloud_authentication.aws_cache_name
    * config.cache.redis.cloud_authentication.aws_region
    * config.cache.redis.cloud_authentication.aws_role_session_name
    * config.cache.redis.cloud_authentication.aws_secret_access_key
    * config.cache.redis.cloud_authentication.azure_client_id
    * config.cache.redis.cloud_authentication.azure_client_secret
    * config.cache.redis.cloud_authentication.azure_tenant_id
    * config.cache.redis.cloud_authentication.gcp_service_account_json
    * config.cache.redis.host
    * config.cache.redis.password
    * config.cache.redis.port
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.server_name
    * config.cache.redis.username
    * config.callouts.request.body.custom
    * config.callouts.request.body.custom.additionalProperties
    * config.callouts.request.headers.custom
    * config.callouts.request.headers.custom.additionalProperties
    * config.callouts.request.http_opts.proxy.auth_password
    * config.callouts.request.http_opts.proxy.auth_username
    * config.callouts.request.query.custom
    * config.callouts.request.query.custom.additionalProperties
    * config.callouts.request.url
    * config.upstream.body.custom
    * config.upstream.body.custom.additionalProperties
    * config.upstream.headers.custom
    * config.upstream.headers.custom.additionalProperties
    * config.upstream.query.custom
    * config.upstream.query.custom.additionalProperties


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.server_name
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_secret


##### Service Protection Plugin
Plugin: [Service Protection](/plugins/service-protection/)
Plugin slug: service-protection
Referenceable Plugin Fields: |
    * config.redis.cloud_authentication.auth_provider
    * config.redis.cloud_authentication.aws_access_key_id
    * config.redis.cloud_authentication.aws_assume_role_arn
    * config.redis.cloud_authentication.aws_cache_name
    * config.redis.cloud_authentication.aws_region
    * config.redis.cloud_authentication.aws_role_session_name
    * config.redis.cloud_authentication.aws_secret_access_key
    * config.redis.cloud_authentication.azure_client_id
    * config.redis.cloud_authentication.azure_client_secret
    * config.redis.cloud_authentication.azure_tenant_id
    * config.redis.cloud_authentication.gcp_service_account_json
    * config.redis.host
    * config.redis.password
    * config.redis.port
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.server_name
    * config.redis.username


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret


##### Solace Consume Plugin
Plugin: [Solace Consume](/plugins/solace-consume/)
Plugin slug: solace-consume
Referenceable Plugin Fields: |
    * config.flow.properties
    * config.flow.properties.additionalProperties
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Solace Log Plugin
Plugin: [Solace Log](/plugins/solace-log/)
Plugin slug: solace-log
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Solace Upstream Plugin
Plugin: [Solace Upstream](/plugins/solace-upstream/)
Plugin slug: solace-upstream
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Standard Webhooks Plugin
Plugin: [Standard Webhooks](/plugins/standard-webhooks/)
Plugin slug: standard-webhooks
Referenceable Plugin Fields: |
    * config.secret_v1


##### Upstream OAuth Plugin
Plugin: [Upstream OAuth](/plugins/upstream-oauth/)
Plugin slug: upstream-oauth
Referenceable Plugin Fields: |
    * config.cache.redis.cloud_authentication.auth_provider
    * config.cache.redis.cloud_authentication.aws_access_key_id
    * config.cache.redis.cloud_authentication.aws_assume_role_arn
    * config.cache.redis.cloud_authentication.aws_cache_name
    * config.cache.redis.cloud_authentication.aws_region
    * config.cache.redis.cloud_authentication.aws_role_session_name
    * config.cache.redis.cloud_authentication.aws_secret_access_key
    * config.cache.redis.cloud_authentication.azure_client_id
    * config.cache.redis.cloud_authentication.azure_client_secret
    * config.cache.redis.cloud_authentication.azure_tenant_id
    * config.cache.redis.cloud_authentication.gcp_service_account_json
    * config.cache.redis.host
    * config.cache.redis.password
    * config.cache.redis.port
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.server_name
    * config.cache.redis.username
    * config.oauth.client_id
    * config.oauth.client_secret
    * config.oauth.password
    * config.oauth.token_headers
    * config.oauth.token_headers.additionalProperties
    * config.oauth.token_post_args
    * config.oauth.token_post_args.additionalProperties
    * config.oauth.username



#### Gateway 3.12


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.password
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI AWS Guardrails Plugin
Plugin: [AI AWS Guardrails](/plugins/ai-aws-guardrails/)
Plugin slug: ai-aws-guardrails
Referenceable Plugin Fields: |
    * config.aws_access_key_id
    * config.aws_secret_access_key


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI GCP Model Armor Plugin
Plugin: [AI GCP Model Armor](/plugins/ai-gcp-model-armor/)
Plugin slug: ai-gcp-model-armor
Referenceable Plugin Fields: |
    * config.gcp_service_account_json


##### AI LLM as Judge Plugin
Plugin: [AI LLM as Judge](/plugins/ai-llm-as-judge/)
Plugin slug: ai-llm-as-judge
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI MCP OAuth2 Plugin
Plugin: [AI MCP OAuth2](/plugins/ai-mcp-oauth2/)
Plugin slug: ai-mcp-oauth2
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk
    * config.client_secret


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.aws_access_key_id
    * config.auth.aws_secret_access_key
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.gcp_service_account_json
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Proxy Advanced Plugin
Plugin: [AI Proxy Advanced](/plugins/ai-proxy-advanced/)
Plugin slug: ai-proxy-advanced
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.targets.auth.aws_access_key_id
    * config.targets.auth.aws_secret_access_key
    * config.targets.auth.azure_client_id
    * config.targets.auth.azure_client_secret
    * config.targets.auth.azure_tenant_id
    * config.targets.auth.gcp_service_account_json
    * config.targets.auth.header_name
    * config.targets.auth.header_value
    * config.targets.auth.param_name
    * config.targets.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI RAG Injector Plugin
Plugin: [AI RAG Injector](/plugins/ai-rag-injector/)
Plugin slug: ai-rag-injector
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Semantic Cache Plugin
Plugin: [AI Semantic Cache](/plugins/ai-semantic-cache/)
Plugin slug: ai-semantic-cache
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Semantic Prompt Guard Plugin
Plugin: [AI Semantic Prompt Guard](/plugins/ai-semantic-prompt-guard/)
Plugin slug: ai-semantic-prompt-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Semantic Response Guard Plugin
Plugin: [AI Semantic Response Guard](/plugins/ai-semantic-response-guard/)
Plugin slug: ai-semantic-response-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Confluent Plugin
Plugin: [Confluent](/plugins/confluent/)
Plugin slug: confluent
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### Confluent Consume Plugin
Plugin: [Confluent Consume](/plugins/confluent-consume/)
Plugin slug: confluent-consume
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.oauth2.client_id
    * config.topics.schema_registry.confluent.authentication.oauth2.client_secret
    * config.topics.schema_registry.confluent.authentication.oauth2.password
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.username


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Datakit Plugin
Plugin: [Datakit](/plugins/datakit/)
Plugin slug: datakit
Referenceable Plugin Fields: |
    * config.resources.cache.redis.password
    * config.resources.cache.redis.sentinel_password
    * config.resources.cache.redis.sentinel_username
    * config.resources.cache.redis.username
    * config.resources.vault
    * config.resources.vault.additionalProperties


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Consume Plugin
Plugin: [Kafka Consume](/plugins/kafka-consume/)
Plugin slug: kafka-consume
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.oauth2.client_id
    * config.topics.schema_registry.confluent.authentication.oauth2.client_secret
    * config.topics.schema_registry.confluent.authentication.oauth2.password
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers
    * config.topics.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.topics.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.topics.schema_registry.confluent.authentication.oauth2.username


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.schema_registry.confluent.authentication.oauth2.client_id
    * config.schema_registry.confluent.authentication.oauth2.client_secret
    * config.schema_registry.confluent.authentication.oauth2.password
    * config.schema_registry.confluent.authentication.oauth2.token_headers
    * config.schema_registry.confluent.authentication.oauth2.token_headers.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.token_post_args
    * config.schema_registry.confluent.authentication.oauth2.token_post_args.additionalProperties
    * config.schema_registry.confluent.authentication.oauth2.username


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.cluster_cache_redis.password
    * config.cluster_cache_redis.sentinel_password
    * config.cluster_cache_redis.sentinel_username
    * config.cluster_cache_redis.username
    * config.http_proxy_authorization
    * config.https_proxy_authorization
    * config.introspection_headers_values
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.scopes
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.logs_endpoint
    * config.traces_endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Request Callout Plugin
Plugin: [Request Callout](/plugins/request-callout/)
Plugin slug: request-callout
Referenceable Plugin Fields: |
    * config.cache.redis.password
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.username
    * config.callouts.request.body.custom
    * config.callouts.request.body.custom.additionalProperties
    * config.callouts.request.headers.custom
    * config.callouts.request.headers.custom.additionalProperties
    * config.callouts.request.http_opts.proxy.auth_password
    * config.callouts.request.http_opts.proxy.auth_username
    * config.callouts.request.query.custom
    * config.callouts.request.query.custom.additionalProperties
    * config.callouts.request.url
    * config.upstream.body.custom
    * config.upstream.body.custom.additionalProperties
    * config.upstream.headers.custom
    * config.upstream.headers.custom.additionalProperties
    * config.upstream.query.custom
    * config.upstream.query.custom.additionalProperties


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_secret


##### Service Protection Plugin
Plugin: [Service Protection](/plugins/service-protection/)
Plugin slug: service-protection
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret


##### Solace Consume Plugin
Plugin: [Solace Consume](/plugins/solace-consume/)
Plugin slug: solace-consume
Referenceable Plugin Fields: |
    * config.flow.properties
    * config.flow.properties.additionalProperties
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Solace Log Plugin
Plugin: [Solace Log](/plugins/solace-log/)
Plugin slug: solace-log
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Solace Upstream Plugin
Plugin: [Solace Upstream](/plugins/solace-upstream/)
Plugin slug: solace-upstream
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host
    * config.session.properties
    * config.session.properties.additionalProperties


##### Standard Webhooks Plugin
Plugin: [Standard Webhooks](/plugins/standard-webhooks/)
Plugin slug: standard-webhooks
Referenceable Plugin Fields: |
    * config.secret_v1


##### Upstream OAuth Plugin
Plugin: [Upstream OAuth](/plugins/upstream-oauth/)
Plugin slug: upstream-oauth
Referenceable Plugin Fields: |
    * config.cache.redis.password
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.username
    * config.oauth.client_id
    * config.oauth.client_secret
    * config.oauth.password
    * config.oauth.token_headers
    * config.oauth.token_headers.additionalProperties
    * config.oauth.token_post_args
    * config.oauth.token_post_args.additionalProperties
    * config.oauth.username



#### Gateway 3.11


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.password
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI AWS Guardrails Plugin
Plugin: [AI AWS Guardrails](/plugins/ai-aws-guardrails/)
Plugin slug: ai-aws-guardrails
Referenceable Plugin Fields: |
    * config.aws_access_key_id
    * config.aws_secret_access_key


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.aws_access_key_id
    * config.auth.aws_secret_access_key
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.gcp_service_account_json
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Proxy Advanced Plugin
Plugin: [AI Proxy Advanced](/plugins/ai-proxy-advanced/)
Plugin slug: ai-proxy-advanced
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.targets.auth.aws_access_key_id
    * config.targets.auth.aws_secret_access_key
    * config.targets.auth.azure_client_id
    * config.targets.auth.azure_client_secret
    * config.targets.auth.azure_tenant_id
    * config.targets.auth.gcp_service_account_json
    * config.targets.auth.header_name
    * config.targets.auth.header_value
    * config.targets.auth.param_name
    * config.targets.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI RAG Injector Plugin
Plugin: [AI RAG Injector](/plugins/ai-rag-injector/)
Plugin slug: ai-rag-injector
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Semantic Cache Plugin
Plugin: [AI Semantic Cache](/plugins/ai-semantic-cache/)
Plugin slug: ai-semantic-cache
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Semantic Prompt Guard Plugin
Plugin: [AI Semantic Prompt Guard](/plugins/ai-semantic-prompt-guard/)
Plugin slug: ai-semantic-prompt-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Confluent Plugin
Plugin: [Confluent](/plugins/confluent/)
Plugin slug: confluent
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username


##### Confluent Consume Plugin
Plugin: [Confluent Consume](/plugins/confluent-consume/)
Plugin slug: confluent-consume
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Consume Plugin
Plugin: [Kafka Consume](/plugins/kafka-consume/)
Plugin slug: kafka-consume
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username
    * config.topics.schema_registry.confluent.authentication.basic.password
    * config.topics.schema_registry.confluent.authentication.basic.username


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user
    * config.schema_registry.confluent.authentication.basic.password
    * config.schema_registry.confluent.authentication.basic.username


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.cluster_cache_redis.password
    * config.cluster_cache_redis.sentinel_password
    * config.cluster_cache_redis.sentinel_username
    * config.cluster_cache_redis.username
    * config.http_proxy_authorization
    * config.https_proxy_authorization
    * config.introspection_headers_values
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.scopes
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.logs_endpoint
    * config.traces_endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Request Callout Plugin
Plugin: [Request Callout](/plugins/request-callout/)
Plugin slug: request-callout
Referenceable Plugin Fields: |
    * config.cache.redis.password
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.username
    * config.callouts.request.http_opts.proxy.auth_password
    * config.callouts.request.http_opts.proxy.auth_username
    * config.callouts.request.url


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_secret


##### Service Protection Plugin
Plugin: [Service Protection](/plugins/service-protection/)
Plugin slug: service-protection
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret


##### Solace Upstream Plugin
Plugin: [Solace Upstream](/plugins/solace-upstream/)
Plugin slug: solace-upstream
Referenceable Plugin Fields: |
    * config.session.authentication.access_token
    * config.session.authentication.id_token
    * config.session.authentication.password
    * config.session.authentication.username
    * config.session.host


##### Standard Webhooks Plugin
Plugin: [Standard Webhooks](/plugins/standard-webhooks/)
Plugin slug: standard-webhooks
Referenceable Plugin Fields: |
    * config.secret_v1


##### Upstream OAuth Plugin
Plugin: [Upstream OAuth](/plugins/upstream-oauth/)
Plugin slug: upstream-oauth
Referenceable Plugin Fields: |
    * config.cache.redis.password
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.username
    * config.oauth.client_id
    * config.oauth.client_secret
    * config.oauth.password
    * config.oauth.username



#### Gateway 3.10 LTS


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.password
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.aws_access_key_id
    * config.auth.aws_secret_access_key
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.gcp_service_account_json
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Proxy Advanced Plugin
Plugin: [AI Proxy Advanced](/plugins/ai-proxy-advanced/)
Plugin slug: ai-proxy-advanced
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.targets.auth.aws_access_key_id
    * config.targets.auth.aws_secret_access_key
    * config.targets.auth.azure_client_id
    * config.targets.auth.azure_client_secret
    * config.targets.auth.azure_tenant_id
    * config.targets.auth.gcp_service_account_json
    * config.targets.auth.header_name
    * config.targets.auth.header_value
    * config.targets.auth.param_name
    * config.targets.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI RAG Injector Plugin
Plugin: [AI RAG Injector](/plugins/ai-rag-injector/)
Plugin slug: ai-rag-injector
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Semantic Cache Plugin
Plugin: [AI Semantic Cache](/plugins/ai-semantic-cache/)
Plugin slug: ai-semantic-cache
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Semantic Prompt Guard Plugin
Plugin: [AI Semantic Prompt Guard](/plugins/ai-semantic-prompt-guard/)
Plugin slug: ai-semantic-prompt-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.pgvector.password
    * config.vectordb.pgvector.user
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Confluent Plugin
Plugin: [Confluent](/plugins/confluent/)
Plugin slug: confluent
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret


##### Confluent Consume Plugin
Plugin: [Confluent Consume](/plugins/confluent-consume/)
Plugin slug: confluent-consume
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Consume Plugin
Plugin: [Kafka Consume](/plugins/kafka-consume/)
Plugin slug: kafka-consume
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.cluster_cache_redis.password
    * config.cluster_cache_redis.sentinel_password
    * config.cluster_cache_redis.sentinel_username
    * config.cluster_cache_redis.username
    * config.http_proxy_authorization
    * config.https_proxy_authorization
    * config.introspection_headers_values
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.scopes
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.logs_endpoint
    * config.traces_endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Request Callout Plugin
Plugin: [Request Callout](/plugins/request-callout/)
Plugin slug: request-callout
Referenceable Plugin Fields: |
    * config.cache.redis.password
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.username
    * config.callouts.request.http_opts.proxy.auth_password
    * config.callouts.request.http_opts.proxy.auth_username
    * config.callouts.request.url


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_secret


##### Service Protection Plugin
Plugin: [Service Protection](/plugins/service-protection/)
Plugin slug: service-protection
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret


##### Standard Webhooks Plugin
Plugin: [Standard Webhooks](/plugins/standard-webhooks/)
Plugin slug: standard-webhooks
Referenceable Plugin Fields: |
    * config.secret_v1


##### Upstream OAuth Plugin
Plugin: [Upstream OAuth](/plugins/upstream-oauth/)
Plugin slug: upstream-oauth
Referenceable Plugin Fields: |
    * config.cache.redis.password
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.username
    * config.oauth.client_id
    * config.oauth.client_secret
    * config.oauth.password
    * config.oauth.username



#### Gateway 3.9


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.password
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.aws_access_key_id
    * config.auth.aws_secret_access_key
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.gcp_service_account_json
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Proxy Advanced Plugin
Plugin: [AI Proxy Advanced](/plugins/ai-proxy-advanced/)
Plugin slug: ai-proxy-advanced
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.targets.auth.aws_access_key_id
    * config.targets.auth.aws_secret_access_key
    * config.targets.auth.azure_client_id
    * config.targets.auth.azure_client_secret
    * config.targets.auth.azure_tenant_id
    * config.targets.auth.gcp_service_account_json
    * config.targets.auth.header_name
    * config.targets.auth.header_value
    * config.targets.auth.param_name
    * config.targets.auth.param_value
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Semantic Cache Plugin
Plugin: [AI Semantic Cache](/plugins/ai-semantic-cache/)
Plugin slug: ai-semantic-cache
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Semantic Prompt Guard Plugin
Plugin: [AI Semantic Prompt Guard](/plugins/ai-semantic-prompt-guard/)
Plugin slug: ai-semantic-prompt-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Confluent Plugin
Plugin: [Confluent](/plugins/confluent/)
Plugin slug: confluent
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.headers
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.cluster_cache_redis.password
    * config.cluster_cache_redis.sentinel_password
    * config.cluster_cache_redis.sentinel_username
    * config.cluster_cache_redis.username
    * config.http_proxy_authorization
    * config.https_proxy_authorization
    * config.introspection_headers_values
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.scopes
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.headers
    * config.logs_endpoint
    * config.traces_endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_secret


##### Service Protection Plugin
Plugin: [Service Protection](/plugins/service-protection/)
Plugin slug: service-protection
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret


##### Standard Webhooks Plugin
Plugin: [Standard Webhooks](/plugins/standard-webhooks/)
Plugin slug: standard-webhooks
Referenceable Plugin Fields: |
    * config.secret_v1


##### Upstream OAuth Plugin
Plugin: [Upstream OAuth](/plugins/upstream-oauth/)
Plugin slug: upstream-oauth
Referenceable Plugin Fields: |
    * config.cache.redis.password
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.username
    * config.oauth.client_id
    * config.oauth.client_secret
    * config.oauth.password
    * config.oauth.token_headers
    * config.oauth.token_post_args
    * config.oauth.username



#### Gateway 3.8


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.password
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.aws_access_key_id
    * config.auth.aws_secret_access_key
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.gcp_service_account_json
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Proxy Advanced Plugin
Plugin: [AI Proxy Advanced](/plugins/ai-proxy-advanced/)
Plugin slug: ai-proxy-advanced
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.targets.auth.aws_access_key_id
    * config.targets.auth.aws_secret_access_key
    * config.targets.auth.azure_client_id
    * config.targets.auth.azure_client_secret
    * config.targets.auth.azure_tenant_id
    * config.targets.auth.gcp_service_account_json
    * config.targets.auth.header_name
    * config.targets.auth.header_value
    * config.targets.auth.param_name
    * config.targets.auth.param_value
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.aws_access_key_id
    * config.llm.auth.aws_secret_access_key
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.gcp_service_account_json
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Semantic Cache Plugin
Plugin: [AI Semantic Cache](/plugins/ai-semantic-cache/)
Plugin slug: ai-semantic-cache
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AI Semantic Prompt Guard Plugin
Plugin: [AI Semantic Prompt Guard](/plugins/ai-semantic-prompt-guard/)
Plugin slug: ai-semantic-prompt-guard
Referenceable Plugin Fields: |
    * config.embeddings.auth.aws_access_key_id
    * config.embeddings.auth.aws_secret_access_key
    * config.embeddings.auth.azure_client_id
    * config.embeddings.auth.azure_client_secret
    * config.embeddings.auth.azure_tenant_id
    * config.embeddings.auth.gcp_service_account_json
    * config.embeddings.auth.header_name
    * config.embeddings.auth.header_value
    * config.embeddings.auth.param_name
    * config.embeddings.auth.param_value
    * config.vectordb.redis.password
    * config.vectordb.redis.sentinel_password
    * config.vectordb.redis.sentinel_username
    * config.vectordb.redis.username


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Confluent Plugin
Plugin: [Confluent](/plugins/confluent/)
Plugin slug: confluent
Referenceable Plugin Fields: |
    * config.cluster_api_key
    * config.cluster_api_secret
    * config.confluent_cloud_api_key
    * config.confluent_cloud_api_secret


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.headers
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.cluster_cache_redis.password
    * config.cluster_cache_redis.sentinel_password
    * config.cluster_cache_redis.sentinel_username
    * config.cluster_cache_redis.username
    * config.introspection_headers_values
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.scopes
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.headers
    * config.logs_endpoint
    * config.traces_endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_secret


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret


##### Standard Webhooks Plugin
Plugin: [Standard Webhooks](/plugins/standard-webhooks/)
Plugin slug: standard-webhooks
Referenceable Plugin Fields: |
    * config.secret_v1


##### Upstream OAuth Plugin
Plugin: [Upstream OAuth](/plugins/upstream-oauth/)
Plugin slug: upstream-oauth
Referenceable Plugin Fields: |
    * config.cache.redis.password
    * config.cache.redis.sentinel_password
    * config.cache.redis.sentinel_username
    * config.cache.redis.username
    * config.oauth.client_id
    * config.oauth.client_secret
    * config.oauth.password
    * config.oauth.token_headers
    * config.oauth.token_post_args
    * config.oauth.username



#### Gateway 3.7


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.password
    * config.storage_config.redis.username
    * config.storage_config.vault.token


##### AI Azure Content Safety Plugin
Plugin: [AI Azure Content Safety](/plugins/ai-azure-content-safety/)
Plugin slug: ai-azure-content-safety
Referenceable Plugin Fields: |
    * config.content_safety_key
    * config.content_safety_url


##### AI Proxy Plugin
Plugin: [AI Proxy](/plugins/ai-proxy/)
Plugin slug: ai-proxy
Referenceable Plugin Fields: |
    * config.auth.azure_client_id
    * config.auth.azure_client_secret
    * config.auth.azure_tenant_id
    * config.auth.header_name
    * config.auth.header_value
    * config.auth.param_name
    * config.auth.param_value


##### AI Rate Limiting Advanced Plugin
Plugin: [AI Rate Limiting Advanced](/plugins/ai-rate-limiting-advanced/)
Plugin slug: ai-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### AI Request Transformer Plugin
Plugin: [AI Request Transformer](/plugins/ai-request-transformer/)
Plugin slug: ai-request-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AI Response Transformer Plugin
Plugin: [AI Response Transformer](/plugins/ai-response-transformer/)
Plugin slug: ai-response-transformer
Referenceable Plugin Fields: |
    * config.llm.auth.azure_client_id
    * config.llm.auth.azure_client_secret
    * config.llm.auth.azure_tenant_id
    * config.llm.auth.header_name
    * config.llm.auth.header_value
    * config.llm.auth.param_name
    * config.llm.auth.param_value


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Proxy Caching Advanced Plugin
Plugin: [GraphQL Proxy Caching Advanced](/plugins/graphql-proxy-cache-advanced/)
Plugin slug: graphql-proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.headers
    * config.http_endpoint


##### JWT Signer Plugin
Plugin: [JWT Signer](/plugins/jwt-signer/)
Plugin slug: jwt-signer
Referenceable Plugin Fields: |
    * config.access_token_jwks_uri_client_password
    * config.access_token_jwks_uri_client_username
    * config.access_token_keyset_client_password
    * config.access_token_keyset_client_username
    * config.channel_token_jwks_uri_client_password
    * config.channel_token_jwks_uri_client_username
    * config.channel_token_keyset_client_password
    * config.channel_token_keyset_client_username


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.introspection_headers_values
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.scopes
    * config.session_redis_password
    * config.session_redis_username
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.endpoint
    * config.headers


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_redis_password
    * config.session_redis_username
    * config.session_secret


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret



#### Gateway 3.4 LTS


##### ACME Plugin
Plugin: [ACME](/plugins/acme/)
Plugin slug: acme
Referenceable Plugin Fields: |
    * config.account_email
    * config.eab_hmac_key
    * config.eab_kid
    * config.storage_config.consul.token
    * config.storage_config.redis.auth
    * config.storage_config.vault.token


##### AWS Lambda Plugin
Plugin: [AWS Lambda](/plugins/aws-lambda/)
Plugin slug: aws-lambda
Referenceable Plugin Fields: |
    * config.aws_assume_role_arn
    * config.aws_key
    * config.aws_secret


##### Azure Functions Plugin
Plugin: [Azure Functions](/plugins/azure-functions/)
Plugin slug: azure-functions
Referenceable Plugin Fields: |
    * config.apikey
    * config.clientid


##### Datadog Plugin
Plugin: [Datadog](/plugins/datadog/)
Plugin slug: datadog
Referenceable Plugin Fields: |
    * config.host


##### Forward Proxy Advanced Plugin
Plugin: [Forward Proxy Advanced](/plugins/forward-proxy/)
Plugin slug: forward-proxy
Referenceable Plugin Fields: |
    * config.auth_password
    * config.auth_username


##### GraphQL Rate Limiting Advanced Plugin
Plugin: [GraphQL Rate Limiting Advanced](/plugins/graphql-rate-limiting-advanced/)
Plugin slug: graphql-rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### HTTP Log Plugin
Plugin: [HTTP Log](/plugins/http-log/)
Plugin slug: http-log
Referenceable Plugin Fields: |
    * config.http_endpoint


##### Kafka Log Plugin
Plugin: [Kafka Log](/plugins/kafka-log/)
Plugin slug: kafka-log
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### Kafka Upstream Plugin
Plugin: [Kafka Upstream](/plugins/kafka-upstream/)
Plugin slug: kafka-upstream
Referenceable Plugin Fields: |
    * config.authentication.password
    * config.authentication.user


##### LDAP Authentication Advanced Plugin
Plugin: [LDAP Authentication Advanced](/plugins/ldap-auth-advanced/)
Plugin slug: ldap-auth-advanced
Referenceable Plugin Fields: |
    * config.bind_dn
    * config.ldap_password


##### Loggly Plugin
Plugin: [Loggly](/plugins/loggly/)
Plugin slug: loggly
Referenceable Plugin Fields: |
    * config.key


##### OAuth 2.0 Introspection Plugin
Plugin: [OAuth 2.0 Introspection](/plugins/oauth2-introspection/)
Plugin slug: oauth2-introspection
Referenceable Plugin Fields: |
    * config.authorization_value


##### OpenID Connect Plugin
Plugin: [OpenID Connect](/plugins/openid-connect/)
Plugin slug: openid-connect
Referenceable Plugin Fields: |
    * config.client_id
    * config.client_jwk.d
    * config.client_jwk.dp
    * config.client_jwk.dq
    * config.client_jwk.k
    * config.client_jwk.oth
    * config.client_jwk.p
    * config.client_jwk.q
    * config.client_jwk.qi
    * config.client_jwk.r
    * config.client_jwk.t
    * config.client_secret
    * config.introspection_headers_values
    * config.login_redirect_uri
    * config.logout_redirect_uri
    * config.scopes
    * config.session_redis_password
    * config.session_redis_username
    * config.session_secret


##### OpenTelemetry Plugin
Plugin: [OpenTelemetry](/plugins/opentelemetry/)
Plugin slug: opentelemetry
Referenceable Plugin Fields: |
    * config.endpoint


##### Proxy Caching Advanced Plugin
Plugin: [Proxy Caching Advanced](/plugins/proxy-cache-advanced/)
Plugin slug: proxy-cache-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Rate Limiting Plugin
Plugin: [Rate Limiting](/plugins/rate-limiting/)
Plugin slug: rate-limiting
Referenceable Plugin Fields: |
    * config.redis_password
    * config.redis_username


##### Rate Limiting Advanced Plugin
Plugin: [Rate Limiting Advanced](/plugins/rate-limiting-advanced/)
Plugin slug: rate-limiting-advanced
Referenceable Plugin Fields: |
    * config.redis.password
    * config.redis.sentinel_password
    * config.redis.sentinel_username
    * config.redis.username


##### Request Transformer Advanced Plugin
Plugin: [Request Transformer Advanced](/plugins/request-transformer-advanced/)
Plugin slug: request-transformer-advanced
Referenceable Plugin Fields: |
    * config.add.body
    * config.add.headers
    * config.add.querystring
    * config.append.body
    * config.append.headers
    * config.append.querystring
    * config.rename.body
    * config.rename.headers
    * config.rename.querystring
    * config.replace.body
    * config.replace.headers
    * config.replace.querystring


##### Response Rate Limiting Plugin
Plugin: [Response Rate Limiting](/plugins/response-ratelimiting/)
Plugin slug: response-ratelimiting
Referenceable Plugin Fields: |
    * config.redis_password
    * config.redis_username


##### SAML Plugin
Plugin: [SAML](/plugins/saml/)
Plugin slug: saml
Referenceable Plugin Fields: |
    * config.idp_certificate
    * config.request_signing_certificate
    * config.request_signing_key
    * config.response_encryption_key
    * config.session_redis_password
    * config.session_redis_username
    * config.session_secret


##### Session Plugin
Plugin: [Session](/plugins/session/)
Plugin slug: session
Referenceable Plugin Fields: |
    * config.secret





## Supported Vault backends

Each vault has its own required configuration. You can provide this configuration by creating a Vault entity, or by configuring specific environment variables before starting Kong Gateway.

For more information, choose a vault backend below.


### Backend: [Environment variable](/gateway/entities/vault/environment-variable/)
Kong Gateway OSS: Supported
Kong Gateway Enterprise: Supported
Konnect supported: Supported
How-to guide: --

### Backend: [Konnect (Konnect Config Store)](/gateway/entities/vault/konnect-config-store/)
Kong Gateway OSS: Not Supported
Kong Gateway Enterprise: Not Supported
Konnect supported: Supported
How-to guide: |
  * [Basic setup](/how-to/configure-the-konnect-config-store/)
  * [Store Mistral keys in a Konnect Config Store](/how-to/store-a-mistral-api-key-as-a-secret-in-konnect-config-store/)

### Backend: [AWS Secrets Manager](/gateway/entities/vault/aws/)
Kong Gateway OSS: Not Supported
Kong Gateway Enterprise: Supported
Konnect supported: Supported
How-to guide: * [Basic setup](/how-to/configure-aws-secrets-manager-as-a-vault-backend-with-vault-entity/)

### Backend: [Azure Key Vaults](/gateway/entities/vault/azure/)
Kong Gateway OSS: Not Supported
Kong Gateway Enterprise: Supported
Konnect supported: Supported
How-to guide: --

### Backend: [Azure Key Vaults (Certificates) v3.15+
](/gateway/entities/vault/azure-certs/)
Kong Gateway OSS: Not Supported
Kong Gateway Enterprise: Supported
Konnect supported: Supported
How-to guide: --

### Backend: [Google Cloud Secret](/gateway/entities/vault/google/)
Kong Gateway OSS: Not Supported
Kong Gateway Enterprise: Supported
Konnect supported: Supported
How-to guide: * [Basic setup](/how-to/configure-google-cloud-secret-as-a-vault-backend/)

### Backend: [HashiCorp Vault](/gateway/entities/vault/hashicorp/)
Kong Gateway OSS: Not Supported
Kong Gateway Enterprise: Supported
Konnect supported: Supported
How-to guide: |
  * [Basic setup](/how-to/configure-hashicorp-vault-as-a-vault-backend/)
  * [All how-to guides](/how-to/?tags=hashicorp-vault)

### Backend: [CyberArk Secrets Manager (Conjur)  v3.11+
](/gateway/entities/vault/cyberark/)
Kong Gateway OSS: Not Supported
Kong Gateway Enterprise: Supported
Konnect supported: Supported
How-to guide: * [Basic setup](/how-to/configure-cyberark-as-a-vault-backend/)

### Backend: [File system v3.15+
](/gateway/entities/vault/file-system/)
Kong Gateway OSS: Not Supported
Kong Gateway Enterprise: Supported
Konnect supported: Supported
How-to guide: * [Basic setup](/how-to/configure-file-system-as-a-vault-backend/)

### Backend: [Custom vault backend](/how-to/create-custom-vault/)
Kong Gateway OSS: Supported
Kong Gateway Enterprise: Supported
Konnect supported: Not Supported
How-to guide: 



## How do I reference secrets stored in a Vault?

When you want to use a secret stored in a Vault, you can reference the secret with a `vault` reference. You can use the `vault` reference in places such as `kong.conf`, declarative configuration files, logs, or in the UI.

The Vault backend may store multiple related secrets inside an object, but the reference
should always point to a key that resolves to a string value. For example, the following reference:

```
{vault://hcv/pg/username}
```

Would point to a secret object called `pg` inside a HashiCorp Vault, which may return the following value:

```json
{
  "username": "john",
  "password": "doe"
}
```


Kong Gateway receives the payload and extracts the `"username"` value of `"john"` for the secret reference of
`{vault://hcv/pg/username}`.


Vault references must be used for the whole referenced value. 
Imagine that you're calling a upstream service with the authentication token `ABC123`:


### Works: false
Configuration Value: Bearer {vault://hcv/myservice-auth-token}
Vault Value: ABC123

### Works: true
Configuration Value: {vault://hcv/myservice-auth-token}
Vault Value: Bearer ABC123





>When using Vault references in plugin configs to **add headers**, ensure that the secret value stored in your Vault follows the **`key:value` format**. The entire header definition, both name and value, needs to be provided by the resolved secret.


> Serverless plugins, like Pre-Function and Post-Function, are not supported with Konnect Config Store Vaults.

## Secret rotation in Vaults

By default, Kong Gateway automatically refreshes secrets *once every minute* in the background. 
You can also configure how often Kong Gateway refreshes secrets using the Vault entity configuration.

There are two types of refresh configuration available:
* Refresh periodically using TTLs: For example, check for a new TLS certificate once per day.
* Refresh on failure: For example, on a database authentication failure, check if the secrets were updated, and try again.

For more information, see [Secret management](/gateway/secrets-management/).

## Store values as secrets

When you set up a Vault, each provider has specific parameters that you can or must configure to integrate the Vault with a provider. For the entire Vault configuration schema, see the [schema reference](#schema).

* Using the [Vault entity](/gateway/entities/vault/)
* Using [environment variables](/gateway/entities/vault/#store-secrets-as-environment-variables), set at Kong Gateway startup
* Using parameters in [`kong.conf`](/gateway/configuration/), set at Kong Gateway startup

The Vault entity can only be used once the database is initialized. 
Secrets for values that are used before the database is initialized can’t make use of the Vaults entity.

### Set up a Vault entity





#### decK

  




```yaml
_format_version: "3.0"
vaults:
  - name: env
    description: ENV vault for secrets
    prefix: my-env-vault
    config:
      prefix: MY_SECRET_
```
{: data-file="kong.yaml" data-tool="deck" }









#### Admin API

  


To create a Vault entity, call the [Admin API's `/vaults` endpoint](/api/gateway/admin-ee/#/operations/create-vault). 



```bash
curl -i -X POST http://localhost:8001/vaults/ \
    --header "Accept: application/json" \
    --header "Content-Type: application/json" \
    --data '
    {
      "name": "env",
      "description": "ENV vault for secrets",
      "prefix": "my-env-vault",
      "config": {
        "prefix": "MY_SECRET_"
      }
    }
    '
```








#### Konnect API

  

To create a Vault entity, call the Konnect [control plane config API's `/vaults` endpoint](/api/konnect/control-planes-config/#/operations/create-vault). 


```bash
curl -X POST https://{region}.api.konghq.com/v2/control-planes/{controlPlaneId}/core-entities/vaults/ \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "name": "env",
      "description": "ENV vault for secrets",
      "prefix": "my-env-vault",
      "config": {
        "prefix": "MY_SECRET_"
      }
    }
    '
```





Make sure to replace the following placeholders with your own values:

* `region`: Geographic region where your Kong Konnect is hosted and operates.

* `KONNECT_TOKEN`: Your Personal Access Token (PAT) associated with your Konnect account.

* `controlPlaneId`: The `id` of the control plane.




See the [Konnect Control Planes Config API reference](/api/konnect/control-planes-config/) to learn about region-specific URLs and personal access tokens.




#### KIC

  

```yaml
echo "
apiVersion: configuration.konghq.com/v1alpha1
kind: KongVault
metadata:
  name: env-vault
  namespace: kong
  annotations:
    kubernetes.io/ingress.class: kong
spec:
  backend: env
  description: ENV vault for secrets
  prefix: my-env-vault
  config:
    prefix: MY_SECRET_
" | kubectl apply -f -
```






#### Terraform

  
###### **Prerequisite:** Configure your Personal Access Token

```hcl
terraform {
  required_providers {
    konnect = {
      source  = "kong/konnect"
    }
  }
}

provider "konnect" {
  personal_access_token = "$KONNECT_TOKEN"
  server_url            = "https://us.api.konghq.com/"
}
```


Add the following to your Terraform configuration:




```hcl
resource "konnect_gateway_vault" "my_vault" {
  description = "ENV vault for secrets"
  prefix = "my-env-vault"
  config = {
    prefix = "MY_SECRET_"
  }

  control_plane_id = konnect_gateway_control_plane.my_konnect_cp.id
}
```






#### UI

  

The following creates a new Vault with basic configuration:

1. Navigate to your Gateway instance:
  * In the Konnect sidebar, click **API Gateway** > **Gateways**, and then choose a control plane.
  * In Kong Manager, select your Workspace.
1. Navigate to Vaults:
  * In Konnect, click the **Vaults** tab inside your control plane.
  * In Kong Manager, open **Vaults** from the sidebar.
1. Click **New vault**.
1. Select a type of Vault to configure. For example: `env`
1. Enter a prefix for the Vault. For example: `my-env-vault`
1. Enter a description for the Vault. For example: `ENV vault for secrets`
1. Click **Save**.











### Store secrets as environment variables

You can store secrets as environment variables instead of configuring a Vault entity or third-party backend vault. 


#### Single secret value
Environment variable example: `export MY_SECRET_VALUE=example-secret`
Secret reference example: `{vault://env/my-secret-value}`

#### Multiple secrets (flat JSON string)
Environment variable example: `export PG_CREDS='{"username":"user", "password":"pass"}'`
Secret reference example: |
  `{vault://env/pg-creds/username}`
  <br><br>
  `{vault://env/pg-creds/password}`




## Schema

```json
{
  "additionalProperties": false,
  "description": "Vault entities are used to configure different Vault connectors. Examples of Vaults are Environment Variables, Hashicorp Vault and AWS Secrets Manager. Configuring a Vault allows referencing the secrets with other entities. For example a certificate entity can store a reference to a certificate and key, stored in a vault, instead of storing the certificate and key within the entity. This allows a proper separation of secrets and configuration and prevents secret sprawl.",
  "example": {
    "config": {
      "prefix": "ENV_PREFIX"
    },
    "description": "environment variable based vault",
    "id": "2747d1e5-8246-4f65-a939-b392f1ee17f8",
    "name": "env",
    "prefix": "env",
    "tags": [
      "foo",
      "bar"
    ]
  },
  "properties": {
    "config": {
      "additionalProperties": true,
      "description": "The configuration properties for the Vault which can be found on the vaults' documentation page.",
      "nullable": true,
      "type": "object"
    },
    "created_at": {
      "description": "Unix epoch when the resource was created.",
      "nullable": true,
      "type": "integer"
    },
    "description": {
      "description": "The description of the Vault entity.",
      "nullable": true,
      "type": "string"
    },
    "id": {
      "description": "A string representing a UUID (universally unique identifier).",
      "nullable": true,
      "type": "string"
    },
    "name": {
      "description": "The name of the Vault that's going to be added. Currently, the Vault implementation must be installed in every Kong instance.",
      "type": "string"
    },
    "prefix": {
      "description": "The unique prefix (or identifier) for this Vault configuration. The prefix is used to load the right Vault configuration and implementation when referencing secrets with the other entities.",
      "type": "string"
    },
    "tags": {
      "description": "An optional set of strings associated with the Vault for grouping and filtering.",
      "items": {
        "description": "A string representing a tag.",
        "type": "string"
      },
      "nullable": true,
      "type": "array"
    },
    "updated_at": {
      "description": "Unix epoch when the resource was last updated.",
      "nullable": true,
      "type": "integer"
    }
  },
  "required": [
    "name",
    "prefix"
  ],
  "type": "object"
}
```



## FAQs

- What types of fields can be used in Vaults?
  Vaults work with "referenceable" fields. All fields in `kong.conf` are referenceable and some fields within entities (for example, plugins, certificates) are also. Refer to the appropriate entity documentation to learn more.

- Can Vaults be referenced during custom plugin development?
  Yes. The plugin development kit (PDK) offers a Vaults module (`kong.vault`) that can be used to resolve, parse, and verify Vault references.

- What data types can I use when referencing a secret in a Vault?
  A secret reference points to a string value. No other data types are currently supported.

- I have a secret with multiple versions, how do I specify an earlier version when I'm referencing the secret?
  If you have a secret with multiple versions, you can access the current version or any previous version of the secret by specifying a version in the reference.
  
  In the following AWS example, `AWSCURRENT` refers to the latest secret version and `AWSPREVIOUS` refers to an older version:
  ```sh
  # For AWSCURRENT, not specifying version
  {vault://aws/secret-name/foo}
  
  # For AWSCURRENT, specifying version == 1
  {vault://aws/secret-name/foo#1}
  
  # For AWSPREVIOUS, specifying version == 2
  {vault://aws/secret-name/foo#2}
  ```
  This applies to all providers with versioned secrets.

- My secret in AWS Secret Manager has a `/` backslash in the secret name. How do I reference this secret in Kong Gateway?
  The slash symbol (`/`) is a valid character for the secret name in AWS Secrets Manager. If you want to reference a secret name that starts with a slash or has two consecutive slashes, transform one of the slashes in the name into URL-encoded format. For example:
  * A secret named `/secret/key` should be referenced as `{vault://aws/%2Fsecret/key}`
  * A secret named `secret/path//aaa/key` should be referenced as `{vault://aws/secret/path/%2Faaa/key}`
  
  Since Kong Gateway tries to resolve the secret reference as a valid URL, using a slash instead of a URL-encoded slash will result in unexpected secret name fetching.

- I have secrets stored in multiple AWS Secret Manager regions, how do I reference those secrets in Kong Gateway?
  You can create multiple Vault entities, one per region with the `config.region` parameter. You'd then reference the secret by the name of the Vault:
  ```sh
  {vault://aws-eu-central-vault/secret-name/foo}
  {vault://aws-us-west-vault/secret-name/snip}
  ```

- I'm using Google Workload Identity, how do I configure a Vault?
  To use GCP Secret Manager with
  [Workload Identity](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
  on a GKE cluster, update your pod spec so that the service account (`GCP_SERVICE_ACCOUNT`) is
  attached to the pod. For configuration information, read the [Workload
  Identity configuration
  documentation](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity#authenticating_to).
  
  
  > **Notes:**
  > * With Workload Identity, setting the `GCP_SERVICE_ACCOUNT` isn't necessary.
  > * When using GCP Vault as a backend, make sure you have configured `system` as part of the
  > [`lua_ssl_trusted_certificate` configuration directive](/gateway/configuration/#lua-ssl-trusted-certificate)
  so that the SSL certificates used by the official GCP API can be trusted by Kong Gateway.

- How does Kong Gateway retrieve secrets from HashiCorp Vault?
  Kong Gateway retrieves secrets from HashiCorp Vault's HTTP API through a two-step process: authentication and secret retrieval.
  
  **Step 1: Authentication**
  
  Depending on the authentication method defined in `config.auth_method`, Kong Gateway authenticates to HashiCorp Vault using one of the following methods:
  
  - If you're using the `token` auth method, Kong Gateway uses the `config.token` as the client token.
  - If you're using the `kubernetes` auth method, Kong Gateway uses the service account JWT token mounted in the pod (path defined in the `config.kube_api_token_file`) to call the login API for the Kubernetes auth path on the HashiCorp Vault server and retrieve a client token.
  - v3.4+ If you're using the `approle` auth method, Kong Gateway uses the AppRole credentials to retrieve a client token. The AppRole role ID is configured by field `config.approle_role_id`, and the secret ID is configured by field `config.approle_secret_id` or `config.approle_secret_id_file`. 
    - If you set `config.approle_response_wrapping` to `true`, then the secret ID configured by
    `config.approle_secret_id` or `config.approle_secret_id_file` will be a response wrapping token, 
    and Kong Gateway will call the unwrap API `/v1/sys/wrapping/unwrap` to unwrap the response wrapping token to fetch 
    the real secret ID. Kong Gateway will use the AppRole role ID and secret ID to call the login API for the AppRole auth path
    on the HashiCorp Vault server and retrieve a client token.
  - v3.14+ If you're using the `gcp_iam` auth method, Kong Gateway generates a signed JWT using the GCP service account configured in `config.gcp_service_account` and exchanges it for a HashiCorp Vault token via the GCP login path (`config.gcp_login_path`). The role is specified by `config.gcp_auth_role`.
  - v3.14+ If you're using the `gcp_gce` (GCP Compute Engine) auth method, Kong Gateway uses the instance identity token from the GCE metadata server and exchanges it for a HashiCorp Vault token via the GCP login path (`config.gcp_login_path`). The role is specified by `config.gcp_auth_role`.
  - v3.14+ If you're using the `azure` auth method, Kong Gateway uses the Azure Managed Identity token and exchanges it for a HashiCorp Vault token via the Azure login path (`config.azure_login_path`). The role is specified by `config.azure_auth_role`.
  - v3.14+ If you're using the `aws_ec2` auth method, Kong Gateway uses the EC2 instance identity document and a nonce (`config.aws_auth_nonce`) to authenticate with HashiCorp Vault via the AWS login path (`config.aws_login_path`). The role is specified by `config.aws_auth_role`.
  - v3.14+ If you're using the `aws_iam` auth method, Kong Gateway signs an AWS STS `GetCallerIdentity` request using IAM credentials (`config.aws_access_key_id` and `config.aws_secret_access_key`, or the default credential provider chain) and exchanges it for a HashiCorp Vault token via the AWS login path (`config.aws_login_path`). The role is specified by `config.aws_auth_role`.  For cross-account authentication, `config.aws_assume_role_arn` and `config.aws_role_session_name` are required to assume an IAM role in the target account before signing the request.
  
  By calling the login API, Kong Gateway will retrieve a client token and then use it in the next step as the value of `X-Vault-Token` header to retrieve a secret.
  
  **Step 2: Retrieving the secret**
  
  Kong Gateway uses the client token retrieved in the authentication step to call the Read Secret API and retrieve the secret value. The request varies depending on the secrets engine version you're using.
  Kong Gateway will parse the response of the read secret API automatically and return the secret value.

- Can Azure Key Vault be used with a proxy?
  v3.12+ Yes. Azure Key Vault supports proxy configuration using either environment variables or client constructor arguments.
  
  **Environment variables**
  
  ```sh
  export AZURE_HTTP_PROXY=http://proxy.example.com:8080
  export AZURE_HTTPS_PROXY=http://proxy.example.com:8080
  export AZURE_NO_PROXY=localhost,127.0.0.1,.local
  export AZURE_AUTH_USERNAME=proxyuser
  export AZURE_AUTH_PASSWORD=proxypass
  ```
  
  **Constructor arguments**
  
  ```lua
  local azure_client = require("resty.azure"):new({
    tenant_id = "tenant-uuid",
    client_id = "app-registration-client-id",
    client_secret = "app-registration-client-secret",
    http_proxy = "http://proxy.example.com:8080",
    https_proxy = "http://proxy.example.com:8080",
    no_proxy = "localhost,127.0.0.1,.local",
    auth_username = "proxyuser",
    auth_password = "proxypass",
  })
  ```
  
  
  > **Notes:**
  > * Constructor arguments take precedence over environment variables.
  > * When `auth_username` and `auth_password` are provided, they will be automatically converted to a Basic authentication header for both HTTP and HTTPS proxy authorization.


## Related Resources

- [Secrets Management](/gateway/secrets-management/)

- [Create a custom vault backend](/how-to/create-custom-vault/)

- [Workspaces](/gateway/entities/workspace/)

- [RBAC](/gateway/entities/rbac/)

- [Reserved entity names](/gateway/reserved-entity-names/)

- [Managing sensitive data with decK](/deck/gateway/sensitive-data/)

- [Konnect Control Plane resource limits](/gateway/control-plane-resource-limits/)

- [Cloud provider integration support for Kong Gateway Enterprise](/gateway/cloud-provider-support-matrix/)


## Next Steps

- [Set up a Konnect Config Store](/how-to/configure-the-konnect-config-store/)

- [Set up HashiCorp Vault as a vault backend](/how-to/configure-hashicorp-vault-as-a-vault-backend/)

- [Keyring](/gateway/keyring/)