OptionalauthAuthentication mode. Exactly one variant may be set.
Microsoft Foundry API key. Supply the value in api_key.plaintext.
Mutually exclusive with Entra ID and Unity Catalog service credential
authentication.
Reference to a Unity Catalog service credential authorizing Microsoft
Foundry requests. On Create, supply service_credential.name in the form
credentials/{name}. Required on Create when using service-credential
authentication; mutually exclusive with api_key and
entra_service_principal. The credential is referenced by name; its value
is not carried here. Only supported on Azure-hosted workspaces.
Entra ID service-principal authentication. Set tenant_id, client_id,
and client_secret.plaintext. Mutually exclusive with api_key and
service_credential.
OptionalbaseMicrosoft Foundry endpoint URL. Required on Create.
Direct form of Microsoft Foundry provider config.
Authentication is one of three mutually exclusive modes, exactly one of which must be supplied on Create:
api_key, leaveentra_service_principalandservice_credentialunset.entra_service_principal, leaveapi_keyandservice_credentialunset. AI Gateway exchanges these for an Entra bearer token on outbound requests via the OAuth2 client-credentials grant.service_credential.nameto the resource namecredentials/{name}, leaveapi_keyandentra_service_principalunset. The credential value lives in Unity Catalog and is referenced by name, not held on this message. Only supported on Azure-hosted workspaces. Setting more than one mode is rejected.