litellm/terraform/provider/docs/resources/key.md

litellm_key Resource

Manages a LiteLLM API key.

Example Usage

resource "litellm_key" "example" {
  models               = ["gpt-3.5-turbo", "gpt-4"]
  max_budget           = 100.0
  user_id              = "user123"
  team_id              = "team456"
  max_parallel_requests = 5
  metadata             = {
    "environment" = "production"
  }
  tpm_limit            = 1000
  rpm_limit            = 60
  budget_duration      = "monthly"
  allowed_cache_controls = ["no-cache", "max-age=3600"]
  soft_budget          = 80.0
  key_alias            = "prod-key-1"
  duration             = "30d"
  aliases              = {
    "gpt-3.5-turbo" = "chatgpt"
  }
  config               = {
    "default_model" = "gpt-3.5-turbo"
  }
  permissions          = {
    "can_create_keys" = "true"
  }
  model_max_budget     = {
    "gpt-4" = 50.0
  }
  model_rpm_limit      = {
    "gpt-3.5-turbo" = 30
  }
  model_tpm_limit      = {
    "gpt-4" = 500
  }
  guardrails           = ["content_filter", "token_limit"]
  blocked              = false
  tags                 = ["production", "api"]
}

Argument Reference

The following arguments are supported:

• models - (Optional) List of models that can be used with this key. This restricts the key to only use the specified models.

• max_budget - (Optional) Maximum budget for this key. This sets an upper limit on the total spend allowed for this key.

• user_id - (Optional) User ID associated with this key. This links the key to a specific user in the LiteLLM system.

• team_id - (Optional) Team ID associated with this key. This links the key to a specific team in the LiteLLM system.

• max_parallel_requests - (Optional) Maximum number of parallel requests allowed for this key. This helps in controlling concurrent usage.

• metadata - (Optional) Metadata associated with this key. This can be used to store additional, custom information about the key.

• tpm_limit - (Optional) Tokens per minute limit for this key. This sets a rate limit based on the number of tokens processed.

• rpm_limit - (Optional) Requests per minute limit for this key. This sets a rate limit based on the number of API calls.

• budget_duration - (Optional) Duration for the budget (e.g., "monthly", "weekly"). This defines the time period for which the max_budget applies.

• allowed_cache_controls - (Optional) List of allowed cache control directives. This can be used to control caching behavior for requests made with this key.

• soft_budget - (Optional) Soft budget limit for this key. This can be used to set a warning threshold before reaching the max_budget.

• key_alias - (Optional) Alias for this key. This provides a human-readable identifier for the key.

• duration - (Optional) Duration for which this key is valid. This sets an expiration time for the key.

• aliases - (Optional) Map of model aliases. This allows you to create custom names for models when using this key.

• config - (Optional) Configuration options for this key. This can be used to set key-specific settings.

• permissions - (Optional) Permissions associated with this key. This defines what actions are allowed with this key.

• model_max_budget - (Optional) Maximum budget per model. This allows setting different budget limits for each model.

• model_rpm_limit - (Optional) Requests per minute limit per model. This allows setting different RPM limits for each model.

• model_tpm_limit - (Optional) Tokens per minute limit per model. This allows setting different TPM limits for each model.

• guardrails - (Optional) List of guardrails applied to this key. This can be used to enforce certain safety or quality checks.

• blocked - (Optional) Whether this key is blocked. If set to true, the key will be unable to make any requests.

• tags - (Optional) List of tags associated with this key. This can be used for organization and filtering of keys.

• budget_id - (Optional) ID of a shared budget (created via litellm_budget) to attach to this key.

• enforced_params - (Optional) List of request parameters that callers must supply when using this key (for example user).

• allowed_routes - (Optional) List of proxy routes this key is allowed to call.

• allowed_passthrough_routes - (Optional) List of pass-through routes this key is allowed to call.

• rpm_limit_type - (Optional) How the RPM limit is enforced. One of guaranteed_throughput, best_effort_throughput or dynamic.

• tpm_limit_type - (Optional) How the TPM limit is enforced. One of guaranteed_throughput, best_effort_throughput or dynamic.

• prompts - (Optional) List of prompt IDs this key is allowed to use.

• organization_id - (Optional) ID of the organization this key belongs to.

• project_id - (Optional) ID of the project this key belongs to. Changing this forces a new key to be created.

Attribute Reference

In addition to all arguments above, the following attributes are exported:

• key - The generated API key. This is the actual key value that will be used for authentication.

• spend - The current spend for this key. This reflects the total amount spent using this key so far.

State Management

Recent updates have improved how the Key resource manages its state. The provider now ensures that all non-zero and non-empty values are correctly persisted in the Terraform state file. This means that any value you set will be accurately reflected in your state, preventing unnecessary updates and ensuring consistency between your configuration and the actual resource state.

Import

LiteLLM keys can be imported using the id, e.g.,

$ terraform import litellm_key.example 12345

This allows you to import existing keys into your Terraform state, enabling management of keys that were created outside of Terraform.