cloudflare.ZeroTrustAccessGroup
Explore with Pulumi AI
Provides a Cloudflare Access Group resource. Access Groups are used in conjunction with Access Policies to restrict access to a particular resource based on group membership.
It’s required that an
account_id
orzone_id
is provided and in most cases using either is fine. However, if you’re using a scoped access token, you must provide the argument that matches the token’s scope. For example, an access token that is scoped to the “example.com” zone needs to use thezone_id
argument.
Create ZeroTrustAccessGroup Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ZeroTrustAccessGroup(name: string, args: ZeroTrustAccessGroupArgs, opts?: CustomResourceOptions);
@overload
def ZeroTrustAccessGroup(resource_name: str,
args: ZeroTrustAccessGroupArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ZeroTrustAccessGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
includes: Optional[Sequence[ZeroTrustAccessGroupIncludeArgs]] = None,
name: Optional[str] = None,
account_id: Optional[str] = None,
excludes: Optional[Sequence[ZeroTrustAccessGroupExcludeArgs]] = None,
requires: Optional[Sequence[ZeroTrustAccessGroupRequireArgs]] = None,
zone_id: Optional[str] = None)
func NewZeroTrustAccessGroup(ctx *Context, name string, args ZeroTrustAccessGroupArgs, opts ...ResourceOption) (*ZeroTrustAccessGroup, error)
public ZeroTrustAccessGroup(string name, ZeroTrustAccessGroupArgs args, CustomResourceOptions? opts = null)
public ZeroTrustAccessGroup(String name, ZeroTrustAccessGroupArgs args)
public ZeroTrustAccessGroup(String name, ZeroTrustAccessGroupArgs args, CustomResourceOptions options)
type: cloudflare:ZeroTrustAccessGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ZeroTrustAccessGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ZeroTrustAccessGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ZeroTrustAccessGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ZeroTrustAccessGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ZeroTrustAccessGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var zeroTrustAccessGroupResource = new Cloudflare.ZeroTrustAccessGroup("zeroTrustAccessGroupResource", new()
{
Includes = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeArgs
{
AnyValidServiceToken = false,
AuthContexts = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeAuthContextArgs
{
AcId = "string",
Id = "string",
IdentityProviderId = "string",
},
},
AuthMethod = "string",
Azures = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeAzureArgs
{
IdentityProviderId = "string",
Ids = new[]
{
"string",
},
},
},
Certificate = false,
CommonName = "string",
CommonNames = new[]
{
"string",
},
DevicePostures = new[]
{
"string",
},
EmailDomains = new[]
{
"string",
},
EmailLists = new[]
{
"string",
},
Emails = new[]
{
"string",
},
Everyone = false,
ExternalEvaluations = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeExternalEvaluationArgs
{
EvaluateUrl = "string",
KeysUrl = "string",
},
},
Geos = new[]
{
"string",
},
Githubs = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGithubArgs
{
IdentityProviderId = "string",
Name = "string",
Teams = new[]
{
"string",
},
},
},
Groups = new[]
{
"string",
},
Gsuites = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGsuiteArgs
{
Emails = new[]
{
"string",
},
IdentityProviderId = "string",
},
},
IpLists = new[]
{
"string",
},
Ips = new[]
{
"string",
},
LoginMethods = new[]
{
"string",
},
Oktas = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeOktaArgs
{
IdentityProviderId = "string",
Names = new[]
{
"string",
},
},
},
Samls = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeSamlArgs
{
AttributeName = "string",
AttributeValue = "string",
IdentityProviderId = "string",
},
},
ServiceTokens = new[]
{
"string",
},
},
},
Name = "string",
AccountId = "string",
Excludes = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeArgs
{
AnyValidServiceToken = false,
AuthContexts = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeAuthContextArgs
{
AcId = "string",
Id = "string",
IdentityProviderId = "string",
},
},
AuthMethod = "string",
Azures = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeAzureArgs
{
IdentityProviderId = "string",
Ids = new[]
{
"string",
},
},
},
Certificate = false,
CommonName = "string",
CommonNames = new[]
{
"string",
},
DevicePostures = new[]
{
"string",
},
EmailDomains = new[]
{
"string",
},
EmailLists = new[]
{
"string",
},
Emails = new[]
{
"string",
},
Everyone = false,
ExternalEvaluations = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeExternalEvaluationArgs
{
EvaluateUrl = "string",
KeysUrl = "string",
},
},
Geos = new[]
{
"string",
},
Githubs = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGithubArgs
{
IdentityProviderId = "string",
Name = "string",
Teams = new[]
{
"string",
},
},
},
Groups = new[]
{
"string",
},
Gsuites = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGsuiteArgs
{
Emails = new[]
{
"string",
},
IdentityProviderId = "string",
},
},
IpLists = new[]
{
"string",
},
Ips = new[]
{
"string",
},
LoginMethods = new[]
{
"string",
},
Oktas = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeOktaArgs
{
IdentityProviderId = "string",
Names = new[]
{
"string",
},
},
},
Samls = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeSamlArgs
{
AttributeName = "string",
AttributeValue = "string",
IdentityProviderId = "string",
},
},
ServiceTokens = new[]
{
"string",
},
},
},
Requires = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupRequireArgs
{
AnyValidServiceToken = false,
AuthContexts = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupRequireAuthContextArgs
{
AcId = "string",
Id = "string",
IdentityProviderId = "string",
},
},
AuthMethod = "string",
Azures = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupRequireAzureArgs
{
IdentityProviderId = "string",
Ids = new[]
{
"string",
},
},
},
Certificate = false,
CommonName = "string",
CommonNames = new[]
{
"string",
},
DevicePostures = new[]
{
"string",
},
EmailDomains = new[]
{
"string",
},
EmailLists = new[]
{
"string",
},
Emails = new[]
{
"string",
},
Everyone = false,
ExternalEvaluations = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupRequireExternalEvaluationArgs
{
EvaluateUrl = "string",
KeysUrl = "string",
},
},
Geos = new[]
{
"string",
},
Githubs = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGithubArgs
{
IdentityProviderId = "string",
Name = "string",
Teams = new[]
{
"string",
},
},
},
Groups = new[]
{
"string",
},
Gsuites = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGsuiteArgs
{
Emails = new[]
{
"string",
},
IdentityProviderId = "string",
},
},
IpLists = new[]
{
"string",
},
Ips = new[]
{
"string",
},
LoginMethods = new[]
{
"string",
},
Oktas = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupRequireOktaArgs
{
IdentityProviderId = "string",
Names = new[]
{
"string",
},
},
},
Samls = new[]
{
new Cloudflare.Inputs.ZeroTrustAccessGroupRequireSamlArgs
{
AttributeName = "string",
AttributeValue = "string",
IdentityProviderId = "string",
},
},
ServiceTokens = new[]
{
"string",
},
},
},
ZoneId = "string",
});
example, err := cloudflare.NewZeroTrustAccessGroup(ctx, "zeroTrustAccessGroupResource", &cloudflare.ZeroTrustAccessGroupArgs{
Includes: cloudflare.ZeroTrustAccessGroupIncludeArray{
&cloudflare.ZeroTrustAccessGroupIncludeArgs{
AnyValidServiceToken: pulumi.Bool(false),
AuthContexts: cloudflare.ZeroTrustAccessGroupIncludeAuthContextArray{
&cloudflare.ZeroTrustAccessGroupIncludeAuthContextArgs{
AcId: pulumi.String("string"),
Id: pulumi.String("string"),
IdentityProviderId: pulumi.String("string"),
},
},
AuthMethod: pulumi.String("string"),
Azures: cloudflare.ZeroTrustAccessGroupIncludeAzureArray{
&cloudflare.ZeroTrustAccessGroupIncludeAzureArgs{
IdentityProviderId: pulumi.String("string"),
Ids: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Certificate: pulumi.Bool(false),
CommonName: pulumi.String("string"),
CommonNames: pulumi.StringArray{
pulumi.String("string"),
},
DevicePostures: pulumi.StringArray{
pulumi.String("string"),
},
EmailDomains: pulumi.StringArray{
pulumi.String("string"),
},
EmailLists: pulumi.StringArray{
pulumi.String("string"),
},
Emails: pulumi.StringArray{
pulumi.String("string"),
},
Everyone: pulumi.Bool(false),
ExternalEvaluations: cloudflare.ZeroTrustAccessGroupIncludeExternalEvaluationArray{
&cloudflare.ZeroTrustAccessGroupIncludeExternalEvaluationArgs{
EvaluateUrl: pulumi.String("string"),
KeysUrl: pulumi.String("string"),
},
},
Geos: pulumi.StringArray{
pulumi.String("string"),
},
Githubs: cloudflare.ZeroTrustAccessGroupIncludeGithubArray{
&cloudflare.ZeroTrustAccessGroupIncludeGithubArgs{
IdentityProviderId: pulumi.String("string"),
Name: pulumi.String("string"),
Teams: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Groups: pulumi.StringArray{
pulumi.String("string"),
},
Gsuites: cloudflare.ZeroTrustAccessGroupIncludeGsuiteArray{
&cloudflare.ZeroTrustAccessGroupIncludeGsuiteArgs{
Emails: pulumi.StringArray{
pulumi.String("string"),
},
IdentityProviderId: pulumi.String("string"),
},
},
IpLists: pulumi.StringArray{
pulumi.String("string"),
},
Ips: pulumi.StringArray{
pulumi.String("string"),
},
LoginMethods: pulumi.StringArray{
pulumi.String("string"),
},
Oktas: cloudflare.ZeroTrustAccessGroupIncludeOktaArray{
&cloudflare.ZeroTrustAccessGroupIncludeOktaArgs{
IdentityProviderId: pulumi.String("string"),
Names: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Samls: cloudflare.ZeroTrustAccessGroupIncludeSamlArray{
&cloudflare.ZeroTrustAccessGroupIncludeSamlArgs{
AttributeName: pulumi.String("string"),
AttributeValue: pulumi.String("string"),
IdentityProviderId: pulumi.String("string"),
},
},
ServiceTokens: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Name: pulumi.String("string"),
AccountId: pulumi.String("string"),
Excludes: cloudflare.ZeroTrustAccessGroupExcludeArray{
&cloudflare.ZeroTrustAccessGroupExcludeArgs{
AnyValidServiceToken: pulumi.Bool(false),
AuthContexts: cloudflare.ZeroTrustAccessGroupExcludeAuthContextArray{
&cloudflare.ZeroTrustAccessGroupExcludeAuthContextArgs{
AcId: pulumi.String("string"),
Id: pulumi.String("string"),
IdentityProviderId: pulumi.String("string"),
},
},
AuthMethod: pulumi.String("string"),
Azures: cloudflare.ZeroTrustAccessGroupExcludeAzureArray{
&cloudflare.ZeroTrustAccessGroupExcludeAzureArgs{
IdentityProviderId: pulumi.String("string"),
Ids: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Certificate: pulumi.Bool(false),
CommonName: pulumi.String("string"),
CommonNames: pulumi.StringArray{
pulumi.String("string"),
},
DevicePostures: pulumi.StringArray{
pulumi.String("string"),
},
EmailDomains: pulumi.StringArray{
pulumi.String("string"),
},
EmailLists: pulumi.StringArray{
pulumi.String("string"),
},
Emails: pulumi.StringArray{
pulumi.String("string"),
},
Everyone: pulumi.Bool(false),
ExternalEvaluations: cloudflare.ZeroTrustAccessGroupExcludeExternalEvaluationArray{
&cloudflare.ZeroTrustAccessGroupExcludeExternalEvaluationArgs{
EvaluateUrl: pulumi.String("string"),
KeysUrl: pulumi.String("string"),
},
},
Geos: pulumi.StringArray{
pulumi.String("string"),
},
Githubs: cloudflare.ZeroTrustAccessGroupExcludeGithubArray{
&cloudflare.ZeroTrustAccessGroupExcludeGithubArgs{
IdentityProviderId: pulumi.String("string"),
Name: pulumi.String("string"),
Teams: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Groups: pulumi.StringArray{
pulumi.String("string"),
},
Gsuites: cloudflare.ZeroTrustAccessGroupExcludeGsuiteArray{
&cloudflare.ZeroTrustAccessGroupExcludeGsuiteArgs{
Emails: pulumi.StringArray{
pulumi.String("string"),
},
IdentityProviderId: pulumi.String("string"),
},
},
IpLists: pulumi.StringArray{
pulumi.String("string"),
},
Ips: pulumi.StringArray{
pulumi.String("string"),
},
LoginMethods: pulumi.StringArray{
pulumi.String("string"),
},
Oktas: cloudflare.ZeroTrustAccessGroupExcludeOktaArray{
&cloudflare.ZeroTrustAccessGroupExcludeOktaArgs{
IdentityProviderId: pulumi.String("string"),
Names: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Samls: cloudflare.ZeroTrustAccessGroupExcludeSamlArray{
&cloudflare.ZeroTrustAccessGroupExcludeSamlArgs{
AttributeName: pulumi.String("string"),
AttributeValue: pulumi.String("string"),
IdentityProviderId: pulumi.String("string"),
},
},
ServiceTokens: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Requires: cloudflare.ZeroTrustAccessGroupRequireArray{
&cloudflare.ZeroTrustAccessGroupRequireArgs{
AnyValidServiceToken: pulumi.Bool(false),
AuthContexts: cloudflare.ZeroTrustAccessGroupRequireAuthContextArray{
&cloudflare.ZeroTrustAccessGroupRequireAuthContextArgs{
AcId: pulumi.String("string"),
Id: pulumi.String("string"),
IdentityProviderId: pulumi.String("string"),
},
},
AuthMethod: pulumi.String("string"),
Azures: cloudflare.ZeroTrustAccessGroupRequireAzureArray{
&cloudflare.ZeroTrustAccessGroupRequireAzureArgs{
IdentityProviderId: pulumi.String("string"),
Ids: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Certificate: pulumi.Bool(false),
CommonName: pulumi.String("string"),
CommonNames: pulumi.StringArray{
pulumi.String("string"),
},
DevicePostures: pulumi.StringArray{
pulumi.String("string"),
},
EmailDomains: pulumi.StringArray{
pulumi.String("string"),
},
EmailLists: pulumi.StringArray{
pulumi.String("string"),
},
Emails: pulumi.StringArray{
pulumi.String("string"),
},
Everyone: pulumi.Bool(false),
ExternalEvaluations: cloudflare.ZeroTrustAccessGroupRequireExternalEvaluationArray{
&cloudflare.ZeroTrustAccessGroupRequireExternalEvaluationArgs{
EvaluateUrl: pulumi.String("string"),
KeysUrl: pulumi.String("string"),
},
},
Geos: pulumi.StringArray{
pulumi.String("string"),
},
Githubs: cloudflare.ZeroTrustAccessGroupRequireGithubArray{
&cloudflare.ZeroTrustAccessGroupRequireGithubArgs{
IdentityProviderId: pulumi.String("string"),
Name: pulumi.String("string"),
Teams: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Groups: pulumi.StringArray{
pulumi.String("string"),
},
Gsuites: cloudflare.ZeroTrustAccessGroupRequireGsuiteArray{
&cloudflare.ZeroTrustAccessGroupRequireGsuiteArgs{
Emails: pulumi.StringArray{
pulumi.String("string"),
},
IdentityProviderId: pulumi.String("string"),
},
},
IpLists: pulumi.StringArray{
pulumi.String("string"),
},
Ips: pulumi.StringArray{
pulumi.String("string"),
},
LoginMethods: pulumi.StringArray{
pulumi.String("string"),
},
Oktas: cloudflare.ZeroTrustAccessGroupRequireOktaArray{
&cloudflare.ZeroTrustAccessGroupRequireOktaArgs{
IdentityProviderId: pulumi.String("string"),
Names: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Samls: cloudflare.ZeroTrustAccessGroupRequireSamlArray{
&cloudflare.ZeroTrustAccessGroupRequireSamlArgs{
AttributeName: pulumi.String("string"),
AttributeValue: pulumi.String("string"),
IdentityProviderId: pulumi.String("string"),
},
},
ServiceTokens: pulumi.StringArray{
pulumi.String("string"),
},
},
},
ZoneId: pulumi.String("string"),
})
var zeroTrustAccessGroupResource = new ZeroTrustAccessGroup("zeroTrustAccessGroupResource", ZeroTrustAccessGroupArgs.builder()
.includes(ZeroTrustAccessGroupIncludeArgs.builder()
.anyValidServiceToken(false)
.authContexts(ZeroTrustAccessGroupIncludeAuthContextArgs.builder()
.acId("string")
.id("string")
.identityProviderId("string")
.build())
.authMethod("string")
.azures(ZeroTrustAccessGroupIncludeAzureArgs.builder()
.identityProviderId("string")
.ids("string")
.build())
.certificate(false)
.commonName("string")
.commonNames("string")
.devicePostures("string")
.emailDomains("string")
.emailLists("string")
.emails("string")
.everyone(false)
.externalEvaluations(ZeroTrustAccessGroupIncludeExternalEvaluationArgs.builder()
.evaluateUrl("string")
.keysUrl("string")
.build())
.geos("string")
.githubs(ZeroTrustAccessGroupIncludeGithubArgs.builder()
.identityProviderId("string")
.name("string")
.teams("string")
.build())
.groups("string")
.gsuites(ZeroTrustAccessGroupIncludeGsuiteArgs.builder()
.emails("string")
.identityProviderId("string")
.build())
.ipLists("string")
.ips("string")
.loginMethods("string")
.oktas(ZeroTrustAccessGroupIncludeOktaArgs.builder()
.identityProviderId("string")
.names("string")
.build())
.samls(ZeroTrustAccessGroupIncludeSamlArgs.builder()
.attributeName("string")
.attributeValue("string")
.identityProviderId("string")
.build())
.serviceTokens("string")
.build())
.name("string")
.accountId("string")
.excludes(ZeroTrustAccessGroupExcludeArgs.builder()
.anyValidServiceToken(false)
.authContexts(ZeroTrustAccessGroupExcludeAuthContextArgs.builder()
.acId("string")
.id("string")
.identityProviderId("string")
.build())
.authMethod("string")
.azures(ZeroTrustAccessGroupExcludeAzureArgs.builder()
.identityProviderId("string")
.ids("string")
.build())
.certificate(false)
.commonName("string")
.commonNames("string")
.devicePostures("string")
.emailDomains("string")
.emailLists("string")
.emails("string")
.everyone(false)
.externalEvaluations(ZeroTrustAccessGroupExcludeExternalEvaluationArgs.builder()
.evaluateUrl("string")
.keysUrl("string")
.build())
.geos("string")
.githubs(ZeroTrustAccessGroupExcludeGithubArgs.builder()
.identityProviderId("string")
.name("string")
.teams("string")
.build())
.groups("string")
.gsuites(ZeroTrustAccessGroupExcludeGsuiteArgs.builder()
.emails("string")
.identityProviderId("string")
.build())
.ipLists("string")
.ips("string")
.loginMethods("string")
.oktas(ZeroTrustAccessGroupExcludeOktaArgs.builder()
.identityProviderId("string")
.names("string")
.build())
.samls(ZeroTrustAccessGroupExcludeSamlArgs.builder()
.attributeName("string")
.attributeValue("string")
.identityProviderId("string")
.build())
.serviceTokens("string")
.build())
.requires(ZeroTrustAccessGroupRequireArgs.builder()
.anyValidServiceToken(false)
.authContexts(ZeroTrustAccessGroupRequireAuthContextArgs.builder()
.acId("string")
.id("string")
.identityProviderId("string")
.build())
.authMethod("string")
.azures(ZeroTrustAccessGroupRequireAzureArgs.builder()
.identityProviderId("string")
.ids("string")
.build())
.certificate(false)
.commonName("string")
.commonNames("string")
.devicePostures("string")
.emailDomains("string")
.emailLists("string")
.emails("string")
.everyone(false)
.externalEvaluations(ZeroTrustAccessGroupRequireExternalEvaluationArgs.builder()
.evaluateUrl("string")
.keysUrl("string")
.build())
.geos("string")
.githubs(ZeroTrustAccessGroupRequireGithubArgs.builder()
.identityProviderId("string")
.name("string")
.teams("string")
.build())
.groups("string")
.gsuites(ZeroTrustAccessGroupRequireGsuiteArgs.builder()
.emails("string")
.identityProviderId("string")
.build())
.ipLists("string")
.ips("string")
.loginMethods("string")
.oktas(ZeroTrustAccessGroupRequireOktaArgs.builder()
.identityProviderId("string")
.names("string")
.build())
.samls(ZeroTrustAccessGroupRequireSamlArgs.builder()
.attributeName("string")
.attributeValue("string")
.identityProviderId("string")
.build())
.serviceTokens("string")
.build())
.zoneId("string")
.build());
zero_trust_access_group_resource = cloudflare.ZeroTrustAccessGroup("zeroTrustAccessGroupResource",
includes=[{
"any_valid_service_token": False,
"auth_contexts": [{
"ac_id": "string",
"id": "string",
"identity_provider_id": "string",
}],
"auth_method": "string",
"azures": [{
"identity_provider_id": "string",
"ids": ["string"],
}],
"certificate": False,
"common_name": "string",
"common_names": ["string"],
"device_postures": ["string"],
"email_domains": ["string"],
"email_lists": ["string"],
"emails": ["string"],
"everyone": False,
"external_evaluations": [{
"evaluate_url": "string",
"keys_url": "string",
}],
"geos": ["string"],
"githubs": [{
"identity_provider_id": "string",
"name": "string",
"teams": ["string"],
}],
"groups": ["string"],
"gsuites": [{
"emails": ["string"],
"identity_provider_id": "string",
}],
"ip_lists": ["string"],
"ips": ["string"],
"login_methods": ["string"],
"oktas": [{
"identity_provider_id": "string",
"names": ["string"],
}],
"samls": [{
"attribute_name": "string",
"attribute_value": "string",
"identity_provider_id": "string",
}],
"service_tokens": ["string"],
}],
name="string",
account_id="string",
excludes=[{
"any_valid_service_token": False,
"auth_contexts": [{
"ac_id": "string",
"id": "string",
"identity_provider_id": "string",
}],
"auth_method": "string",
"azures": [{
"identity_provider_id": "string",
"ids": ["string"],
}],
"certificate": False,
"common_name": "string",
"common_names": ["string"],
"device_postures": ["string"],
"email_domains": ["string"],
"email_lists": ["string"],
"emails": ["string"],
"everyone": False,
"external_evaluations": [{
"evaluate_url": "string",
"keys_url": "string",
}],
"geos": ["string"],
"githubs": [{
"identity_provider_id": "string",
"name": "string",
"teams": ["string"],
}],
"groups": ["string"],
"gsuites": [{
"emails": ["string"],
"identity_provider_id": "string",
}],
"ip_lists": ["string"],
"ips": ["string"],
"login_methods": ["string"],
"oktas": [{
"identity_provider_id": "string",
"names": ["string"],
}],
"samls": [{
"attribute_name": "string",
"attribute_value": "string",
"identity_provider_id": "string",
}],
"service_tokens": ["string"],
}],
requires=[{
"any_valid_service_token": False,
"auth_contexts": [{
"ac_id": "string",
"id": "string",
"identity_provider_id": "string",
}],
"auth_method": "string",
"azures": [{
"identity_provider_id": "string",
"ids": ["string"],
}],
"certificate": False,
"common_name": "string",
"common_names": ["string"],
"device_postures": ["string"],
"email_domains": ["string"],
"email_lists": ["string"],
"emails": ["string"],
"everyone": False,
"external_evaluations": [{
"evaluate_url": "string",
"keys_url": "string",
}],
"geos": ["string"],
"githubs": [{
"identity_provider_id": "string",
"name": "string",
"teams": ["string"],
}],
"groups": ["string"],
"gsuites": [{
"emails": ["string"],
"identity_provider_id": "string",
}],
"ip_lists": ["string"],
"ips": ["string"],
"login_methods": ["string"],
"oktas": [{
"identity_provider_id": "string",
"names": ["string"],
}],
"samls": [{
"attribute_name": "string",
"attribute_value": "string",
"identity_provider_id": "string",
}],
"service_tokens": ["string"],
}],
zone_id="string")
const zeroTrustAccessGroupResource = new cloudflare.ZeroTrustAccessGroup("zeroTrustAccessGroupResource", {
includes: [{
anyValidServiceToken: false,
authContexts: [{
acId: "string",
id: "string",
identityProviderId: "string",
}],
authMethod: "string",
azures: [{
identityProviderId: "string",
ids: ["string"],
}],
certificate: false,
commonName: "string",
commonNames: ["string"],
devicePostures: ["string"],
emailDomains: ["string"],
emailLists: ["string"],
emails: ["string"],
everyone: false,
externalEvaluations: [{
evaluateUrl: "string",
keysUrl: "string",
}],
geos: ["string"],
githubs: [{
identityProviderId: "string",
name: "string",
teams: ["string"],
}],
groups: ["string"],
gsuites: [{
emails: ["string"],
identityProviderId: "string",
}],
ipLists: ["string"],
ips: ["string"],
loginMethods: ["string"],
oktas: [{
identityProviderId: "string",
names: ["string"],
}],
samls: [{
attributeName: "string",
attributeValue: "string",
identityProviderId: "string",
}],
serviceTokens: ["string"],
}],
name: "string",
accountId: "string",
excludes: [{
anyValidServiceToken: false,
authContexts: [{
acId: "string",
id: "string",
identityProviderId: "string",
}],
authMethod: "string",
azures: [{
identityProviderId: "string",
ids: ["string"],
}],
certificate: false,
commonName: "string",
commonNames: ["string"],
devicePostures: ["string"],
emailDomains: ["string"],
emailLists: ["string"],
emails: ["string"],
everyone: false,
externalEvaluations: [{
evaluateUrl: "string",
keysUrl: "string",
}],
geos: ["string"],
githubs: [{
identityProviderId: "string",
name: "string",
teams: ["string"],
}],
groups: ["string"],
gsuites: [{
emails: ["string"],
identityProviderId: "string",
}],
ipLists: ["string"],
ips: ["string"],
loginMethods: ["string"],
oktas: [{
identityProviderId: "string",
names: ["string"],
}],
samls: [{
attributeName: "string",
attributeValue: "string",
identityProviderId: "string",
}],
serviceTokens: ["string"],
}],
requires: [{
anyValidServiceToken: false,
authContexts: [{
acId: "string",
id: "string",
identityProviderId: "string",
}],
authMethod: "string",
azures: [{
identityProviderId: "string",
ids: ["string"],
}],
certificate: false,
commonName: "string",
commonNames: ["string"],
devicePostures: ["string"],
emailDomains: ["string"],
emailLists: ["string"],
emails: ["string"],
everyone: false,
externalEvaluations: [{
evaluateUrl: "string",
keysUrl: "string",
}],
geos: ["string"],
githubs: [{
identityProviderId: "string",
name: "string",
teams: ["string"],
}],
groups: ["string"],
gsuites: [{
emails: ["string"],
identityProviderId: "string",
}],
ipLists: ["string"],
ips: ["string"],
loginMethods: ["string"],
oktas: [{
identityProviderId: "string",
names: ["string"],
}],
samls: [{
attributeName: "string",
attributeValue: "string",
identityProviderId: "string",
}],
serviceTokens: ["string"],
}],
zoneId: "string",
});
type: cloudflare:ZeroTrustAccessGroup
properties:
accountId: string
excludes:
- anyValidServiceToken: false
authContexts:
- acId: string
id: string
identityProviderId: string
authMethod: string
azures:
- identityProviderId: string
ids:
- string
certificate: false
commonName: string
commonNames:
- string
devicePostures:
- string
emailDomains:
- string
emailLists:
- string
emails:
- string
everyone: false
externalEvaluations:
- evaluateUrl: string
keysUrl: string
geos:
- string
githubs:
- identityProviderId: string
name: string
teams:
- string
groups:
- string
gsuites:
- emails:
- string
identityProviderId: string
ipLists:
- string
ips:
- string
loginMethods:
- string
oktas:
- identityProviderId: string
names:
- string
samls:
- attributeName: string
attributeValue: string
identityProviderId: string
serviceTokens:
- string
includes:
- anyValidServiceToken: false
authContexts:
- acId: string
id: string
identityProviderId: string
authMethod: string
azures:
- identityProviderId: string
ids:
- string
certificate: false
commonName: string
commonNames:
- string
devicePostures:
- string
emailDomains:
- string
emailLists:
- string
emails:
- string
everyone: false
externalEvaluations:
- evaluateUrl: string
keysUrl: string
geos:
- string
githubs:
- identityProviderId: string
name: string
teams:
- string
groups:
- string
gsuites:
- emails:
- string
identityProviderId: string
ipLists:
- string
ips:
- string
loginMethods:
- string
oktas:
- identityProviderId: string
names:
- string
samls:
- attributeName: string
attributeValue: string
identityProviderId: string
serviceTokens:
- string
name: string
requires:
- anyValidServiceToken: false
authContexts:
- acId: string
id: string
identityProviderId: string
authMethod: string
azures:
- identityProviderId: string
ids:
- string
certificate: false
commonName: string
commonNames:
- string
devicePostures:
- string
emailDomains:
- string
emailLists:
- string
emails:
- string
everyone: false
externalEvaluations:
- evaluateUrl: string
keysUrl: string
geos:
- string
githubs:
- identityProviderId: string
name: string
teams:
- string
groups:
- string
gsuites:
- emails:
- string
identityProviderId: string
ipLists:
- string
ips:
- string
loginMethods:
- string
oktas:
- identityProviderId: string
names:
- string
samls:
- attributeName: string
attributeValue: string
identityProviderId: string
serviceTokens:
- string
zoneId: string
ZeroTrustAccessGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ZeroTrustAccessGroup resource accepts the following input properties:
- Includes
List<Zero
Trust Access Group Include> - Name string
- Account
Id string - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - Excludes
List<Zero
Trust Access Group Exclude> - Requires
List<Zero
Trust Access Group Require> - Zone
Id string - The zone identifier to target for the resource. Conflicts with
account_id
.
- Includes
[]Zero
Trust Access Group Include Args - Name string
- Account
Id string - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - Excludes
[]Zero
Trust Access Group Exclude Args - Requires
[]Zero
Trust Access Group Require Args - Zone
Id string - The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
List<Zero
Trust Access Group Include> - name String
- account
Id String - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - excludes
List<Zero
Trust Access Group Exclude> - requires
List<Zero
Trust Access Group Require> - zone
Id String - The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
Zero
Trust Access Group Include[] - name string
- account
Id string - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - excludes
Zero
Trust Access Group Exclude[] - requires
Zero
Trust Access Group Require[] - zone
Id string - The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
Sequence[Zero
Trust Access Group Include Args] - name str
- account_
id str - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - excludes
Sequence[Zero
Trust Access Group Exclude Args] - requires
Sequence[Zero
Trust Access Group Require Args] - zone_
id str - The zone identifier to target for the resource. Conflicts with
account_id
.
- includes List<Property Map>
- name String
- account
Id String - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - excludes List<Property Map>
- requires List<Property Map>
- zone
Id String - The zone identifier to target for the resource. Conflicts with
account_id
.
Outputs
All input properties are implicitly available as output properties. Additionally, the ZeroTrustAccessGroup resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing ZeroTrustAccessGroup Resource
Get an existing ZeroTrustAccessGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ZeroTrustAccessGroupState, opts?: CustomResourceOptions): ZeroTrustAccessGroup
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
excludes: Optional[Sequence[ZeroTrustAccessGroupExcludeArgs]] = None,
includes: Optional[Sequence[ZeroTrustAccessGroupIncludeArgs]] = None,
name: Optional[str] = None,
requires: Optional[Sequence[ZeroTrustAccessGroupRequireArgs]] = None,
zone_id: Optional[str] = None) -> ZeroTrustAccessGroup
func GetZeroTrustAccessGroup(ctx *Context, name string, id IDInput, state *ZeroTrustAccessGroupState, opts ...ResourceOption) (*ZeroTrustAccessGroup, error)
public static ZeroTrustAccessGroup Get(string name, Input<string> id, ZeroTrustAccessGroupState? state, CustomResourceOptions? opts = null)
public static ZeroTrustAccessGroup get(String name, Output<String> id, ZeroTrustAccessGroupState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Id string - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - Excludes
List<Zero
Trust Access Group Exclude> - Includes
List<Zero
Trust Access Group Include> - Name string
- Requires
List<Zero
Trust Access Group Require> - Zone
Id string - The zone identifier to target for the resource. Conflicts with
account_id
.
- Account
Id string - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - Excludes
[]Zero
Trust Access Group Exclude Args - Includes
[]Zero
Trust Access Group Include Args - Name string
- Requires
[]Zero
Trust Access Group Require Args - Zone
Id string - The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id String - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - excludes
List<Zero
Trust Access Group Exclude> - includes
List<Zero
Trust Access Group Include> - name String
- requires
List<Zero
Trust Access Group Require> - zone
Id String - The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id string - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - excludes
Zero
Trust Access Group Exclude[] - includes
Zero
Trust Access Group Include[] - name string
- requires
Zero
Trust Access Group Require[] - zone
Id string - The zone identifier to target for the resource. Conflicts with
account_id
.
- account_
id str - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - excludes
Sequence[Zero
Trust Access Group Exclude Args] - includes
Sequence[Zero
Trust Access Group Include Args] - name str
- requires
Sequence[Zero
Trust Access Group Require Args] - zone_
id str - The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id String - The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource. - excludes List<Property Map>
- includes List<Property Map>
- name String
- requires List<Property Map>
- zone
Id String - The zone identifier to target for the resource. Conflicts with
account_id
.
Supporting Types
ZeroTrustAccessGroupExclude, ZeroTrustAccessGroupExcludeArgs
- Any
Valid boolService Token - Matches any valid Access service token.
- Auth
Contexts List<ZeroTrust Access Group Exclude Auth Context> - Auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- Azures
List<Zero
Trust Access Group Exclude Azure> - Matches an Azure group. Requires an Azure identity provider.
- Certificate bool
- Matches any valid client certificate.
- Common
Name string - Matches a valid client certificate common name.
- Common
Names List<string> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- Device
Postures List<string> - The ID of a device posture integration.
- Email
Domains List<string> - The email domain to match.
- Email
Lists List<string> - The ID of a previously created email list.
- Emails List<string>
- The email of the user.
- Everyone bool
- Matches everyone.
- External
Evaluations List<ZeroTrust Access Group Exclude External Evaluation> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- Geos List<string>
- Matches a specific country.
- Githubs
List<Zero
Trust Access Group Exclude Github> - Matches a Github organization. Requires a Github identity provider.
- Groups List<string>
- The ID of a previously created Access group.
- Gsuites
List<Zero
Trust Access Group Exclude Gsuite> - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- Ip
Lists List<string> - The ID of a previously created IP list.
- Ips List<string>
- An IPv4 or IPv6 CIDR block.
- Login
Methods List<string> - The ID of a configured identity provider.
- Oktas
List<Zero
Trust Access Group Exclude Okta> - Matches an Okta group. Requires an Okta identity provider.
- Samls
List<Zero
Trust Access Group Exclude Saml> - Matches a SAML group. Requires a SAML identity provider.
- Service
Tokens List<string> - The ID of an Access service token.
- Any
Valid boolService Token - Matches any valid Access service token.
- Auth
Contexts []ZeroTrust Access Group Exclude Auth Context - Auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- Azures
[]Zero
Trust Access Group Exclude Azure - Matches an Azure group. Requires an Azure identity provider.
- Certificate bool
- Matches any valid client certificate.
- Common
Name string - Matches a valid client certificate common name.
- Common
Names []string - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- Device
Postures []string - The ID of a device posture integration.
- Email
Domains []string - The email domain to match.
- Email
Lists []string - The ID of a previously created email list.
- Emails []string
- The email of the user.
- Everyone bool
- Matches everyone.
- External
Evaluations []ZeroTrust Access Group Exclude External Evaluation - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- Geos []string
- Matches a specific country.
- Githubs
[]Zero
Trust Access Group Exclude Github - Matches a Github organization. Requires a Github identity provider.
- Groups []string
- The ID of a previously created Access group.
- Gsuites
[]Zero
Trust Access Group Exclude Gsuite - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- Ip
Lists []string - The ID of a previously created IP list.
- Ips []string
- An IPv4 or IPv6 CIDR block.
- Login
Methods []string - The ID of a configured identity provider.
- Oktas
[]Zero
Trust Access Group Exclude Okta - Matches an Okta group. Requires an Okta identity provider.
- Samls
[]Zero
Trust Access Group Exclude Saml - Matches a SAML group. Requires a SAML identity provider.
- Service
Tokens []string - The ID of an Access service token.
- any
Valid BooleanService Token - Matches any valid Access service token.
- auth
Contexts List<ZeroTrust Access Group Exclude Auth Context> - auth
Method String - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
List<Zero
Trust Access Group Exclude Azure> - Matches an Azure group. Requires an Azure identity provider.
- certificate Boolean
- Matches any valid client certificate.
- common
Name String - Matches a valid client certificate common name.
- common
Names List<String> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures List<String> - The ID of a device posture integration.
- email
Domains List<String> - The email domain to match.
- email
Lists List<String> - The ID of a previously created email list.
- emails List<String>
- The email of the user.
- everyone Boolean
- Matches everyone.
- external
Evaluations List<ZeroTrust Access Group Exclude External Evaluation> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos List<String>
- Matches a specific country.
- githubs
List<Zero
Trust Access Group Exclude Github> - Matches a Github organization. Requires a Github identity provider.
- groups List<String>
- The ID of a previously created Access group.
- gsuites
List<Zero
Trust Access Group Exclude Gsuite> - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists List<String> - The ID of a previously created IP list.
- ips List<String>
- An IPv4 or IPv6 CIDR block.
- login
Methods List<String> - The ID of a configured identity provider.
- oktas
List<Zero
Trust Access Group Exclude Okta> - Matches an Okta group. Requires an Okta identity provider.
- samls
List<Zero
Trust Access Group Exclude Saml> - Matches a SAML group. Requires a SAML identity provider.
- service
Tokens List<String> - The ID of an Access service token.
- any
Valid booleanService Token - Matches any valid Access service token.
- auth
Contexts ZeroTrust Access Group Exclude Auth Context[] - auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
Zero
Trust Access Group Exclude Azure[] - Matches an Azure group. Requires an Azure identity provider.
- certificate boolean
- Matches any valid client certificate.
- common
Name string - Matches a valid client certificate common name.
- common
Names string[] - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures string[] - The ID of a device posture integration.
- email
Domains string[] - The email domain to match.
- email
Lists string[] - The ID of a previously created email list.
- emails string[]
- The email of the user.
- everyone boolean
- Matches everyone.
- external
Evaluations ZeroTrust Access Group Exclude External Evaluation[] - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos string[]
- Matches a specific country.
- githubs
Zero
Trust Access Group Exclude Github[] - Matches a Github organization. Requires a Github identity provider.
- groups string[]
- The ID of a previously created Access group.
- gsuites
Zero
Trust Access Group Exclude Gsuite[] - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists string[] - The ID of a previously created IP list.
- ips string[]
- An IPv4 or IPv6 CIDR block.
- login
Methods string[] - The ID of a configured identity provider.
- oktas
Zero
Trust Access Group Exclude Okta[] - Matches an Okta group. Requires an Okta identity provider.
- samls
Zero
Trust Access Group Exclude Saml[] - Matches a SAML group. Requires a SAML identity provider.
- service
Tokens string[] - The ID of an Access service token.
- any_
valid_ boolservice_ token - Matches any valid Access service token.
- auth_
contexts Sequence[ZeroTrust Access Group Exclude Auth Context] - auth_
method str - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
Sequence[Zero
Trust Access Group Exclude Azure] - Matches an Azure group. Requires an Azure identity provider.
- certificate bool
- Matches any valid client certificate.
- common_
name str - Matches a valid client certificate common name.
- common_
names Sequence[str] - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device_
postures Sequence[str] - The ID of a device posture integration.
- email_
domains Sequence[str] - The email domain to match.
- email_
lists Sequence[str] - The ID of a previously created email list.
- emails Sequence[str]
- The email of the user.
- everyone bool
- Matches everyone.
- external_
evaluations Sequence[ZeroTrust Access Group Exclude External Evaluation] - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos Sequence[str]
- Matches a specific country.
- githubs
Sequence[Zero
Trust Access Group Exclude Github] - Matches a Github organization. Requires a Github identity provider.
- groups Sequence[str]
- The ID of a previously created Access group.
- gsuites
Sequence[Zero
Trust Access Group Exclude Gsuite] - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip_
lists Sequence[str] - The ID of a previously created IP list.
- ips Sequence[str]
- An IPv4 or IPv6 CIDR block.
- login_
methods Sequence[str] - The ID of a configured identity provider.
- oktas
Sequence[Zero
Trust Access Group Exclude Okta] - Matches an Okta group. Requires an Okta identity provider.
- samls
Sequence[Zero
Trust Access Group Exclude Saml] - Matches a SAML group. Requires a SAML identity provider.
- service_
tokens Sequence[str] - The ID of an Access service token.
- any
Valid BooleanService Token - Matches any valid Access service token.
- auth
Contexts List<Property Map> - auth
Method String - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures List<Property Map>
- Matches an Azure group. Requires an Azure identity provider.
- certificate Boolean
- Matches any valid client certificate.
- common
Name String - Matches a valid client certificate common name.
- common
Names List<String> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures List<String> - The ID of a device posture integration.
- email
Domains List<String> - The email domain to match.
- email
Lists List<String> - The ID of a previously created email list.
- emails List<String>
- The email of the user.
- everyone Boolean
- Matches everyone.
- external
Evaluations List<Property Map> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos List<String>
- Matches a specific country.
- githubs List<Property Map>
- Matches a Github organization. Requires a Github identity provider.
- groups List<String>
- The ID of a previously created Access group.
- gsuites List<Property Map>
- Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists List<String> - The ID of a previously created IP list.
- ips List<String>
- An IPv4 or IPv6 CIDR block.
- login
Methods List<String> - The ID of a configured identity provider.
- oktas List<Property Map>
- Matches an Okta group. Requires an Okta identity provider.
- samls List<Property Map>
- Matches a SAML group. Requires a SAML identity provider.
- service
Tokens List<String> - The ID of an Access service token.
ZeroTrustAccessGroupExcludeAuthContext, ZeroTrustAccessGroupExcludeAuthContextArgs
- Ac
Id string - The ACID of the Authentication Context.
- Id string
- The ID of the Authentication Context.
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ac
Id string - The ACID of the Authentication Context.
- Id string
- The ID of the Authentication Context.
- Identity
Provider stringId - The ID of the Azure identity provider.
- ac
Id String - The ACID of the Authentication Context.
- id String
- The ID of the Authentication Context.
- identity
Provider StringId - The ID of the Azure identity provider.
- ac
Id string - The ACID of the Authentication Context.
- id string
- The ID of the Authentication Context.
- identity
Provider stringId - The ID of the Azure identity provider.
- ac_
id str - The ACID of the Authentication Context.
- id str
- The ID of the Authentication Context.
- identity_
provider_ strid - The ID of the Azure identity provider.
- ac
Id String - The ACID of the Authentication Context.
- id String
- The ID of the Authentication Context.
- identity
Provider StringId - The ID of the Azure identity provider.
ZeroTrustAccessGroupExcludeAzure, ZeroTrustAccessGroupExcludeAzureArgs
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ids List<string>
- The ID of the Azure group or user.
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ids []string
- The ID of the Azure group or user.
- identity
Provider StringId - The ID of the Azure identity provider.
- ids List<String>
- The ID of the Azure group or user.
- identity
Provider stringId - The ID of the Azure identity provider.
- ids string[]
- The ID of the Azure group or user.
- identity_
provider_ strid - The ID of the Azure identity provider.
- ids Sequence[str]
- The ID of the Azure group or user.
- identity
Provider StringId - The ID of the Azure identity provider.
- ids List<String>
- The ID of the Azure group or user.
ZeroTrustAccessGroupExcludeExternalEvaluation, ZeroTrustAccessGroupExcludeExternalEvaluationArgs
- Evaluate
Url string - The API endpoint containing your business logic.
- Keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- Evaluate
Url string - The API endpoint containing your business logic.
- Keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url String - The API endpoint containing your business logic.
- keys
Url String - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url string - The API endpoint containing your business logic.
- keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate_
url str - The API endpoint containing your business logic.
- keys_
url str - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url String - The API endpoint containing your business logic.
- keys
Url String - The API endpoint containing the key that Access uses to verify that the response came from your API.
ZeroTrustAccessGroupExcludeGithub, ZeroTrustAccessGroupExcludeGithubArgs
- Identity
Provider stringId - The ID of your Github identity provider.
- Name string
- The name of the organization.
- Teams List<string>
- The teams that should be matched.
- Identity
Provider stringId - The ID of your Github identity provider.
- Name string
- The name of the organization.
- Teams []string
- The teams that should be matched.
- identity
Provider StringId - The ID of your Github identity provider.
- name String
- The name of the organization.
- teams List<String>
- The teams that should be matched.
- identity
Provider stringId - The ID of your Github identity provider.
- name string
- The name of the organization.
- teams string[]
- The teams that should be matched.
- identity_
provider_ strid - The ID of your Github identity provider.
- name str
- The name of the organization.
- teams Sequence[str]
- The teams that should be matched.
- identity
Provider StringId - The ID of your Github identity provider.
- name String
- The name of the organization.
- teams List<String>
- The teams that should be matched.
ZeroTrustAccessGroupExcludeGsuite, ZeroTrustAccessGroupExcludeGsuiteArgs
- Emails List<string>
- The email of the Google Workspace group.
- Identity
Provider stringId - The ID of your Google Workspace identity provider.
- Emails []string
- The email of the Google Workspace group.
- Identity
Provider stringId - The ID of your Google Workspace identity provider.
- emails List<String>
- The email of the Google Workspace group.
- identity
Provider StringId - The ID of your Google Workspace identity provider.
- emails string[]
- The email of the Google Workspace group.
- identity
Provider stringId - The ID of your Google Workspace identity provider.
- emails Sequence[str]
- The email of the Google Workspace group.
- identity_
provider_ strid - The ID of your Google Workspace identity provider.
- emails List<String>
- The email of the Google Workspace group.
- identity
Provider StringId - The ID of your Google Workspace identity provider.
ZeroTrustAccessGroupExcludeOkta, ZeroTrustAccessGroupExcludeOktaArgs
- Identity
Provider stringId - The ID of your Okta identity provider.
- Names List<string>
- The name of the Okta Group.
- Identity
Provider stringId - The ID of your Okta identity provider.
- Names []string
- The name of the Okta Group.
- identity
Provider StringId - The ID of your Okta identity provider.
- names List<String>
- The name of the Okta Group.
- identity
Provider stringId - The ID of your Okta identity provider.
- names string[]
- The name of the Okta Group.
- identity_
provider_ strid - The ID of your Okta identity provider.
- names Sequence[str]
- The name of the Okta Group.
- identity
Provider StringId - The ID of your Okta identity provider.
- names List<String>
- The name of the Okta Group.
ZeroTrustAccessGroupExcludeSaml, ZeroTrustAccessGroupExcludeSamlArgs
- Attribute
Name string - The name of the SAML attribute.
- Attribute
Value string - The SAML attribute value to look for.
- Identity
Provider stringId - The ID of your SAML identity provider.
- Attribute
Name string - The name of the SAML attribute.
- Attribute
Value string - The SAML attribute value to look for.
- Identity
Provider stringId - The ID of your SAML identity provider.
- attribute
Name String - The name of the SAML attribute.
- attribute
Value String - The SAML attribute value to look for.
- identity
Provider StringId - The ID of your SAML identity provider.
- attribute
Name string - The name of the SAML attribute.
- attribute
Value string - The SAML attribute value to look for.
- identity
Provider stringId - The ID of your SAML identity provider.
- attribute_
name str - The name of the SAML attribute.
- attribute_
value str - The SAML attribute value to look for.
- identity_
provider_ strid - The ID of your SAML identity provider.
- attribute
Name String - The name of the SAML attribute.
- attribute
Value String - The SAML attribute value to look for.
- identity
Provider StringId - The ID of your SAML identity provider.
ZeroTrustAccessGroupInclude, ZeroTrustAccessGroupIncludeArgs
- Any
Valid boolService Token - Matches any valid Access service token.
- Auth
Contexts List<ZeroTrust Access Group Include Auth Context> - Auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- Azures
List<Zero
Trust Access Group Include Azure> - Matches an Azure group. Requires an Azure identity provider.
- Certificate bool
- Matches any valid client certificate.
- Common
Name string - Matches a valid client certificate common name.
- Common
Names List<string> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- Device
Postures List<string> - The ID of a device posture integration.
- Email
Domains List<string> - The email domain to match.
- Email
Lists List<string> - The ID of a previously created email list.
- Emails List<string>
- The email of the user.
- Everyone bool
- Matches everyone.
- External
Evaluations List<ZeroTrust Access Group Include External Evaluation> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- Geos List<string>
- Matches a specific country.
- Githubs
List<Zero
Trust Access Group Include Github> - Matches a Github organization. Requires a Github identity provider.
- Groups List<string>
- The ID of a previously created Access group.
- Gsuites
List<Zero
Trust Access Group Include Gsuite> - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- Ip
Lists List<string> - The ID of a previously created IP list.
- Ips List<string>
- An IPv4 or IPv6 CIDR block.
- Login
Methods List<string> - The ID of a configured identity provider.
- Oktas
List<Zero
Trust Access Group Include Okta> - Matches an Okta group. Requires an Okta identity provider.
- Samls
List<Zero
Trust Access Group Include Saml> - Matches a SAML group. Requires a SAML identity provider.
- Service
Tokens List<string> - The ID of an Access service token.
- Any
Valid boolService Token - Matches any valid Access service token.
- Auth
Contexts []ZeroTrust Access Group Include Auth Context - Auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- Azures
[]Zero
Trust Access Group Include Azure - Matches an Azure group. Requires an Azure identity provider.
- Certificate bool
- Matches any valid client certificate.
- Common
Name string - Matches a valid client certificate common name.
- Common
Names []string - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- Device
Postures []string - The ID of a device posture integration.
- Email
Domains []string - The email domain to match.
- Email
Lists []string - The ID of a previously created email list.
- Emails []string
- The email of the user.
- Everyone bool
- Matches everyone.
- External
Evaluations []ZeroTrust Access Group Include External Evaluation - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- Geos []string
- Matches a specific country.
- Githubs
[]Zero
Trust Access Group Include Github - Matches a Github organization. Requires a Github identity provider.
- Groups []string
- The ID of a previously created Access group.
- Gsuites
[]Zero
Trust Access Group Include Gsuite - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- Ip
Lists []string - The ID of a previously created IP list.
- Ips []string
- An IPv4 or IPv6 CIDR block.
- Login
Methods []string - The ID of a configured identity provider.
- Oktas
[]Zero
Trust Access Group Include Okta - Matches an Okta group. Requires an Okta identity provider.
- Samls
[]Zero
Trust Access Group Include Saml - Matches a SAML group. Requires a SAML identity provider.
- Service
Tokens []string - The ID of an Access service token.
- any
Valid BooleanService Token - Matches any valid Access service token.
- auth
Contexts List<ZeroTrust Access Group Include Auth Context> - auth
Method String - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
List<Zero
Trust Access Group Include Azure> - Matches an Azure group. Requires an Azure identity provider.
- certificate Boolean
- Matches any valid client certificate.
- common
Name String - Matches a valid client certificate common name.
- common
Names List<String> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures List<String> - The ID of a device posture integration.
- email
Domains List<String> - The email domain to match.
- email
Lists List<String> - The ID of a previously created email list.
- emails List<String>
- The email of the user.
- everyone Boolean
- Matches everyone.
- external
Evaluations List<ZeroTrust Access Group Include External Evaluation> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos List<String>
- Matches a specific country.
- githubs
List<Zero
Trust Access Group Include Github> - Matches a Github organization. Requires a Github identity provider.
- groups List<String>
- The ID of a previously created Access group.
- gsuites
List<Zero
Trust Access Group Include Gsuite> - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists List<String> - The ID of a previously created IP list.
- ips List<String>
- An IPv4 or IPv6 CIDR block.
- login
Methods List<String> - The ID of a configured identity provider.
- oktas
List<Zero
Trust Access Group Include Okta> - Matches an Okta group. Requires an Okta identity provider.
- samls
List<Zero
Trust Access Group Include Saml> - Matches a SAML group. Requires a SAML identity provider.
- service
Tokens List<String> - The ID of an Access service token.
- any
Valid booleanService Token - Matches any valid Access service token.
- auth
Contexts ZeroTrust Access Group Include Auth Context[] - auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
Zero
Trust Access Group Include Azure[] - Matches an Azure group. Requires an Azure identity provider.
- certificate boolean
- Matches any valid client certificate.
- common
Name string - Matches a valid client certificate common name.
- common
Names string[] - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures string[] - The ID of a device posture integration.
- email
Domains string[] - The email domain to match.
- email
Lists string[] - The ID of a previously created email list.
- emails string[]
- The email of the user.
- everyone boolean
- Matches everyone.
- external
Evaluations ZeroTrust Access Group Include External Evaluation[] - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos string[]
- Matches a specific country.
- githubs
Zero
Trust Access Group Include Github[] - Matches a Github organization. Requires a Github identity provider.
- groups string[]
- The ID of a previously created Access group.
- gsuites
Zero
Trust Access Group Include Gsuite[] - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists string[] - The ID of a previously created IP list.
- ips string[]
- An IPv4 or IPv6 CIDR block.
- login
Methods string[] - The ID of a configured identity provider.
- oktas
Zero
Trust Access Group Include Okta[] - Matches an Okta group. Requires an Okta identity provider.
- samls
Zero
Trust Access Group Include Saml[] - Matches a SAML group. Requires a SAML identity provider.
- service
Tokens string[] - The ID of an Access service token.
- any_
valid_ boolservice_ token - Matches any valid Access service token.
- auth_
contexts Sequence[ZeroTrust Access Group Include Auth Context] - auth_
method str - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
Sequence[Zero
Trust Access Group Include Azure] - Matches an Azure group. Requires an Azure identity provider.
- certificate bool
- Matches any valid client certificate.
- common_
name str - Matches a valid client certificate common name.
- common_
names Sequence[str] - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device_
postures Sequence[str] - The ID of a device posture integration.
- email_
domains Sequence[str] - The email domain to match.
- email_
lists Sequence[str] - The ID of a previously created email list.
- emails Sequence[str]
- The email of the user.
- everyone bool
- Matches everyone.
- external_
evaluations Sequence[ZeroTrust Access Group Include External Evaluation] - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos Sequence[str]
- Matches a specific country.
- githubs
Sequence[Zero
Trust Access Group Include Github] - Matches a Github organization. Requires a Github identity provider.
- groups Sequence[str]
- The ID of a previously created Access group.
- gsuites
Sequence[Zero
Trust Access Group Include Gsuite] - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip_
lists Sequence[str] - The ID of a previously created IP list.
- ips Sequence[str]
- An IPv4 or IPv6 CIDR block.
- login_
methods Sequence[str] - The ID of a configured identity provider.
- oktas
Sequence[Zero
Trust Access Group Include Okta] - Matches an Okta group. Requires an Okta identity provider.
- samls
Sequence[Zero
Trust Access Group Include Saml] - Matches a SAML group. Requires a SAML identity provider.
- service_
tokens Sequence[str] - The ID of an Access service token.
- any
Valid BooleanService Token - Matches any valid Access service token.
- auth
Contexts List<Property Map> - auth
Method String - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures List<Property Map>
- Matches an Azure group. Requires an Azure identity provider.
- certificate Boolean
- Matches any valid client certificate.
- common
Name String - Matches a valid client certificate common name.
- common
Names List<String> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures List<String> - The ID of a device posture integration.
- email
Domains List<String> - The email domain to match.
- email
Lists List<String> - The ID of a previously created email list.
- emails List<String>
- The email of the user.
- everyone Boolean
- Matches everyone.
- external
Evaluations List<Property Map> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos List<String>
- Matches a specific country.
- githubs List<Property Map>
- Matches a Github organization. Requires a Github identity provider.
- groups List<String>
- The ID of a previously created Access group.
- gsuites List<Property Map>
- Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists List<String> - The ID of a previously created IP list.
- ips List<String>
- An IPv4 or IPv6 CIDR block.
- login
Methods List<String> - The ID of a configured identity provider.
- oktas List<Property Map>
- Matches an Okta group. Requires an Okta identity provider.
- samls List<Property Map>
- Matches a SAML group. Requires a SAML identity provider.
- service
Tokens List<String> - The ID of an Access service token.
ZeroTrustAccessGroupIncludeAuthContext, ZeroTrustAccessGroupIncludeAuthContextArgs
- Ac
Id string - The ACID of the Authentication Context.
- Id string
- The ID of the Authentication Context.
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ac
Id string - The ACID of the Authentication Context.
- Id string
- The ID of the Authentication Context.
- Identity
Provider stringId - The ID of the Azure identity provider.
- ac
Id String - The ACID of the Authentication Context.
- id String
- The ID of the Authentication Context.
- identity
Provider StringId - The ID of the Azure identity provider.
- ac
Id string - The ACID of the Authentication Context.
- id string
- The ID of the Authentication Context.
- identity
Provider stringId - The ID of the Azure identity provider.
- ac_
id str - The ACID of the Authentication Context.
- id str
- The ID of the Authentication Context.
- identity_
provider_ strid - The ID of the Azure identity provider.
- ac
Id String - The ACID of the Authentication Context.
- id String
- The ID of the Authentication Context.
- identity
Provider StringId - The ID of the Azure identity provider.
ZeroTrustAccessGroupIncludeAzure, ZeroTrustAccessGroupIncludeAzureArgs
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ids List<string>
- The ID of the Azure group or user.
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ids []string
- The ID of the Azure group or user.
- identity
Provider StringId - The ID of the Azure identity provider.
- ids List<String>
- The ID of the Azure group or user.
- identity
Provider stringId - The ID of the Azure identity provider.
- ids string[]
- The ID of the Azure group or user.
- identity_
provider_ strid - The ID of the Azure identity provider.
- ids Sequence[str]
- The ID of the Azure group or user.
- identity
Provider StringId - The ID of the Azure identity provider.
- ids List<String>
- The ID of the Azure group or user.
ZeroTrustAccessGroupIncludeExternalEvaluation, ZeroTrustAccessGroupIncludeExternalEvaluationArgs
- Evaluate
Url string - The API endpoint containing your business logic.
- Keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- Evaluate
Url string - The API endpoint containing your business logic.
- Keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url String - The API endpoint containing your business logic.
- keys
Url String - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url string - The API endpoint containing your business logic.
- keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate_
url str - The API endpoint containing your business logic.
- keys_
url str - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url String - The API endpoint containing your business logic.
- keys
Url String - The API endpoint containing the key that Access uses to verify that the response came from your API.
ZeroTrustAccessGroupIncludeGithub, ZeroTrustAccessGroupIncludeGithubArgs
- Identity
Provider stringId - The ID of your Github identity provider.
- Name string
- The name of the organization.
- Teams List<string>
- The teams that should be matched.
- Identity
Provider stringId - The ID of your Github identity provider.
- Name string
- The name of the organization.
- Teams []string
- The teams that should be matched.
- identity
Provider StringId - The ID of your Github identity provider.
- name String
- The name of the organization.
- teams List<String>
- The teams that should be matched.
- identity
Provider stringId - The ID of your Github identity provider.
- name string
- The name of the organization.
- teams string[]
- The teams that should be matched.
- identity_
provider_ strid - The ID of your Github identity provider.
- name str
- The name of the organization.
- teams Sequence[str]
- The teams that should be matched.
- identity
Provider StringId - The ID of your Github identity provider.
- name String
- The name of the organization.
- teams List<String>
- The teams that should be matched.
ZeroTrustAccessGroupIncludeGsuite, ZeroTrustAccessGroupIncludeGsuiteArgs
- Emails List<string>
- The email of the Google Workspace group.
- Identity
Provider stringId - The ID of your Google Workspace identity provider.
- Emails []string
- The email of the Google Workspace group.
- Identity
Provider stringId - The ID of your Google Workspace identity provider.
- emails List<String>
- The email of the Google Workspace group.
- identity
Provider StringId - The ID of your Google Workspace identity provider.
- emails string[]
- The email of the Google Workspace group.
- identity
Provider stringId - The ID of your Google Workspace identity provider.
- emails Sequence[str]
- The email of the Google Workspace group.
- identity_
provider_ strid - The ID of your Google Workspace identity provider.
- emails List<String>
- The email of the Google Workspace group.
- identity
Provider StringId - The ID of your Google Workspace identity provider.
ZeroTrustAccessGroupIncludeOkta, ZeroTrustAccessGroupIncludeOktaArgs
- Identity
Provider stringId - The ID of your Okta identity provider.
- Names List<string>
- The name of the Okta Group.
- Identity
Provider stringId - The ID of your Okta identity provider.
- Names []string
- The name of the Okta Group.
- identity
Provider StringId - The ID of your Okta identity provider.
- names List<String>
- The name of the Okta Group.
- identity
Provider stringId - The ID of your Okta identity provider.
- names string[]
- The name of the Okta Group.
- identity_
provider_ strid - The ID of your Okta identity provider.
- names Sequence[str]
- The name of the Okta Group.
- identity
Provider StringId - The ID of your Okta identity provider.
- names List<String>
- The name of the Okta Group.
ZeroTrustAccessGroupIncludeSaml, ZeroTrustAccessGroupIncludeSamlArgs
- Attribute
Name string - The name of the SAML attribute.
- Attribute
Value string - The SAML attribute value to look for.
- Identity
Provider stringId - The ID of your SAML identity provider.
- Attribute
Name string - The name of the SAML attribute.
- Attribute
Value string - The SAML attribute value to look for.
- Identity
Provider stringId - The ID of your SAML identity provider.
- attribute
Name String - The name of the SAML attribute.
- attribute
Value String - The SAML attribute value to look for.
- identity
Provider StringId - The ID of your SAML identity provider.
- attribute
Name string - The name of the SAML attribute.
- attribute
Value string - The SAML attribute value to look for.
- identity
Provider stringId - The ID of your SAML identity provider.
- attribute_
name str - The name of the SAML attribute.
- attribute_
value str - The SAML attribute value to look for.
- identity_
provider_ strid - The ID of your SAML identity provider.
- attribute
Name String - The name of the SAML attribute.
- attribute
Value String - The SAML attribute value to look for.
- identity
Provider StringId - The ID of your SAML identity provider.
ZeroTrustAccessGroupRequire, ZeroTrustAccessGroupRequireArgs
- Any
Valid boolService Token - Matches any valid Access service token.
- Auth
Contexts List<ZeroTrust Access Group Require Auth Context> - Auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- Azures
List<Zero
Trust Access Group Require Azure> - Matches an Azure group. Requires an Azure identity provider.
- Certificate bool
- Matches any valid client certificate.
- Common
Name string - Matches a valid client certificate common name.
- Common
Names List<string> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- Device
Postures List<string> - The ID of a device posture integration.
- Email
Domains List<string> - The email domain to match.
- Email
Lists List<string> - The ID of a previously created email list.
- Emails List<string>
- The email of the user.
- Everyone bool
- Matches everyone.
- External
Evaluations List<ZeroTrust Access Group Require External Evaluation> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- Geos List<string>
- Matches a specific country.
- Githubs
List<Zero
Trust Access Group Require Github> - Matches a Github organization. Requires a Github identity provider.
- Groups List<string>
- The ID of a previously created Access group.
- Gsuites
List<Zero
Trust Access Group Require Gsuite> - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- Ip
Lists List<string> - The ID of a previously created IP list.
- Ips List<string>
- An IPv4 or IPv6 CIDR block.
- Login
Methods List<string> - The ID of a configured identity provider.
- Oktas
List<Zero
Trust Access Group Require Okta> - Matches an Okta group. Requires an Okta identity provider.
- Samls
List<Zero
Trust Access Group Require Saml> - Matches a SAML group. Requires a SAML identity provider.
- Service
Tokens List<string> - The ID of an Access service token.
- Any
Valid boolService Token - Matches any valid Access service token.
- Auth
Contexts []ZeroTrust Access Group Require Auth Context - Auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- Azures
[]Zero
Trust Access Group Require Azure - Matches an Azure group. Requires an Azure identity provider.
- Certificate bool
- Matches any valid client certificate.
- Common
Name string - Matches a valid client certificate common name.
- Common
Names []string - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- Device
Postures []string - The ID of a device posture integration.
- Email
Domains []string - The email domain to match.
- Email
Lists []string - The ID of a previously created email list.
- Emails []string
- The email of the user.
- Everyone bool
- Matches everyone.
- External
Evaluations []ZeroTrust Access Group Require External Evaluation - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- Geos []string
- Matches a specific country.
- Githubs
[]Zero
Trust Access Group Require Github - Matches a Github organization. Requires a Github identity provider.
- Groups []string
- The ID of a previously created Access group.
- Gsuites
[]Zero
Trust Access Group Require Gsuite - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- Ip
Lists []string - The ID of a previously created IP list.
- Ips []string
- An IPv4 or IPv6 CIDR block.
- Login
Methods []string - The ID of a configured identity provider.
- Oktas
[]Zero
Trust Access Group Require Okta - Matches an Okta group. Requires an Okta identity provider.
- Samls
[]Zero
Trust Access Group Require Saml - Matches a SAML group. Requires a SAML identity provider.
- Service
Tokens []string - The ID of an Access service token.
- any
Valid BooleanService Token - Matches any valid Access service token.
- auth
Contexts List<ZeroTrust Access Group Require Auth Context> - auth
Method String - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
List<Zero
Trust Access Group Require Azure> - Matches an Azure group. Requires an Azure identity provider.
- certificate Boolean
- Matches any valid client certificate.
- common
Name String - Matches a valid client certificate common name.
- common
Names List<String> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures List<String> - The ID of a device posture integration.
- email
Domains List<String> - The email domain to match.
- email
Lists List<String> - The ID of a previously created email list.
- emails List<String>
- The email of the user.
- everyone Boolean
- Matches everyone.
- external
Evaluations List<ZeroTrust Access Group Require External Evaluation> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos List<String>
- Matches a specific country.
- githubs
List<Zero
Trust Access Group Require Github> - Matches a Github organization. Requires a Github identity provider.
- groups List<String>
- The ID of a previously created Access group.
- gsuites
List<Zero
Trust Access Group Require Gsuite> - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists List<String> - The ID of a previously created IP list.
- ips List<String>
- An IPv4 or IPv6 CIDR block.
- login
Methods List<String> - The ID of a configured identity provider.
- oktas
List<Zero
Trust Access Group Require Okta> - Matches an Okta group. Requires an Okta identity provider.
- samls
List<Zero
Trust Access Group Require Saml> - Matches a SAML group. Requires a SAML identity provider.
- service
Tokens List<String> - The ID of an Access service token.
- any
Valid booleanService Token - Matches any valid Access service token.
- auth
Contexts ZeroTrust Access Group Require Auth Context[] - auth
Method string - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
Zero
Trust Access Group Require Azure[] - Matches an Azure group. Requires an Azure identity provider.
- certificate boolean
- Matches any valid client certificate.
- common
Name string - Matches a valid client certificate common name.
- common
Names string[] - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures string[] - The ID of a device posture integration.
- email
Domains string[] - The email domain to match.
- email
Lists string[] - The ID of a previously created email list.
- emails string[]
- The email of the user.
- everyone boolean
- Matches everyone.
- external
Evaluations ZeroTrust Access Group Require External Evaluation[] - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos string[]
- Matches a specific country.
- githubs
Zero
Trust Access Group Require Github[] - Matches a Github organization. Requires a Github identity provider.
- groups string[]
- The ID of a previously created Access group.
- gsuites
Zero
Trust Access Group Require Gsuite[] - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists string[] - The ID of a previously created IP list.
- ips string[]
- An IPv4 or IPv6 CIDR block.
- login
Methods string[] - The ID of a configured identity provider.
- oktas
Zero
Trust Access Group Require Okta[] - Matches an Okta group. Requires an Okta identity provider.
- samls
Zero
Trust Access Group Require Saml[] - Matches a SAML group. Requires a SAML identity provider.
- service
Tokens string[] - The ID of an Access service token.
- any_
valid_ boolservice_ token - Matches any valid Access service token.
- auth_
contexts Sequence[ZeroTrust Access Group Require Auth Context] - auth_
method str - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures
Sequence[Zero
Trust Access Group Require Azure] - Matches an Azure group. Requires an Azure identity provider.
- certificate bool
- Matches any valid client certificate.
- common_
name str - Matches a valid client certificate common name.
- common_
names Sequence[str] - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device_
postures Sequence[str] - The ID of a device posture integration.
- email_
domains Sequence[str] - The email domain to match.
- email_
lists Sequence[str] - The ID of a previously created email list.
- emails Sequence[str]
- The email of the user.
- everyone bool
- Matches everyone.
- external_
evaluations Sequence[ZeroTrust Access Group Require External Evaluation] - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos Sequence[str]
- Matches a specific country.
- githubs
Sequence[Zero
Trust Access Group Require Github] - Matches a Github organization. Requires a Github identity provider.
- groups Sequence[str]
- The ID of a previously created Access group.
- gsuites
Sequence[Zero
Trust Access Group Require Gsuite] - Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip_
lists Sequence[str] - The ID of a previously created IP list.
- ips Sequence[str]
- An IPv4 or IPv6 CIDR block.
- login_
methods Sequence[str] - The ID of a configured identity provider.
- oktas
Sequence[Zero
Trust Access Group Require Okta] - Matches an Okta group. Requires an Okta identity provider.
- samls
Sequence[Zero
Trust Access Group Require Saml] - Matches a SAML group. Requires a SAML identity provider.
- service_
tokens Sequence[str] - The ID of an Access service token.
- any
Valid BooleanService Token - Matches any valid Access service token.
- auth
Contexts List<Property Map> - auth
Method String - The type of authentication method. Refer to https://datatracker.ietf.org/doc/html/rfc8176#section-2 for possible types.
- azures List<Property Map>
- Matches an Azure group. Requires an Azure identity provider.
- certificate Boolean
- Matches any valid client certificate.
- common
Name String - Matches a valid client certificate common name.
- common
Names List<String> - Overflow field if you need to have multiple commonname rules in a single policy. Use in place of the singular commonname field.
- device
Postures List<String> - The ID of a device posture integration.
- email
Domains List<String> - The email domain to match.
- email
Lists List<String> - The ID of a previously created email list.
- emails List<String>
- The email of the user.
- everyone Boolean
- Matches everyone.
- external
Evaluations List<Property Map> - Create Allow or Block policies which evaluate the user based on custom criteria. https://developers.cloudflare.com/cloudflare-one/policies/access/external-evaluation/.
- geos List<String>
- Matches a specific country.
- githubs List<Property Map>
- Matches a Github organization. Requires a Github identity provider.
- groups List<String>
- The ID of a previously created Access group.
- gsuites List<Property Map>
- Matches a group in Google Workspace. Requires a Google Workspace identity provider.
- ip
Lists List<String> - The ID of a previously created IP list.
- ips List<String>
- An IPv4 or IPv6 CIDR block.
- login
Methods List<String> - The ID of a configured identity provider.
- oktas List<Property Map>
- Matches an Okta group. Requires an Okta identity provider.
- samls List<Property Map>
- Matches a SAML group. Requires a SAML identity provider.
- service
Tokens List<String> - The ID of an Access service token.
ZeroTrustAccessGroupRequireAuthContext, ZeroTrustAccessGroupRequireAuthContextArgs
- Ac
Id string - The ACID of the Authentication Context.
- Id string
- The ID of the Authentication Context.
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ac
Id string - The ACID of the Authentication Context.
- Id string
- The ID of the Authentication Context.
- Identity
Provider stringId - The ID of the Azure identity provider.
- ac
Id String - The ACID of the Authentication Context.
- id String
- The ID of the Authentication Context.
- identity
Provider StringId - The ID of the Azure identity provider.
- ac
Id string - The ACID of the Authentication Context.
- id string
- The ID of the Authentication Context.
- identity
Provider stringId - The ID of the Azure identity provider.
- ac_
id str - The ACID of the Authentication Context.
- id str
- The ID of the Authentication Context.
- identity_
provider_ strid - The ID of the Azure identity provider.
- ac
Id String - The ACID of the Authentication Context.
- id String
- The ID of the Authentication Context.
- identity
Provider StringId - The ID of the Azure identity provider.
ZeroTrustAccessGroupRequireAzure, ZeroTrustAccessGroupRequireAzureArgs
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ids List<string>
- The ID of the Azure group or user.
- Identity
Provider stringId - The ID of the Azure identity provider.
- Ids []string
- The ID of the Azure group or user.
- identity
Provider StringId - The ID of the Azure identity provider.
- ids List<String>
- The ID of the Azure group or user.
- identity
Provider stringId - The ID of the Azure identity provider.
- ids string[]
- The ID of the Azure group or user.
- identity_
provider_ strid - The ID of the Azure identity provider.
- ids Sequence[str]
- The ID of the Azure group or user.
- identity
Provider StringId - The ID of the Azure identity provider.
- ids List<String>
- The ID of the Azure group or user.
ZeroTrustAccessGroupRequireExternalEvaluation, ZeroTrustAccessGroupRequireExternalEvaluationArgs
- Evaluate
Url string - The API endpoint containing your business logic.
- Keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- Evaluate
Url string - The API endpoint containing your business logic.
- Keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url String - The API endpoint containing your business logic.
- keys
Url String - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url string - The API endpoint containing your business logic.
- keys
Url string - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate_
url str - The API endpoint containing your business logic.
- keys_
url str - The API endpoint containing the key that Access uses to verify that the response came from your API.
- evaluate
Url String - The API endpoint containing your business logic.
- keys
Url String - The API endpoint containing the key that Access uses to verify that the response came from your API.
ZeroTrustAccessGroupRequireGithub, ZeroTrustAccessGroupRequireGithubArgs
- Identity
Provider stringId - The ID of your Github identity provider.
- Name string
- The name of the organization.
- Teams List<string>
- The teams that should be matched.
- Identity
Provider stringId - The ID of your Github identity provider.
- Name string
- The name of the organization.
- Teams []string
- The teams that should be matched.
- identity
Provider StringId - The ID of your Github identity provider.
- name String
- The name of the organization.
- teams List<String>
- The teams that should be matched.
- identity
Provider stringId - The ID of your Github identity provider.
- name string
- The name of the organization.
- teams string[]
- The teams that should be matched.
- identity_
provider_ strid - The ID of your Github identity provider.
- name str
- The name of the organization.
- teams Sequence[str]
- The teams that should be matched.
- identity
Provider StringId - The ID of your Github identity provider.
- name String
- The name of the organization.
- teams List<String>
- The teams that should be matched.
ZeroTrustAccessGroupRequireGsuite, ZeroTrustAccessGroupRequireGsuiteArgs
- Emails List<string>
- The email of the Google Workspace group.
- Identity
Provider stringId - The ID of your Google Workspace identity provider.
- Emails []string
- The email of the Google Workspace group.
- Identity
Provider stringId - The ID of your Google Workspace identity provider.
- emails List<String>
- The email of the Google Workspace group.
- identity
Provider StringId - The ID of your Google Workspace identity provider.
- emails string[]
- The email of the Google Workspace group.
- identity
Provider stringId - The ID of your Google Workspace identity provider.
- emails Sequence[str]
- The email of the Google Workspace group.
- identity_
provider_ strid - The ID of your Google Workspace identity provider.
- emails List<String>
- The email of the Google Workspace group.
- identity
Provider StringId - The ID of your Google Workspace identity provider.
ZeroTrustAccessGroupRequireOkta, ZeroTrustAccessGroupRequireOktaArgs
- Identity
Provider stringId - The ID of your Okta identity provider.
- Names List<string>
- The name of the Okta Group.
- Identity
Provider stringId - The ID of your Okta identity provider.
- Names []string
- The name of the Okta Group.
- identity
Provider StringId - The ID of your Okta identity provider.
- names List<String>
- The name of the Okta Group.
- identity
Provider stringId - The ID of your Okta identity provider.
- names string[]
- The name of the Okta Group.
- identity_
provider_ strid - The ID of your Okta identity provider.
- names Sequence[str]
- The name of the Okta Group.
- identity
Provider StringId - The ID of your Okta identity provider.
- names List<String>
- The name of the Okta Group.
ZeroTrustAccessGroupRequireSaml, ZeroTrustAccessGroupRequireSamlArgs
- Attribute
Name string - The name of the SAML attribute.
- Attribute
Value string - The SAML attribute value to look for.
- Identity
Provider stringId - The ID of your SAML identity provider.
- Attribute
Name string - The name of the SAML attribute.
- Attribute
Value string - The SAML attribute value to look for.
- Identity
Provider stringId - The ID of your SAML identity provider.
- attribute
Name String - The name of the SAML attribute.
- attribute
Value String - The SAML attribute value to look for.
- identity
Provider StringId - The ID of your SAML identity provider.
- attribute
Name string - The name of the SAML attribute.
- attribute
Value string - The SAML attribute value to look for.
- identity
Provider stringId - The ID of your SAML identity provider.
- attribute_
name str - The name of the SAML attribute.
- attribute_
value str - The SAML attribute value to look for.
- identity_
provider_ strid - The ID of your SAML identity provider.
- attribute
Name String - The name of the SAML attribute.
- attribute
Value String - The SAML attribute value to look for.
- identity
Provider StringId - The ID of your SAML identity provider.
Import
$ pulumi import cloudflare:index/zeroTrustAccessGroup:ZeroTrustAccessGroup example <account_id>/<group_id>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Cloudflare pulumi/pulumi-cloudflare
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
cloudflare
Terraform Provider.