pangea-cloudflare 0.1.0

data/lib/pangea/resources/cloudflare_access_rule/types.rb

@@ -0,0 +1,93 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Access rule mode enum
+        CloudflareAccessRuleMode = Dry::Types['strict.string'].enum(
+          'block',
+          'challenge',
+          'whitelist',
+          'js_challenge',
+          'managed_challenge'
+        )
+
+        # Access rule target enum
+        CloudflareAccessRuleTarget = Dry::Types['strict.string'].enum(
+          'ip',
+          'ip6',
+          'ip_range',
+          'asn',
+          'country'
+        )
+
+        # Type-safe attributes for Cloudflare Access Rule
+        class AccessRuleAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute zone_id
+          #   @return [String, nil] Zone ID (mutually exclusive with account_id)
+          attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+
+          # @!attribute account_id
+          #   @return [String, nil] Account ID (mutually exclusive with zone_id)
+          attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+
+          # @!attribute mode
+          #   @return [String] Action to apply
+          attribute :mode, CloudflareAccessRuleMode
+
+          # @!attribute target
+          #   @return [String] Configuration target
+          attribute :target, CloudflareAccessRuleTarget
+
+          # @!attribute value
+          #   @return [String] Target value (IP, ASN, country code)
+          attribute :value, Dry::Types['strict.string'].constrained(min_size: 1)
+
+          # @!attribute notes
+          #   @return [String, nil] Rule notes
+          attribute :notes, Dry::Types['strict.string'].optional.default(nil)
+
+          def self.new(attributes)
+            attrs = attributes.is_a?(Hash) ? attributes : {}
+
+            # Validate mutually exclusive zone_id and account_id
+            if attrs[:zone_id] && attrs[:account_id]
+              raise Dry::Struct::Error, "zone_id and account_id are mutually exclusive"
+            end
+
+            unless attrs[:zone_id] || attrs[:account_id]
+              raise Dry::Struct::Error, "Either zone_id or account_id must be provided"
+            end
+
+            super(attrs)
+          end
+
+          # Check if this is an account-level rule
+          # @return [Boolean] true if account-level
+          def account_level?
+            !account_id.nil?
+          end
+
+          # Check if this blocks traffic
+          # @return [Boolean] true if mode is block
+          def blocking?
+            mode == 'block'
+          end
+
+          # Check if this is a whitelist rule
+          # @return [Boolean] true if mode is whitelist
+          def whitelist?
+            mode == 'whitelist'
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_account/resource.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_account/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAccount
+    def cloudflare_account(name, attributes = {})
+      attrs = Cloudflare::Types::AccountAttributes.new(attributes)
+      resource(:cloudflare_account, name) do
+        name attrs.name
+        type attrs.type if attrs.type
+        enforce_twofactor attrs.enforce_twofactor if !attrs.enforce_twofactor.nil?
+      end
+      ResourceReference.new(
+        type: 'cloudflare_account',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_account.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAccount
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_account/types.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AccountAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :name, Dry::Types['strict.string']
+    attribute :type, Dry::Types['strict.string'].enum('standard', 'enterprise').optional.default(nil)
+    attribute :enforce_twofactor, Dry::Types['strict.bool'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_account_dns_settings/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_account_dns_settings/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAccountDnsSettings
+    def cloudflare_account_dns_settings(name, attributes = {})
+      attrs = Cloudflare::Types::AccountDnsSettingsAttributes.new(attributes)
+      resource(:cloudflare_account_dns_settings, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_account_dns_settings',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_account_dns_settings.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAccountDnsSettings
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_account_dns_settings/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AccountDnsSettingsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_account_dns_settings_internal_view/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_account_dns_settings_internal_view/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAccountDnsSettingsInternalView
+    def cloudflare_account_dns_settings_internal_view(name, attributes = {})
+      attrs = Cloudflare::Types::AccountDnsSettingsInternalViewAttributes.new(attributes)
+      resource(:cloudflare_account_dns_settings_internal_view, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_account_dns_settings_internal_view',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_account_dns_settings_internal_view.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAccountDnsSettingsInternalView
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_account_dns_settings_internal_view/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AccountDnsSettingsInternalViewAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_account_member/resource.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_account_member/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAccountMember
+    def cloudflare_account_member(name, attributes = {})
+      attrs = Cloudflare::Types::AccountMemberAttributes.new(attributes)
+      resource(:cloudflare_account_member, name) do
+        account_id attrs.account_id
+        email_address attrs.email_address
+        role_ids attrs.role_ids
+        status attrs.status if attrs.status
+      end
+      ResourceReference.new(
+        type: 'cloudflare_account_member',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_account_member.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAccountMember
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_account_member/types.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AccountMemberAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+    attribute :email_address, Dry::Types['strict.string']
+    attribute :role_ids, Dry::Types['strict.array'].of(Dry::Types['strict.string'])
+    attribute :status, Dry::Types['strict.string'].enum('accepted', 'pending').optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_account_subscription/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_account_subscription/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAccountSubscription
+    def cloudflare_account_subscription(name, attributes = {})
+      attrs = Cloudflare::Types::AccountSubscriptionAttributes.new(attributes)
+      resource(:cloudflare_account_subscription, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_account_subscription',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_account_subscription.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAccountSubscription
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_account_subscription/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AccountSubscriptionAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_account_token/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_account_token/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAccountToken
+    def cloudflare_account_token(name, attributes = {})
+      attrs = Cloudflare::Types::AccountTokenAttributes.new(attributes)
+      resource(:cloudflare_account_token, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_account_token',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_account_token.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAccountToken
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_account_token/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AccountTokenAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_address_map/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_address_map/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAddressMap
+    def cloudflare_address_map(name, attributes = {})
+      attrs = Cloudflare::Types::AddressMapAttributes.new(attributes)
+      resource(:cloudflare_address_map, name) do
+        account_id attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_address_map',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_address_map.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAddressMap
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_address_map/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AddressMapAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+  end
+end

data/lib/pangea/resources/cloudflare_api_shield/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_api_shield/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareApiShield
+    def cloudflare_api_shield(name, attributes = {})
+      attrs = Cloudflare::Types::ApiShieldAttributes.new(attributes)
+      resource(:cloudflare_api_shield, name) do
+        zone_id attrs.zone_id
+        auth_id_characteristics attrs.auth_id_characteristics if attrs.auth_id_characteristics
+      end
+      ResourceReference.new(
+        type: 'cloudflare_api_shield',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_api_shield.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareApiShield
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_api_shield/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ApiShieldAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+    attribute :auth_id_characteristics, Dry::Types['strict.array'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_api_shield_discovery_operation/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_api_shield_discovery_operation/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareApiShieldDiscoveryOperation
+    def cloudflare_api_shield_discovery_operation(name, attributes = {})
+      attrs = Cloudflare::Types::ApiShieldDiscoveryOperationAttributes.new(attributes)
+      resource(:cloudflare_api_shield_discovery_operation, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_api_shield_discovery_operation',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_api_shield_discovery_operation.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareApiShieldDiscoveryOperation
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_api_shield_discovery_operation/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ApiShieldDiscoveryOperationAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_api_shield_operation/resource.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_api_shield_operation/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareApiShieldOperation
+    def cloudflare_api_shield_operation(name, attributes = {})
+      attrs = Cloudflare::Types::ApiShieldOperationAttributes.new(attributes)
+      resource(:cloudflare_api_shield_operation, name) do
+        zone_id attrs.zone_id
+        # method is a Kernel method, must use hash access and method_missing
+        method_missing(:method, attrs[:method])
+        host attrs.host
+        endpoint attrs.endpoint
+      end
+      ResourceReference.new(
+        type: 'cloudflare_api_shield_operation',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_api_shield_operation.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareApiShieldOperation
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_api_shield_operation/types.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ApiShieldOperationAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+    attribute :method, Dry::Types['strict.string']
+    attribute :host, Dry::Types['strict.string']
+    attribute :endpoint, Dry::Types['strict.string']
+  end
+end

data/lib/pangea/resources/cloudflare_api_shield_operation_schema_validation_settings/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_api_shield_operation_schema_validation_settings/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareApiShieldOperationSchemaValidationSettings
+    def cloudflare_api_shield_operation_schema_validation_settings(name, attributes = {})
+      attrs = Cloudflare::Types::ApiShieldOperationSchemaValidationSettingsAttributes.new(attributes)
+      resource(:cloudflare_api_shield_operation_schema_validation_settings, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_api_shield_operation_schema_validation_settings',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_api_shield_operation_schema_validation_settings.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareApiShieldOperationSchemaValidationSettings
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_api_shield_operation_schema_validation_settings/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ApiShieldOperationSchemaValidationSettingsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_api_shield_schema/resource.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_api_shield_schema/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareApiShieldSchema
+    def cloudflare_api_shield_schema(name, attributes = {})
+      attrs = Cloudflare::Types::ApiShieldSchemaAttributes.new(attributes)
+      resource(:cloudflare_api_shield_schema, name) do
+        zone_id attrs.zone_id
+        name attrs.name
+        source attrs.source
+        kind attrs.kind if attrs.kind
+        validation_enabled attrs.validation_enabled if !attrs.validation_enabled.nil?
+      end
+      ResourceReference.new(
+        type: 'cloudflare_api_shield_schema',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_api_shield_schema.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareApiShieldSchema
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_api_shield_schema/types.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ApiShieldSchemaAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+    attribute :name, Dry::Types['strict.string']
+    attribute :source, Dry::Types['strict.string']
+    attribute :kind, Dry::Types['strict.string'].enum('openapi_v3').optional.default(nil)
+    attribute :validation_enabled, Dry::Types['strict.bool'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_api_shield_schema_validation_settings/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_api_shield_schema_validation_settings/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareApiShieldSchemaValidationSettings
+    def cloudflare_api_shield_schema_validation_settings(name, attributes = {})
+      attrs = Cloudflare::Types::ApiShieldSchemaValidationSettingsAttributes.new(attributes)
+      resource(:cloudflare_api_shield_schema_validation_settings, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_api_shield_schema_validation_settings',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_api_shield_schema_validation_settings.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareApiShieldSchemaValidationSettings
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_api_shield_schema_validation_settings/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ApiShieldSchemaValidationSettingsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end