@pulumi/cloudflare 3.5.0 → 3.6.0

package/teamsRule.d.ts

@@ -0,0 +1,195 @@
+import * as pulumi from "@pulumi/pulumi";
+import { input as inputs, output as outputs } from "./types";
+/**
+ * Provides a Cloudflare Teams rule resource. Teams rules comprise secure web gateway policies.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
+ *
+ * const rule1 = new cloudflare.TeamsRule("rule1", {
+ *     accountId: "1d5fdc9e88c8a8c4518b068cd94331fe",
+ *     action: "l4_override",
+ *     description: "desc",
+ *     filters: ["l4"],
+ *     name: "office",
+ *     precedence: 1,
+ *     ruleSettings: {
+ *         blockPageEnabled: false,
+ *         blockPageReason: "access not permitted",
+ *         l4override: {
+ *             ip: "192.0.2.1",
+ *             port: 1234,
+ *         },
+ *     },
+ *     traffic: "any(dns.domains[*] == \"com.example\")",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Teams Rules can be imported using a composite ID formed of account ID and teams rule ID.
+ *
+ * ```sh
+ *  $ pulumi import cloudflare:index/teamsRule:TeamsRule rule1 cb029e245cfdd66dc8d2e570d5dd3322/d41d8cd98f00b204e9800998ecf8427e
+ * ```
+ */
+export declare class TeamsRule extends pulumi.CustomResource {
+    /**
+     * Get an existing TeamsRule resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: TeamsRuleState, opts?: pulumi.CustomResourceOptions): TeamsRule;
+    /**
+     * Returns true if the given object is an instance of TeamsRule.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is TeamsRule;
+    /**
+     * The account to which the teams rule should be added.
+     */
+    readonly accountId: pulumi.Output<string>;
+    /**
+     * The action executed by matched teams rule.
+     */
+    readonly action: pulumi.Output<string>;
+    /**
+     * The description of the teams rule.
+     */
+    readonly description: pulumi.Output<string>;
+    /**
+     * Indicator of rule enablement.
+     */
+    readonly enabled: pulumi.Output<boolean | undefined>;
+    /**
+     * The protocol or layer to evaluate the traffic and identity expressions.
+     */
+    readonly filters: pulumi.Output<string[] | undefined>;
+    /**
+     * The wirefilter expression to be used for identity matching.
+     */
+    readonly identity: pulumi.Output<string | undefined>;
+    /**
+     * The name of the teams rule.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The evaluation precedence of the teams rule.
+     */
+    readonly precedence: pulumi.Output<number>;
+    /**
+     * Additional rule settings.
+     */
+    readonly ruleSettings: pulumi.Output<outputs.TeamsRuleRuleSettings | undefined>;
+    /**
+     * The wirefilter expression to be used for traffic matching.
+     */
+    readonly traffic: pulumi.Output<string | undefined>;
+    readonly version: pulumi.Output<number>;
+    /**
+     * Create a TeamsRule resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: TeamsRuleArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering TeamsRule resources.
+ */
+export interface TeamsRuleState {
+    /**
+     * The account to which the teams rule should be added.
+     */
+    accountId?: pulumi.Input<string>;
+    /**
+     * The action executed by matched teams rule.
+     */
+    action?: pulumi.Input<string>;
+    /**
+     * The description of the teams rule.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Indicator of rule enablement.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * The protocol or layer to evaluate the traffic and identity expressions.
+     */
+    filters?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The wirefilter expression to be used for identity matching.
+     */
+    identity?: pulumi.Input<string>;
+    /**
+     * The name of the teams rule.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The evaluation precedence of the teams rule.
+     */
+    precedence?: pulumi.Input<number>;
+    /**
+     * Additional rule settings.
+     */
+    ruleSettings?: pulumi.Input<inputs.TeamsRuleRuleSettings>;
+    /**
+     * The wirefilter expression to be used for traffic matching.
+     */
+    traffic?: pulumi.Input<string>;
+    version?: pulumi.Input<number>;
+}
+/**
+ * The set of arguments for constructing a TeamsRule resource.
+ */
+export interface TeamsRuleArgs {
+    /**
+     * The account to which the teams rule should be added.
+     */
+    accountId: pulumi.Input<string>;
+    /**
+     * The action executed by matched teams rule.
+     */
+    action: pulumi.Input<string>;
+    /**
+     * The description of the teams rule.
+     */
+    description: pulumi.Input<string>;
+    /**
+     * Indicator of rule enablement.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * The protocol or layer to evaluate the traffic and identity expressions.
+     */
+    filters?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The wirefilter expression to be used for identity matching.
+     */
+    identity?: pulumi.Input<string>;
+    /**
+     * The name of the teams rule.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * The evaluation precedence of the teams rule.
+     */
+    precedence: pulumi.Input<number>;
+    /**
+     * Additional rule settings.
+     */
+    ruleSettings?: pulumi.Input<inputs.TeamsRuleRuleSettings>;
+    /**
+     * The wirefilter expression to be used for traffic matching.
+     */
+    traffic?: pulumi.Input<string>;
+}

package/teamsRule.js

@@ -0,0 +1,121 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Provides a Cloudflare Teams rule resource. Teams rules comprise secure web gateway policies.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
+ *
+ * const rule1 = new cloudflare.TeamsRule("rule1", {
+ *     accountId: "1d5fdc9e88c8a8c4518b068cd94331fe",
+ *     action: "l4_override",
+ *     description: "desc",
+ *     filters: ["l4"],
+ *     name: "office",
+ *     precedence: 1,
+ *     ruleSettings: {
+ *         blockPageEnabled: false,
+ *         blockPageReason: "access not permitted",
+ *         l4override: {
+ *             ip: "192.0.2.1",
+ *             port: 1234,
+ *         },
+ *     },
+ *     traffic: "any(dns.domains[*] == \"com.example\")",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Teams Rules can be imported using a composite ID formed of account ID and teams rule ID.
+ *
+ * ```sh
+ *  $ pulumi import cloudflare:index/teamsRule:TeamsRule rule1 cb029e245cfdd66dc8d2e570d5dd3322/d41d8cd98f00b204e9800998ecf8427e
+ * ```
+ */
+class TeamsRule extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            inputs["accountId"] = state ? state.accountId : undefined;
+            inputs["action"] = state ? state.action : undefined;
+            inputs["description"] = state ? state.description : undefined;
+            inputs["enabled"] = state ? state.enabled : undefined;
+            inputs["filters"] = state ? state.filters : undefined;
+            inputs["identity"] = state ? state.identity : undefined;
+            inputs["name"] = state ? state.name : undefined;
+            inputs["precedence"] = state ? state.precedence : undefined;
+            inputs["ruleSettings"] = state ? state.ruleSettings : undefined;
+            inputs["traffic"] = state ? state.traffic : undefined;
+            inputs["version"] = state ? state.version : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accountId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountId'");
+            }
+            if ((!args || args.action === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'action'");
+            }
+            if ((!args || args.description === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'description'");
+            }
+            if ((!args || args.name === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'name'");
+            }
+            if ((!args || args.precedence === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'precedence'");
+            }
+            inputs["accountId"] = args ? args.accountId : undefined;
+            inputs["action"] = args ? args.action : undefined;
+            inputs["description"] = args ? args.description : undefined;
+            inputs["enabled"] = args ? args.enabled : undefined;
+            inputs["filters"] = args ? args.filters : undefined;
+            inputs["identity"] = args ? args.identity : undefined;
+            inputs["name"] = args ? args.name : undefined;
+            inputs["precedence"] = args ? args.precedence : undefined;
+            inputs["ruleSettings"] = args ? args.ruleSettings : undefined;
+            inputs["traffic"] = args ? args.traffic : undefined;
+            inputs["version"] = undefined /*out*/;
+        }
+        if (!opts.version) {
+            opts = pulumi.mergeOptions(opts, { version: utilities.getVersion() });
+        }
+        super(TeamsRule.__pulumiType, name, inputs, opts);
+    }
+    /**
+     * Get an existing TeamsRule resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new TeamsRule(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of TeamsRule.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === TeamsRule.__pulumiType;
+    }
+}
+exports.TeamsRule = TeamsRule;
+/** @internal */
+TeamsRule.__pulumiType = 'cloudflare:index/teamsRule:TeamsRule';
+//# sourceMappingURL=teamsRule.js.map

package/teamsRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teamsRule.js","sourceRoot":"","sources":["../teamsRule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,SAAU,SAAQ,MAAM,CAAC,cAAc;IA8EhD,YAAY,IAAY,EAAE,WAA4C,EAAE,IAAmC;QACvG,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyC,CAAC;YACxD,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;aAAM;YACH,MAAM,IAAI,GAAG,WAAwC,CAAC;YACtD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IA9HD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsB,EAAE,IAAmC;QACpH,OAAO,IAAI,SAAS,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,YAAY,CAAC;IAC1D,CAAC;;AA1BL,8BAgIC;AAlHG,gBAAgB;AACO,sBAAY,GAAG,sCAAsC,CAAC"}

package/types/input.d.ts

@@ -206,6 +206,17 @@ export interface AccessIdentityProviderConfig {
     supportGroups?: pulumi.Input<boolean>;
     tokenUrl?: pulumi.Input<string>;
 }
+export interface AccessPolicyApprovalGroup {
+    /**
+     * Number of approvals needed.
+     */
+    approvalsNeeded: pulumi.Input<number>;
+    /**
+     * List of emails to request approval from.
+     */
+    emailAddresses?: pulumi.Input<pulumi.Input<string>[]>;
+    emailListUuid?: pulumi.Input<string>;
+}
 export interface AccessPolicyExclude {
     anyValidServiceToken?: pulumi.Input<boolean>;
     authMethod?: pulumi.Input<string>;
@@ -1233,7 +1244,7 @@ export interface RulesetRule {
     /**
      * List of parameters that configure the behavior of the ruleset rule action (refer to the nested schema).
      */
-    actionParameters?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameter>[]>;
+    actionParameters?: pulumi.Input<inputs.RulesetRuleActionParameters>;
     /**
      * Brief summary of the ruleset rule and its intended use.
      */
@@ -1250,41 +1261,87 @@ export interface RulesetRule {
      * Rule ID to apply the override to.
      */
     id?: pulumi.Input<string>;
+    /**
+     * List of parameters that configure HTTP rate limiting behaviour (refer to the nested schema).
+     */
+    ratelimit?: pulumi.Input<inputs.RulesetRuleRatelimit>;
     /**
      * Rule reference.
      */
     ref?: pulumi.Input<string>;
     version?: pulumi.Input<string>;
 }
-export interface RulesetRuleActionParameter {
+export interface RulesetRuleActionParameters {
+    /**
+     * List of HTTP header modifications to perform in the ruleset rule (refer to the nested schema).
+     */
+    headers?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersHeader>[]>;
     /**
      * Rule ID to apply the override to.
      */
     id?: pulumi.Input<string>;
     increment?: pulumi.Input<number>;
+    /**
+     * List of properties to configure WAF payload logging (refer to the nested schema).
+     */
+    matchedData?: pulumi.Input<inputs.RulesetRuleActionParametersMatchedData>;
     /**
      * List of override configurations to apply to the ruleset (refer to the nested schema).
      */
-    overrides?: pulumi.Input<inputs.RulesetRuleActionParameterOverrides>;
+    overrides?: pulumi.Input<inputs.RulesetRuleActionParametersOverrides>;
     /**
      * Products to target with the actions. Valid values are `"bic"`, `"hot"`, `"ratelimit"`, `"securityLevel"`, `"uablock"`, `"waf"` or `"zonelockdown"`.
      */
     products?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * Which ruleset to target. Valid value is `"current"`.
+     * List of rule-based overrides (refer to the nested schema).
+     */
+    rules?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * Which ruleset ID to target.
      */
     ruleset?: pulumi.Input<string>;
+    /**
+     * List of managed WAF rule IDs to target. Only valid when the "action" is set to skip.
+     */
+    rulesets?: pulumi.Input<pulumi.Input<string>[]>;
     /**
      * List of URI properties to configure for the ruleset rule when performing URL rewrite transformations (refer to the nested schema).
      */
-    uris?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterUri>[]>;
+    uri?: pulumi.Input<inputs.RulesetRuleActionParametersUri>;
     version?: pulumi.Input<string>;
 }
-export interface RulesetRuleActionParameterOverrides {
+export interface RulesetRuleActionParametersHeader {
+    /**
+     * Expression that defines the updated (dynamic) value of the URI path or query string component. Conflicts with `value`.
+     */
+    expression?: pulumi.Input<string>;
+    /**
+     * Name of the HTTP request header to target.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Action to perform on the HTTP request header. Valid values are `"set"` or `"remove"`.
+     */
+    operation?: pulumi.Input<string>;
+    /**
+     * Static string value of the updated URI path or query string component. Conflicts with `expression`.
+     */
+    value?: pulumi.Input<string>;
+}
+export interface RulesetRuleActionParametersMatchedData {
+    /**
+     * Public key to use within WAF Ruleset payload logging to view the HTTP request parameters. You can generate a public key [using the `matched-data-cli` command-line tool](https://developers.cloudflare.com/waf/managed-rulesets/payload-logging/command-line/generate-key-pair) or [in the Cloudflare dashboard](https://developers.cloudflare.com/waf/managed-rulesets/payload-logging/configure).
+     */
+    publicKey?: pulumi.Input<string>;
+}
+export interface RulesetRuleActionParametersOverrides {
     /**
      * List of tag-based overrides (refer to the nested schema).
      */
-    categories?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterOverridesCategory>[]>;
+    categories?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersOverridesCategory>[]>;
     /**
      * Defines if the current rule-level override enables or disables the rule.
      */
@@ -1292,9 +1349,9 @@ export interface RulesetRuleActionParameterOverrides {
     /**
      * List of rule-based overrides (refer to the nested schema).
      */
-    rules?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterOverridesRule>[]>;
+    rules?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersOverridesRule>[]>;
 }
-export interface RulesetRuleActionParameterOverridesCategory {
+export interface RulesetRuleActionParametersOverridesCategory {
     /**
      * Action to perform in the rule-level override. Valid values are `"block"`, `"challenge"`, `"ddosDynamic"`, `"execute"`, `"forceConnectionClose"`, `"jsChallenge"`, `"log"`, `"rewrite"`, `"score"`, or  `"skip"`.
      */
@@ -1308,7 +1365,7 @@ export interface RulesetRuleActionParameterOverridesCategory {
      */
     enabled?: pulumi.Input<boolean>;
 }
-export interface RulesetRuleActionParameterOverridesRule {
+export interface RulesetRuleActionParametersOverridesRule {
     /**
      * Action to perform in the rule-level override. Valid values are `"block"`, `"challenge"`, `"ddosDynamic"`, `"execute"`, `"forceConnectionClose"`, `"jsChallenge"`, `"log"`, `"rewrite"`, `"score"`, or  `"skip"`.
      */
@@ -1326,18 +1383,18 @@ export interface RulesetRuleActionParameterOverridesRule {
      */
     scoreThreshold?: pulumi.Input<number>;
 }
-export interface RulesetRuleActionParameterUri {
+export interface RulesetRuleActionParametersUri {
     origin?: pulumi.Input<boolean>;
     /**
      * URI path configuration when performing a URL rewrite (refer to the nested schema).
      */
-    paths?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterUriPath>[]>;
+    path?: pulumi.Input<inputs.RulesetRuleActionParametersUriPath>;
     /**
      * Query string configuration when performing a URL rewrite (refer to the nested schema).
      */
-    queries?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterUriQuery>[]>;
+    query?: pulumi.Input<inputs.RulesetRuleActionParametersUriQuery>;
 }
-export interface RulesetRuleActionParameterUriPath {
+export interface RulesetRuleActionParametersUriPath {
     /**
      * Expression that defines the updated (dynamic) value of the URI path or query string component. Conflicts with `value`.
      */
@@ -1347,7 +1404,7 @@ export interface RulesetRuleActionParameterUriPath {
      */
     value?: pulumi.Input<string>;
 }
-export interface RulesetRuleActionParameterUriQuery {
+export interface RulesetRuleActionParametersUriQuery {
     /**
      * Expression that defines the updated (dynamic) value of the URI path or query string component. Conflicts with `value`.
      */
@@ -1357,6 +1414,28 @@ export interface RulesetRuleActionParameterUriQuery {
      */
     value?: pulumi.Input<string>;
 }
+export interface RulesetRuleRatelimit {
+    /**
+     * List of parameters that define how Cloudflare tracks the request rate for this rule.
+     */
+    characteristics?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Scope of the mitigation action. Allows you to specify an action scope different from the rule scope. Refer to the [rate limiting parameters documentation](https://developers.cloudflare.com/firewall/cf-rulesets/custom-rules/rate-limiting/parameters) for full details.
+     */
+    mitigationExpression?: pulumi.Input<string>;
+    /**
+     * Once the request rate is reached, the Rate Limiting rule blocks further requests for the period of time defined in this field.
+     */
+    mitigationTimeout?: pulumi.Input<number>;
+    /**
+     * The period of time to consider (in seconds) when evaluating the request rate.
+     */
+    period?: pulumi.Input<number>;
+    /**
+     * The number of requests over the period of time that will trigger the Rate Limiting rule.
+     */
+    requestsPerPeriod?: pulumi.Input<number>;
+}
 export interface SpectrumApplicationDns {
     /**
      * Fully qualified domain name of the origin e.g. origin-ssh.example.com.
@@ -1383,10 +1462,81 @@ export interface SpectrumApplicationOriginPortRange {
      */
     start: pulumi.Input<number>;
 }
+export interface TeamsAccountAntivirus {
+    enabledDownloadPhase: pulumi.Input<boolean>;
+    enabledUploadPhase: pulumi.Input<boolean>;
+    failClosed: pulumi.Input<boolean>;
+}
+export interface TeamsAccountBlockPage {
+    /**
+     * Hex code of block page background color.
+     */
+    backgroundColor?: pulumi.Input<string>;
+    /**
+     * Indicator of enablement.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * Block page header text.
+     */
+    footerText?: pulumi.Input<string>;
+    /**
+     * Block page footer text.
+     */
+    headerText?: pulumi.Input<string>;
+    /**
+     * URL of block page logo.
+     */
+    logoPath?: pulumi.Input<string>;
+    /**
+     * Name of block page configuration.
+     */
+    name?: pulumi.Input<string>;
+}
 export interface TeamsLocationNetwork {
+    /**
+     * ID of the teams location.
+     */
     id?: pulumi.Input<string>;
     network: pulumi.Input<string>;
 }
+export interface TeamsRuleRuleSettings {
+    bisoAdminControls?: pulumi.Input<inputs.TeamsRuleRuleSettingsBisoAdminControls>;
+    /**
+     * Indicator of block page enablement.
+     */
+    blockPageEnabled?: pulumi.Input<boolean>;
+    /**
+     * The displayed reason for a user being blocked.
+     */
+    blockPageReason?: pulumi.Input<string>;
+    /**
+     * Settings to forward layer 4 traffic.
+     */
+    l4override?: pulumi.Input<inputs.TeamsRuleRuleSettingsL4override>;
+    /**
+     * The host to override matching DNS queries with.
+     */
+    overrideHost?: pulumi.Input<string>;
+    /**
+     * The IPs to override matching DNS queries with.
+     */
+    overrideIps?: pulumi.Input<pulumi.Input<string>[]>;
+}
+export interface TeamsRuleRuleSettingsBisoAdminControls {
+    disableCopyPaste?: pulumi.Input<boolean>;
+    disablePrinting?: pulumi.Input<boolean>;
+}
+export interface TeamsRuleRuleSettingsL4override {
+    /**
+     * Override IP to forward traffic to.
+     */
+    ip: pulumi.Input<string>;
+    /**
+     * Override Port to forward traffic to.
+     */
+    port: pulumi.Input<number>;
+}
 export interface WorkerScriptKvNamespaceBinding {
     /**
      * The global variable for the binding in your Worker code.