@pulumi/cloudflare 3.5.0 → 4.1.0-alpha.1638813934

package/teamsRule.js

@@ -0,0 +1,122 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TeamsRule = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * Provides a Cloudflare Teams rule resource. Teams rules comprise secure web gateway policies.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
+ *
+ * const rule1 = new cloudflare.TeamsRule("rule1", {
+ *     accountId: "1d5fdc9e88c8a8c4518b068cd94331fe",
+ *     action: "l4_override",
+ *     description: "desc",
+ *     filters: ["l4"],
+ *     name: "office",
+ *     precedence: 1,
+ *     ruleSettings: {
+ *         blockPageEnabled: false,
+ *         blockPageReason: "access not permitted",
+ *         l4override: {
+ *             ip: "192.0.2.1",
+ *             port: 1234,
+ *         },
+ *     },
+ *     traffic: "any(dns.domains[*] == \"com.example\")",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Teams Rules can be imported using a composite ID formed of account ID and teams rule ID.
+ *
+ * ```sh
+ *  $ pulumi import cloudflare:index/teamsRule:TeamsRule rule1 cb029e245cfdd66dc8d2e570d5dd3322/d41d8cd98f00b204e9800998ecf8427e
+ * ```
+ */
+class TeamsRule extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            inputs["accountId"] = state ? state.accountId : undefined;
+            inputs["action"] = state ? state.action : undefined;
+            inputs["description"] = state ? state.description : undefined;
+            inputs["enabled"] = state ? state.enabled : undefined;
+            inputs["filters"] = state ? state.filters : undefined;
+            inputs["identity"] = state ? state.identity : undefined;
+            inputs["name"] = state ? state.name : undefined;
+            inputs["precedence"] = state ? state.precedence : undefined;
+            inputs["ruleSettings"] = state ? state.ruleSettings : undefined;
+            inputs["traffic"] = state ? state.traffic : undefined;
+            inputs["version"] = state ? state.version : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accountId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountId'");
+            }
+            if ((!args || args.action === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'action'");
+            }
+            if ((!args || args.description === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'description'");
+            }
+            if ((!args || args.name === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'name'");
+            }
+            if ((!args || args.precedence === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'precedence'");
+            }
+            inputs["accountId"] = args ? args.accountId : undefined;
+            inputs["action"] = args ? args.action : undefined;
+            inputs["description"] = args ? args.description : undefined;
+            inputs["enabled"] = args ? args.enabled : undefined;
+            inputs["filters"] = args ? args.filters : undefined;
+            inputs["identity"] = args ? args.identity : undefined;
+            inputs["name"] = args ? args.name : undefined;
+            inputs["precedence"] = args ? args.precedence : undefined;
+            inputs["ruleSettings"] = args ? args.ruleSettings : undefined;
+            inputs["traffic"] = args ? args.traffic : undefined;
+            inputs["version"] = undefined /*out*/;
+        }
+        if (!opts.version) {
+            opts = pulumi.mergeOptions(opts, { version: utilities.getVersion() });
+        }
+        super(TeamsRule.__pulumiType, name, inputs, opts);
+    }
+    /**
+     * Get an existing TeamsRule resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new TeamsRule(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of TeamsRule.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === TeamsRule.__pulumiType;
+    }
+}
+exports.TeamsRule = TeamsRule;
+/** @internal */
+TeamsRule.__pulumiType = 'cloudflare:index/teamsRule:TeamsRule';
+//# sourceMappingURL=teamsRule.js.map

package/teamsRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teamsRule.js","sourceRoot":"","sources":["../teamsRule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,SAAU,SAAQ,MAAM,CAAC,cAAc;IA8EhD,YAAY,IAAY,EAAE,WAA4C,EAAE,IAAmC;QACvG,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyC,CAAC;YACxD,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;aAAM;YACH,MAAM,IAAI,GAAG,WAAwC,CAAC;YACtD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IA9HD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsB,EAAE,IAAmC;QACpH,OAAO,IAAI,SAAS,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,YAAY,CAAC;IAC1D,CAAC;;AA1BL,8BAgIC;AAlHG,gBAAgB;AACO,sBAAY,GAAG,sCAAsC,CAAC"}

package/types/index.js

@@ -2,6 +2,7 @@
 // *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
 // *** Do not edit by hand unless you're certain you know what you are doing! ***
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.output = exports.input = void 0;
 // Export sub-modules:
 const input = require("./input");
 exports.input = input;

package/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;AAEjF,sBAAsB;AACtB,iCAAiC;AAI7B,sBAAK;AAHT,mCAAmC;AAI/B,wBAAM"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,sBAAsB;AACtB,iCAAiC;AAI7B,sBAAK;AAHT,mCAAmC;AAI/B,wBAAM"}

package/types/input.d.ts

@@ -206,6 +206,17 @@ export interface AccessIdentityProviderConfig {
     supportGroups?: pulumi.Input<boolean>;
     tokenUrl?: pulumi.Input<string>;
 }
+export interface AccessPolicyApprovalGroup {
+    /**
+     * Number of approvals needed.
+     */
+    approvalsNeeded: pulumi.Input<number>;
+    /**
+     * List of emails to request approval from.
+     */
+    emailAddresses?: pulumi.Input<pulumi.Input<string>[]>;
+    emailListUuid?: pulumi.Input<string>;
+}
 export interface AccessPolicyExclude {
     anyValidServiceToken?: pulumi.Input<boolean>;
     authMethod?: pulumi.Input<string>;
@@ -397,18 +408,6 @@ export interface ApiTokenPolicy {
         [key: string]: pulumi.Input<string>;
     }>;
 }
-export interface CustomHostnameOwnershipVerification {
-    name?: pulumi.Input<string>;
-    /**
-     * Level of validation to be used for this hostname. Domain validation ("dv") must be used.
-     */
-    type?: pulumi.Input<string>;
-    value?: pulumi.Input<string>;
-}
-export interface CustomHostnameOwnershipVerificationHttp {
-    httpBody?: pulumi.Input<string>;
-    httpUrl?: pulumi.Input<string>;
-}
 export interface CustomHostnameSsl {
     certificateAuthority?: pulumi.Input<string>;
     cnameName?: pulumi.Input<string>;
@@ -467,7 +466,7 @@ export interface CustomSslCustomSslOptions {
     /**
      * Certificate certificate and the intermediate(s)
      */
-    certificate: pulumi.Input<string>;
+    certificate?: pulumi.Input<string>;
     /**
      * Specifies the region where your private key can be held locally. Valid values are `us`, `eu`, `highestSecurity`.
      */
@@ -475,7 +474,7 @@ export interface CustomSslCustomSslOptions {
     /**
      * Certificate's private key
      */
-    privateKey: pulumi.Input<string>;
+    privateKey?: pulumi.Input<string>;
     /**
      * Whether to enable support for legacy clients which do not include SNI in the TLS handshake. Valid values are `legacyCustom` (default), `sniCustom`.
      */
@@ -547,6 +546,34 @@ export interface GetWafGroupsFilter {
      */
     name?: string;
 }
+export interface GetWafGroupsFilterArgs {
+    /**
+     * Mode of the WAF Rule Groups to lookup. Valid values: on and off.
+     */
+    mode?: pulumi.Input<string>;
+    /**
+     * A regular expression matching the name of the WAF Rule Groups to lookup.
+     */
+    name?: pulumi.Input<string>;
+}
+export interface GetWafPackagesFilterArgs {
+    /**
+     * Action mode of the WAF Rule Packages to lookup. Valid values: simulate, block and challenge.
+     */
+    actionMode?: pulumi.Input<string>;
+    /**
+     * Detection mode of the WAF Rule Packages to lookup.
+     */
+    detectionMode?: pulumi.Input<string>;
+    /**
+     * A regular expression matching the name of the WAF Rule Packages to lookup.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Sensitivity of the WAF Rule Packages to lookup. Valid values: high, medium, low and off.
+     */
+    sensitivity?: pulumi.Input<string>;
+}
 export interface GetWafPackagesFilter {
     /**
      * Action mode of the WAF Rule Packages to lookup. Valid values: simulate, block and challenge.
@@ -579,6 +606,49 @@ export interface GetWafRulesFilter {
      */
     mode?: string;
 }
+export interface GetWafRulesFilterArgs {
+    /**
+     * A regular expression matching the description of the WAF Rules to lookup.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The ID of the WAF Rule Group in which the WAF Rules to lookup have to be.
+     */
+    groupId?: pulumi.Input<string>;
+    /**
+     * Mode of the WAF Rules to lookup. Valid values: one of ["block", "challenge", "default", "disable", "simulate"] or ["on", "off"] depending on the WAF Rule type.
+     */
+    mode?: pulumi.Input<string>;
+}
+export interface GetZonesFilterArgs {
+    /**
+     * The type of search to perform for the `name` value
+     * when querying the zone API. Valid values: `"exact"` and `"contains"`. Defaults
+     * to `"exact"`.
+     */
+    lookupType?: pulumi.Input<string>;
+    /**
+     * A RE2 compatible regular expression to filter the
+     * results. This is performed client side whereas the `name` and `lookupType`
+     * are performed on the Cloudflare server side.
+     */
+    match?: pulumi.Input<string>;
+    /**
+     * A string value to search for.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Paused status of the zone to lookup. Valid values are
+     * `true` or `false`.
+     */
+    paused?: pulumi.Input<boolean>;
+    /**
+     * Status of the zone to lookup. Valid values: `"active"`,
+     * `"pending"`, `"initializing"`, `"moved"`, `"deleted"`, `"deactivated"` and
+     * `"read only"`.
+     */
+    status?: pulumi.Input<string>;
+}
 export interface GetZonesFilter {
     /**
      * The type of search to perform for the `name` value
@@ -1233,7 +1303,7 @@ export interface RulesetRule {
     /**
      * List of parameters that configure the behavior of the ruleset rule action (refer to the nested schema).
      */
-    actionParameters?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameter>[]>;
+    actionParameters?: pulumi.Input<inputs.RulesetRuleActionParameters>;
     /**
      * Brief summary of the ruleset rule and its intended use.
      */
@@ -1250,41 +1320,87 @@ export interface RulesetRule {
      * Rule ID to apply the override to.
      */
     id?: pulumi.Input<string>;
+    /**
+     * List of parameters that configure HTTP rate limiting behaviour (refer to the nested schema).
+     */
+    ratelimit?: pulumi.Input<inputs.RulesetRuleRatelimit>;
     /**
      * Rule reference.
      */
     ref?: pulumi.Input<string>;
     version?: pulumi.Input<string>;
 }
-export interface RulesetRuleActionParameter {
+export interface RulesetRuleActionParameters {
+    /**
+     * List of HTTP header modifications to perform in the ruleset rule (refer to the nested schema).
+     */
+    headers?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersHeader>[]>;
     /**
      * Rule ID to apply the override to.
      */
     id?: pulumi.Input<string>;
     increment?: pulumi.Input<number>;
+    /**
+     * List of properties to configure WAF payload logging (refer to the nested schema).
+     */
+    matchedData?: pulumi.Input<inputs.RulesetRuleActionParametersMatchedData>;
     /**
      * List of override configurations to apply to the ruleset (refer to the nested schema).
      */
-    overrides?: pulumi.Input<inputs.RulesetRuleActionParameterOverrides>;
+    overrides?: pulumi.Input<inputs.RulesetRuleActionParametersOverrides>;
     /**
      * Products to target with the actions. Valid values are `"bic"`, `"hot"`, `"ratelimit"`, `"securityLevel"`, `"uablock"`, `"waf"` or `"zonelockdown"`.
      */
     products?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * Which ruleset to target. Valid value is `"current"`.
+     * List of rule-based overrides (refer to the nested schema).
+     */
+    rules?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * Which ruleset ID to target.
      */
     ruleset?: pulumi.Input<string>;
+    /**
+     * List of managed WAF rule IDs to target. Only valid when the "action" is set to skip.
+     */
+    rulesets?: pulumi.Input<pulumi.Input<string>[]>;
     /**
      * List of URI properties to configure for the ruleset rule when performing URL rewrite transformations (refer to the nested schema).
      */
-    uris?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterUri>[]>;
+    uri?: pulumi.Input<inputs.RulesetRuleActionParametersUri>;
     version?: pulumi.Input<string>;
 }
-export interface RulesetRuleActionParameterOverrides {
+export interface RulesetRuleActionParametersHeader {
+    /**
+     * Expression that defines the updated (dynamic) value of the URI path or query string component. Conflicts with `value`.
+     */
+    expression?: pulumi.Input<string>;
+    /**
+     * Name of the HTTP request header to target.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Action to perform on the HTTP request header. Valid values are `"set"` or `"remove"`.
+     */
+    operation?: pulumi.Input<string>;
+    /**
+     * Static string value of the updated URI path or query string component. Conflicts with `expression`.
+     */
+    value?: pulumi.Input<string>;
+}
+export interface RulesetRuleActionParametersMatchedData {
+    /**
+     * Public key to use within WAF Ruleset payload logging to view the HTTP request parameters. You can generate a public key [using the `matched-data-cli` command-line tool](https://developers.cloudflare.com/waf/managed-rulesets/payload-logging/command-line/generate-key-pair) or [in the Cloudflare dashboard](https://developers.cloudflare.com/waf/managed-rulesets/payload-logging/configure).
+     */
+    publicKey?: pulumi.Input<string>;
+}
+export interface RulesetRuleActionParametersOverrides {
     /**
      * List of tag-based overrides (refer to the nested schema).
      */
-    categories?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterOverridesCategory>[]>;
+    categories?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersOverridesCategory>[]>;
     /**
      * Defines if the current rule-level override enables or disables the rule.
      */
@@ -1292,9 +1408,9 @@ export interface RulesetRuleActionParameterOverrides {
     /**
      * List of rule-based overrides (refer to the nested schema).
      */
-    rules?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterOverridesRule>[]>;
+    rules?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersOverridesRule>[]>;
 }
-export interface RulesetRuleActionParameterOverridesCategory {
+export interface RulesetRuleActionParametersOverridesCategory {
     /**
      * Action to perform in the rule-level override. Valid values are `"block"`, `"challenge"`, `"ddosDynamic"`, `"execute"`, `"forceConnectionClose"`, `"jsChallenge"`, `"log"`, `"rewrite"`, `"score"`, or  `"skip"`.
      */
@@ -1308,7 +1424,7 @@ export interface RulesetRuleActionParameterOverridesCategory {
      */
     enabled?: pulumi.Input<boolean>;
 }
-export interface RulesetRuleActionParameterOverridesRule {
+export interface RulesetRuleActionParametersOverridesRule {
     /**
      * Action to perform in the rule-level override. Valid values are `"block"`, `"challenge"`, `"ddosDynamic"`, `"execute"`, `"forceConnectionClose"`, `"jsChallenge"`, `"log"`, `"rewrite"`, `"score"`, or  `"skip"`.
      */
@@ -1325,19 +1441,23 @@ export interface RulesetRuleActionParameterOverridesRule {
      * Anomaly score threshold to apply in the ruleset rule override. Only applicable to modsecurity-based rulesets.
      */
     scoreThreshold?: pulumi.Input<number>;
+    /**
+     * Sensitivity level for a ruleset rule override.
+     */
+    sensitivityLevel?: pulumi.Input<string>;
 }
-export interface RulesetRuleActionParameterUri {
+export interface RulesetRuleActionParametersUri {
     origin?: pulumi.Input<boolean>;
     /**
      * URI path configuration when performing a URL rewrite (refer to the nested schema).
      */
-    paths?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterUriPath>[]>;
+    path?: pulumi.Input<inputs.RulesetRuleActionParametersUriPath>;
     /**
      * Query string configuration when performing a URL rewrite (refer to the nested schema).
      */
-    queries?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParameterUriQuery>[]>;
+    query?: pulumi.Input<inputs.RulesetRuleActionParametersUriQuery>;
 }
-export interface RulesetRuleActionParameterUriPath {
+export interface RulesetRuleActionParametersUriPath {
     /**
      * Expression that defines the updated (dynamic) value of the URI path or query string component. Conflicts with `value`.
      */
@@ -1347,7 +1467,7 @@ export interface RulesetRuleActionParameterUriPath {
      */
     value?: pulumi.Input<string>;
 }
-export interface RulesetRuleActionParameterUriQuery {
+export interface RulesetRuleActionParametersUriQuery {
     /**
      * Expression that defines the updated (dynamic) value of the URI path or query string component. Conflicts with `value`.
      */
@@ -1357,6 +1477,28 @@ export interface RulesetRuleActionParameterUriQuery {
      */
     value?: pulumi.Input<string>;
 }
+export interface RulesetRuleRatelimit {
+    /**
+     * List of parameters that define how Cloudflare tracks the request rate for this rule.
+     */
+    characteristics?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Scope of the mitigation action. Allows you to specify an action scope different from the rule scope. Refer to the [rate limiting parameters documentation](https://developers.cloudflare.com/firewall/cf-rulesets/custom-rules/rate-limiting/parameters) for full details.
+     */
+    mitigationExpression?: pulumi.Input<string>;
+    /**
+     * Once the request rate is reached, the Rate Limiting rule blocks further requests for the period of time defined in this field.
+     */
+    mitigationTimeout?: pulumi.Input<number>;
+    /**
+     * The period of time to consider (in seconds) when evaluating the request rate.
+     */
+    period?: pulumi.Input<number>;
+    /**
+     * The number of requests over the period of time that will trigger the Rate Limiting rule.
+     */
+    requestsPerPeriod?: pulumi.Input<number>;
+}
 export interface SpectrumApplicationDns {
     /**
      * Fully qualified domain name of the origin e.g. origin-ssh.example.com.
@@ -1383,10 +1525,81 @@ export interface SpectrumApplicationOriginPortRange {
      */
     start: pulumi.Input<number>;
 }
+export interface TeamsAccountAntivirus {
+    enabledDownloadPhase: pulumi.Input<boolean>;
+    enabledUploadPhase: pulumi.Input<boolean>;
+    failClosed: pulumi.Input<boolean>;
+}
+export interface TeamsAccountBlockPage {
+    /**
+     * Hex code of block page background color.
+     */
+    backgroundColor?: pulumi.Input<string>;
+    /**
+     * Indicator of enablement.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * Block page header text.
+     */
+    footerText?: pulumi.Input<string>;
+    /**
+     * Block page footer text.
+     */
+    headerText?: pulumi.Input<string>;
+    /**
+     * URL of block page logo.
+     */
+    logoPath?: pulumi.Input<string>;
+    /**
+     * Name of block page configuration.
+     */
+    name?: pulumi.Input<string>;
+}
 export interface TeamsLocationNetwork {
+    /**
+     * ID of the teams location.
+     */
     id?: pulumi.Input<string>;
     network: pulumi.Input<string>;
 }
+export interface TeamsRuleRuleSettings {
+    bisoAdminControls?: pulumi.Input<inputs.TeamsRuleRuleSettingsBisoAdminControls>;
+    /**
+     * Indicator of block page enablement.
+     */
+    blockPageEnabled?: pulumi.Input<boolean>;
+    /**
+     * The displayed reason for a user being blocked.
+     */
+    blockPageReason?: pulumi.Input<string>;
+    /**
+     * Settings to forward layer 4 traffic.
+     */
+    l4override?: pulumi.Input<inputs.TeamsRuleRuleSettingsL4override>;
+    /**
+     * The host to override matching DNS queries with.
+     */
+    overrideHost?: pulumi.Input<string>;
+    /**
+     * The IPs to override matching DNS queries with.
+     */
+    overrideIps?: pulumi.Input<pulumi.Input<string>[]>;
+}
+export interface TeamsRuleRuleSettingsBisoAdminControls {
+    disableCopyPaste?: pulumi.Input<boolean>;
+    disablePrinting?: pulumi.Input<boolean>;
+}
+export interface TeamsRuleRuleSettingsL4override {
+    /**
+     * Override IP to forward traffic to.
+     */
+    ip: pulumi.Input<string>;
+    /**
+     * Override Port to forward traffic to.
+     */
+    port: pulumi.Input<number>;
+}
 export interface WorkerScriptKvNamespaceBinding {
     /**
      * The global variable for the binding in your Worker code.
@@ -1434,11 +1647,7 @@ export interface ZoneLockdownConfiguration {
      */
     value: pulumi.Input<string>;
 }
-export interface ZoneMeta {
-    phishingDetected: pulumi.Input<boolean>;
-    wildcardProxiable: pulumi.Input<boolean>;
-}
-export interface ZoneSettingsOverrideInitialSettings {
+export interface ZoneSettingsOverrideInitialSetting {
     alwaysOnline?: pulumi.Input<string>;
     alwaysUseHttps?: pulumi.Input<string>;
     automaticHttpsRewrites?: pulumi.Input<string>;
@@ -1459,9 +1668,9 @@ export interface ZoneSettingsOverrideInitialSettings {
     ipv6?: pulumi.Input<string>;
     maxUpload?: pulumi.Input<number>;
     minTlsVersion?: pulumi.Input<string>;
-    minify?: pulumi.Input<inputs.ZoneSettingsOverrideInitialSettingsMinify>;
+    minify?: pulumi.Input<inputs.ZoneSettingsOverrideInitialSettingMinify>;
     mirage?: pulumi.Input<string>;
-    mobileRedirect?: pulumi.Input<inputs.ZoneSettingsOverrideInitialSettingsMobileRedirect>;
+    mobileRedirect?: pulumi.Input<inputs.ZoneSettingsOverrideInitialSettingMobileRedirect>;
     opportunisticEncryption?: pulumi.Input<string>;
     opportunisticOnion?: pulumi.Input<string>;
     originErrorPagePassThru?: pulumi.Input<string>;
@@ -1471,7 +1680,7 @@ export interface ZoneSettingsOverrideInitialSettings {
     pseudoIpv4?: pulumi.Input<string>;
     responseBuffering?: pulumi.Input<string>;
     rocketLoader?: pulumi.Input<string>;
-    securityHeader?: pulumi.Input<inputs.ZoneSettingsOverrideInitialSettingsSecurityHeader>;
+    securityHeader?: pulumi.Input<inputs.ZoneSettingsOverrideInitialSettingSecurityHeader>;
     securityLevel?: pulumi.Input<string>;
     serverSideExclude?: pulumi.Input<string>;
     sortQueryStringForCache?: pulumi.Input<string>;
@@ -1492,7 +1701,7 @@ export interface ZoneSettingsOverrideInitialSettings {
     websockets?: pulumi.Input<string>;
     zeroRtt?: pulumi.Input<string>;
 }
-export interface ZoneSettingsOverrideInitialSettingsMinify {
+export interface ZoneSettingsOverrideInitialSettingMinify {
     /**
      * "on"/"off"
      */
@@ -1506,7 +1715,7 @@ export interface ZoneSettingsOverrideInitialSettingsMinify {
      */
     js: pulumi.Input<string>;
 }
-export interface ZoneSettingsOverrideInitialSettingsMobileRedirect {
+export interface ZoneSettingsOverrideInitialSettingMobileRedirect {
     /**
      * String value
      */
@@ -1520,7 +1729,7 @@ export interface ZoneSettingsOverrideInitialSettingsMobileRedirect {
      */
     stripUri: pulumi.Input<boolean>;
 }
-export interface ZoneSettingsOverrideInitialSettingsSecurityHeader {
+export interface ZoneSettingsOverrideInitialSettingSecurityHeader {
     /**
      * true/false
      */