@pulumi/cloudflare 6.3.1 → 6.4.0-alpha.1752588923

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (170) hide show
  1. package/accessApplication.d.ts +3 -0
  2. package/accessApplication.js.map +1 -1
  3. package/accessPolicy.d.ts +1 -4
  4. package/accessPolicy.js +1 -4
  5. package/accessPolicy.js.map +1 -1
  6. package/accountMember.d.ts +1 -1
  7. package/accountMember.js +1 -1
  8. package/accountSubscription.d.ts +6 -12
  9. package/accountSubscription.js +6 -2
  10. package/accountSubscription.js.map +1 -1
  11. package/cloudforceOneRequestMessage.d.ts +1 -1
  12. package/cloudforceOneRequestMessage.js +1 -1
  13. package/contentScanningExpression.d.ts +0 -8
  14. package/contentScanningExpression.js +0 -2
  15. package/contentScanningExpression.js.map +1 -1
  16. package/devicePostureRule.d.ts +1 -1
  17. package/dlpCustomProfile.d.ts +4 -7
  18. package/dlpCustomProfile.js +6 -2
  19. package/dlpCustomProfile.js.map +1 -1
  20. package/dlpPredefinedProfile.d.ts +15 -6
  21. package/dlpPredefinedProfile.js +4 -7
  22. package/dlpPredefinedProfile.js.map +1 -1
  23. package/dnsRecord.d.ts +4 -4
  24. package/getAccount.d.ts +2 -2
  25. package/getAccount.js +2 -2
  26. package/getAccountApiTokenPermissionGroups.d.ts +2 -2
  27. package/getAccountApiTokenPermissionGroups.js +2 -2
  28. package/getAccountApiTokenPermissionGroupsList.d.ts +2 -2
  29. package/getAccountApiTokenPermissionGroupsList.js +2 -2
  30. package/getAccountMember.d.ts +2 -2
  31. package/getAccountMember.js +2 -2
  32. package/getAccountMembers.d.ts +2 -2
  33. package/getAccountMembers.js +2 -2
  34. package/getAccountPermissionGroup.d.ts +6 -6
  35. package/getAccountPermissionGroup.js +4 -4
  36. package/getAccountPermissionGroups.d.ts +2 -2
  37. package/getAccountPermissionGroups.js +2 -2
  38. package/getAccountRole.d.ts +2 -2
  39. package/getAccountRole.js +2 -2
  40. package/getAccountRoles.d.ts +2 -2
  41. package/getAccountRoles.js +2 -2
  42. package/getAccountToken.d.ts +2 -2
  43. package/getAccountToken.js +2 -2
  44. package/getAccountTokens.d.ts +2 -2
  45. package/getAccountTokens.js +2 -2
  46. package/getDnsRecord.d.ts +1 -1
  47. package/getMagicTransitConnector.d.ts +9 -0
  48. package/getMagicTransitConnector.js.map +1 -1
  49. package/getMagicTransitConnectors.d.ts +9 -0
  50. package/getMagicTransitConnectors.js.map +1 -1
  51. package/getR2BucketEventNotification.d.ts +4 -19
  52. package/getR2BucketEventNotification.js.map +1 -1
  53. package/getResourceGroup.d.ts +5 -5
  54. package/getResourceGroup.js +4 -4
  55. package/getResourceGroups.d.ts +4 -4
  56. package/getResourceGroups.js +4 -4
  57. package/getSchemaValidationOperationSettings.d.ts +55 -0
  58. package/getSchemaValidationOperationSettings.js +50 -0
  59. package/getSchemaValidationOperationSettings.js.map +1 -0
  60. package/getSchemaValidationOperationSettingsList.d.ts +54 -0
  61. package/getSchemaValidationOperationSettingsList.js +48 -0
  62. package/getSchemaValidationOperationSettingsList.js.map +1 -0
  63. package/getSchemaValidationSchemas.d.ts +109 -0
  64. package/getSchemaValidationSchemas.js +56 -0
  65. package/getSchemaValidationSchemas.js.map +1 -0
  66. package/getSchemaValidationSchemasList.d.ts +101 -0
  67. package/getSchemaValidationSchemasList.js +54 -0
  68. package/getSchemaValidationSchemasList.js.map +1 -0
  69. package/getSchemaValidationSettings.d.ts +63 -0
  70. package/getSchemaValidationSettings.js +46 -0
  71. package/getSchemaValidationSettings.js.map +1 -0
  72. package/getUser.d.ts +51 -1
  73. package/getUser.js.map +1 -1
  74. package/getZeroTrustAccessApplication.d.ts +1 -0
  75. package/getZeroTrustAccessApplication.js.map +1 -1
  76. package/getZeroTrustDeviceSettings.d.ts +69 -0
  77. package/getZeroTrustDeviceSettings.js +46 -0
  78. package/getZeroTrustDeviceSettings.js.map +1 -0
  79. package/getZeroTrustDlpEntry.d.ts +1 -1
  80. package/getZeroTrustGatewayPolicy.d.ts +1 -0
  81. package/getZeroTrustGatewayPolicy.js.map +1 -1
  82. package/getZeroTrustTunnelCloudflared.d.ts +2 -0
  83. package/getZeroTrustTunnelCloudflared.js.map +1 -1
  84. package/getZoneSubscription.d.ts +37 -6
  85. package/getZoneSubscription.js +4 -4
  86. package/getZoneSubscription.js.map +1 -1
  87. package/index.d.ts +30 -0
  88. package/index.js +47 -9
  89. package/index.js.map +1 -1
  90. package/magicTransitConnector.d.ts +9 -0
  91. package/magicTransitConnector.js.map +1 -1
  92. package/package.json +2 -2
  93. package/r2bucketEventNotification.d.ts +6 -6
  94. package/r2bucketEventNotification.js +5 -2
  95. package/r2bucketEventNotification.js.map +1 -1
  96. package/record.d.ts +4 -4
  97. package/schemaValidationOperationSettings.d.ts +95 -0
  98. package/schemaValidationOperationSettings.js +76 -0
  99. package/schemaValidationOperationSettings.js.map +1 -0
  100. package/schemaValidationSchemas.d.ts +131 -0
  101. package/schemaValidationSchemas.js +98 -0
  102. package/schemaValidationSchemas.js.map +1 -0
  103. package/schemaValidationSettings.d.ts +95 -0
  104. package/schemaValidationSettings.js +73 -0
  105. package/schemaValidationSettings.js.map +1 -0
  106. package/teamsRule.d.ts +8 -0
  107. package/teamsRule.js +2 -0
  108. package/teamsRule.js.map +1 -1
  109. package/tunnel.d.ts +4 -0
  110. package/tunnel.js.map +1 -1
  111. package/tunnelVirtualNetwork.d.ts +8 -1
  112. package/tunnelVirtualNetwork.js +1 -0
  113. package/tunnelVirtualNetwork.js.map +1 -1
  114. package/types/input.d.ts +125 -213
  115. package/types/output.d.ts +374 -379
  116. package/user.d.ts +60 -0
  117. package/user.js +16 -0
  118. package/user.js.map +1 -1
  119. package/userAgentBlockingRule.d.ts +2 -11
  120. package/userAgentBlockingRule.js +2 -2
  121. package/userAgentBlockingRule.js.map +1 -1
  122. package/waitingRoomRules.d.ts +0 -44
  123. package/waitingRoomRules.js +0 -12
  124. package/waitingRoomRules.js.map +1 -1
  125. package/zeroTrustAccessApplication.d.ts +3 -0
  126. package/zeroTrustAccessApplication.js.map +1 -1
  127. package/zeroTrustAccessPolicy.d.ts +1 -4
  128. package/zeroTrustAccessPolicy.js +1 -4
  129. package/zeroTrustAccessPolicy.js.map +1 -1
  130. package/zeroTrustDeviceCustomProfile.d.ts +12 -12
  131. package/zeroTrustDeviceCustomProfileLocalDomainFallback.d.ts +0 -24
  132. package/zeroTrustDeviceCustomProfileLocalDomainFallback.js +0 -6
  133. package/zeroTrustDeviceCustomProfileLocalDomainFallback.js.map +1 -1
  134. package/zeroTrustDeviceDefaultProfile.d.ts +12 -12
  135. package/zeroTrustDeviceDefaultProfileLocalDomainFallback.d.ts +6 -24
  136. package/zeroTrustDeviceDefaultProfileLocalDomainFallback.js +6 -6
  137. package/zeroTrustDeviceDefaultProfileLocalDomainFallback.js.map +1 -1
  138. package/zeroTrustDevicePostureRule.d.ts +1 -1
  139. package/zeroTrustDeviceSettings.d.ts +116 -0
  140. package/zeroTrustDeviceSettings.js +79 -0
  141. package/zeroTrustDeviceSettings.js.map +1 -0
  142. package/zeroTrustDlpCustomProfile.d.ts +4 -7
  143. package/zeroTrustDlpCustomProfile.js +6 -2
  144. package/zeroTrustDlpCustomProfile.js.map +1 -1
  145. package/zeroTrustDlpPredefinedProfile.d.ts +15 -6
  146. package/zeroTrustDlpPredefinedProfile.js +4 -7
  147. package/zeroTrustDlpPredefinedProfile.js.map +1 -1
  148. package/zeroTrustGatewayPolicy.d.ts +8 -0
  149. package/zeroTrustGatewayPolicy.js +2 -0
  150. package/zeroTrustGatewayPolicy.js.map +1 -1
  151. package/zeroTrustLocalFallbackDomain.d.ts +0 -24
  152. package/zeroTrustLocalFallbackDomain.js +0 -6
  153. package/zeroTrustLocalFallbackDomain.js.map +1 -1
  154. package/zeroTrustTunnelCloudflared.d.ts +4 -0
  155. package/zeroTrustTunnelCloudflared.js.map +1 -1
  156. package/zeroTrustTunnelCloudflaredVirtualNetwork.d.ts +8 -1
  157. package/zeroTrustTunnelCloudflaredVirtualNetwork.js +1 -0
  158. package/zeroTrustTunnelCloudflaredVirtualNetwork.js.map +1 -1
  159. package/zone.d.ts +28 -22
  160. package/zone.js +1 -1
  161. package/zone.js.map +1 -1
  162. package/zoneLockdown.d.ts +27 -4
  163. package/zoneLockdown.js +7 -2
  164. package/zoneLockdown.js.map +1 -1
  165. package/zoneSetting.d.ts +3 -1
  166. package/zoneSetting.js +3 -1
  167. package/zoneSetting.js.map +1 -1
  168. package/zoneSubscription.d.ts +56 -8
  169. package/zoneSubscription.js +20 -4
  170. package/zoneSubscription.js.map +1 -1
package/types/input.d.ts CHANGED
@@ -1001,7 +1001,7 @@ export interface AccessApplicationTargetCriteria {
1001
1001
  port: pulumi.Input<number>;
1002
1002
  /**
1003
1003
  * The communication protocol your application secures.
1004
- * Available values: "ssh".
1004
+ * Available values: "SSH".
1005
1005
  */
1006
1006
  protocol: pulumi.Input<string>;
1007
1007
  /**
@@ -1618,10 +1618,6 @@ export interface AccessIdentityProviderConfig {
1618
1618
  * Your OAuth Client ID
1619
1619
  */
1620
1620
  clientId?: pulumi.Input<string>;
1621
- /**
1622
- * Your OAuth Client Secret
1623
- */
1624
- clientSecret?: pulumi.Input<string>;
1625
1621
  /**
1626
1622
  * Should Cloudflare try to load authentication contexts from your account
1627
1623
  */
@@ -2602,7 +2598,7 @@ export interface AccountTokenPolicy {
2602
2598
  }
2603
2599
  export interface AccountTokenPolicyPermissionGroup {
2604
2600
  /**
2605
- * Identifier of the group.
2601
+ * Identifier of the permission group.
2606
2602
  */
2607
2603
  id: pulumi.Input<string>;
2608
2604
  /**
@@ -2610,7 +2606,7 @@ export interface AccountTokenPolicyPermissionGroup {
2610
2606
  */
2611
2607
  meta?: pulumi.Input<inputs.AccountTokenPolicyPermissionGroupMeta>;
2612
2608
  /**
2613
- * Name of the group.
2609
+ * Name of the permission group.
2614
2610
  */
2615
2611
  name?: pulumi.Input<string>;
2616
2612
  }
@@ -2906,7 +2902,7 @@ export interface ApiTokenPolicy {
2906
2902
  }
2907
2903
  export interface ApiTokenPolicyPermissionGroup {
2908
2904
  /**
2909
- * Identifier of the group.
2905
+ * Identifier of the permission group.
2910
2906
  */
2911
2907
  id: pulumi.Input<string>;
2912
2908
  /**
@@ -2914,7 +2910,7 @@ export interface ApiTokenPolicyPermissionGroup {
2914
2910
  */
2915
2911
  meta?: pulumi.Input<inputs.ApiTokenPolicyPermissionGroupMeta>;
2916
2912
  /**
2917
- * Name of the group.
2913
+ * Name of the permission group.
2918
2914
  */
2919
2915
  name?: pulumi.Input<string>;
2920
2916
  }
@@ -2977,7 +2973,7 @@ export interface CloudConnectorRulesRule {
2977
2973
  parameters?: pulumi.Input<inputs.CloudConnectorRulesRuleParameters>;
2978
2974
  /**
2979
2975
  * Cloud Provider type
2980
- * Available values: "aws*s3", "r2", "gcp*storage", "azureStorage".
2976
+ * Available values: "aws*s3", "cloudflare*r2", "gcp*storage", "azure*storage".
2981
2977
  */
2982
2978
  provider?: pulumi.Input<string>;
2983
2979
  }
@@ -3361,6 +3357,10 @@ export interface DevicePostureRuleInput {
3361
3357
  * Available values: "online", "offline", "unknown".
3362
3358
  */
3363
3359
  state?: pulumi.Input<string>;
3360
+ /**
3361
+ * List of certificate Subject Alternative Names.
3362
+ */
3363
+ subjectAlternativeNames?: pulumi.Input<pulumi.Input<string>[]>;
3364
3364
  /**
3365
3365
  * Signing certificate thumbprint.
3366
3366
  */
@@ -3426,68 +3426,6 @@ export interface DlpCustomProfileEntryPattern {
3426
3426
  */
3427
3427
  validation?: pulumi.Input<string>;
3428
3428
  }
3429
- export interface DlpCustomProfileProfile {
3430
- aiContextEnabled?: pulumi.Input<boolean>;
3431
- /**
3432
- * Related DLP policies will trigger when the match count exceeds the number set.
3433
- */
3434
- allowedMatchCount?: pulumi.Input<number>;
3435
- confidenceThreshold?: pulumi.Input<string>;
3436
- /**
3437
- * Scan the context of predefined entries to only return matches surrounded by keywords.
3438
- */
3439
- contextAwareness?: pulumi.Input<inputs.DlpCustomProfileProfileContextAwareness>;
3440
- /**
3441
- * The description of the profile.
3442
- */
3443
- description?: pulumi.Input<string>;
3444
- entries: pulumi.Input<pulumi.Input<inputs.DlpCustomProfileProfileEntry>[]>;
3445
- name: pulumi.Input<string>;
3446
- ocrEnabled?: pulumi.Input<boolean>;
3447
- /**
3448
- * Entries from other profiles (e.g. pre-defined Cloudflare profiles, or your Microsoft Information Protection profiles).
3449
- */
3450
- sharedEntries?: pulumi.Input<pulumi.Input<inputs.DlpCustomProfileProfileSharedEntry>[]>;
3451
- }
3452
- export interface DlpCustomProfileProfileContextAwareness {
3453
- /**
3454
- * If true, scan the context of predefined entries to only return matches surrounded by keywords.
3455
- */
3456
- enabled: pulumi.Input<boolean>;
3457
- /**
3458
- * Content types to exclude from context analysis and return all matches.
3459
- */
3460
- skip: pulumi.Input<inputs.DlpCustomProfileProfileContextAwarenessSkip>;
3461
- }
3462
- export interface DlpCustomProfileProfileContextAwarenessSkip {
3463
- /**
3464
- * If the content type is a file, skip context analysis and return all matches.
3465
- */
3466
- files: pulumi.Input<boolean>;
3467
- }
3468
- export interface DlpCustomProfileProfileEntry {
3469
- enabled: pulumi.Input<boolean>;
3470
- name: pulumi.Input<string>;
3471
- pattern?: pulumi.Input<inputs.DlpCustomProfileProfileEntryPattern>;
3472
- words?: pulumi.Input<pulumi.Input<string>[]>;
3473
- }
3474
- export interface DlpCustomProfileProfileEntryPattern {
3475
- regex: pulumi.Input<string>;
3476
- /**
3477
- * Available values: "luhn".
3478
- *
3479
- * @deprecated This attribute is deprecated.
3480
- */
3481
- validation?: pulumi.Input<string>;
3482
- }
3483
- export interface DlpCustomProfileProfileSharedEntry {
3484
- enabled: pulumi.Input<boolean>;
3485
- entryId: pulumi.Input<string>;
3486
- /**
3487
- * Available values: "custom", "predefined", "integration", "exactData".
3488
- */
3489
- entryType: pulumi.Input<string>;
3490
- }
3491
3429
  export interface DlpCustomProfileSharedEntry {
3492
3430
  enabled: pulumi.Input<boolean>;
3493
3431
  entryId: pulumi.Input<string>;
@@ -5142,6 +5080,26 @@ export interface GetOriginCaCertificateFilterArgs {
5142
5080
  */
5143
5081
  zoneId: pulumi.Input<string>;
5144
5082
  }
5083
+ export interface GetSchemaValidationSchemasFilter {
5084
+ /**
5085
+ * Omit the source-files of schemas and only retrieve their meta-data.
5086
+ */
5087
+ omitSource?: boolean;
5088
+ /**
5089
+ * Filter for enabled schemas
5090
+ */
5091
+ validationEnabled?: boolean;
5092
+ }
5093
+ export interface GetSchemaValidationSchemasFilterArgs {
5094
+ /**
5095
+ * Omit the source-files of schemas and only retrieve their meta-data.
5096
+ */
5097
+ omitSource?: pulumi.Input<boolean>;
5098
+ /**
5099
+ * Filter for enabled schemas
5100
+ */
5101
+ validationEnabled?: pulumi.Input<boolean>;
5102
+ }
5145
5103
  export interface GetTurnstileWidgetFilter {
5146
5104
  /**
5147
5105
  * Direction to order widgets.
@@ -5714,7 +5672,7 @@ export interface GetZoneFilter {
5714
5672
  */
5715
5673
  order?: string;
5716
5674
  /**
5717
- * A zone status
5675
+ * Specify a zone status to filter by.
5718
5676
  * Available values: "initializing", "pending", "active", "moved".
5719
5677
  */
5720
5678
  status?: string;
@@ -5749,14 +5707,14 @@ export interface GetZoneFilterArgs {
5749
5707
  */
5750
5708
  order?: pulumi.Input<string>;
5751
5709
  /**
5752
- * A zone status
5710
+ * Specify a zone status to filter by.
5753
5711
  * Available values: "initializing", "pending", "active", "moved".
5754
5712
  */
5755
5713
  status?: pulumi.Input<string>;
5756
5714
  }
5757
5715
  export interface GetZoneFilterAccount {
5758
5716
  /**
5759
- * An account ID
5717
+ * Filter by an account ID.
5760
5718
  */
5761
5719
  id?: string;
5762
5720
  /**
@@ -5774,7 +5732,7 @@ export interface GetZoneFilterAccount {
5774
5732
  }
5775
5733
  export interface GetZoneFilterAccountArgs {
5776
5734
  /**
5777
- * An account ID
5735
+ * Filter by an account ID.
5778
5736
  */
5779
5737
  id?: pulumi.Input<string>;
5780
5738
  /**
@@ -5868,7 +5826,7 @@ export interface GetZoneLockdownFilterArgs {
5868
5826
  }
5869
5827
  export interface GetZonesAccount {
5870
5828
  /**
5871
- * An account ID
5829
+ * Filter by an account ID.
5872
5830
  */
5873
5831
  id?: string;
5874
5832
  /**
@@ -5886,7 +5844,7 @@ export interface GetZonesAccount {
5886
5844
  }
5887
5845
  export interface GetZonesAccountArgs {
5888
5846
  /**
5889
- * An account ID
5847
+ * Filter by an account ID.
5890
5848
  */
5891
5849
  id?: pulumi.Input<string>;
5892
5850
  /**
@@ -7579,7 +7537,9 @@ export interface PageRuleActions {
7579
7537
  cacheKeyFields?: pulumi.Input<inputs.PageRuleActionsCacheKeyFields>;
7580
7538
  cacheLevel?: pulumi.Input<string>;
7581
7539
  cacheOnCookie?: pulumi.Input<string>;
7582
- cacheTtlByStatus?: any;
7540
+ cacheTtlByStatus?: pulumi.Input<{
7541
+ [key: string]: pulumi.Input<string>;
7542
+ }>;
7583
7543
  disableApps?: pulumi.Input<boolean>;
7584
7544
  disablePerformance?: pulumi.Input<boolean>;
7585
7545
  disableSecurity?: pulumi.Input<boolean>;
@@ -8542,43 +8502,6 @@ export interface R2BucketCorsRuleAllowed {
8542
8502
  */
8543
8503
  origins: pulumi.Input<pulumi.Input<string>[]>;
8544
8504
  }
8545
- export interface R2BucketEventNotificationQueue {
8546
- /**
8547
- * Queue ID.
8548
- */
8549
- queueId?: pulumi.Input<string>;
8550
- /**
8551
- * Name of the queue.
8552
- */
8553
- queueName?: pulumi.Input<string>;
8554
- rules?: pulumi.Input<pulumi.Input<inputs.R2BucketEventNotificationQueueRule>[]>;
8555
- }
8556
- export interface R2BucketEventNotificationQueueRule {
8557
- /**
8558
- * Array of R2 object actions that will trigger notifications.
8559
- */
8560
- actions?: pulumi.Input<pulumi.Input<string>[]>;
8561
- /**
8562
- * Timestamp when the rule was created.
8563
- */
8564
- createdAt?: pulumi.Input<string>;
8565
- /**
8566
- * A description that can be used to identify the event notification rule after creation.
8567
- */
8568
- description?: pulumi.Input<string>;
8569
- /**
8570
- * Notifications will be sent only for objects with this prefix.
8571
- */
8572
- prefix?: pulumi.Input<string>;
8573
- /**
8574
- * Rule ID.
8575
- */
8576
- ruleId?: pulumi.Input<string>;
8577
- /**
8578
- * Notifications will be sent only for objects with this suffix.
8579
- */
8580
- suffix?: pulumi.Input<string>;
8581
- }
8582
8505
  export interface R2BucketEventNotificationRule {
8583
8506
  /**
8584
8507
  * Array of R2 object actions that will trigger notifications.
@@ -9182,7 +9105,7 @@ export interface RulesetRuleActionParameters {
9182
9105
  */
9183
9106
  originCacheControl?: pulumi.Input<boolean>;
9184
9107
  /**
9185
- * Generate Cloudflare error pages from issues sent from the origin server. When on, error pages will trigger for issues from the origin
9108
+ * Generate Cloudflare error pages from issues sent from the origin server. When on, error pages will trigger for issues from the origin.
9186
9109
  */
9187
9110
  originErrorPagePassthru?: pulumi.Input<boolean>;
9188
9111
  /**
@@ -9195,7 +9118,7 @@ export interface RulesetRuleActionParameters {
9195
9118
  phases?: pulumi.Input<pulumi.Input<string>[]>;
9196
9119
  /**
9197
9120
  * Configure the Polish level.
9198
- * Available values: "off", "lossless", "lossy".
9121
+ * Available values: "off", "lossless", "lossy", "webp".
9199
9122
  */
9200
9123
  polish?: pulumi.Input<string>;
9201
9124
  /**
@@ -9227,7 +9150,7 @@ export interface RulesetRuleActionParameters {
9227
9150
  */
9228
9151
  responseFields?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersResponseField>[]>;
9229
9152
  /**
9230
- * Turn on or off Rocket Loader
9153
+ * Turn on or off Rocket Loader.
9231
9154
  */
9232
9155
  rocketLoader?: pulumi.Input<boolean>;
9233
9156
  /**
@@ -9318,11 +9241,11 @@ export interface RulesetRuleActionParametersBrowserTtl {
9318
9241
  }
9319
9242
  export interface RulesetRuleActionParametersCacheKey {
9320
9243
  /**
9321
- * Separate cached content based on the visitor’s device type
9244
+ * Separate cached content based on the visitor’s device type.
9322
9245
  */
9323
9246
  cacheByDeviceType?: pulumi.Input<boolean>;
9324
9247
  /**
9325
- * Protect from web cache deception attacks while allowing static assets to be cached
9248
+ * Protect from web cache deception attacks while allowing static assets to be cached.
9326
9249
  */
9327
9250
  cacheDeceptionArmor?: pulumi.Input<boolean>;
9328
9251
  /**
@@ -9452,18 +9375,18 @@ export interface RulesetRuleActionParametersEdgeTtl {
9452
9375
  */
9453
9376
  default?: pulumi.Input<number>;
9454
9377
  /**
9455
- * edge ttl options
9378
+ * Edge TTL options.
9456
9379
  * Available values: "respect*origin", "bypass*by*default", "override*origin".
9457
9380
  */
9458
9381
  mode: pulumi.Input<string>;
9459
9382
  /**
9460
- * List of single status codes, or status code ranges to apply the selected mode
9383
+ * List of single status codes, or status code ranges to apply the selected mode.
9461
9384
  */
9462
9385
  statusCodeTtls?: pulumi.Input<pulumi.Input<inputs.RulesetRuleActionParametersEdgeTtlStatusCodeTtl>[]>;
9463
9386
  }
9464
9387
  export interface RulesetRuleActionParametersEdgeTtlStatusCodeTtl {
9465
9388
  /**
9466
- * Set the ttl for responses with this specific status code
9389
+ * Set the TTL for responses with this specific status code.
9467
9390
  */
9468
9391
  statusCode?: pulumi.Input<number>;
9469
9392
  /**
@@ -9477,11 +9400,11 @@ export interface RulesetRuleActionParametersEdgeTtlStatusCodeTtl {
9477
9400
  }
9478
9401
  export interface RulesetRuleActionParametersEdgeTtlStatusCodeTtlStatusCodeRange {
9479
9402
  /**
9480
- * response status code lower bound
9403
+ * Response status code lower bound.
9481
9404
  */
9482
9405
  from?: pulumi.Input<number>;
9483
9406
  /**
9484
- * response status code upper bound
9407
+ * Response status code upper bound.
9485
9408
  */
9486
9409
  to?: pulumi.Input<number>;
9487
9410
  }
@@ -10093,6 +10016,10 @@ export interface TeamsAccountSettings {
10093
10016
  * Anti-virus settings.
10094
10017
  */
10095
10018
  antivirus?: pulumi.Input<inputs.TeamsAccountSettingsAntivirus>;
10019
+ /**
10020
+ * Setting to enable App Control
10021
+ */
10022
+ appControlSettings?: pulumi.Input<inputs.TeamsAccountSettingsAppControlSettings>;
10096
10023
  /**
10097
10024
  * Block page layout settings.
10098
10025
  */
@@ -10182,6 +10109,12 @@ export interface TeamsAccountSettingsAntivirusNotificationSettings {
10182
10109
  */
10183
10110
  supportUrl?: pulumi.Input<string>;
10184
10111
  }
10112
+ export interface TeamsAccountSettingsAppControlSettings {
10113
+ /**
10114
+ * Enable App Control
10115
+ */
10116
+ enabled?: pulumi.Input<boolean>;
10117
+ }
10185
10118
  export interface TeamsAccountSettingsBlockPage {
10186
10119
  /**
10187
10120
  * If mode is customized*block*page: block page background color in #rrggbb format.
@@ -10536,8 +10469,8 @@ export interface TeamsRuleRuleSettingsBisoAdminControls {
10536
10469
  */
10537
10470
  dk?: pulumi.Input<boolean>;
10538
10471
  /**
10539
- * Configure whether downloading enabled or not. When absent, downloading is enabled. Only applies when `version == "v2"`.
10540
- * Available values: "enabled", "disabled".
10472
+ * Configure whether downloading enabled or not. When set with "remote*only", downloads are only available for viewing. Only applies when `version == "v2"`.
10473
+ * Available values: "enabled", "disabled", "remote*only".
10541
10474
  */
10542
10475
  download?: pulumi.Input<string>;
10543
10476
  /**
@@ -10853,7 +10786,7 @@ export interface TunnelConfigConfigIngressOriginRequestAccess {
10853
10786
  * Deny traffic that has not fulfilled Access authorization.
10854
10787
  */
10855
10788
  required?: pulumi.Input<boolean>;
10856
- teamName?: pulumi.Input<string>;
10789
+ teamName: pulumi.Input<string>;
10857
10790
  }
10858
10791
  export interface TunnelConfigConfigOriginRequest {
10859
10792
  /**
@@ -10922,7 +10855,7 @@ export interface TunnelConfigConfigOriginRequestAccess {
10922
10855
  * Deny traffic that has not fulfilled Access authorization.
10923
10856
  */
10924
10857
  required?: pulumi.Input<boolean>;
10925
- teamName?: pulumi.Input<string>;
10858
+ teamName: pulumi.Input<string>;
10926
10859
  }
10927
10860
  export interface TunnelConfigConfigWarpRouting {
10928
10861
  enabled?: pulumi.Input<boolean>;
@@ -10963,15 +10896,38 @@ export interface TunnelConnection {
10963
10896
  }
10964
10897
  export interface UserAgentBlockingRuleConfiguration {
10965
10898
  /**
10966
- * The configuration target. You must set the target to `ip` when specifying an IP address in the rule.
10967
- * Available values: "ip", "ip6", "ipRange", "asn", "country".
10899
+ * The configuration target. You must set the target to `ua` when specifying a user agent in the rule.
10900
+ * Available values: "ua".
10968
10901
  */
10969
10902
  target?: pulumi.Input<string>;
10970
10903
  /**
10971
- * The IP address to match. This address will be compared to the IP address of incoming requests.
10904
+ * the user agent to exactly match
10972
10905
  */
10973
10906
  value?: pulumi.Input<string>;
10974
10907
  }
10908
+ export interface UserOrganization {
10909
+ /**
10910
+ * Identifier
10911
+ */
10912
+ id?: pulumi.Input<string>;
10913
+ /**
10914
+ * Organization name.
10915
+ */
10916
+ name?: pulumi.Input<string>;
10917
+ /**
10918
+ * Access permissions for this User.
10919
+ */
10920
+ permissions?: pulumi.Input<pulumi.Input<string>[]>;
10921
+ /**
10922
+ * List of roles that a user has within an organization.
10923
+ */
10924
+ roles?: pulumi.Input<pulumi.Input<string>[]>;
10925
+ /**
10926
+ * Whether the user is a member of the organization or has an invitation pending.
10927
+ * Available values: "member", "invited".
10928
+ */
10929
+ status?: pulumi.Input<string>;
10930
+ }
10975
10931
  export interface WaitingRoomAdditionalRoute {
10976
10932
  /**
10977
10933
  * The hostname to which this waiting room will be applied (no wildcards). The hostname must be the primary domain, subdomain, or custom hostname (if using SSL for SaaS) of this zone. Please do not include the scheme (http:// or https://).
@@ -11200,6 +11156,10 @@ export interface WorkerScriptBinding {
11200
11156
  * Allowed operations with the key. [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#keyUsages).
11201
11157
  */
11202
11158
  usages?: pulumi.Input<pulumi.Input<string>[]>;
11159
+ /**
11160
+ * Name of the Workflow to bind to.
11161
+ */
11162
+ workflowName?: pulumi.Input<string>;
11203
11163
  }
11204
11164
  export interface WorkerScriptBindingOutbound {
11205
11165
  /**
@@ -11533,6 +11493,10 @@ export interface WorkersScriptBinding {
11533
11493
  * Allowed operations with the key. [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#keyUsages).
11534
11494
  */
11535
11495
  usages?: pulumi.Input<pulumi.Input<string>[]>;
11496
+ /**
11497
+ * Name of the Workflow to bind to.
11498
+ */
11499
+ workflowName?: pulumi.Input<string>;
11536
11500
  }
11537
11501
  export interface WorkersScriptBindingOutbound {
11538
11502
  /**
@@ -12687,7 +12651,7 @@ export interface ZeroTrustAccessApplicationTargetCriteria {
12687
12651
  port: pulumi.Input<number>;
12688
12652
  /**
12689
12653
  * The communication protocol your application secures.
12690
- * Available values: "ssh".
12654
+ * Available values: "SSH".
12691
12655
  */
12692
12656
  protocol: pulumi.Input<string>;
12693
12657
  /**
@@ -13304,10 +13268,6 @@ export interface ZeroTrustAccessIdentityProviderConfig {
13304
13268
  * Your OAuth Client ID
13305
13269
  */
13306
13270
  clientId?: pulumi.Input<string>;
13307
- /**
13308
- * Your OAuth Client Secret
13309
- */
13310
- clientSecret?: pulumi.Input<string>;
13311
13271
  /**
13312
13272
  * Should Cloudflare try to load authentication contexts from your account
13313
13273
  */
@@ -14381,6 +14341,10 @@ export interface ZeroTrustDevicePostureRuleInput {
14381
14341
  * Available values: "online", "offline", "unknown".
14382
14342
  */
14383
14343
  state?: pulumi.Input<string>;
14344
+ /**
14345
+ * List of certificate Subject Alternative Names.
14346
+ */
14347
+ subjectAlternativeNames?: pulumi.Input<pulumi.Input<string>[]>;
14384
14348
  /**
14385
14349
  * Signing certificate thumbprint.
14386
14350
  */
@@ -14474,68 +14438,6 @@ export interface ZeroTrustDlpCustomProfileEntryPattern {
14474
14438
  */
14475
14439
  validation?: pulumi.Input<string>;
14476
14440
  }
14477
- export interface ZeroTrustDlpCustomProfileProfile {
14478
- aiContextEnabled?: pulumi.Input<boolean>;
14479
- /**
14480
- * Related DLP policies will trigger when the match count exceeds the number set.
14481
- */
14482
- allowedMatchCount?: pulumi.Input<number>;
14483
- confidenceThreshold?: pulumi.Input<string>;
14484
- /**
14485
- * Scan the context of predefined entries to only return matches surrounded by keywords.
14486
- */
14487
- contextAwareness?: pulumi.Input<inputs.ZeroTrustDlpCustomProfileProfileContextAwareness>;
14488
- /**
14489
- * The description of the profile.
14490
- */
14491
- description?: pulumi.Input<string>;
14492
- entries: pulumi.Input<pulumi.Input<inputs.ZeroTrustDlpCustomProfileProfileEntry>[]>;
14493
- name: pulumi.Input<string>;
14494
- ocrEnabled?: pulumi.Input<boolean>;
14495
- /**
14496
- * Entries from other profiles (e.g. pre-defined Cloudflare profiles, or your Microsoft Information Protection profiles).
14497
- */
14498
- sharedEntries?: pulumi.Input<pulumi.Input<inputs.ZeroTrustDlpCustomProfileProfileSharedEntry>[]>;
14499
- }
14500
- export interface ZeroTrustDlpCustomProfileProfileContextAwareness {
14501
- /**
14502
- * If true, scan the context of predefined entries to only return matches surrounded by keywords.
14503
- */
14504
- enabled: pulumi.Input<boolean>;
14505
- /**
14506
- * Content types to exclude from context analysis and return all matches.
14507
- */
14508
- skip: pulumi.Input<inputs.ZeroTrustDlpCustomProfileProfileContextAwarenessSkip>;
14509
- }
14510
- export interface ZeroTrustDlpCustomProfileProfileContextAwarenessSkip {
14511
- /**
14512
- * If the content type is a file, skip context analysis and return all matches.
14513
- */
14514
- files: pulumi.Input<boolean>;
14515
- }
14516
- export interface ZeroTrustDlpCustomProfileProfileEntry {
14517
- enabled: pulumi.Input<boolean>;
14518
- name: pulumi.Input<string>;
14519
- pattern?: pulumi.Input<inputs.ZeroTrustDlpCustomProfileProfileEntryPattern>;
14520
- words?: pulumi.Input<pulumi.Input<string>[]>;
14521
- }
14522
- export interface ZeroTrustDlpCustomProfileProfileEntryPattern {
14523
- regex: pulumi.Input<string>;
14524
- /**
14525
- * Available values: "luhn".
14526
- *
14527
- * @deprecated This attribute is deprecated.
14528
- */
14529
- validation?: pulumi.Input<string>;
14530
- }
14531
- export interface ZeroTrustDlpCustomProfileProfileSharedEntry {
14532
- enabled: pulumi.Input<boolean>;
14533
- entryId: pulumi.Input<string>;
14534
- /**
14535
- * Available values: "custom", "predefined", "integration", "exactData".
14536
- */
14537
- entryType: pulumi.Input<string>;
14538
- }
14539
14441
  export interface ZeroTrustDlpCustomProfileSharedEntry {
14540
14442
  enabled: pulumi.Input<boolean>;
14541
14443
  entryId: pulumi.Input<string>;
@@ -14889,8 +14791,8 @@ export interface ZeroTrustGatewayPolicyRuleSettingsBisoAdminControls {
14889
14791
  */
14890
14792
  dk?: pulumi.Input<boolean>;
14891
14793
  /**
14892
- * Configure whether downloading enabled or not. When absent, downloading is enabled. Only applies when `version == "v2"`.
14893
- * Available values: "enabled", "disabled".
14794
+ * Configure whether downloading enabled or not. When set with "remote*only", downloads are only available for viewing. Only applies when `version == "v2"`.
14795
+ * Available values: "enabled", "disabled", "remote*only".
14894
14796
  */
14895
14797
  download?: pulumi.Input<string>;
14896
14798
  /**
@@ -15116,6 +15018,10 @@ export interface ZeroTrustGatewaySettingsSettings {
15116
15018
  * Anti-virus settings.
15117
15019
  */
15118
15020
  antivirus?: pulumi.Input<inputs.ZeroTrustGatewaySettingsSettingsAntivirus>;
15021
+ /**
15022
+ * Setting to enable App Control
15023
+ */
15024
+ appControlSettings?: pulumi.Input<inputs.ZeroTrustGatewaySettingsSettingsAppControlSettings>;
15119
15025
  /**
15120
15026
  * Block page layout settings.
15121
15027
  */
@@ -15205,6 +15111,12 @@ export interface ZeroTrustGatewaySettingsSettingsAntivirusNotificationSettings {
15205
15111
  */
15206
15112
  supportUrl?: pulumi.Input<string>;
15207
15113
  }
15114
+ export interface ZeroTrustGatewaySettingsSettingsAppControlSettings {
15115
+ /**
15116
+ * Enable App Control
15117
+ */
15118
+ enabled?: pulumi.Input<boolean>;
15119
+ }
15208
15120
  export interface ZeroTrustGatewaySettingsSettingsBlockPage {
15209
15121
  /**
15210
15122
  * If mode is customized*block*page: block page background color in #rrggbb format.
@@ -15497,7 +15409,7 @@ export interface ZeroTrustTunnelCloudflaredConfigConfigIngressOriginRequestAcces
15497
15409
  * Deny traffic that has not fulfilled Access authorization.
15498
15410
  */
15499
15411
  required?: pulumi.Input<boolean>;
15500
- teamName?: pulumi.Input<string>;
15412
+ teamName: pulumi.Input<string>;
15501
15413
  }
15502
15414
  export interface ZeroTrustTunnelCloudflaredConfigConfigOriginRequest {
15503
15415
  /**
@@ -15566,7 +15478,7 @@ export interface ZeroTrustTunnelCloudflaredConfigConfigOriginRequestAccess {
15566
15478
  * Deny traffic that has not fulfilled Access authorization.
15567
15479
  */
15568
15480
  required?: pulumi.Input<boolean>;
15569
- teamName?: pulumi.Input<string>;
15481
+ teamName: pulumi.Input<string>;
15570
15482
  }
15571
15483
  export interface ZeroTrustTunnelCloudflaredConfigConfigWarpRouting {
15572
15484
  enabled?: pulumi.Input<boolean>;
@@ -15717,27 +15629,27 @@ export interface ZoneLockdownConfiguration {
15717
15629
  }
15718
15630
  export interface ZoneMeta {
15719
15631
  /**
15720
- * The zone is only configured for CDN
15632
+ * The zone is only configured for CDN.
15721
15633
  */
15722
15634
  cdnOnly?: pulumi.Input<boolean>;
15723
15635
  /**
15724
- * Number of Custom Certificates the zone can have
15636
+ * Number of Custom Certificates the zone can have.
15725
15637
  */
15726
15638
  customCertificateQuota?: pulumi.Input<number>;
15727
15639
  /**
15728
- * The zone is only configured for DNS
15640
+ * The zone is only configured for DNS.
15729
15641
  */
15730
15642
  dnsOnly?: pulumi.Input<boolean>;
15731
15643
  /**
15732
- * The zone is setup with Foundation DNS
15644
+ * The zone is setup with Foundation DNS.
15733
15645
  */
15734
15646
  foundationDns?: pulumi.Input<boolean>;
15735
15647
  /**
15736
- * Number of Page Rules a zone can have
15648
+ * Number of Page Rules a zone can have.
15737
15649
  */
15738
15650
  pageRuleQuota?: pulumi.Input<number>;
15739
15651
  /**
15740
- * The zone has been flagged for phishing
15652
+ * The zone has been flagged for phishing.
15741
15653
  */
15742
15654
  phishingDetected?: pulumi.Input<boolean>;
15743
15655
  step?: pulumi.Input<number>;
@@ -15748,11 +15660,11 @@ export interface ZoneOwner {
15748
15660
  */
15749
15661
  id?: pulumi.Input<string>;
15750
15662
  /**
15751
- * Name of the owner
15663
+ * Name of the owner.
15752
15664
  */
15753
15665
  name?: pulumi.Input<string>;
15754
15666
  /**
15755
- * The type of owner
15667
+ * The type of owner.
15756
15668
  */
15757
15669
  type?: pulumi.Input<string>;
15758
15670
  }
@@ -15790,7 +15702,7 @@ export interface ZonePlan {
15790
15702
  */
15791
15703
  legacyId?: pulumi.Input<string>;
15792
15704
  /**
15793
- * Name of the owner
15705
+ * Name of the owner.
15794
15706
  */
15795
15707
  name?: pulumi.Input<string>;
15796
15708
  /**