pulumi-cloudflare 6.10.1__py3-none-any.whl → 6.11.0__py3-none-any.whl

pulumi_cloudflare/zero_trust_gateway_policy.py

@@ -42,7 +42,7 @@ class ZeroTrustGatewayPolicyArgs:
         :param pulumi.Input[_builtins.str] description: Specify the rule description.
         :param pulumi.Input[_builtins.bool] enabled: Specify whether the rule is enabled.
         :param pulumi.Input['ZeroTrustGatewayPolicyExpirationArgs'] expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This  does not apply to HTTP or network policies. Settable only for `dns` rules.
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         :param pulumi.Input['ZeroTrustGatewayPolicyScheduleArgs'] schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules.
         """
         pulumi.set(__self__, "account_id", account_id)
@@ -152,7 +152,7 @@ class ZeroTrustGatewayPolicyArgs:
     @pulumi.getter
     def filters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
         """
-        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         """
         return pulumi.get(self, "filters")
 
@@ -241,7 +241,7 @@ class _ZeroTrustGatewayPolicyState:
         :param pulumi.Input[_builtins.str] description: Specify the rule description.
         :param pulumi.Input[_builtins.bool] enabled: Specify whether the rule is enabled.
         :param pulumi.Input['ZeroTrustGatewayPolicyExpirationArgs'] expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This  does not apply to HTTP or network policies. Settable only for `dns` rules.
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         :param pulumi.Input[_builtins.str] name: Specify the rule name.
         :param pulumi.Input[_builtins.bool] read_only: Indicate that this rule is shared via the Orgs API and read only.
         :param pulumi.Input['ZeroTrustGatewayPolicyScheduleArgs'] schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules.
@@ -385,7 +385,7 @@ class _ZeroTrustGatewayPolicyState:
     @pulumi.getter
     def filters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
         """
-        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         """
         return pulumi.get(self, "filters")
 
@@ -546,6 +546,132 @@ class ZeroTrustGatewayPolicy(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_zero_trust_gateway_policy = cloudflare.ZeroTrustGatewayPolicy("example_zero_trust_gateway_policy",
+            account_id="699d98642c564d2e855e9661899b7252",
+            action="allow",
+            name="block bad websites",
+            description="Block bad websites based on their host name.",
+            device_posture="any(device_posture.checks.passed[*] in {\\"1308749e-fcfb-4ebc-b051-fe022b632644\\"})",
+            enabled=True,
+            expiration={
+                "expires_at": "2014-01-01T05:20:20Z",
+                "duration": 10,
+            },
+            filters=["http"],
+            identity="any(identity.groups.name[*] in {\\"finance\\"})",
+            precedence=0,
+            rule_settings={
+                "add_headers": {
+                    "My-Next-Header": [
+                        "foo",
+                        "bar",
+                    ],
+                    "X-Custom-Header-Name": ["somecustomvalue"],
+                },
+                "allow_child_bypass": False,
+                "audit_ssh": {
+                    "command_logging": False,
+                },
+                "biso_admin_controls": {
+                    "copy": "remote_only",
+                    "dcp": True,
+                    "dd": True,
+                    "dk": True,
+                    "download": "enabled",
+                    "dp": False,
+                    "du": True,
+                    "keyboard": "enabled",
+                    "paste": "enabled",
+                    "printing": "enabled",
+                    "upload": "enabled",
+                    "version": "v1",
+                },
+                "block_page": {
+                    "target_uri": "https://example.com",
+                    "include_context": True,
+                },
+                "block_page_enabled": True,
+                "block_reason": "This website is a security risk",
+                "bypass_parent_rule": False,
+                "check_session": {
+                    "duration": "300s",
+                    "enforce": True,
+                },
+                "dns_resolvers": {
+                    "ipv4s": [{
+                        "ip": "2.2.2.2",
+                        "port": 5053,
+                        "route_through_private_network": True,
+                        "vnet_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
+                    }],
+                    "ipv6s": [{
+                        "ip": "2001:DB8::",
+                        "port": 5053,
+                        "route_through_private_network": True,
+                        "vnet_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
+                    }],
+                },
+                "egress": {
+                    "ipv4": "192.0.2.2",
+                    "ipv4_fallback": "192.0.2.3",
+                    "ipv6": "2001:DB8::/64",
+                },
+                "ignore_cname_category_matches": True,
+                "insecure_disable_dnssec_validation": False,
+                "ip_categories": True,
+                "ip_indicator_feeds": True,
+                "l4override": {
+                    "ip": "1.1.1.1",
+                    "port": 0,
+                },
+                "notification_settings": {
+                    "enabled": True,
+                    "include_context": True,
+                    "msg": "msg",
+                    "support_url": "support_url",
+                },
+                "override_host": "example.com",
+                "override_ips": [
+                    "1.1.1.1",
+                    "2.2.2.2",
+                ],
+                "payload_log": {
+                    "enabled": True,
+                },
+                "quarantine": {
+                    "file_types": ["exe"],
+                },
+                "redirect": {
+                    "target_uri": "https://example.com",
+                    "include_context": True,
+                    "preserve_path_and_query": True,
+                },
+                "resolve_dns_internally": {
+                    "fallback": "none",
+                    "view_id": "view_id",
+                },
+                "resolve_dns_through_cloudflare": True,
+                "untrusted_cert": {
+                    "action": "error",
+                },
+            },
+            schedule={
+                "fri": "08:00-12:30,13:30-17:00",
+                "mon": "08:00-12:30,13:30-17:00",
+                "sat": "08:00-12:30,13:30-17:00",
+                "sun": "08:00-12:30,13:30-17:00",
+                "thu": "08:00-12:30,13:30-17:00",
+                "time_zone": "America/New York",
+                "tue": "08:00-12:30,13:30-17:00",
+                "wed": "08:00-12:30,13:30-17:00",
+            },
+            traffic="http.request.uri matches \\".*a/partial/uri.*\\" and http.request.host in $01302951-49f9-47c9-a400-0297e60b6a10")
+        ```
+
         ## Import
 
         ```sh
@@ -559,7 +685,7 @@ class ZeroTrustGatewayPolicy(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] description: Specify the rule description.
         :param pulumi.Input[_builtins.bool] enabled: Specify whether the rule is enabled.
         :param pulumi.Input[Union['ZeroTrustGatewayPolicyExpirationArgs', 'ZeroTrustGatewayPolicyExpirationArgsDict']] expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This  does not apply to HTTP or network policies. Settable only for `dns` rules.
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         :param pulumi.Input[_builtins.str] name: Specify the rule name.
         :param pulumi.Input[Union['ZeroTrustGatewayPolicyScheduleArgs', 'ZeroTrustGatewayPolicyScheduleArgsDict']] schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules.
         """
@@ -572,6 +698,132 @@ class ZeroTrustGatewayPolicy(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_zero_trust_gateway_policy = cloudflare.ZeroTrustGatewayPolicy("example_zero_trust_gateway_policy",
+            account_id="699d98642c564d2e855e9661899b7252",
+            action="allow",
+            name="block bad websites",
+            description="Block bad websites based on their host name.",
+            device_posture="any(device_posture.checks.passed[*] in {\\"1308749e-fcfb-4ebc-b051-fe022b632644\\"})",
+            enabled=True,
+            expiration={
+                "expires_at": "2014-01-01T05:20:20Z",
+                "duration": 10,
+            },
+            filters=["http"],
+            identity="any(identity.groups.name[*] in {\\"finance\\"})",
+            precedence=0,
+            rule_settings={
+                "add_headers": {
+                    "My-Next-Header": [
+                        "foo",
+                        "bar",
+                    ],
+                    "X-Custom-Header-Name": ["somecustomvalue"],
+                },
+                "allow_child_bypass": False,
+                "audit_ssh": {
+                    "command_logging": False,
+                },
+                "biso_admin_controls": {
+                    "copy": "remote_only",
+                    "dcp": True,
+                    "dd": True,
+                    "dk": True,
+                    "download": "enabled",
+                    "dp": False,
+                    "du": True,
+                    "keyboard": "enabled",
+                    "paste": "enabled",
+                    "printing": "enabled",
+                    "upload": "enabled",
+                    "version": "v1",
+                },
+                "block_page": {
+                    "target_uri": "https://example.com",
+                    "include_context": True,
+                },
+                "block_page_enabled": True,
+                "block_reason": "This website is a security risk",
+                "bypass_parent_rule": False,
+                "check_session": {
+                    "duration": "300s",
+                    "enforce": True,
+                },
+                "dns_resolvers": {
+                    "ipv4s": [{
+                        "ip": "2.2.2.2",
+                        "port": 5053,
+                        "route_through_private_network": True,
+                        "vnet_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
+                    }],
+                    "ipv6s": [{
+                        "ip": "2001:DB8::",
+                        "port": 5053,
+                        "route_through_private_network": True,
+                        "vnet_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
+                    }],
+                },
+                "egress": {
+                    "ipv4": "192.0.2.2",
+                    "ipv4_fallback": "192.0.2.3",
+                    "ipv6": "2001:DB8::/64",
+                },
+                "ignore_cname_category_matches": True,
+                "insecure_disable_dnssec_validation": False,
+                "ip_categories": True,
+                "ip_indicator_feeds": True,
+                "l4override": {
+                    "ip": "1.1.1.1",
+                    "port": 0,
+                },
+                "notification_settings": {
+                    "enabled": True,
+                    "include_context": True,
+                    "msg": "msg",
+                    "support_url": "support_url",
+                },
+                "override_host": "example.com",
+                "override_ips": [
+                    "1.1.1.1",
+                    "2.2.2.2",
+                ],
+                "payload_log": {
+                    "enabled": True,
+                },
+                "quarantine": {
+                    "file_types": ["exe"],
+                },
+                "redirect": {
+                    "target_uri": "https://example.com",
+                    "include_context": True,
+                    "preserve_path_and_query": True,
+                },
+                "resolve_dns_internally": {
+                    "fallback": "none",
+                    "view_id": "view_id",
+                },
+                "resolve_dns_through_cloudflare": True,
+                "untrusted_cert": {
+                    "action": "error",
+                },
+            },
+            schedule={
+                "fri": "08:00-12:30,13:30-17:00",
+                "mon": "08:00-12:30,13:30-17:00",
+                "sat": "08:00-12:30,13:30-17:00",
+                "sun": "08:00-12:30,13:30-17:00",
+                "thu": "08:00-12:30,13:30-17:00",
+                "time_zone": "America/New York",
+                "tue": "08:00-12:30,13:30-17:00",
+                "wed": "08:00-12:30,13:30-17:00",
+            },
+            traffic="http.request.uri matches \\".*a/partial/uri.*\\" and http.request.host in $01302951-49f9-47c9-a400-0297e60b6a10")
+        ```
+
         ## Import
 
         ```sh
@@ -688,7 +940,7 @@ class ZeroTrustGatewayPolicy(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] description: Specify the rule description.
         :param pulumi.Input[_builtins.bool] enabled: Specify whether the rule is enabled.
         :param pulumi.Input[Union['ZeroTrustGatewayPolicyExpirationArgs', 'ZeroTrustGatewayPolicyExpirationArgsDict']] expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes precedence over the policy's `schedule` configuration, if any. This  does not apply to HTTP or network policies. Settable only for `dns` rules.
-        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] filters: Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         :param pulumi.Input[_builtins.str] name: Specify the rule name.
         :param pulumi.Input[_builtins.bool] read_only: Indicate that this rule is shared via the Orgs API and read only.
         :param pulumi.Input[Union['ZeroTrustGatewayPolicyScheduleArgs', 'ZeroTrustGatewayPolicyScheduleArgsDict']] schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and `dns_resolver` rules.
@@ -784,7 +1036,7 @@ class ZeroTrustGatewayPolicy(pulumi.CustomResource):
     @pulumi.getter
     def filters(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
         """
-        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions.
+        Specify the protocol or layer to evaluate the traffic, identity, and device posture expressions. Can only contain a single value.
         """
         return pulumi.get(self, "filters")
 

pulumi_cloudflare/zero_trust_gateway_settings.py

@@ -125,6 +125,80 @@ class ZeroTrustGatewaySettings(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_zero_trust_gateway_settings = cloudflare.ZeroTrustGatewaySettings("example_zero_trust_gateway_settings",
+            account_id="699d98642c564d2e855e9661899b7252",
+            settings={
+                "activity_log": {
+                    "enabled": True,
+                },
+                "antivirus": {
+                    "enabled_download_phase": False,
+                    "enabled_upload_phase": False,
+                    "fail_closed": False,
+                    "notification_settings": {
+                        "enabled": True,
+                        "include_context": True,
+                        "msg": "msg",
+                        "support_url": "support_url",
+                    },
+                },
+                "block_page": {
+                    "background_color": "background_color",
+                    "enabled": True,
+                    "footer_text": "--footer--",
+                    "header_text": "--header--",
+                    "include_context": True,
+                    "logo_path": "https://logos.com/a.png",
+                    "mailto_address": "admin@example.com",
+                    "mailto_subject": "Blocked User Inquiry",
+                    "mode": "",
+                    "name": "Cloudflare",
+                    "suppress_footer": False,
+                    "target_uri": "https://example.com",
+                },
+                "body_scanning": {
+                    "inspection_mode": "deep",
+                },
+                "browser_isolation": {
+                    "non_identity_enabled": True,
+                    "url_browser_isolation_enabled": True,
+                },
+                "certificate": {
+                    "id": "d1b364c5-1311-466e-a194-f0e943e0799f",
+                },
+                "custom_certificate": {
+                    "enabled": True,
+                    "id": "d1b364c5-1311-466e-a194-f0e943e0799f",
+                },
+                "extended_email_matching": {
+                    "enabled": True,
+                },
+                "fips": {
+                    "tls": True,
+                },
+                "host_selector": {
+                    "enabled": False,
+                },
+                "inspection": {
+                    "mode": "static",
+                },
+                "protocol_detection": {
+                    "enabled": True,
+                },
+                "sandbox": {
+                    "enabled": True,
+                    "fallback_action": "allow",
+                },
+                "tls_decrypt": {
+                    "enabled": True,
+                },
+            })
+        ```
+
         ## Import
 
         ```sh
@@ -144,6 +218,80 @@ class ZeroTrustGatewaySettings(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_zero_trust_gateway_settings = cloudflare.ZeroTrustGatewaySettings("example_zero_trust_gateway_settings",
+            account_id="699d98642c564d2e855e9661899b7252",
+            settings={
+                "activity_log": {
+                    "enabled": True,
+                },
+                "antivirus": {
+                    "enabled_download_phase": False,
+                    "enabled_upload_phase": False,
+                    "fail_closed": False,
+                    "notification_settings": {
+                        "enabled": True,
+                        "include_context": True,
+                        "msg": "msg",
+                        "support_url": "support_url",
+                    },
+                },
+                "block_page": {
+                    "background_color": "background_color",
+                    "enabled": True,
+                    "footer_text": "--footer--",
+                    "header_text": "--header--",
+                    "include_context": True,
+                    "logo_path": "https://logos.com/a.png",
+                    "mailto_address": "admin@example.com",
+                    "mailto_subject": "Blocked User Inquiry",
+                    "mode": "",
+                    "name": "Cloudflare",
+                    "suppress_footer": False,
+                    "target_uri": "https://example.com",
+                },
+                "body_scanning": {
+                    "inspection_mode": "deep",
+                },
+                "browser_isolation": {
+                    "non_identity_enabled": True,
+                    "url_browser_isolation_enabled": True,
+                },
+                "certificate": {
+                    "id": "d1b364c5-1311-466e-a194-f0e943e0799f",
+                },
+                "custom_certificate": {
+                    "enabled": True,
+                    "id": "d1b364c5-1311-466e-a194-f0e943e0799f",
+                },
+                "extended_email_matching": {
+                    "enabled": True,
+                },
+                "fips": {
+                    "tls": True,
+                },
+                "host_selector": {
+                    "enabled": False,
+                },
+                "inspection": {
+                    "mode": "static",
+                },
+                "protocol_detection": {
+                    "enabled": True,
+                },
+                "sandbox": {
+                    "enabled": True,
+                    "fallback_action": "allow",
+                },
+                "tls_decrypt": {
+                    "enabled": True,
+                },
+            })
+        ```
+
         ## Import
 
         ```sh

pulumi_cloudflare/zero_trust_organization.py

@@ -449,6 +449,34 @@ class ZeroTrustOrganization(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_zero_trust_organization = cloudflare.ZeroTrustOrganization("example_zero_trust_organization",
+            zone_id="zone_id",
+            allow_authenticate_via_warp=True,
+            auth_domain="test.cloudflareaccess.com",
+            auto_redirect_to_identity=True,
+            custom_pages={
+                "forbidden": "699d98642c564d2e855e9661899b7252",
+                "identity_denied": "699d98642c564d2e855e9661899b7252",
+            },
+            is_ui_read_only=True,
+            login_design={
+                "background_color": "#c5ed1b",
+                "footer_text": "This is an example description.",
+                "header_text": "This is an example description.",
+                "logo_path": "https://example.com/logo.png",
+                "text_color": "#c5ed1b",
+            },
+            name="Widget Corps Internal Applications",
+            session_duration="24h",
+            ui_read_only_toggle_reason="Temporarily turn off the UI read only lock to make a change via the UI",
+            user_seat_expiration_inactive_time="730h",
+            warp_auth_session_duration="24h")
+        ```
+
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[_builtins.str] account_id: The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
@@ -471,6 +499,34 @@ class ZeroTrustOrganization(pulumi.CustomResource):
         """
         ## Example Usage
 
+        ```python
+        import pulumi
+        import pulumi_cloudflare as cloudflare
+
+        example_zero_trust_organization = cloudflare.ZeroTrustOrganization("example_zero_trust_organization",
+            zone_id="zone_id",
+            allow_authenticate_via_warp=True,
+            auth_domain="test.cloudflareaccess.com",
+            auto_redirect_to_identity=True,
+            custom_pages={
+                "forbidden": "699d98642c564d2e855e9661899b7252",
+                "identity_denied": "699d98642c564d2e855e9661899b7252",
+            },
+            is_ui_read_only=True,
+            login_design={
+                "background_color": "#c5ed1b",
+                "footer_text": "This is an example description.",
+                "header_text": "This is an example description.",
+                "logo_path": "https://example.com/logo.png",
+                "text_color": "#c5ed1b",
+            },
+            name="Widget Corps Internal Applications",
+            session_duration="24h",
+            ui_read_only_toggle_reason="Temporarily turn off the UI read only lock to make a change via the UI",
+            user_seat_expiration_inactive_time="730h",
+            warp_auth_session_duration="24h")
+        ```
+
         :param str resource_name: The name of the resource.
         :param ZeroTrustOrganizationArgs args: The arguments to use to populate this resource's properties.
         :param pulumi.ResourceOptions opts: Options for the resource.