cloudflare.AccessGroup
Provides a Cloudflare Access Group resource. Access Groups are used in conjunction with Access Policies to restrict access to a particular resource based on group membership.
It’s required that an
account_id
orzone_id
is provided and in most cases using either is fine. However, if you’re using a scoped access token, you must provide the argument that matches the token’s scope. For example, an access token that is scoped to the “example.com” zone needs to use thezone_id
argument.
Example Usage
using System.Collections.Generic;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;
return await Deployment.RunAsync(() =>
{
// Allowing access to `test@example.com` email address only
var testGroupAccessGroup = new Cloudflare.AccessGroup("testGroupAccessGroup", new()
{
AccountId = "f037e56e89293a057740de681ac9abbe",
Name = "staging group",
Includes = new[]
{
new Cloudflare.Inputs.AccessGroupIncludeArgs
{
Emails = new[]
{
"test@example.com",
},
},
},
});
// Allowing `test@example.com` to access but only when coming from a
// specific IP.
var testGroupIndex_accessGroupAccessGroup = new Cloudflare.AccessGroup("testGroupIndex/accessGroupAccessGroup", new()
{
AccountId = "f037e56e89293a057740de681ac9abbe",
Name = "staging group",
Includes = new[]
{
new Cloudflare.Inputs.AccessGroupIncludeArgs
{
Emails = new[]
{
"test@example.com",
},
},
},
Requires =
{
{ "ips", new[]
{
@var.Office_ip,
} },
},
});
});
package main
import (
"github.com/pulumi/pulumi-cloudflare/sdk/v4/go/cloudflare"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudflare.NewAccessGroup(ctx, "testGroupAccessGroup", &cloudflare.AccessGroupArgs{
AccountId: pulumi.String("f037e56e89293a057740de681ac9abbe"),
Name: pulumi.String("staging group"),
Includes: cloudflare.AccessGroupIncludeArray{
&cloudflare.AccessGroupIncludeArgs{
Emails: pulumi.StringArray{
pulumi.String("test@example.com"),
},
},
},
})
if err != nil {
return err
}
_, err = cloudflare.NewAccessGroup(ctx, "testGroupIndex/accessGroupAccessGroup", &cloudflare.AccessGroupArgs{
AccountId: pulumi.String("f037e56e89293a057740de681ac9abbe"),
Name: pulumi.String("staging group"),
Includes: cloudflare.AccessGroupIncludeArray{
&cloudflare.AccessGroupIncludeArgs{
Emails: pulumi.StringArray{
pulumi.String("test@example.com"),
},
},
},
Requires: cloudflare.AccessGroupRequireArray{
Ips: cloudflare.AccessGroupRequireArgs{
_var.Office_ip,
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.AccessGroup;
import com.pulumi.cloudflare.AccessGroupArgs;
import com.pulumi.cloudflare.inputs.AccessGroupIncludeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var testGroupAccessGroup = new AccessGroup("testGroupAccessGroup", AccessGroupArgs.builder()
.accountId("f037e56e89293a057740de681ac9abbe")
.name("staging group")
.includes(AccessGroupIncludeArgs.builder()
.emails("test@example.com")
.build())
.build());
var testGroupIndex_accessGroupAccessGroup = new AccessGroup("testGroupIndex/accessGroupAccessGroup", AccessGroupArgs.builder()
.accountId("f037e56e89293a057740de681ac9abbe")
.name("staging group")
.includes(AccessGroupIncludeArgs.builder()
.emails("test@example.com")
.build())
.requires(AccessGroupRequireArgs.builder()
.ips(var_.office_ip())
.build())
.build());
}
}
import pulumi
import pulumi_cloudflare as cloudflare
# Allowing access to `test@example.com` email address only
test_group_access_group = cloudflare.AccessGroup("testGroupAccessGroup",
account_id="f037e56e89293a057740de681ac9abbe",
name="staging group",
includes=[cloudflare.AccessGroupIncludeArgs(
emails=["test@example.com"],
)])
# Allowing `test@example.com` to access but only when coming from a
# specific IP.
test_group_index_access_group_access_group = cloudflare.AccessGroup("testGroupIndex/accessGroupAccessGroup",
account_id="f037e56e89293a057740de681ac9abbe",
name="staging group",
includes=[cloudflare.AccessGroupIncludeArgs(
emails=["test@example.com"],
)],
requires={
"ips": [var["office_ip"]],
})
import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";
// Allowing access to `test@example.com` email address only
const testGroupAccessGroup = new cloudflare.AccessGroup("testGroupAccessGroup", {
accountId: "f037e56e89293a057740de681ac9abbe",
name: "staging group",
includes: [{
emails: ["test@example.com"],
}],
});
// Allowing `test@example.com` to access but only when coming from a
// specific IP.
const testGroupIndex_accessGroupAccessGroup = new cloudflare.AccessGroup("testGroupIndex/accessGroupAccessGroup", {
accountId: "f037e56e89293a057740de681ac9abbe",
name: "staging group",
includes: [{
emails: ["test@example.com"],
}],
requires: {
ips: [_var.office_ip],
},
});
resources:
# Allowing access to `test@example.com` email address only
testGroupAccessGroup:
type: cloudflare:AccessGroup
properties:
accountId: f037e56e89293a057740de681ac9abbe
name: staging group
includes:
- emails:
- test@example.com
# Allowing `test@example.com` to access but only when coming from a
# specific IP.
testGroupIndex/accessGroupAccessGroup:
type: cloudflare:AccessGroup
properties:
accountId: f037e56e89293a057740de681ac9abbe
name: staging group
includes:
- emails:
- test@example.com
requires:
ips:
- ${var.office_ip}
Create AccessGroup Resource
new AccessGroup(name: string, args: AccessGroupArgs, opts?: CustomResourceOptions);
@overload
def AccessGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
name: Optional[str] = None,
requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
zone_id: Optional[str] = None)
@overload
def AccessGroup(resource_name: str,
args: AccessGroupArgs,
opts: Optional[ResourceOptions] = None)
func NewAccessGroup(ctx *Context, name string, args AccessGroupArgs, opts ...ResourceOption) (*AccessGroup, error)
public AccessGroup(string name, AccessGroupArgs args, CustomResourceOptions? opts = null)
public AccessGroup(String name, AccessGroupArgs args)
public AccessGroup(String name, AccessGroupArgs args, CustomResourceOptions options)
type: cloudflare:AccessGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
AccessGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The AccessGroup resource accepts the following input properties:
- Includes
List<Access
Group Include Args> - Name string
- Account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- Excludes
List<Access
Group Exclude Args> - Requires
List<Access
Group Require Args> - Zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- Includes
[]Access
Group Include Args - Name string
- Account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- Excludes
[]Access
Group Exclude Args - Requires
[]Access
Group Require Args - Zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
List<Access
Group Include Args> - name String
- account
Id String The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
List<Access
Group Exclude Args> - requires
List<Access
Group Require Args> - zone
Id String The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
Access
Group Include Args[] - name string
- account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
Access
Group Exclude Args[] - requires
Access
Group Require Args[] - zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
Sequence[Access
Group Include Args] - name str
- account_
id str The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
Sequence[Access
Group Exclude Args] - requires
Sequence[Access
Group Require Args] - zone_
id str The zone identifier to target for the resource. Conflicts with
account_id
.
- includes List<Property Map>
- name String
- account
Id String The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes List<Property Map>
- requires List<Property Map>
- zone
Id String The zone identifier to target for the resource. Conflicts with
account_id
.
Outputs
All input properties are implicitly available as output properties. Additionally, the AccessGroup resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Id string
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
- id string
The provider-assigned unique ID for this managed resource.
- id str
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
Look up Existing AccessGroup Resource
Get an existing AccessGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AccessGroupState, opts?: CustomResourceOptions): AccessGroup
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
name: Optional[str] = None,
requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
zone_id: Optional[str] = None) -> AccessGroup
func GetAccessGroup(ctx *Context, name string, id IDInput, state *AccessGroupState, opts ...ResourceOption) (*AccessGroup, error)
public static AccessGroup Get(string name, Input<string> id, AccessGroupState? state, CustomResourceOptions? opts = null)
public static AccessGroup get(String name, Output<String> id, AccessGroupState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- Excludes
List<Access
Group Exclude Args> - Includes
List<Access
Group Include Args> - Name string
- Requires
List<Access
Group Require Args> - Zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- Account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- Excludes
[]Access
Group Exclude Args - Includes
[]Access
Group Include Args - Name string
- Requires
[]Access
Group Require Args - Zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id String The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
List<Access
Group Exclude Args> - includes
List<Access
Group Include Args> - name String
- requires
List<Access
Group Require Args> - zone
Id String The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
Access
Group Exclude Args[] - includes
Access
Group Include Args[] - name string
- requires
Access
Group Require Args[] - zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- account_
id str The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
Sequence[Access
Group Exclude Args] - includes
Sequence[Access
Group Include Args] - name str
- requires
Sequence[Access
Group Require Args] - zone_
id str The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id String The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes List<Property Map>
- includes List<Property Map>
- name String
- requires List<Property Map>
- zone
Id String The zone identifier to target for the resource. Conflicts with
account_id
.
Supporting Types
AccessGroupExclude
- Any
Valid boolService Token - Auth
Method string - Azures
List<Access
Group Exclude Azure> - Certificate bool
- Common
Name string - Device
Postures List<string> - Email
Domains List<string> - Emails List<string>
- Everyone bool
- External
Evaluation AccessGroup Exclude External Evaluation - Geos List<string>
- Githubs
List<Access
Group Exclude Github> - Groups List<string>
- Gsuites
List<Access
Group Exclude Gsuite> - Ips List<string>
- Login
Methods List<string> - Oktas
List<Access
Group Exclude Okta> - Samls
List<Access
Group Exclude Saml> - Service
Tokens List<string>
- Any
Valid boolService Token - Auth
Method string - Azures
[]Access
Group Exclude Azure - Certificate bool
- Common
Name string - Device
Postures []string - Email
Domains []string - Emails []string
- Everyone bool
- External
Evaluation AccessGroup Exclude External Evaluation - Geos []string
- Githubs
[]Access
Group Exclude Github - Groups []string
- Gsuites
[]Access
Group Exclude Gsuite - Ips []string
- Login
Methods []string - Oktas
[]Access
Group Exclude Okta - Samls
[]Access
Group Exclude Saml - Service
Tokens []string
- any
Valid BooleanService Token - auth
Method String - azures
List<Access
Group Exclude Azure> - certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation AccessGroup Exclude External Evaluation - geos List<String>
- githubs
List<Access
Group Exclude Github> - groups List<String>
- gsuites
List<Access
Group Exclude Gsuite> - ips List<String>
- login
Methods List<String> - oktas
List<Access
Group Exclude Okta> - samls
List<Access
Group Exclude Saml> - service
Tokens List<String>
- any
Valid booleanService Token - auth
Method string - azures
Access
Group Exclude Azure[] - certificate boolean
- common
Name string - device
Postures string[] - email
Domains string[] - emails string[]
- everyone boolean
- external
Evaluation AccessGroup Exclude External Evaluation - geos string[]
- githubs
Access
Group Exclude Github[] - groups string[]
- gsuites
Access
Group Exclude Gsuite[] - ips string[]
- login
Methods string[] - oktas
Access
Group Exclude Okta[] - samls
Access
Group Exclude Saml[] - service
Tokens string[]
- any_
valid_ boolservice_ token - auth_
method str - azures
Sequence[Access
Group Exclude Azure] - certificate bool
- common_
name str - device_
postures Sequence[str] - email_
domains Sequence[str] - emails Sequence[str]
- everyone bool
- external_
evaluation AccessGroup Exclude External Evaluation - geos Sequence[str]
- githubs
Sequence[Access
Group Exclude Github] - groups Sequence[str]
- gsuites
Sequence[Access
Group Exclude Gsuite] - ips Sequence[str]
- login_
methods Sequence[str] - oktas
Sequence[Access
Group Exclude Okta] - samls
Sequence[Access
Group Exclude Saml] - service_
tokens Sequence[str]
- any
Valid BooleanService Token - auth
Method String - azures List<Property Map>
- certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation Property Map - geos List<String>
- githubs List<Property Map>
- groups List<String>
- gsuites List<Property Map>
- ips List<String>
- login
Methods List<String> - oktas List<Property Map>
- samls List<Property Map>
- service
Tokens List<String>
AccessGroupExcludeAzure
- Identity
Provider stringId - Ids List<string>
The ID of this resource.
- Identity
Provider stringId - Ids []string
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
- identity
Provider stringId - ids string[]
The ID of this resource.
- identity_
provider_ strid - ids Sequence[str]
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
AccessGroupExcludeExternalEvaluation
- Evaluate
Url string - Keys
Url string
- Evaluate
Url string - Keys
Url string
- evaluate
Url String - keys
Url String
- evaluate
Url string - keys
Url string
- evaluate_
url str - keys_
url str
- evaluate
Url String - keys
Url String
AccessGroupExcludeGithub
- Identity
Provider stringId - Name string
- Teams List<string>
- Identity
Provider stringId - Name string
- Teams []string
- identity
Provider StringId - name String
- teams List<String>
- identity
Provider stringId - name string
- teams string[]
- identity_
provider_ strid - name str
- teams Sequence[str]
- identity
Provider StringId - name String
- teams List<String>
AccessGroupExcludeGsuite
- Emails List<string>
- Identity
Provider stringId
- Emails []string
- Identity
Provider stringId
- emails List<String>
- identity
Provider StringId
- emails string[]
- identity
Provider stringId
- emails Sequence[str]
- identity_
provider_ strid
- emails List<String>
- identity
Provider StringId
AccessGroupExcludeOkta
- Identity
Provider stringId - Names List<string>
- Identity
Provider stringId - Names []string
- identity
Provider StringId - names List<String>
- identity
Provider stringId - names string[]
- identity_
provider_ strid - names Sequence[str]
- identity
Provider StringId - names List<String>
AccessGroupExcludeSaml
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
- attribute
Name string - attribute
Value string - identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
AccessGroupInclude
- Any
Valid boolService Token - Auth
Method string - Azures
List<Access
Group Include Azure> - Certificate bool
- Common
Name string - Device
Postures List<string> - Email
Domains List<string> - Emails List<string>
- Everyone bool
- External
Evaluation AccessGroup Include External Evaluation - Geos List<string>
- Githubs
List<Access
Group Include Github> - Groups List<string>
- Gsuites
List<Access
Group Include Gsuite> - Ips List<string>
- Login
Methods List<string> - Oktas
List<Access
Group Include Okta> - Samls
List<Access
Group Include Saml> - Service
Tokens List<string>
- Any
Valid boolService Token - Auth
Method string - Azures
[]Access
Group Include Azure - Certificate bool
- Common
Name string - Device
Postures []string - Email
Domains []string - Emails []string
- Everyone bool
- External
Evaluation AccessGroup Include External Evaluation - Geos []string
- Githubs
[]Access
Group Include Github - Groups []string
- Gsuites
[]Access
Group Include Gsuite - Ips []string
- Login
Methods []string - Oktas
[]Access
Group Include Okta - Samls
[]Access
Group Include Saml - Service
Tokens []string
- any
Valid BooleanService Token - auth
Method String - azures
List<Access
Group Include Azure> - certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation AccessGroup Include External Evaluation - geos List<String>
- githubs
List<Access
Group Include Github> - groups List<String>
- gsuites
List<Access
Group Include Gsuite> - ips List<String>
- login
Methods List<String> - oktas
List<Access
Group Include Okta> - samls
List<Access
Group Include Saml> - service
Tokens List<String>
- any
Valid booleanService Token - auth
Method string - azures
Access
Group Include Azure[] - certificate boolean
- common
Name string - device
Postures string[] - email
Domains string[] - emails string[]
- everyone boolean
- external
Evaluation AccessGroup Include External Evaluation - geos string[]
- githubs
Access
Group Include Github[] - groups string[]
- gsuites
Access
Group Include Gsuite[] - ips string[]
- login
Methods string[] - oktas
Access
Group Include Okta[] - samls
Access
Group Include Saml[] - service
Tokens string[]
- any_
valid_ boolservice_ token - auth_
method str - azures
Sequence[Access
Group Include Azure] - certificate bool
- common_
name str - device_
postures Sequence[str] - email_
domains Sequence[str] - emails Sequence[str]
- everyone bool
- external_
evaluation AccessGroup Include External Evaluation - geos Sequence[str]
- githubs
Sequence[Access
Group Include Github] - groups Sequence[str]
- gsuites
Sequence[Access
Group Include Gsuite] - ips Sequence[str]
- login_
methods Sequence[str] - oktas
Sequence[Access
Group Include Okta] - samls
Sequence[Access
Group Include Saml] - service_
tokens Sequence[str]
- any
Valid BooleanService Token - auth
Method String - azures List<Property Map>
- certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation Property Map - geos List<String>
- githubs List<Property Map>
- groups List<String>
- gsuites List<Property Map>
- ips List<String>
- login
Methods List<String> - oktas List<Property Map>
- samls List<Property Map>
- service
Tokens List<String>
AccessGroupIncludeAzure
- Identity
Provider stringId - Ids List<string>
The ID of this resource.
- Identity
Provider stringId - Ids []string
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
- identity
Provider stringId - ids string[]
The ID of this resource.
- identity_
provider_ strid - ids Sequence[str]
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
AccessGroupIncludeExternalEvaluation
- Evaluate
Url string - Keys
Url string
- Evaluate
Url string - Keys
Url string
- evaluate
Url String - keys
Url String
- evaluate
Url string - keys
Url string
- evaluate_
url str - keys_
url str
- evaluate
Url String - keys
Url String
AccessGroupIncludeGithub
- Identity
Provider stringId - Name string
- Teams List<string>
- Identity
Provider stringId - Name string
- Teams []string
- identity
Provider StringId - name String
- teams List<String>
- identity
Provider stringId - name string
- teams string[]
- identity_
provider_ strid - name str
- teams Sequence[str]
- identity
Provider StringId - name String
- teams List<String>
AccessGroupIncludeGsuite
- Emails List<string>
- Identity
Provider stringId
- Emails []string
- Identity
Provider stringId
- emails List<String>
- identity
Provider StringId
- emails string[]
- identity
Provider stringId
- emails Sequence[str]
- identity_
provider_ strid
- emails List<String>
- identity
Provider StringId
AccessGroupIncludeOkta
- Identity
Provider stringId - Names List<string>
- Identity
Provider stringId - Names []string
- identity
Provider StringId - names List<String>
- identity
Provider stringId - names string[]
- identity_
provider_ strid - names Sequence[str]
- identity
Provider StringId - names List<String>
AccessGroupIncludeSaml
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
- attribute
Name string - attribute
Value string - identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
AccessGroupRequire
- Any
Valid boolService Token - Auth
Method string - Azures
List<Access
Group Require Azure> - Certificate bool
- Common
Name string - Device
Postures List<string> - Email
Domains List<string> - Emails List<string>
- Everyone bool
- External
Evaluation AccessGroup Require External Evaluation - Geos List<string>
- Githubs
List<Access
Group Require Github> - Groups List<string>
- Gsuites
List<Access
Group Require Gsuite> - Ips List<string>
- Login
Methods List<string> - Oktas
List<Access
Group Require Okta> - Samls
List<Access
Group Require Saml> - Service
Tokens List<string>
- Any
Valid boolService Token - Auth
Method string - Azures
[]Access
Group Require Azure - Certificate bool
- Common
Name string - Device
Postures []string - Email
Domains []string - Emails []string
- Everyone bool
- External
Evaluation AccessGroup Require External Evaluation - Geos []string
- Githubs
[]Access
Group Require Github - Groups []string
- Gsuites
[]Access
Group Require Gsuite - Ips []string
- Login
Methods []string - Oktas
[]Access
Group Require Okta - Samls
[]Access
Group Require Saml - Service
Tokens []string
- any
Valid BooleanService Token - auth
Method String - azures
List<Access
Group Require Azure> - certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation AccessGroup Require External Evaluation - geos List<String>
- githubs
List<Access
Group Require Github> - groups List<String>
- gsuites
List<Access
Group Require Gsuite> - ips List<String>
- login
Methods List<String> - oktas
List<Access
Group Require Okta> - samls
List<Access
Group Require Saml> - service
Tokens List<String>
- any
Valid booleanService Token - auth
Method string - azures
Access
Group Require Azure[] - certificate boolean
- common
Name string - device
Postures string[] - email
Domains string[] - emails string[]
- everyone boolean
- external
Evaluation AccessGroup Require External Evaluation - geos string[]
- githubs
Access
Group Require Github[] - groups string[]
- gsuites
Access
Group Require Gsuite[] - ips string[]
- login
Methods string[] - oktas
Access
Group Require Okta[] - samls
Access
Group Require Saml[] - service
Tokens string[]
- any_
valid_ boolservice_ token - auth_
method str - azures
Sequence[Access
Group Require Azure] - certificate bool
- common_
name str - device_
postures Sequence[str] - email_
domains Sequence[str] - emails Sequence[str]
- everyone bool
- external_
evaluation AccessGroup Require External Evaluation - geos Sequence[str]
- githubs
Sequence[Access
Group Require Github] - groups Sequence[str]
- gsuites
Sequence[Access
Group Require Gsuite] - ips Sequence[str]
- login_
methods Sequence[str] - oktas
Sequence[Access
Group Require Okta] - samls
Sequence[Access
Group Require Saml] - service_
tokens Sequence[str]
- any
Valid BooleanService Token - auth
Method String - azures List<Property Map>
- certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation Property Map - geos List<String>
- githubs List<Property Map>
- groups List<String>
- gsuites List<Property Map>
- ips List<String>
- login
Methods List<String> - oktas List<Property Map>
- samls List<Property Map>
- service
Tokens List<String>
AccessGroupRequireAzure
- Identity
Provider stringId - Ids List<string>
The ID of this resource.
- Identity
Provider stringId - Ids []string
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
- identity
Provider stringId - ids string[]
The ID of this resource.
- identity_
provider_ strid - ids Sequence[str]
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
AccessGroupRequireExternalEvaluation
- Evaluate
Url string - Keys
Url string
- Evaluate
Url string - Keys
Url string
- evaluate
Url String - keys
Url String
- evaluate
Url string - keys
Url string
- evaluate_
url str - keys_
url str
- evaluate
Url String - keys
Url String
AccessGroupRequireGithub
- Identity
Provider stringId - Name string
- Teams List<string>
- Identity
Provider stringId - Name string
- Teams []string
- identity
Provider StringId - name String
- teams List<String>
- identity
Provider stringId - name string
- teams string[]
- identity_
provider_ strid - name str
- teams Sequence[str]
- identity
Provider StringId - name String
- teams List<String>
AccessGroupRequireGsuite
- Emails List<string>
- Identity
Provider stringId
- Emails []string
- Identity
Provider stringId
- emails List<String>
- identity
Provider StringId
- emails string[]
- identity
Provider stringId
- emails Sequence[str]
- identity_
provider_ strid
- emails List<String>
- identity
Provider StringId
AccessGroupRequireOkta
- Identity
Provider stringId - Names List<string>
- Identity
Provider stringId - Names []string
- identity
Provider StringId - names List<String>
- identity
Provider stringId - names string[]
- identity_
provider_ strid - names Sequence[str]
- identity
Provider StringId - names List<String>
AccessGroupRequireSaml
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
- attribute
Name string - attribute
Value string - identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
Import
$ pulumi import cloudflare:index/accessGroup:AccessGroup example <account_id>/<group_id>
Package Details
- Repository
- Cloudflare pulumi/pulumi-cloudflare
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
cloudflare
Terraform Provider.