Cloudflare v5.2.1, May 23 23
Cloudflare v5.2.1, May 23 23
cloudflare.AccessGroup
Explore with Pulumi AI
Provides a Cloudflare Access Group resource. Access Groups are used in conjunction with Access Policies to restrict access to a particular resource based on group membership.
It’s required that an
account_id
orzone_id
is provided and in most cases using either is fine. However, if you’re using a scoped access token, you must provide the argument that matches the token’s scope. For example, an access token that is scoped to the “example.com” zone needs to use thezone_id
argument.
Example Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;
return await Deployment.RunAsync(() =>
{
// Allowing access to `test@example.com` email address only
var exampleAccessGroup = new Cloudflare.AccessGroup("exampleAccessGroup", new()
{
AccountId = "f037e56e89293a057740de681ac9abbe",
Name = "staging group",
Includes = new[]
{
new Cloudflare.Inputs.AccessGroupIncludeArgs
{
Emails = new[]
{
"test@example.com",
},
},
},
});
// Allowing `test@example.com` to access but only when coming from a
// specific IP.
var exampleIndex_accessGroupAccessGroup = new Cloudflare.AccessGroup("exampleIndex/accessGroupAccessGroup", new()
{
AccountId = "f037e56e89293a057740de681ac9abbe",
Name = "staging group",
Includes = new[]
{
new Cloudflare.Inputs.AccessGroupIncludeArgs
{
Emails = new[]
{
"test@example.com",
},
},
},
Requires =
{
{ "ips", new[]
{
@var.Office_ip,
} },
},
});
// Allow members of an Azure Group. The ID is the group UUID (id) in Azure.
var exampleCloudflareIndex_accessGroupAccessGroup = new Cloudflare.AccessGroup("exampleCloudflareIndex/accessGroupAccessGroup", new()
{
AccountId = "f037e56e89293a057740de681ac9abbe",
Name = "test_group",
Includes = new[]
{
new Cloudflare.Inputs.AccessGroupIncludeArgs
{
Azures = new[]
{
new Cloudflare.Inputs.AccessGroupIncludeAzureArgs
{
IdentityProviderId = "ca298b82-93b5-41bf-bc2d-10493f09b761",
Ids = new[]
{
"86773093-5feb-48dd-814b-7ccd3676ff50",
},
},
},
},
},
});
});
package main
import (
"github.com/pulumi/pulumi-cloudflare/sdk/v5/go/cloudflare"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudflare.NewAccessGroup(ctx, "exampleAccessGroup", &cloudflare.AccessGroupArgs{
AccountId: pulumi.String("f037e56e89293a057740de681ac9abbe"),
Name: pulumi.String("staging group"),
Includes: cloudflare.AccessGroupIncludeArray{
&cloudflare.AccessGroupIncludeArgs{
Emails: pulumi.StringArray{
pulumi.String("test@example.com"),
},
},
},
})
if err != nil {
return err
}
_, err = cloudflare.NewAccessGroup(ctx, "exampleIndex/accessGroupAccessGroup", &cloudflare.AccessGroupArgs{
AccountId: pulumi.String("f037e56e89293a057740de681ac9abbe"),
Name: pulumi.String("staging group"),
Includes: cloudflare.AccessGroupIncludeArray{
&cloudflare.AccessGroupIncludeArgs{
Emails: pulumi.StringArray{
pulumi.String("test@example.com"),
},
},
},
Requires: cloudflare.AccessGroupRequireArray{
Ips: cloudflare.AccessGroupRequireArgs{
_var.Office_ip,
},
},
})
if err != nil {
return err
}
_, err = cloudflare.NewAccessGroup(ctx, "exampleCloudflareIndex/accessGroupAccessGroup", &cloudflare.AccessGroupArgs{
AccountId: pulumi.String("f037e56e89293a057740de681ac9abbe"),
Name: pulumi.String("test_group"),
Includes: cloudflare.AccessGroupIncludeArray{
&cloudflare.AccessGroupIncludeArgs{
Azures: cloudflare.AccessGroupIncludeAzureArray{
&cloudflare.AccessGroupIncludeAzureArgs{
IdentityProviderId: pulumi.String("ca298b82-93b5-41bf-bc2d-10493f09b761"),
Ids: pulumi.StringArray{
pulumi.String("86773093-5feb-48dd-814b-7ccd3676ff50"),
},
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.AccessGroup;
import com.pulumi.cloudflare.AccessGroupArgs;
import com.pulumi.cloudflare.inputs.AccessGroupIncludeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleAccessGroup = new AccessGroup("exampleAccessGroup", AccessGroupArgs.builder()
.accountId("f037e56e89293a057740de681ac9abbe")
.name("staging group")
.includes(AccessGroupIncludeArgs.builder()
.emails("test@example.com")
.build())
.build());
var exampleIndex_accessGroupAccessGroup = new AccessGroup("exampleIndex/accessGroupAccessGroup", AccessGroupArgs.builder()
.accountId("f037e56e89293a057740de681ac9abbe")
.name("staging group")
.includes(AccessGroupIncludeArgs.builder()
.emails("test@example.com")
.build())
.requires(AccessGroupRequireArgs.builder()
.ips(var_.office_ip())
.build())
.build());
var exampleCloudflareIndex_accessGroupAccessGroup = new AccessGroup("exampleCloudflareIndex/accessGroupAccessGroup", AccessGroupArgs.builder()
.accountId("f037e56e89293a057740de681ac9abbe")
.name("test_group")
.includes(AccessGroupIncludeArgs.builder()
.azures(AccessGroupIncludeAzureArgs.builder()
.identityProviderId("ca298b82-93b5-41bf-bc2d-10493f09b761")
.ids("86773093-5feb-48dd-814b-7ccd3676ff50")
.build())
.build())
.build());
}
}
import pulumi
import pulumi_cloudflare as cloudflare
# Allowing access to `test@example.com` email address only
example_access_group = cloudflare.AccessGroup("exampleAccessGroup",
account_id="f037e56e89293a057740de681ac9abbe",
name="staging group",
includes=[cloudflare.AccessGroupIncludeArgs(
emails=["test@example.com"],
)])
# Allowing `test@example.com` to access but only when coming from a
# specific IP.
example_index_access_group_access_group = cloudflare.AccessGroup("exampleIndex/accessGroupAccessGroup",
account_id="f037e56e89293a057740de681ac9abbe",
name="staging group",
includes=[cloudflare.AccessGroupIncludeArgs(
emails=["test@example.com"],
)],
requires={
"ips": [var["office_ip"]],
})
# Allow members of an Azure Group. The ID is the group UUID (id) in Azure.
example_cloudflare_index_access_group_access_group = cloudflare.AccessGroup("exampleCloudflareIndex/accessGroupAccessGroup",
account_id="f037e56e89293a057740de681ac9abbe",
name="test_group",
includes=[cloudflare.AccessGroupIncludeArgs(
azures=[cloudflare.AccessGroupIncludeAzureArgs(
identity_provider_id="ca298b82-93b5-41bf-bc2d-10493f09b761",
ids=["86773093-5feb-48dd-814b-7ccd3676ff50"],
)],
)])
import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";
// Allowing access to `test@example.com` email address only
const exampleAccessGroup = new cloudflare.AccessGroup("exampleAccessGroup", {
accountId: "f037e56e89293a057740de681ac9abbe",
name: "staging group",
includes: [{
emails: ["test@example.com"],
}],
});
// Allowing `test@example.com` to access but only when coming from a
// specific IP.
const exampleIndex_accessGroupAccessGroup = new cloudflare.AccessGroup("exampleIndex/accessGroupAccessGroup", {
accountId: "f037e56e89293a057740de681ac9abbe",
name: "staging group",
includes: [{
emails: ["test@example.com"],
}],
requires: {
ips: [_var.office_ip],
},
});
// Allow members of an Azure Group. The ID is the group UUID (id) in Azure.
const exampleCloudflareIndex_accessGroupAccessGroup = new cloudflare.AccessGroup("exampleCloudflareIndex/accessGroupAccessGroup", {
accountId: "f037e56e89293a057740de681ac9abbe",
name: "test_group",
includes: [{
azures: [{
identityProviderId: "ca298b82-93b5-41bf-bc2d-10493f09b761",
ids: ["86773093-5feb-48dd-814b-7ccd3676ff50"],
}],
}],
});
resources:
# Allowing access to `test@example.com` email address only
exampleAccessGroup:
type: cloudflare:AccessGroup
properties:
accountId: f037e56e89293a057740de681ac9abbe
name: staging group
includes:
- emails:
- test@example.com
# Allowing `test@example.com` to access but only when coming from a
# specific IP.
exampleIndex/accessGroupAccessGroup:
type: cloudflare:AccessGroup
properties:
accountId: f037e56e89293a057740de681ac9abbe
name: staging group
includes:
- emails:
- test@example.com
requires:
ips:
- ${var.office_ip}
# Allow members of an Azure Group. The ID is the group UUID (id) in Azure.
exampleCloudflareIndex/accessGroupAccessGroup:
type: cloudflare:AccessGroup
properties:
accountId: f037e56e89293a057740de681ac9abbe
name: test_group
includes:
- azures:
- identityProviderId: ca298b82-93b5-41bf-bc2d-10493f09b761
ids:
- 86773093-5feb-48dd-814b-7ccd3676ff50
Create AccessGroup Resource
new AccessGroup(name: string, args: AccessGroupArgs, opts?: CustomResourceOptions);
@overload
def AccessGroup(resource_name: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
name: Optional[str] = None,
requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
zone_id: Optional[str] = None)
@overload
def AccessGroup(resource_name: str,
args: AccessGroupArgs,
opts: Optional[ResourceOptions] = None)
func NewAccessGroup(ctx *Context, name string, args AccessGroupArgs, opts ...ResourceOption) (*AccessGroup, error)
public AccessGroup(string name, AccessGroupArgs args, CustomResourceOptions? opts = null)
public AccessGroup(String name, AccessGroupArgs args)
public AccessGroup(String name, AccessGroupArgs args, CustomResourceOptions options)
type: cloudflare:AccessGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AccessGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
AccessGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The AccessGroup resource accepts the following input properties:
- Includes
List<Access
Group Include Args> - Name string
- Account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- Excludes
List<Access
Group Exclude Args> - Requires
List<Access
Group Require Args> - Zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- Includes
[]Access
Group Include Args - Name string
- Account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- Excludes
[]Access
Group Exclude Args - Requires
[]Access
Group Require Args - Zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
List<Access
Group Include Args> - name String
- account
Id String The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
List<Access
Group Exclude Args> - requires
List<Access
Group Require Args> - zone
Id String The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
Access
Group Include Args[] - name string
- account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
Access
Group Exclude Args[] - requires
Access
Group Require Args[] - zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- includes
Sequence[Access
Group Include Args] - name str
- account_
id str The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
Sequence[Access
Group Exclude Args] - requires
Sequence[Access
Group Require Args] - zone_
id str The zone identifier to target for the resource. Conflicts with
account_id
.
- includes List<Property Map>
- name String
- account
Id String The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes List<Property Map>
- requires List<Property Map>
- zone
Id String The zone identifier to target for the resource. Conflicts with
account_id
.
Outputs
All input properties are implicitly available as output properties. Additionally, the AccessGroup resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Id string
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
- id string
The provider-assigned unique ID for this managed resource.
- id str
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
Look up Existing AccessGroup Resource
Get an existing AccessGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AccessGroupState, opts?: CustomResourceOptions): AccessGroup
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[str] = None,
excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
name: Optional[str] = None,
requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
zone_id: Optional[str] = None) -> AccessGroup
func GetAccessGroup(ctx *Context, name string, id IDInput, state *AccessGroupState, opts ...ResourceOption) (*AccessGroup, error)
public static AccessGroup Get(string name, Input<string> id, AccessGroupState? state, CustomResourceOptions? opts = null)
public static AccessGroup get(String name, Output<String> id, AccessGroupState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- Excludes
List<Access
Group Exclude Args> - Includes
List<Access
Group Include Args> - Name string
- Requires
List<Access
Group Require Args> - Zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- Account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- Excludes
[]Access
Group Exclude Args - Includes
[]Access
Group Include Args - Name string
- Requires
[]Access
Group Require Args - Zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id String The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
List<Access
Group Exclude Args> - includes
List<Access
Group Include Args> - name String
- requires
List<Access
Group Require Args> - zone
Id String The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id string The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
Access
Group Exclude Args[] - includes
Access
Group Include Args[] - name string
- requires
Access
Group Require Args[] - zone
Id string The zone identifier to target for the resource. Conflicts with
account_id
.
- account_
id str The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes
Sequence[Access
Group Exclude Args] - includes
Sequence[Access
Group Include Args] - name str
- requires
Sequence[Access
Group Require Args] - zone_
id str The zone identifier to target for the resource. Conflicts with
account_id
.
- account
Id String The account identifier to target for the resource. Conflicts with
zone_id
. Modifying this attribute will force creation of a new resource.- excludes List<Property Map>
- includes List<Property Map>
- name String
- requires List<Property Map>
- zone
Id String The zone identifier to target for the resource. Conflicts with
account_id
.
Supporting Types
AccessGroupExclude
- Any
Valid boolService Token - Auth
Method string - Azures
List<Access
Group Exclude Azure> - Certificate bool
- Common
Name string - Device
Postures List<string> - Email
Domains List<string> - Emails List<string>
- Everyone bool
- External
Evaluation AccessGroup Exclude External Evaluation - Geos List<string>
- Githubs
List<Access
Group Exclude Github> - Groups List<string>
- Gsuites
List<Access
Group Exclude Gsuite> - Ip
Lists List<string> - Ips List<string>
- Login
Methods List<string> - Oktas
List<Access
Group Exclude Okta> - Samls
List<Access
Group Exclude Saml> - Service
Tokens List<string>
- Any
Valid boolService Token - Auth
Method string - Azures
[]Access
Group Exclude Azure - Certificate bool
- Common
Name string - Device
Postures []string - Email
Domains []string - Emails []string
- Everyone bool
- External
Evaluation AccessGroup Exclude External Evaluation - Geos []string
- Githubs
[]Access
Group Exclude Github - Groups []string
- Gsuites
[]Access
Group Exclude Gsuite - Ip
Lists []string - Ips []string
- Login
Methods []string - Oktas
[]Access
Group Exclude Okta - Samls
[]Access
Group Exclude Saml - Service
Tokens []string
- any
Valid BooleanService Token - auth
Method String - azures
List<Access
Group Exclude Azure> - certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation AccessGroup Exclude External Evaluation - geos List<String>
- githubs
List<Access
Group Exclude Github> - groups List<String>
- gsuites
List<Access
Group Exclude Gsuite> - ip
Lists List<String> - ips List<String>
- login
Methods List<String> - oktas
List<Access
Group Exclude Okta> - samls
List<Access
Group Exclude Saml> - service
Tokens List<String>
- any
Valid booleanService Token - auth
Method string - azures
Access
Group Exclude Azure[] - certificate boolean
- common
Name string - device
Postures string[] - email
Domains string[] - emails string[]
- everyone boolean
- external
Evaluation AccessGroup Exclude External Evaluation - geos string[]
- githubs
Access
Group Exclude Github[] - groups string[]
- gsuites
Access
Group Exclude Gsuite[] - ip
Lists string[] - ips string[]
- login
Methods string[] - oktas
Access
Group Exclude Okta[] - samls
Access
Group Exclude Saml[] - service
Tokens string[]
- any_
valid_ boolservice_ token - auth_
method str - azures
Sequence[Access
Group Exclude Azure] - certificate bool
- common_
name str - device_
postures Sequence[str] - email_
domains Sequence[str] - emails Sequence[str]
- everyone bool
- external_
evaluation AccessGroup Exclude External Evaluation - geos Sequence[str]
- githubs
Sequence[Access
Group Exclude Github] - groups Sequence[str]
- gsuites
Sequence[Access
Group Exclude Gsuite] - ip_
lists Sequence[str] - ips Sequence[str]
- login_
methods Sequence[str] - oktas
Sequence[Access
Group Exclude Okta] - samls
Sequence[Access
Group Exclude Saml] - service_
tokens Sequence[str]
- any
Valid BooleanService Token - auth
Method String - azures List<Property Map>
- certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation Property Map - geos List<String>
- githubs List<Property Map>
- groups List<String>
- gsuites List<Property Map>
- ip
Lists List<String> - ips List<String>
- login
Methods List<String> - oktas List<Property Map>
- samls List<Property Map>
- service
Tokens List<String>
AccessGroupExcludeAzure
- Identity
Provider stringId - Ids List<string>
The ID of this resource.
- Identity
Provider stringId - Ids []string
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
- identity
Provider stringId - ids string[]
The ID of this resource.
- identity_
provider_ strid - ids Sequence[str]
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
AccessGroupExcludeExternalEvaluation
- Evaluate
Url string - Keys
Url string
- Evaluate
Url string - Keys
Url string
- evaluate
Url String - keys
Url String
- evaluate
Url string - keys
Url string
- evaluate_
url str - keys_
url str
- evaluate
Url String - keys
Url String
AccessGroupExcludeGithub
- Identity
Provider stringId - Name string
- Teams List<string>
- Identity
Provider stringId - Name string
- Teams []string
- identity
Provider StringId - name String
- teams List<String>
- identity
Provider stringId - name string
- teams string[]
- identity_
provider_ strid - name str
- teams Sequence[str]
- identity
Provider StringId - name String
- teams List<String>
AccessGroupExcludeGsuite
- Emails List<string>
- Identity
Provider stringId
- Emails []string
- Identity
Provider stringId
- emails List<String>
- identity
Provider StringId
- emails string[]
- identity
Provider stringId
- emails Sequence[str]
- identity_
provider_ strid
- emails List<String>
- identity
Provider StringId
AccessGroupExcludeOkta
- Identity
Provider stringId - Names List<string>
- Identity
Provider stringId - Names []string
- identity
Provider StringId - names List<String>
- identity
Provider stringId - names string[]
- identity_
provider_ strid - names Sequence[str]
- identity
Provider StringId - names List<String>
AccessGroupExcludeSaml
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
- attribute
Name string - attribute
Value string - identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
AccessGroupInclude
- Any
Valid boolService Token - Auth
Method string - Azures
List<Access
Group Include Azure> - Certificate bool
- Common
Name string - Device
Postures List<string> - Email
Domains List<string> - Emails List<string>
- Everyone bool
- External
Evaluation AccessGroup Include External Evaluation - Geos List<string>
- Githubs
List<Access
Group Include Github> - Groups List<string>
- Gsuites
List<Access
Group Include Gsuite> - Ip
Lists List<string> - Ips List<string>
- Login
Methods List<string> - Oktas
List<Access
Group Include Okta> - Samls
List<Access
Group Include Saml> - Service
Tokens List<string>
- Any
Valid boolService Token - Auth
Method string - Azures
[]Access
Group Include Azure - Certificate bool
- Common
Name string - Device
Postures []string - Email
Domains []string - Emails []string
- Everyone bool
- External
Evaluation AccessGroup Include External Evaluation - Geos []string
- Githubs
[]Access
Group Include Github - Groups []string
- Gsuites
[]Access
Group Include Gsuite - Ip
Lists []string - Ips []string
- Login
Methods []string - Oktas
[]Access
Group Include Okta - Samls
[]Access
Group Include Saml - Service
Tokens []string
- any
Valid BooleanService Token - auth
Method String - azures
List<Access
Group Include Azure> - certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation AccessGroup Include External Evaluation - geos List<String>
- githubs
List<Access
Group Include Github> - groups List<String>
- gsuites
List<Access
Group Include Gsuite> - ip
Lists List<String> - ips List<String>
- login
Methods List<String> - oktas
List<Access
Group Include Okta> - samls
List<Access
Group Include Saml> - service
Tokens List<String>
- any
Valid booleanService Token - auth
Method string - azures
Access
Group Include Azure[] - certificate boolean
- common
Name string - device
Postures string[] - email
Domains string[] - emails string[]
- everyone boolean
- external
Evaluation AccessGroup Include External Evaluation - geos string[]
- githubs
Access
Group Include Github[] - groups string[]
- gsuites
Access
Group Include Gsuite[] - ip
Lists string[] - ips string[]
- login
Methods string[] - oktas
Access
Group Include Okta[] - samls
Access
Group Include Saml[] - service
Tokens string[]
- any_
valid_ boolservice_ token - auth_
method str - azures
Sequence[Access
Group Include Azure] - certificate bool
- common_
name str - device_
postures Sequence[str] - email_
domains Sequence[str] - emails Sequence[str]
- everyone bool
- external_
evaluation AccessGroup Include External Evaluation - geos Sequence[str]
- githubs
Sequence[Access
Group Include Github] - groups Sequence[str]
- gsuites
Sequence[Access
Group Include Gsuite] - ip_
lists Sequence[str] - ips Sequence[str]
- login_
methods Sequence[str] - oktas
Sequence[Access
Group Include Okta] - samls
Sequence[Access
Group Include Saml] - service_
tokens Sequence[str]
- any
Valid BooleanService Token - auth
Method String - azures List<Property Map>
- certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation Property Map - geos List<String>
- githubs List<Property Map>
- groups List<String>
- gsuites List<Property Map>
- ip
Lists List<String> - ips List<String>
- login
Methods List<String> - oktas List<Property Map>
- samls List<Property Map>
- service
Tokens List<String>
AccessGroupIncludeAzure
- Identity
Provider stringId - Ids List<string>
The ID of this resource.
- Identity
Provider stringId - Ids []string
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
- identity
Provider stringId - ids string[]
The ID of this resource.
- identity_
provider_ strid - ids Sequence[str]
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
AccessGroupIncludeExternalEvaluation
- Evaluate
Url string - Keys
Url string
- Evaluate
Url string - Keys
Url string
- evaluate
Url String - keys
Url String
- evaluate
Url string - keys
Url string
- evaluate_
url str - keys_
url str
- evaluate
Url String - keys
Url String
AccessGroupIncludeGithub
- Identity
Provider stringId - Name string
- Teams List<string>
- Identity
Provider stringId - Name string
- Teams []string
- identity
Provider StringId - name String
- teams List<String>
- identity
Provider stringId - name string
- teams string[]
- identity_
provider_ strid - name str
- teams Sequence[str]
- identity
Provider StringId - name String
- teams List<String>
AccessGroupIncludeGsuite
- Emails List<string>
- Identity
Provider stringId
- Emails []string
- Identity
Provider stringId
- emails List<String>
- identity
Provider StringId
- emails string[]
- identity
Provider stringId
- emails Sequence[str]
- identity_
provider_ strid
- emails List<String>
- identity
Provider StringId
AccessGroupIncludeOkta
- Identity
Provider stringId - Names List<string>
- Identity
Provider stringId - Names []string
- identity
Provider StringId - names List<String>
- identity
Provider stringId - names string[]
- identity_
provider_ strid - names Sequence[str]
- identity
Provider StringId - names List<String>
AccessGroupIncludeSaml
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
- attribute
Name string - attribute
Value string - identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
AccessGroupRequire
- Any
Valid boolService Token - Auth
Method string - Azures
List<Access
Group Require Azure> - Certificate bool
- Common
Name string - Device
Postures List<string> - Email
Domains List<string> - Emails List<string>
- Everyone bool
- External
Evaluation AccessGroup Require External Evaluation - Geos List<string>
- Githubs
List<Access
Group Require Github> - Groups List<string>
- Gsuites
List<Access
Group Require Gsuite> - Ip
Lists List<string> - Ips List<string>
- Login
Methods List<string> - Oktas
List<Access
Group Require Okta> - Samls
List<Access
Group Require Saml> - Service
Tokens List<string>
- Any
Valid boolService Token - Auth
Method string - Azures
[]Access
Group Require Azure - Certificate bool
- Common
Name string - Device
Postures []string - Email
Domains []string - Emails []string
- Everyone bool
- External
Evaluation AccessGroup Require External Evaluation - Geos []string
- Githubs
[]Access
Group Require Github - Groups []string
- Gsuites
[]Access
Group Require Gsuite - Ip
Lists []string - Ips []string
- Login
Methods []string - Oktas
[]Access
Group Require Okta - Samls
[]Access
Group Require Saml - Service
Tokens []string
- any
Valid BooleanService Token - auth
Method String - azures
List<Access
Group Require Azure> - certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation AccessGroup Require External Evaluation - geos List<String>
- githubs
List<Access
Group Require Github> - groups List<String>
- gsuites
List<Access
Group Require Gsuite> - ip
Lists List<String> - ips List<String>
- login
Methods List<String> - oktas
List<Access
Group Require Okta> - samls
List<Access
Group Require Saml> - service
Tokens List<String>
- any
Valid booleanService Token - auth
Method string - azures
Access
Group Require Azure[] - certificate boolean
- common
Name string - device
Postures string[] - email
Domains string[] - emails string[]
- everyone boolean
- external
Evaluation AccessGroup Require External Evaluation - geos string[]
- githubs
Access
Group Require Github[] - groups string[]
- gsuites
Access
Group Require Gsuite[] - ip
Lists string[] - ips string[]
- login
Methods string[] - oktas
Access
Group Require Okta[] - samls
Access
Group Require Saml[] - service
Tokens string[]
- any_
valid_ boolservice_ token - auth_
method str - azures
Sequence[Access
Group Require Azure] - certificate bool
- common_
name str - device_
postures Sequence[str] - email_
domains Sequence[str] - emails Sequence[str]
- everyone bool
- external_
evaluation AccessGroup Require External Evaluation - geos Sequence[str]
- githubs
Sequence[Access
Group Require Github] - groups Sequence[str]
- gsuites
Sequence[Access
Group Require Gsuite] - ip_
lists Sequence[str] - ips Sequence[str]
- login_
methods Sequence[str] - oktas
Sequence[Access
Group Require Okta] - samls
Sequence[Access
Group Require Saml] - service_
tokens Sequence[str]
- any
Valid BooleanService Token - auth
Method String - azures List<Property Map>
- certificate Boolean
- common
Name String - device
Postures List<String> - email
Domains List<String> - emails List<String>
- everyone Boolean
- external
Evaluation Property Map - geos List<String>
- githubs List<Property Map>
- groups List<String>
- gsuites List<Property Map>
- ip
Lists List<String> - ips List<String>
- login
Methods List<String> - oktas List<Property Map>
- samls List<Property Map>
- service
Tokens List<String>
AccessGroupRequireAzure
- Identity
Provider stringId - Ids List<string>
The ID of this resource.
- Identity
Provider stringId - Ids []string
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
- identity
Provider stringId - ids string[]
The ID of this resource.
- identity_
provider_ strid - ids Sequence[str]
The ID of this resource.
- identity
Provider StringId - ids List<String>
The ID of this resource.
AccessGroupRequireExternalEvaluation
- Evaluate
Url string - Keys
Url string
- Evaluate
Url string - Keys
Url string
- evaluate
Url String - keys
Url String
- evaluate
Url string - keys
Url string
- evaluate_
url str - keys_
url str
- evaluate
Url String - keys
Url String
AccessGroupRequireGithub
- Identity
Provider stringId - Name string
- Teams List<string>
- Identity
Provider stringId - Name string
- Teams []string
- identity
Provider StringId - name String
- teams List<String>
- identity
Provider stringId - name string
- teams string[]
- identity_
provider_ strid - name str
- teams Sequence[str]
- identity
Provider StringId - name String
- teams List<String>
AccessGroupRequireGsuite
- Emails List<string>
- Identity
Provider stringId
- Emails []string
- Identity
Provider stringId
- emails List<String>
- identity
Provider StringId
- emails string[]
- identity
Provider stringId
- emails Sequence[str]
- identity_
provider_ strid
- emails List<String>
- identity
Provider StringId
AccessGroupRequireOkta
- Identity
Provider stringId - Names List<string>
- Identity
Provider stringId - Names []string
- identity
Provider StringId - names List<String>
- identity
Provider stringId - names string[]
- identity_
provider_ strid - names Sequence[str]
- identity
Provider StringId - names List<String>
AccessGroupRequireSaml
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- Attribute
Name string - Attribute
Value string - Identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
- attribute
Name string - attribute
Value string - identity
Provider stringId
- attribute
Name String - attribute
Value String - identity
Provider StringId
Import
$ pulumi import cloudflare:index/accessGroup:AccessGroup example <account_id>/<group_id>
Package Details
- Repository
- Cloudflare pulumi/pulumi-cloudflare
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
cloudflare
Terraform Provider.