Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Cloudflare Provider
  4. API Docs
  5. EmailSecurityDomain
Viewing docs for Cloudflare v6.22.0
published on Tuesday, Oct 6, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.EmailSecurityDomain

cloudflare logo cloudflare logo
Viewing docs for Cloudflare v6.22.0
published on Tuesday, Oct 6, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Accepted Permissions

    • Cloud Email Security: Read
    • Cloud Email Security: Write

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleEmailSecurityDomain = new cloudflare.EmailSecurityDomain("example_email_security_domain", {
    accountId: "023e105f4ecef8ad9ca31a8372d0c353",
    allowedDeliveryModes: ["DIRECT"],
    domain: "domain",
    dropDispositions: ["MALICIOUS"],
    ipRestrictions: [
        "192.0.2.0/24",
        "2001:db8::/32",
    ],
    regions: ["GLOBAL"],
    folder: "AllItems",
    integrationId: "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
    lookbackHops: 1,
    requireTlsInbound: true,
    requireTlsOutbound: true,
    transport: "transport",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_email_security_domain = cloudflare.EmailSecurityDomain("example_email_security_domain",
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
    allowed_delivery_modes=["DIRECT"],
    domain="domain",
    drop_dispositions=["MALICIOUS"],
    ip_restrictions=[
        "192.0.2.0/24",
        "2001:db8::/32",
    ],
    regions=["GLOBAL"],
    folder="AllItems",
    integration_id="182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
    lookback_hops=1,
    require_tls_inbound=True,
    require_tls_outbound=True,
    transport="transport")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewEmailSecurityDomain(ctx, "example_email_security_domain", &cloudflare.EmailSecurityDomainArgs{
			AccountId: pulumi.String("023e105f4ecef8ad9ca31a8372d0c353"),
			AllowedDeliveryModes: pulumi.StringArray{
				pulumi.String("DIRECT"),
			},
			Domain: pulumi.String("domain"),
			DropDispositions: pulumi.StringArray{
				pulumi.String("MALICIOUS"),
			},
			IpRestrictions: pulumi.StringArray{
				pulumi.String("192.0.2.0/24"),
				pulumi.String("2001:db8::/32"),
			},
			Regions: pulumi.StringArray{
				pulumi.String("GLOBAL"),
			},
			Folder:             pulumi.String("AllItems"),
			IntegrationId:      pulumi.String("182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"),
			LookbackHops:       pulumi.Int(1),
			RequireTlsInbound:  pulumi.Bool(true),
			RequireTlsOutbound: pulumi.Bool(true),
			Transport:          pulumi.String("transport"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleEmailSecurityDomain = new Cloudflare.EmailSecurityDomain("example_email_security_domain", new()
    {
        AccountId = "023e105f4ecef8ad9ca31a8372d0c353",
        AllowedDeliveryModes = new[]
        {
            "DIRECT",
        },
        Domain = "domain",
        DropDispositions = new[]
        {
            "MALICIOUS",
        },
        IpRestrictions = new[]
        {
            "192.0.2.0/24",
            "2001:db8::/32",
        },
        Regions = new[]
        {
            "GLOBAL",
        },
        Folder = "AllItems",
        IntegrationId = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e",
        LookbackHops = 1,
        RequireTlsInbound = true,
        RequireTlsOutbound = true,
        Transport = "transport",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.EmailSecurityDomain;
import com.pulumi.cloudflare.EmailSecurityDomainArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleEmailSecurityDomain = new EmailSecurityDomain("exampleEmailSecurityDomain", EmailSecurityDomainArgs.builder()
            .accountId("023e105f4ecef8ad9ca31a8372d0c353")
            .allowedDeliveryModes("DIRECT")
            .domain("domain")
            .dropDispositions("MALICIOUS")
            .ipRestrictions(            
                "192.0.2.0/24",
                "2001:db8::/32")
            .regions("GLOBAL")
            .folder("AllItems")
            .integrationId("182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e")
            .lookbackHops(1)
            .requireTlsInbound(true)
            .requireTlsOutbound(true)
            .transport("transport")
            .build());

    }
}

    resources:
  exampleEmailSecurityDomain:
    type: cloudflare:EmailSecurityDomain
    name: example_email_security_domain
    properties:
      accountId: 023e105f4ecef8ad9ca31a8372d0c353
      allowedDeliveryModes:
        - DIRECT
      domain: domain
      dropDispositions:
        - MALICIOUS
      ipRestrictions:
        - 192.0.2.0/24
        - 2001:db8::/32
      regions:
        - GLOBAL
      folder: AllItems
      integrationId: 182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e
      lookbackHops: 1
      requireTlsInbound: true
      requireTlsOutbound: true
      transport: transport

    pulumi {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
  }
}

resource "cloudflare_emailsecuritydomain" "example_email_security_domain" {
  account_id             = "023e105f4ecef8ad9ca31a8372d0c353"
  allowed_delivery_modes = ["DIRECT"]
  domain                 = "domain"
  drop_dispositions      = ["MALICIOUS"]
  ip_restrictions        = ["192.0.2.0/24", "2001:db8::/32"]
  regions                = ["GLOBAL"]
  folder                 = "AllItems"
  integration_id         = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
  lookback_hops          = 1
  require_tls_inbound    = true
  require_tls_outbound   = true
  transport              = "transport"
}

    Create EmailSecurityDomain Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new EmailSecurityDomain(name: string, args: EmailSecurityDomainArgs, opts?: CustomResourceOptions);
    @overload
def EmailSecurityDomain(resource_name: str,
                        args: EmailSecurityDomainArgs,
                        opts: Optional[ResourceOptions] = None)

@overload
def EmailSecurityDomain(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        account_id: Optional[str] = None,
                        allowed_delivery_modes: Optional[Sequence[str]] = None,
                        domain: Optional[str] = None,
                        drop_dispositions: Optional[Sequence[str]] = None,
                        ip_restrictions: Optional[Sequence[str]] = None,
                        regions: Optional[Sequence[str]] = None,
                        folder: Optional[str] = None,
                        integration_id: Optional[str] = None,
                        lookback_hops: Optional[int] = None,
                        require_tls_inbound: Optional[bool] = None,
                        require_tls_outbound: Optional[bool] = None,
                        transport: Optional[str] = None)
    func NewEmailSecurityDomain(ctx *Context, name string, args EmailSecurityDomainArgs, opts ...ResourceOption) (*EmailSecurityDomain, error)
    public EmailSecurityDomain(string name, EmailSecurityDomainArgs args, CustomResourceOptions? opts = null)
    public EmailSecurityDomain(String name, EmailSecurityDomainArgs args)
public EmailSecurityDomain(String name, EmailSecurityDomainArgs args, CustomResourceOptions options)

    type: cloudflare:EmailSecurityDomain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "cloudflare_email_security_domain" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args EmailSecurityDomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args EmailSecurityDomainArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args EmailSecurityDomainArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args EmailSecurityDomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args EmailSecurityDomainArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var emailSecurityDomainResource = new Cloudflare.EmailSecurityDomain("emailSecurityDomainResource", new()
{
    AccountId = "string",
    AllowedDeliveryModes = new[]
    {
        "string",
    },
    Domain = "string",
    DropDispositions = new[]
    {
        "string",
    },
    IpRestrictions = new[]
    {
        "string",
    },
    Regions = new[]
    {
        "string",
    },
    Folder = "string",
    IntegrationId = "string",
    LookbackHops = 0,
    RequireTlsInbound = false,
    RequireTlsOutbound = false,
    Transport = "string",
});

    example, err := cloudflare.NewEmailSecurityDomain(ctx, "emailSecurityDomainResource", &cloudflare.EmailSecurityDomainArgs{
	AccountId: pulumi.String("string"),
	AllowedDeliveryModes: pulumi.StringArray{
		pulumi.String("string"),
	},
	Domain: pulumi.String("string"),
	DropDispositions: pulumi.StringArray{
		pulumi.String("string"),
	},
	IpRestrictions: pulumi.StringArray{
		pulumi.String("string"),
	},
	Regions: pulumi.StringArray{
		pulumi.String("string"),
	},
	Folder:             pulumi.String("string"),
	IntegrationId:      pulumi.String("string"),
	LookbackHops:       pulumi.Int(0),
	RequireTlsInbound:  pulumi.Bool(false),
	RequireTlsOutbound: pulumi.Bool(false),
	Transport:          pulumi.String("string"),
})

    resource "cloudflare_email_security_domain" "emailSecurityDomainResource" {
  lifecycle {
    create_before_destroy = true
  }
  account_id             = "string"
  allowed_delivery_modes = ["string"]
  domain                 = "string"
  drop_dispositions      = ["string"]
  ip_restrictions        = ["string"]
  regions                = ["string"]
  folder                 = "string"
  integration_id         = "string"
  lookback_hops          = 0
  require_tls_inbound    = false
  require_tls_outbound   = false
  transport              = "string"
}

    var emailSecurityDomainResource = new EmailSecurityDomain("emailSecurityDomainResource", EmailSecurityDomainArgs.builder()
    .accountId("string")
    .allowedDeliveryModes("string")
    .domain("string")
    .dropDispositions("string")
    .ipRestrictions("string")
    .regions("string")
    .folder("string")
    .integrationId("string")
    .lookbackHops(0)
    .requireTlsInbound(false)
    .requireTlsOutbound(false)
    .transport("string")
    .build());

    email_security_domain_resource = cloudflare.EmailSecurityDomain("emailSecurityDomainResource",
    account_id="string",
    allowed_delivery_modes=["string"],
    domain="string",
    drop_dispositions=["string"],
    ip_restrictions=["string"],
    regions=["string"],
    folder="string",
    integration_id="string",
    lookback_hops=0,
    require_tls_inbound=False,
    require_tls_outbound=False,
    transport="string")

    const emailSecurityDomainResource = new cloudflare.EmailSecurityDomain("emailSecurityDomainResource", {
    accountId: "string",
    allowedDeliveryModes: ["string"],
    domain: "string",
    dropDispositions: ["string"],
    ipRestrictions: ["string"],
    regions: ["string"],
    folder: "string",
    integrationId: "string",
    lookbackHops: 0,
    requireTlsInbound: false,
    requireTlsOutbound: false,
    transport: "string",
});

    type: cloudflare:EmailSecurityDomain
properties:
    accountId: string
    allowedDeliveryModes:
        - string
    domain: string
    dropDispositions:
        - string
    folder: string
    integrationId: string
    ipRestrictions:
        - string
    lookbackHops: 0
    regions:
        - string
    requireTlsInbound: false
    requireTlsOutbound: false
    transport: string

    EmailSecurityDomain Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The EmailSecurityDomain resource accepts the following input properties:

    AccountId string
    Identifier.
    AllowedDeliveryModes List<string>
    Delivery modes to onboard the domain through.
    Domain string
    The email domain to protect.
    DropDispositions List<string>
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    IpRestrictions List<string>
    Source IP ranges mail is accepted from. Any other source is rejected.
    Regions List<string>
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    Folder string
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    IntegrationId string
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    LookbackHops int
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    RequireTlsInbound bool
    Require TLS on inbound connections.
    RequireTlsOutbound bool
    Require TLS on outbound connections.
    Transport string
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    AccountId string
    Identifier.
    AllowedDeliveryModes []string
    Delivery modes to onboard the domain through.
    Domain string
    The email domain to protect.
    DropDispositions []string
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    IpRestrictions []string
    Source IP ranges mail is accepted from. Any other source is rejected.
    Regions []string
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    Folder string
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    IntegrationId string
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    LookbackHops int
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    RequireTlsInbound bool
    Require TLS on inbound connections.
    RequireTlsOutbound bool
    Require TLS on outbound connections.
    Transport string
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    account_id string
    Identifier.
    allowed_delivery_modes list(string)
    Delivery modes to onboard the domain through.
    domain string
    The email domain to protect.
    drop_dispositions list(string)
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    ip_restrictions list(string)
    Source IP ranges mail is accepted from. Any other source is rejected.
    regions list(string)
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    folder string
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    integration_id string
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    lookback_hops number
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    require_tls_inbound bool
    Require TLS on inbound connections.
    require_tls_outbound bool
    Require TLS on outbound connections.
    transport string
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    accountId String
    Identifier.
    allowedDeliveryModes List<String>
    Delivery modes to onboard the domain through.
    domain String
    The email domain to protect.
    dropDispositions List<String>
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    ipRestrictions List<String>
    Source IP ranges mail is accepted from. Any other source is rejected.
    regions List<String>
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    folder String
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    integrationId String
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    lookbackHops Integer
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    requireTlsInbound Boolean
    Require TLS on inbound connections.
    requireTlsOutbound Boolean
    Require TLS on outbound connections.
    transport String
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    accountId string
    Identifier.
    allowedDeliveryModes string[]
    Delivery modes to onboard the domain through.
    domain string
    The email domain to protect.
    dropDispositions string[]
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    ipRestrictions string[]
    Source IP ranges mail is accepted from. Any other source is rejected.
    regions string[]
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    folder string
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    integrationId string
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    lookbackHops number
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    requireTlsInbound boolean
    Require TLS on inbound connections.
    requireTlsOutbound boolean
    Require TLS on outbound connections.
    transport string
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    account_id str
    Identifier.
    allowed_delivery_modes Sequence[str]
    Delivery modes to onboard the domain through.
    domain str
    The email domain to protect.
    drop_dispositions Sequence[str]
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    ip_restrictions Sequence[str]
    Source IP ranges mail is accepted from. Any other source is rejected.
    regions Sequence[str]
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    folder str
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    integration_id str
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    lookback_hops int
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    require_tls_inbound bool
    Require TLS on inbound connections.
    require_tls_outbound bool
    Require TLS on outbound connections.
    transport str
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    accountId String
    Identifier.
    allowedDeliveryModes List<String>
    Delivery modes to onboard the domain through.
    domain String
    The email domain to protect.
    dropDispositions List<String>
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    ipRestrictions List<String>
    Source IP ranges mail is accepted from. Any other source is rejected.
    regions List<String>
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    folder String
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    integrationId String
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    lookbackHops Number
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    requireTlsInbound Boolean
    Require TLS on inbound connections.
    requireTlsOutbound Boolean
    Require TLS on outbound connections.
    transport String
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).

    Outputs

    All input properties are implicitly available as output properties. Additionally, the EmailSecurityDomain resource produces the following output properties:

    Authorization EmailSecurityDomainAuthorization
    CreatedAt string
    DmarcStatus string
    Available values: "none", "good", "invalid".
    EmailsProcessed EmailSecurityDomainEmailsProcessed
    Id string
    The provider-assigned unique ID for this managed resource.
    InboxProvider string
    Available values: "Microsoft", "Google".
    LastModified string
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    ModifiedAt string
    O365TenantId string
    SpfStatus string
    Available values: "none", "good", "neutral", "open", "invalid".
    Status string
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    Authorization EmailSecurityDomainAuthorization
    CreatedAt string
    DmarcStatus string
    Available values: "none", "good", "invalid".
    EmailsProcessed EmailSecurityDomainEmailsProcessed
    Id string
    The provider-assigned unique ID for this managed resource.
    InboxProvider string
    Available values: "Microsoft", "Google".
    LastModified string
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    ModifiedAt string
    O365TenantId string
    SpfStatus string
    Available values: "none", "good", "neutral", "open", "invalid".
    Status string
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    authorization object
    created_at string
    dmarc_status string
    Available values: "none", "good", "invalid".
    emails_processed object
    id string
    The provider-assigned unique ID for this managed resource.
    inbox_provider string
    Available values: "Microsoft", "Google".
    last_modified string
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    modified_at string
    o365_tenant_id string
    spf_status string
    Available values: "none", "good", "neutral", "open", "invalid".
    status string
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    authorization EmailSecurityDomainAuthorization
    createdAt String
    dmarcStatus String
    Available values: "none", "good", "invalid".
    emailsProcessed EmailSecurityDomainEmailsProcessed
    id String
    The provider-assigned unique ID for this managed resource.
    inboxProvider String
    Available values: "Microsoft", "Google".
    lastModified String
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    modifiedAt String
    o365TenantId String
    spfStatus String
    Available values: "none", "good", "neutral", "open", "invalid".
    status String
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    authorization EmailSecurityDomainAuthorization
    createdAt string
    dmarcStatus string
    Available values: "none", "good", "invalid".
    emailsProcessed EmailSecurityDomainEmailsProcessed
    id string
    The provider-assigned unique ID for this managed resource.
    inboxProvider string
    Available values: "Microsoft", "Google".
    lastModified string
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    modifiedAt string
    o365TenantId string
    spfStatus string
    Available values: "none", "good", "neutral", "open", "invalid".
    status string
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    authorization EmailSecurityDomainAuthorization
    created_at str
    dmarc_status str
    Available values: "none", "good", "invalid".
    emails_processed EmailSecurityDomainEmailsProcessed
    id str
    The provider-assigned unique ID for this managed resource.
    inbox_provider str
    Available values: "Microsoft", "Google".
    last_modified str
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    modified_at str
    o365_tenant_id str
    spf_status str
    Available values: "none", "good", "neutral", "open", "invalid".
    status str
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    authorization Property Map
    createdAt String
    dmarcStatus String
    Available values: "none", "good", "invalid".
    emailsProcessed Property Map
    id String
    The provider-assigned unique ID for this managed resource.
    inboxProvider String
    Available values: "Microsoft", "Google".
    lastModified String
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    modifiedAt String
    o365TenantId String
    spfStatus String
    Available values: "none", "good", "neutral", "open", "invalid".
    status String
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".

    Look up Existing EmailSecurityDomain Resource

    Get an existing EmailSecurityDomain resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: EmailSecurityDomainState, opts?: CustomResourceOptions): EmailSecurityDomain
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        allowed_delivery_modes: Optional[Sequence[str]] = None,
        authorization: Optional[EmailSecurityDomainAuthorizationArgs] = None,
        created_at: Optional[str] = None,
        dmarc_status: Optional[str] = None,
        domain: Optional[str] = None,
        drop_dispositions: Optional[Sequence[str]] = None,
        emails_processed: Optional[EmailSecurityDomainEmailsProcessedArgs] = None,
        folder: Optional[str] = None,
        inbox_provider: Optional[str] = None,
        integration_id: Optional[str] = None,
        ip_restrictions: Optional[Sequence[str]] = None,
        last_modified: Optional[str] = None,
        lookback_hops: Optional[int] = None,
        modified_at: Optional[str] = None,
        o365_tenant_id: Optional[str] = None,
        regions: Optional[Sequence[str]] = None,
        require_tls_inbound: Optional[bool] = None,
        require_tls_outbound: Optional[bool] = None,
        spf_status: Optional[str] = None,
        status: Optional[str] = None,
        transport: Optional[str] = None) -> EmailSecurityDomain
    func GetEmailSecurityDomain(ctx *Context, name string, id IDInput, state *EmailSecurityDomainState, opts ...ResourceOption) (*EmailSecurityDomain, error)
    public static EmailSecurityDomain Get(string name, Input<string> id, EmailSecurityDomainState? state, CustomResourceOptions? opts = null)
    public static EmailSecurityDomain get(String name, Output<String> id, EmailSecurityDomainState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:EmailSecurityDomain    get:      id: ${id}
    import {
  to = cloudflare_email_security_domain.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    Identifier.
    AllowedDeliveryModes List<string>
    Delivery modes to onboard the domain through.
    Authorization EmailSecurityDomainAuthorization
    CreatedAt string
    DmarcStatus string
    Available values: "none", "good", "invalid".
    Domain string
    The email domain to protect.
    DropDispositions List<string>
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    EmailsProcessed EmailSecurityDomainEmailsProcessed
    Folder string
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    InboxProvider string
    Available values: "Microsoft", "Google".
    IntegrationId string
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    IpRestrictions List<string>
    Source IP ranges mail is accepted from. Any other source is rejected.
    LastModified string
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    LookbackHops int
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    ModifiedAt string
    O365TenantId string
    Regions List<string>
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    RequireTlsInbound bool
    Require TLS on inbound connections.
    RequireTlsOutbound bool
    Require TLS on outbound connections.
    SpfStatus string
    Available values: "none", "good", "neutral", "open", "invalid".
    Status string
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    Transport string
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    AccountId string
    Identifier.
    AllowedDeliveryModes []string
    Delivery modes to onboard the domain through.
    Authorization EmailSecurityDomainAuthorizationArgs
    CreatedAt string
    DmarcStatus string
    Available values: "none", "good", "invalid".
    Domain string
    The email domain to protect.
    DropDispositions []string
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    EmailsProcessed EmailSecurityDomainEmailsProcessedArgs
    Folder string
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    InboxProvider string
    Available values: "Microsoft", "Google".
    IntegrationId string
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    IpRestrictions []string
    Source IP ranges mail is accepted from. Any other source is rejected.
    LastModified string
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    LookbackHops int
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    ModifiedAt string
    O365TenantId string
    Regions []string
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    RequireTlsInbound bool
    Require TLS on inbound connections.
    RequireTlsOutbound bool
    Require TLS on outbound connections.
    SpfStatus string
    Available values: "none", "good", "neutral", "open", "invalid".
    Status string
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    Transport string
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    account_id string
    Identifier.
    allowed_delivery_modes list(string)
    Delivery modes to onboard the domain through.
    authorization object
    created_at string
    dmarc_status string
    Available values: "none", "good", "invalid".
    domain string
    The email domain to protect.
    drop_dispositions list(string)
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    emails_processed object
    folder string
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    inbox_provider string
    Available values: "Microsoft", "Google".
    integration_id string
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    ip_restrictions list(string)
    Source IP ranges mail is accepted from. Any other source is rejected.
    last_modified string
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    lookback_hops number
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    modified_at string
    o365_tenant_id string
    regions list(string)
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    require_tls_inbound bool
    Require TLS on inbound connections.
    require_tls_outbound bool
    Require TLS on outbound connections.
    spf_status string
    Available values: "none", "good", "neutral", "open", "invalid".
    status string
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    transport string
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    accountId String
    Identifier.
    allowedDeliveryModes List<String>
    Delivery modes to onboard the domain through.
    authorization EmailSecurityDomainAuthorization
    createdAt String
    dmarcStatus String
    Available values: "none", "good", "invalid".
    domain String
    The email domain to protect.
    dropDispositions List<String>
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    emailsProcessed EmailSecurityDomainEmailsProcessed
    folder String
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    inboxProvider String
    Available values: "Microsoft", "Google".
    integrationId String
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    ipRestrictions List<String>
    Source IP ranges mail is accepted from. Any other source is rejected.
    lastModified String
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    lookbackHops Integer
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    modifiedAt String
    o365TenantId String
    regions List<String>
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    requireTlsInbound Boolean
    Require TLS on inbound connections.
    requireTlsOutbound Boolean
    Require TLS on outbound connections.
    spfStatus String
    Available values: "none", "good", "neutral", "open", "invalid".
    status String
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    transport String
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    accountId string
    Identifier.
    allowedDeliveryModes string[]
    Delivery modes to onboard the domain through.
    authorization EmailSecurityDomainAuthorization
    createdAt string
    dmarcStatus string
    Available values: "none", "good", "invalid".
    domain string
    The email domain to protect.
    dropDispositions string[]
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    emailsProcessed EmailSecurityDomainEmailsProcessed
    folder string
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    inboxProvider string
    Available values: "Microsoft", "Google".
    integrationId string
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    ipRestrictions string[]
    Source IP ranges mail is accepted from. Any other source is rejected.
    lastModified string
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    lookbackHops number
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    modifiedAt string
    o365TenantId string
    regions string[]
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    requireTlsInbound boolean
    Require TLS on inbound connections.
    requireTlsOutbound boolean
    Require TLS on outbound connections.
    spfStatus string
    Available values: "none", "good", "neutral", "open", "invalid".
    status string
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    transport string
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    account_id str
    Identifier.
    allowed_delivery_modes Sequence[str]
    Delivery modes to onboard the domain through.
    authorization EmailSecurityDomainAuthorizationArgs
    created_at str
    dmarc_status str
    Available values: "none", "good", "invalid".
    domain str
    The email domain to protect.
    drop_dispositions Sequence[str]
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    emails_processed EmailSecurityDomainEmailsProcessedArgs
    folder str
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    inbox_provider str
    Available values: "Microsoft", "Google".
    integration_id str
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    ip_restrictions Sequence[str]
    Source IP ranges mail is accepted from. Any other source is rejected.
    last_modified str
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    lookback_hops int
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    modified_at str
    o365_tenant_id str
    regions Sequence[str]
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    require_tls_inbound bool
    Require TLS on inbound connections.
    require_tls_outbound bool
    Require TLS on outbound connections.
    spf_status str
    Available values: "none", "good", "neutral", "open", "invalid".
    status str
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    transport str
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).
    accountId String
    Identifier.
    allowedDeliveryModes List<String>
    Delivery modes to onboard the domain through.
    authorization Property Map
    createdAt String
    dmarcStatus String
    Available values: "none", "good", "invalid".
    domain String
    The email domain to protect.
    dropDispositions List<String>
    Dispositions to drop instead of delivering, e.g. ["MALICIOUS", "SPAM"].
    emailsProcessed Property Map
    folder String
    The mailbox folder to scan, for API-scanning domains. Available values: "AllItems", "Inbox".
    inboxProvider String
    Available values: "Microsoft", "Google".
    integrationId String
    Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
    ipRestrictions List<String>
    Source IP ranges mail is accepted from. Any other source is rejected.
    lastModified String
    Deprecated, use modifiedAt instead. End of life: November 1, 2026.

    Deprecated: Use modifiedAt instead.

    lookbackHops Number
    Number of hops to trace back through received headers when reconstructing the original message (1-20).
    modifiedAt String
    o365TenantId String
    regions List<String>
    Regions that process messages for this domain, e.g. ["GLOBAL"] or ["US"].
    requireTlsInbound Boolean
    Require TLS on inbound connections.
    requireTlsOutbound Boolean
    Require TLS on outbound connections.
    spfStatus String
    Available values: "none", "good", "neutral", "open", "invalid".
    status String
    Available values: "PENDING", "ACTIVE", "FAILED", "TIMEOUT".
    transport String
    The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. mx.example.com).

    Supporting Types

    EmailSecurityDomainAuthorization, EmailSecurityDomainAuthorizationArgs

    authorized Boolean
    statusMessage String
    timestamp String
    authorized boolean
    statusMessage string
    timestamp string
    authorized Boolean
    statusMessage String
    timestamp String

    EmailSecurityDomainEmailsProcessed, EmailSecurityDomainEmailsProcessedArgs

    Import

    $ pulumi import cloudflare:index/emailSecurityDomain:EmailSecurityDomain example '<account_id>/<domain_id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo cloudflare logo
    Viewing docs for Cloudflare v6.22.0
    published on Tuesday, Oct 6, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial