Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Cloudflare Provider
  4. API Docs
  5. getZeroTrustCasbPolicy
Viewing docs for Cloudflare v6.23.1
published on Wednesday, Oct 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.getZeroTrustCasbPolicy

cloudflare logo cloudflare logo
Viewing docs for Cloudflare v6.23.1
published on Wednesday, Oct 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Accepted Permissions

    • Zero Trust Read
    • Zero Trust Write

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustCasbPolicy = cloudflare.getZeroTrustCasbPolicy({
    accountId: "46148281d8a93d002ef242d8b0d5f9f6",
    policyId: "497f6eca-6276-4993-bfeb-53cbbbba6f08",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_casb_policy = cloudflare.get_zero_trust_casb_policy(account_id="46148281d8a93d002ef242d8b0d5f9f6",
    policy_id="497f6eca-6276-4993-bfeb-53cbbbba6f08")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.GetZeroTrustCasbPolicy(ctx, &cloudflare.LookupZeroTrustCasbPolicyArgs{
			AccountId: "46148281d8a93d002ef242d8b0d5f9f6",
			PolicyId:  "497f6eca-6276-4993-bfeb-53cbbbba6f08",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustCasbPolicy = Cloudflare.GetZeroTrustCasbPolicy.Invoke(new()
    {
        AccountId = "46148281d8a93d002ef242d8b0d5f9f6",
        PolicyId = "497f6eca-6276-4993-bfeb-53cbbbba6f08",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetZeroTrustCasbPolicyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleZeroTrustCasbPolicy = CloudflareFunctions.getZeroTrustCasbPolicy(GetZeroTrustCasbPolicyArgs.builder()
            .accountId("46148281d8a93d002ef242d8b0d5f9f6")
            .policyId("497f6eca-6276-4993-bfeb-53cbbbba6f08")
            .build());

    }
}

    variables:
  exampleZeroTrustCasbPolicy:
    fn::invoke:
      function: cloudflare:getZeroTrustCasbPolicy
      arguments:
        accountId: 46148281d8a93d002ef242d8b0d5f9f6
        policyId: 497f6eca-6276-4993-bfeb-53cbbbba6f08

    terraform {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
  }
}

data "cloudflare_zero_trust_casb_policy" "exampleZeroTrustCasbPolicy" {
  account_id = "46148281d8a93d002ef242d8b0d5f9f6"
  policy_id  = "497f6eca-6276-4993-bfeb-53cbbbba6f08"
}

    Using getZeroTrustCasbPolicy

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getZeroTrustCasbPolicy(args: GetZeroTrustCasbPolicyArgs, opts?: InvokeOptions): Promise<GetZeroTrustCasbPolicyResult>
function getZeroTrustCasbPolicyOutput(args: GetZeroTrustCasbPolicyOutputArgs, opts?: InvokeOutputOptions): Output<GetZeroTrustCasbPolicyResult>
    def get_zero_trust_casb_policy(account_id: Optional[str] = None,
                               policy_id: Optional[str] = None,
                               opts: Optional[InvokeOptions] = None) -> GetZeroTrustCasbPolicyResult
def get_zero_trust_casb_policy_output(account_id: pulumi.Input[Optional[str]] = None,
                               policy_id: pulumi.Input[Optional[str]] = None,
                               opts: Optional[InvokeOutputOptions] = None) -> Output[GetZeroTrustCasbPolicyResult]
    func LookupZeroTrustCasbPolicy(ctx *Context, args *LookupZeroTrustCasbPolicyArgs, opts ...InvokeOption) (*LookupZeroTrustCasbPolicyResult, error)
func LookupZeroTrustCasbPolicyOutput(ctx *Context, args *LookupZeroTrustCasbPolicyOutputArgs, opts ...InvokeOption) LookupZeroTrustCasbPolicyResultOutput

    > Note: This function is named LookupZeroTrustCasbPolicy in the Go SDK.

    public static class GetZeroTrustCasbPolicy 
{
    public static Task<GetZeroTrustCasbPolicyResult> InvokeAsync(GetZeroTrustCasbPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustCasbPolicyResult> Invoke(GetZeroTrustCasbPolicyInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustCasbPolicyResult> Invoke(GetZeroTrustCasbPolicyInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetZeroTrustCasbPolicyResult> getZeroTrustCasbPolicy(GetZeroTrustCasbPolicyArgs args, InvokeOptions options)
public static Output<GetZeroTrustCasbPolicyResult> getZeroTrustCasbPolicy(GetZeroTrustCasbPolicyArgs args, InvokeOptions options)
public static Output<GetZeroTrustCasbPolicyResult> getZeroTrustCasbPolicy(GetZeroTrustCasbPolicyArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: cloudflare:index/getZeroTrustCasbPolicy:getZeroTrustCasbPolicy
  arguments:
    # arguments dictionary
    data "cloudflare_get_zero_trust_casb_policy" "name" {
    # arguments
}

    The following arguments are supported:

    AccountId string
    PolicyId string
    AccountId string
    PolicyId string
    account_id string
    policy_id string
    accountId String
    policyId String
    accountId string
    policyId string
    accountId String
    policyId String

    getZeroTrustCasbPolicy Result

    The following output properties are available:

    AccountId string
    Actions GetZeroTrustCasbPolicyActions
    The actions configured for this policy.
    AppliesToAllIntegrations bool
    When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration_ids.
    CreatedAt string
    Timestamp when the policy was created.
    Description string
    User-set description of what this policy does. Limited to 1000 characters.
    DisabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    DisplayName string
    Display name for the policy configuration. Limited to 255 characters.
    Enabled bool
    Whether the policy is enabled. Derived from disabledat (enabled when disabledat is unset).
    FindingTypeId string
    The finding type this policy is associated with. Immutable after creation; attempts to change it via update are rejected.
    Id string
    The ID of this resource.
    IntegrationIds List<string>
    The integrations this policy applies to.
    LastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    PolicyId string
    UpdatedAt string
    Timestamp when the policy was last updated.
    AccountId string
    Actions GetZeroTrustCasbPolicyActions
    The actions configured for this policy.
    AppliesToAllIntegrations bool
    When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration_ids.
    CreatedAt string
    Timestamp when the policy was created.
    Description string
    User-set description of what this policy does. Limited to 1000 characters.
    DisabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    DisplayName string
    Display name for the policy configuration. Limited to 255 characters.
    Enabled bool
    Whether the policy is enabled. Derived from disabledat (enabled when disabledat is unset).
    FindingTypeId string
    The finding type this policy is associated with. Immutable after creation; attempts to change it via update are rejected.
    Id string
    The ID of this resource.
    IntegrationIds []string
    The integrations this policy applies to.
    LastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    PolicyId string
    UpdatedAt string
    Timestamp when the policy was last updated.
    account_id string
    actions object
    The actions configured for this policy.
    applies_to_all_integrations bool
    When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration_ids.
    created_at string
    Timestamp when the policy was created.
    description string
    User-set description of what this policy does. Limited to 1000 characters.
    disabled_at string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    display_name string
    Display name for the policy configuration. Limited to 255 characters.
    enabled bool
    Whether the policy is enabled. Derived from disabledat (enabled when disabledat is unset).
    finding_type_id string
    The finding type this policy is associated with. Immutable after creation; attempts to change it via update are rejected.
    id string
    The ID of this resource.
    integration_ids list(string)
    The integrations this policy applies to.
    last_triggered_at string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    policy_id string
    updated_at string
    Timestamp when the policy was last updated.
    accountId String
    actions GetZeroTrustCasbPolicyActions
    The actions configured for this policy.
    appliesToAllIntegrations Boolean
    When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration_ids.
    createdAt String
    Timestamp when the policy was created.
    description String
    User-set description of what this policy does. Limited to 1000 characters.
    disabledAt String
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    displayName String
    Display name for the policy configuration. Limited to 255 characters.
    enabled Boolean
    Whether the policy is enabled. Derived from disabledat (enabled when disabledat is unset).
    findingTypeId String
    The finding type this policy is associated with. Immutable after creation; attempts to change it via update are rejected.
    id String
    The ID of this resource.
    integrationIds List<String>
    The integrations this policy applies to.
    lastTriggeredAt String
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    policyId String
    updatedAt String
    Timestamp when the policy was last updated.
    accountId string
    actions GetZeroTrustCasbPolicyActions
    The actions configured for this policy.
    appliesToAllIntegrations boolean
    When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration_ids.
    createdAt string
    Timestamp when the policy was created.
    description string
    User-set description of what this policy does. Limited to 1000 characters.
    disabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    displayName string
    Display name for the policy configuration. Limited to 255 characters.
    enabled boolean
    Whether the policy is enabled. Derived from disabledat (enabled when disabledat is unset).
    findingTypeId string
    The finding type this policy is associated with. Immutable after creation; attempts to change it via update are rejected.
    id string
    The ID of this resource.
    integrationIds string[]
    The integrations this policy applies to.
    lastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    policyId string
    updatedAt string
    Timestamp when the policy was last updated.
    account_id str
    actions GetZeroTrustCasbPolicyActions
    The actions configured for this policy.
    applies_to_all_integrations bool
    When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration_ids.
    created_at str
    Timestamp when the policy was created.
    description str
    User-set description of what this policy does. Limited to 1000 characters.
    disabled_at str
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    display_name str
    Display name for the policy configuration. Limited to 255 characters.
    enabled bool
    Whether the policy is enabled. Derived from disabledat (enabled when disabledat is unset).
    finding_type_id str
    The finding type this policy is associated with. Immutable after creation; attempts to change it via update are rejected.
    id str
    The ID of this resource.
    integration_ids Sequence[str]
    The integrations this policy applies to.
    last_triggered_at str
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    policy_id str
    updated_at str
    Timestamp when the policy was last updated.
    accountId String
    actions Property Map
    The actions configured for this policy.
    appliesToAllIntegrations Boolean
    When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration_ids.
    createdAt String
    Timestamp when the policy was created.
    description String
    User-set description of what this policy does. Limited to 1000 characters.
    disabledAt String
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    displayName String
    Display name for the policy configuration. Limited to 255 characters.
    enabled Boolean
    Whether the policy is enabled. Derived from disabledat (enabled when disabledat is unset).
    findingTypeId String
    The finding type this policy is associated with. Immutable after creation; attempts to change it via update are rejected.
    id String
    The ID of this resource.
    integrationIds List<String>
    The integrations this policy applies to.
    lastTriggeredAt String
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    policyId String
    updatedAt String
    Timestamp when the policy was last updated.

    Supporting Types

    GetZeroTrustCasbPolicyActions

    RemediationTypes List<GetZeroTrustCasbPolicyActionsRemediationType>
    List of remediation types that will be executed.
    WebhookConfigs List<GetZeroTrustCasbPolicyActionsWebhookConfig>
    List of webhook configurations that will be triggered.
    RemediationTypes []GetZeroTrustCasbPolicyActionsRemediationType
    List of remediation types that will be executed.
    WebhookConfigs []GetZeroTrustCasbPolicyActionsWebhookConfig
    List of webhook configurations that will be triggered.
    remediation_types list(object)
    List of remediation types that will be executed.
    webhook_configs list(object)
    List of webhook configurations that will be triggered.
    remediationTypes List<GetZeroTrustCasbPolicyActionsRemediationType>
    List of remediation types that will be executed.
    webhookConfigs List<GetZeroTrustCasbPolicyActionsWebhookConfig>
    List of webhook configurations that will be triggered.
    remediationTypes GetZeroTrustCasbPolicyActionsRemediationType[]
    List of remediation types that will be executed.
    webhookConfigs GetZeroTrustCasbPolicyActionsWebhookConfig[]
    List of webhook configurations that will be triggered.
    remediation_types Sequence[GetZeroTrustCasbPolicyActionsRemediationType]
    List of remediation types that will be executed.
    webhook_configs Sequence[GetZeroTrustCasbPolicyActionsWebhookConfig]
    List of webhook configurations that will be triggered.
    remediationTypes List<Property Map>
    List of remediation types that will be executed.
    webhookConfigs List<Property Map>
    List of webhook configurations that will be triggered.

    GetZeroTrustCasbPolicyActionsRemediationType

    DisplayName string
    Display name/label of the remediation type.
    RemediationType string
    The system name of the remediation type.
    RemediationTypeId string
    Unique identifier for the remediation type.
    DisplayName string
    Display name/label of the remediation type.
    RemediationType string
    The system name of the remediation type.
    RemediationTypeId string
    Unique identifier for the remediation type.
    display_name string
    Display name/label of the remediation type.
    remediation_type string
    The system name of the remediation type.
    remediation_type_id string
    Unique identifier for the remediation type.
    displayName String
    Display name/label of the remediation type.
    remediationType String
    The system name of the remediation type.
    remediationTypeId String
    Unique identifier for the remediation type.
    displayName string
    Display name/label of the remediation type.
    remediationType string
    The system name of the remediation type.
    remediationTypeId string
    Unique identifier for the remediation type.
    display_name str
    Display name/label of the remediation type.
    remediation_type str
    The system name of the remediation type.
    remediation_type_id str
    Unique identifier for the remediation type.
    displayName String
    Display name/label of the remediation type.
    remediationType String
    The system name of the remediation type.
    remediationTypeId String
    Unique identifier for the remediation type.

    GetZeroTrustCasbPolicyActionsWebhookConfig

    DisplayName string
    Display name/label of the webhook configuration.
    WebhookConfigId string
    Unique identifier for the webhook configuration.
    DisplayName string
    Display name/label of the webhook configuration.
    WebhookConfigId string
    Unique identifier for the webhook configuration.
    display_name string
    Display name/label of the webhook configuration.
    webhook_config_id string
    Unique identifier for the webhook configuration.
    displayName String
    Display name/label of the webhook configuration.
    webhookConfigId String
    Unique identifier for the webhook configuration.
    displayName string
    Display name/label of the webhook configuration.
    webhookConfigId string
    Unique identifier for the webhook configuration.
    display_name str
    Display name/label of the webhook configuration.
    webhook_config_id str
    Unique identifier for the webhook configuration.
    displayName String
    Display name/label of the webhook configuration.
    webhookConfigId String
    Unique identifier for the webhook configuration.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo cloudflare logo
    Viewing docs for Cloudflare v6.23.1
    published on Wednesday, Oct 21, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial