1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. getZeroTrustDeviceDefaultProfile
Viewing docs for Cloudflare v6.13.0
published on Wednesday, Jan 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.getZeroTrustDeviceDefaultProfile

cloudflare logo
Viewing docs for Cloudflare v6.13.0
published on Wednesday, Jan 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustDeviceDefaultProfile = cloudflare.getZeroTrustDeviceDefaultProfile({
    accountId: "699d98642c564d2e855e9661899b7252",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_device_default_profile = cloudflare.get_zero_trust_device_default_profile(account_id="699d98642c564d2e855e9661899b7252")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.LookupZeroTrustDeviceDefaultProfile(ctx, &cloudflare.LookupZeroTrustDeviceDefaultProfileArgs{
			AccountId: "699d98642c564d2e855e9661899b7252",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustDeviceDefaultProfile = Cloudflare.GetZeroTrustDeviceDefaultProfile.Invoke(new()
    {
        AccountId = "699d98642c564d2e855e9661899b7252",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetZeroTrustDeviceDefaultProfileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleZeroTrustDeviceDefaultProfile = CloudflareFunctions.getZeroTrustDeviceDefaultProfile(GetZeroTrustDeviceDefaultProfileArgs.builder()
            .accountId("699d98642c564d2e855e9661899b7252")
            .build());

    }
}

    variables:
  exampleZeroTrustDeviceDefaultProfile:
    fn::invoke:
      function: cloudflare:getZeroTrustDeviceDefaultProfile
      arguments:
        accountId: 699d98642c564d2e855e9661899b7252

    Using getZeroTrustDeviceDefaultProfile

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getZeroTrustDeviceDefaultProfile(args: GetZeroTrustDeviceDefaultProfileArgs, opts?: InvokeOptions): Promise<GetZeroTrustDeviceDefaultProfileResult>
function getZeroTrustDeviceDefaultProfileOutput(args: GetZeroTrustDeviceDefaultProfileOutputArgs, opts?: InvokeOptions): Output<GetZeroTrustDeviceDefaultProfileResult>
    def get_zero_trust_device_default_profile(account_id: Optional[str] = None,
                                          opts: Optional[InvokeOptions] = None) -> GetZeroTrustDeviceDefaultProfileResult
def get_zero_trust_device_default_profile_output(account_id: Optional[pulumi.Input[str]] = None,
                                          opts: Optional[InvokeOptions] = None) -> Output[GetZeroTrustDeviceDefaultProfileResult]
    func LookupZeroTrustDeviceDefaultProfile(ctx *Context, args *LookupZeroTrustDeviceDefaultProfileArgs, opts ...InvokeOption) (*LookupZeroTrustDeviceDefaultProfileResult, error)
func LookupZeroTrustDeviceDefaultProfileOutput(ctx *Context, args *LookupZeroTrustDeviceDefaultProfileOutputArgs, opts ...InvokeOption) LookupZeroTrustDeviceDefaultProfileResultOutput

    > Note: This function is named LookupZeroTrustDeviceDefaultProfile in the Go SDK.

    public static class GetZeroTrustDeviceDefaultProfile 
{
    public static Task<GetZeroTrustDeviceDefaultProfileResult> InvokeAsync(GetZeroTrustDeviceDefaultProfileArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustDeviceDefaultProfileResult> Invoke(GetZeroTrustDeviceDefaultProfileInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetZeroTrustDeviceDefaultProfileResult> getZeroTrustDeviceDefaultProfile(GetZeroTrustDeviceDefaultProfileArgs args, InvokeOptions options)
public static Output<GetZeroTrustDeviceDefaultProfileResult> getZeroTrustDeviceDefaultProfile(GetZeroTrustDeviceDefaultProfileArgs args, InvokeOptions options)

    fn::invoke:
  function: cloudflare:index/getZeroTrustDeviceDefaultProfile:getZeroTrustDeviceDefaultProfile
  arguments:
    # arguments dictionary

    The following arguments are supported:

    AccountId string
    AccountId string
    accountId String
    accountId string
    accountId String

    getZeroTrustDeviceDefaultProfile Result

    The following output properties are available:

    AccountId string
    AllowModeSwitch bool
    Whether to allow the user to switch WARP between modes.
    AllowUpdates bool
    Whether to receive update notifications when a new version of the client is available.
    AllowedToLeave bool
    Whether to allow devices to leave the organization.
    AutoConnect double
    The amount of time in seconds to reconnect after having been disabled.
    CaptivePortal double
    Turn on the captive portal after the specified amount of time.
    Default bool
    Whether the policy will be applied to matching devices.
    DisableAutoFallback bool
    If the dns_server field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to true.
    Enabled bool
    Whether the policy will be applied to matching devices.
    ExcludeOfficeIps bool
    Whether to add Microsoft IPs to Split Tunnel exclusions.
    Excludes List<GetZeroTrustDeviceDefaultProfileExclude>
    List of routes excluded in the WARP client's tunnel.
    FallbackDomains List<GetZeroTrustDeviceDefaultProfileFallbackDomain>
    GatewayUniqueId string
    Id string
    The ID of this resource.
    Includes List<GetZeroTrustDeviceDefaultProfileInclude>
    List of routes included in the WARP client's tunnel.
    RegisterInterfaceIpWithDns bool
    Determines if the operating system will register WARP's local interface IP with your on-premises DNS server.
    SccmVpnBoundarySupport bool
    Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only).
    ServiceModeV2 GetZeroTrustDeviceDefaultProfileServiceModeV2
    SupportUrl string
    The URL to launch when the Send Feedback button is clicked.
    SwitchLocked bool
    Whether to allow the user to turn off the WARP switch and disconnect the client.
    TunnelProtocol string
    Determines which tunnel protocol to use.
    AccountId string
    AllowModeSwitch bool
    Whether to allow the user to switch WARP between modes.
    AllowUpdates bool
    Whether to receive update notifications when a new version of the client is available.
    AllowedToLeave bool
    Whether to allow devices to leave the organization.
    AutoConnect float64
    The amount of time in seconds to reconnect after having been disabled.
    CaptivePortal float64
    Turn on the captive portal after the specified amount of time.
    Default bool
    Whether the policy will be applied to matching devices.
    DisableAutoFallback bool
    If the dns_server field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to true.
    Enabled bool
    Whether the policy will be applied to matching devices.
    ExcludeOfficeIps bool
    Whether to add Microsoft IPs to Split Tunnel exclusions.
    Excludes []GetZeroTrustDeviceDefaultProfileExclude
    List of routes excluded in the WARP client's tunnel.
    FallbackDomains []GetZeroTrustDeviceDefaultProfileFallbackDomain
    GatewayUniqueId string
    Id string
    The ID of this resource.
    Includes []GetZeroTrustDeviceDefaultProfileInclude
    List of routes included in the WARP client's tunnel.
    RegisterInterfaceIpWithDns bool
    Determines if the operating system will register WARP's local interface IP with your on-premises DNS server.
    SccmVpnBoundarySupport bool
    Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only).
    ServiceModeV2 GetZeroTrustDeviceDefaultProfileServiceModeV2
    SupportUrl string
    The URL to launch when the Send Feedback button is clicked.
    SwitchLocked bool
    Whether to allow the user to turn off the WARP switch and disconnect the client.
    TunnelProtocol string
    Determines which tunnel protocol to use.
    accountId String
    allowModeSwitch Boolean
    Whether to allow the user to switch WARP between modes.
    allowUpdates Boolean
    Whether to receive update notifications when a new version of the client is available.
    allowedToLeave Boolean
    Whether to allow devices to leave the organization.
    autoConnect Double
    The amount of time in seconds to reconnect after having been disabled.
    captivePortal Double
    Turn on the captive portal after the specified amount of time.
    default_ Boolean
    Whether the policy will be applied to matching devices.
    disableAutoFallback Boolean
    If the dns_server field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to true.
    enabled Boolean
    Whether the policy will be applied to matching devices.
    excludeOfficeIps Boolean
    Whether to add Microsoft IPs to Split Tunnel exclusions.
    excludes List<GetZeroTrustDeviceDefaultProfileExclude>
    List of routes excluded in the WARP client's tunnel.
    fallbackDomains List<GetZeroTrustDeviceDefaultProfileFallbackDomain>
    gatewayUniqueId String
    id String
    The ID of this resource.
    includes List<GetZeroTrustDeviceDefaultProfileInclude>
    List of routes included in the WARP client's tunnel.
    registerInterfaceIpWithDns Boolean
    Determines if the operating system will register WARP's local interface IP with your on-premises DNS server.
    sccmVpnBoundarySupport Boolean
    Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only).
    serviceModeV2 GetZeroTrustDeviceDefaultProfileServiceModeV2
    supportUrl String
    The URL to launch when the Send Feedback button is clicked.
    switchLocked Boolean
    Whether to allow the user to turn off the WARP switch and disconnect the client.
    tunnelProtocol String
    Determines which tunnel protocol to use.
    accountId string
    allowModeSwitch boolean
    Whether to allow the user to switch WARP between modes.
    allowUpdates boolean
    Whether to receive update notifications when a new version of the client is available.
    allowedToLeave boolean
    Whether to allow devices to leave the organization.
    autoConnect number
    The amount of time in seconds to reconnect after having been disabled.
    captivePortal number
    Turn on the captive portal after the specified amount of time.
    default boolean
    Whether the policy will be applied to matching devices.
    disableAutoFallback boolean
    If the dns_server field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to true.
    enabled boolean
    Whether the policy will be applied to matching devices.
    excludeOfficeIps boolean
    Whether to add Microsoft IPs to Split Tunnel exclusions.
    excludes GetZeroTrustDeviceDefaultProfileExclude[]
    List of routes excluded in the WARP client's tunnel.
    fallbackDomains GetZeroTrustDeviceDefaultProfileFallbackDomain[]
    gatewayUniqueId string
    id string
    The ID of this resource.
    includes GetZeroTrustDeviceDefaultProfileInclude[]
    List of routes included in the WARP client's tunnel.
    registerInterfaceIpWithDns boolean
    Determines if the operating system will register WARP's local interface IP with your on-premises DNS server.
    sccmVpnBoundarySupport boolean
    Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only).
    serviceModeV2 GetZeroTrustDeviceDefaultProfileServiceModeV2
    supportUrl string
    The URL to launch when the Send Feedback button is clicked.
    switchLocked boolean
    Whether to allow the user to turn off the WARP switch and disconnect the client.
    tunnelProtocol string
    Determines which tunnel protocol to use.
    account_id str
    allow_mode_switch bool
    Whether to allow the user to switch WARP between modes.
    allow_updates bool
    Whether to receive update notifications when a new version of the client is available.
    allowed_to_leave bool
    Whether to allow devices to leave the organization.
    auto_connect float
    The amount of time in seconds to reconnect after having been disabled.
    captive_portal float
    Turn on the captive portal after the specified amount of time.
    default bool
    Whether the policy will be applied to matching devices.
    disable_auto_fallback bool
    If the dns_server field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to true.
    enabled bool
    Whether the policy will be applied to matching devices.
    exclude_office_ips bool
    Whether to add Microsoft IPs to Split Tunnel exclusions.
    excludes Sequence[GetZeroTrustDeviceDefaultProfileExclude]
    List of routes excluded in the WARP client's tunnel.
    fallback_domains Sequence[GetZeroTrustDeviceDefaultProfileFallbackDomain]
    gateway_unique_id str
    id str
    The ID of this resource.
    includes Sequence[GetZeroTrustDeviceDefaultProfileInclude]
    List of routes included in the WARP client's tunnel.
    register_interface_ip_with_dns bool
    Determines if the operating system will register WARP's local interface IP with your on-premises DNS server.
    sccm_vpn_boundary_support bool
    Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only).
    service_mode_v2 GetZeroTrustDeviceDefaultProfileServiceModeV2
    support_url str
    The URL to launch when the Send Feedback button is clicked.
    switch_locked bool
    Whether to allow the user to turn off the WARP switch and disconnect the client.
    tunnel_protocol str
    Determines which tunnel protocol to use.
    accountId String
    allowModeSwitch Boolean
    Whether to allow the user to switch WARP between modes.
    allowUpdates Boolean
    Whether to receive update notifications when a new version of the client is available.
    allowedToLeave Boolean
    Whether to allow devices to leave the organization.
    autoConnect Number
    The amount of time in seconds to reconnect after having been disabled.
    captivePortal Number
    Turn on the captive portal after the specified amount of time.
    default Boolean
    Whether the policy will be applied to matching devices.
    disableAutoFallback Boolean
    If the dns_server field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to true.
    enabled Boolean
    Whether the policy will be applied to matching devices.
    excludeOfficeIps Boolean
    Whether to add Microsoft IPs to Split Tunnel exclusions.
    excludes List<Property Map>
    List of routes excluded in the WARP client's tunnel.
    fallbackDomains List<Property Map>
    gatewayUniqueId String
    id String
    The ID of this resource.
    includes List<Property Map>
    List of routes included in the WARP client's tunnel.
    registerInterfaceIpWithDns Boolean
    Determines if the operating system will register WARP's local interface IP with your on-premises DNS server.
    sccmVpnBoundarySupport Boolean
    Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only).
    serviceModeV2 Property Map
    supportUrl String
    The URL to launch when the Send Feedback button is clicked.
    switchLocked Boolean
    Whether to allow the user to turn off the WARP switch and disconnect the client.
    tunnelProtocol String
    Determines which tunnel protocol to use.

    Supporting Types

    GetZeroTrustDeviceDefaultProfileExclude

    Address string
    The address in CIDR format to exclude from the tunnel. If address is present, host must not be present.
    Description string
    A description of the Split Tunnel item, displayed in the client UI.
    Host string
    The domain name to exclude from the tunnel. If host is present, address must not be present.
    Address string
    The address in CIDR format to exclude from the tunnel. If address is present, host must not be present.
    Description string
    A description of the Split Tunnel item, displayed in the client UI.
    Host string
    The domain name to exclude from the tunnel. If host is present, address must not be present.
    address String
    The address in CIDR format to exclude from the tunnel. If address is present, host must not be present.
    description String
    A description of the Split Tunnel item, displayed in the client UI.
    host String
    The domain name to exclude from the tunnel. If host is present, address must not be present.
    address string
    The address in CIDR format to exclude from the tunnel. If address is present, host must not be present.
    description string
    A description of the Split Tunnel item, displayed in the client UI.
    host string
    The domain name to exclude from the tunnel. If host is present, address must not be present.
    address str
    The address in CIDR format to exclude from the tunnel. If address is present, host must not be present.
    description str
    A description of the Split Tunnel item, displayed in the client UI.
    host str
    The domain name to exclude from the tunnel. If host is present, address must not be present.
    address String
    The address in CIDR format to exclude from the tunnel. If address is present, host must not be present.
    description String
    A description of the Split Tunnel item, displayed in the client UI.
    host String
    The domain name to exclude from the tunnel. If host is present, address must not be present.

    GetZeroTrustDeviceDefaultProfileFallbackDomain

    Description string
    A description of the fallback domain, displayed in the client UI.
    DnsServers List<string>
    A list of IP addresses to handle domain resolution.
    Suffix string
    The domain suffix to match when resolving locally.
    Description string
    A description of the fallback domain, displayed in the client UI.
    DnsServers []string
    A list of IP addresses to handle domain resolution.
    Suffix string
    The domain suffix to match when resolving locally.
    description String
    A description of the fallback domain, displayed in the client UI.
    dnsServers List<String>
    A list of IP addresses to handle domain resolution.
    suffix String
    The domain suffix to match when resolving locally.
    description string
    A description of the fallback domain, displayed in the client UI.
    dnsServers string[]
    A list of IP addresses to handle domain resolution.
    suffix string
    The domain suffix to match when resolving locally.
    description str
    A description of the fallback domain, displayed in the client UI.
    dns_servers Sequence[str]
    A list of IP addresses to handle domain resolution.
    suffix str
    The domain suffix to match when resolving locally.
    description String
    A description of the fallback domain, displayed in the client UI.
    dnsServers List<String>
    A list of IP addresses to handle domain resolution.
    suffix String
    The domain suffix to match when resolving locally.

    GetZeroTrustDeviceDefaultProfileInclude

    Address string
    The address in CIDR format to include in the tunnel. If address is present, host must not be present.
    Description string
    A description of the Split Tunnel item, displayed in the client UI.
    Host string
    The domain name to include in the tunnel. If host is present, address must not be present.
    Address string
    The address in CIDR format to include in the tunnel. If address is present, host must not be present.
    Description string
    A description of the Split Tunnel item, displayed in the client UI.
    Host string
    The domain name to include in the tunnel. If host is present, address must not be present.
    address String
    The address in CIDR format to include in the tunnel. If address is present, host must not be present.
    description String
    A description of the Split Tunnel item, displayed in the client UI.
    host String
    The domain name to include in the tunnel. If host is present, address must not be present.
    address string
    The address in CIDR format to include in the tunnel. If address is present, host must not be present.
    description string
    A description of the Split Tunnel item, displayed in the client UI.
    host string
    The domain name to include in the tunnel. If host is present, address must not be present.
    address str
    The address in CIDR format to include in the tunnel. If address is present, host must not be present.
    description str
    A description of the Split Tunnel item, displayed in the client UI.
    host str
    The domain name to include in the tunnel. If host is present, address must not be present.
    address String
    The address in CIDR format to include in the tunnel. If address is present, host must not be present.
    description String
    A description of the Split Tunnel item, displayed in the client UI.
    host String
    The domain name to include in the tunnel. If host is present, address must not be present.

    GetZeroTrustDeviceDefaultProfileServiceModeV2

    Mode string
    The mode to run the WARP client under.
    Port double
    The port number when used with proxy mode.
    Mode string
    The mode to run the WARP client under.
    Port float64
    The port number when used with proxy mode.
    mode String
    The mode to run the WARP client under.
    port Double
    The port number when used with proxy mode.
    mode string
    The mode to run the WARP client under.
    port number
    The port number when used with proxy mode.
    mode str
    The mode to run the WARP client under.
    port float
    The port number when used with proxy mode.
    mode String
    The mode to run the WARP client under.
    port Number
    The port number when used with proxy mode.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v6.13.0
    published on Wednesday, Jan 21, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare
      Try Pulumi Cloud free. Your team will thank you.