1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. getZeroTrustDeviceSettings
Viewing docs for Cloudflare v6.13.0
published on Wednesday, Jan 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.getZeroTrustDeviceSettings

cloudflare logo
Viewing docs for Cloudflare v6.13.0
published on Wednesday, Jan 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustDeviceSettings = cloudflare.getZeroTrustDeviceSettings({
    accountId: "699d98642c564d2e855e9661899b7252",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_device_settings = cloudflare.get_zero_trust_device_settings(account_id="699d98642c564d2e855e9661899b7252")

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.LookupZeroTrustDeviceSettings(ctx, &cloudflare.LookupZeroTrustDeviceSettingsArgs{
			AccountId: "699d98642c564d2e855e9661899b7252",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustDeviceSettings = Cloudflare.GetZeroTrustDeviceSettings.Invoke(new()
    {
        AccountId = "699d98642c564d2e855e9661899b7252",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetZeroTrustDeviceSettingsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var exampleZeroTrustDeviceSettings = CloudflareFunctions.getZeroTrustDeviceSettings(GetZeroTrustDeviceSettingsArgs.builder()
            .accountId("699d98642c564d2e855e9661899b7252")
            .build());

    }
}

    variables:
  exampleZeroTrustDeviceSettings:
    fn::invoke:
      function: cloudflare:getZeroTrustDeviceSettings
      arguments:
        accountId: 699d98642c564d2e855e9661899b7252

    Using getZeroTrustDeviceSettings

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getZeroTrustDeviceSettings(args: GetZeroTrustDeviceSettingsArgs, opts?: InvokeOptions): Promise<GetZeroTrustDeviceSettingsResult>
function getZeroTrustDeviceSettingsOutput(args: GetZeroTrustDeviceSettingsOutputArgs, opts?: InvokeOptions): Output<GetZeroTrustDeviceSettingsResult>
    def get_zero_trust_device_settings(account_id: Optional[str] = None,
                                   opts: Optional[InvokeOptions] = None) -> GetZeroTrustDeviceSettingsResult
def get_zero_trust_device_settings_output(account_id: Optional[pulumi.Input[str]] = None,
                                   opts: Optional[InvokeOptions] = None) -> Output[GetZeroTrustDeviceSettingsResult]
    func LookupZeroTrustDeviceSettings(ctx *Context, args *LookupZeroTrustDeviceSettingsArgs, opts ...InvokeOption) (*LookupZeroTrustDeviceSettingsResult, error)
func LookupZeroTrustDeviceSettingsOutput(ctx *Context, args *LookupZeroTrustDeviceSettingsOutputArgs, opts ...InvokeOption) LookupZeroTrustDeviceSettingsResultOutput

    > Note: This function is named LookupZeroTrustDeviceSettings in the Go SDK.

    public static class GetZeroTrustDeviceSettings 
{
    public static Task<GetZeroTrustDeviceSettingsResult> InvokeAsync(GetZeroTrustDeviceSettingsArgs args, InvokeOptions? opts = null)
    public static Output<GetZeroTrustDeviceSettingsResult> Invoke(GetZeroTrustDeviceSettingsInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetZeroTrustDeviceSettingsResult> getZeroTrustDeviceSettings(GetZeroTrustDeviceSettingsArgs args, InvokeOptions options)
public static Output<GetZeroTrustDeviceSettingsResult> getZeroTrustDeviceSettings(GetZeroTrustDeviceSettingsArgs args, InvokeOptions options)

    fn::invoke:
  function: cloudflare:index/getZeroTrustDeviceSettings:getZeroTrustDeviceSettings
  arguments:
    # arguments dictionary

    The following arguments are supported:

    AccountId string
    AccountId string
    accountId String
    accountId string
    accountId String

    getZeroTrustDeviceSettings Result

    The following output properties are available:

    AccountId string
    DisableForTime double
    Sets the time limit, in seconds, that a user can use an override code to bypass WARP.
    ExternalEmergencySignalEnabled bool
    Controls whether the external emergency disconnect feature is enabled.
    ExternalEmergencySignalFingerprint string
    The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the externalemergencysignal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value.
    ExternalEmergencySignalInterval string
    The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds.
    ExternalEmergencySignalUrl string
    The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host.
    GatewayProxyEnabled bool
    Enable gateway proxy filtering on TCP.
    GatewayUdpProxyEnabled bool
    Enable gateway proxy filtering on UDP.
    Id string
    The provider-assigned unique ID for this managed resource.
    RootCertificateInstallationEnabled bool
    Enable installation of cloudflare managed root certificate.
    UseZtVirtualIp bool
    Enable using CGNAT virtual IPv4.
    AccountId string
    DisableForTime float64
    Sets the time limit, in seconds, that a user can use an override code to bypass WARP.
    ExternalEmergencySignalEnabled bool
    Controls whether the external emergency disconnect feature is enabled.
    ExternalEmergencySignalFingerprint string
    The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the externalemergencysignal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value.
    ExternalEmergencySignalInterval string
    The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds.
    ExternalEmergencySignalUrl string
    The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host.
    GatewayProxyEnabled bool
    Enable gateway proxy filtering on TCP.
    GatewayUdpProxyEnabled bool
    Enable gateway proxy filtering on UDP.
    Id string
    The provider-assigned unique ID for this managed resource.
    RootCertificateInstallationEnabled bool
    Enable installation of cloudflare managed root certificate.
    UseZtVirtualIp bool
    Enable using CGNAT virtual IPv4.
    accountId String
    disableForTime Double
    Sets the time limit, in seconds, that a user can use an override code to bypass WARP.
    externalEmergencySignalEnabled Boolean
    Controls whether the external emergency disconnect feature is enabled.
    externalEmergencySignalFingerprint String
    The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the externalemergencysignal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value.
    externalEmergencySignalInterval String
    The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds.
    externalEmergencySignalUrl String
    The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host.
    gatewayProxyEnabled Boolean
    Enable gateway proxy filtering on TCP.
    gatewayUdpProxyEnabled Boolean
    Enable gateway proxy filtering on UDP.
    id String
    The provider-assigned unique ID for this managed resource.
    rootCertificateInstallationEnabled Boolean
    Enable installation of cloudflare managed root certificate.
    useZtVirtualIp Boolean
    Enable using CGNAT virtual IPv4.
    accountId string
    disableForTime number
    Sets the time limit, in seconds, that a user can use an override code to bypass WARP.
    externalEmergencySignalEnabled boolean
    Controls whether the external emergency disconnect feature is enabled.
    externalEmergencySignalFingerprint string
    The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the externalemergencysignal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value.
    externalEmergencySignalInterval string
    The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds.
    externalEmergencySignalUrl string
    The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host.
    gatewayProxyEnabled boolean
    Enable gateway proxy filtering on TCP.
    gatewayUdpProxyEnabled boolean
    Enable gateway proxy filtering on UDP.
    id string
    The provider-assigned unique ID for this managed resource.
    rootCertificateInstallationEnabled boolean
    Enable installation of cloudflare managed root certificate.
    useZtVirtualIp boolean
    Enable using CGNAT virtual IPv4.
    account_id str
    disable_for_time float
    Sets the time limit, in seconds, that a user can use an override code to bypass WARP.
    external_emergency_signal_enabled bool
    Controls whether the external emergency disconnect feature is enabled.
    external_emergency_signal_fingerprint str
    The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the externalemergencysignal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value.
    external_emergency_signal_interval str
    The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds.
    external_emergency_signal_url str
    The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host.
    gateway_proxy_enabled bool
    Enable gateway proxy filtering on TCP.
    gateway_udp_proxy_enabled bool
    Enable gateway proxy filtering on UDP.
    id str
    The provider-assigned unique ID for this managed resource.
    root_certificate_installation_enabled bool
    Enable installation of cloudflare managed root certificate.
    use_zt_virtual_ip bool
    Enable using CGNAT virtual IPv4.
    accountId String
    disableForTime Number
    Sets the time limit, in seconds, that a user can use an override code to bypass WARP.
    externalEmergencySignalEnabled Boolean
    Controls whether the external emergency disconnect feature is enabled.
    externalEmergencySignalFingerprint String
    The SHA256 fingerprint (64 hexadecimal characters) of the HTTPS server certificate for the externalemergencysignal_url. If provided, the WARP client will use this value to verify the server's identity. The device will ignore any response if the server's certificate fingerprint does not exactly match this value.
    externalEmergencySignalInterval String
    The interval at which the WARP client fetches the emergency disconnect signal, formatted as a duration string (e.g., "5m", "2m30s", "1h"). Minimum 30 seconds.
    externalEmergencySignalUrl String
    The HTTPS URL from which to fetch the emergency disconnect signal. Must use HTTPS and have an IPv4 or IPv6 address as the host.
    gatewayProxyEnabled Boolean
    Enable gateway proxy filtering on TCP.
    gatewayUdpProxyEnabled Boolean
    Enable gateway proxy filtering on UDP.
    id String
    The provider-assigned unique ID for this managed resource.
    rootCertificateInstallationEnabled Boolean
    Enable installation of cloudflare managed root certificate.
    useZtVirtualIp Boolean
    Enable using CGNAT virtual IPv4.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v6.13.0
    published on Wednesday, Jan 21, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare
      Try Pulumi Cloud free. Your team will thank you.