Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. TeamsAccount
Cloudflare v6.10.0 published on Thursday, Oct 2, 2025 by Pulumi
pulumi/pulumi-cloudflare

cloudflare.TeamsAccount

Explore with Pulumi AI

cloudflare logo
Cloudflare v6.10.0 published on Thursday, Oct 2, 2025 by Pulumi
pulumi/pulumi-cloudflare
    Deprecated: cloudflare.index/teamsaccount.TeamsAccount has been deprecated in favor of cloudflare.index/zerotrustgatewaysettings.ZeroTrustGatewaySettings

    Example Usage

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    resources:
  exampleZeroTrustGatewaySettings:
    type: cloudflare:ZeroTrustGatewaySettings
    name: example_zero_trust_gateway_settings
    properties:
      accountId: 699d98642c564d2e855e9661899b7252
      settings:
        activity_log:
          enabled: true
        antivirus:
          enabledDownloadPhase: false
          enabledUploadPhase: false
          failClosed: false
          notificationSettings:
            enabled: true
            includeContext: true
            msg: msg
            supportUrl: support_url
        block_page:
          backgroundColor: background_color
          enabled: true
          footerText: --footer--
          headerText: --header--
          includeContext: true
          logoPath: https://logos.com/a.png
          mailtoAddress: admin@example.com
          mailtoSubject: Blocked User Inquiry
          mode: ""
          name: Cloudflare
          suppressFooter: false
          targetUri: https://example.com
        body_scanning:
          inspectionMode: deep
        browser_isolation:
          nonIdentityEnabled: true
          urlBrowserIsolationEnabled: true
        certificate:
          id: d1b364c5-1311-466e-a194-f0e943e0799f
        custom_certificate:
          enabled: true
          id: d1b364c5-1311-466e-a194-f0e943e0799f
        extended_email_matching:
          enabled: true
        fips:
          tls: true
        host_selector:
          enabled: false
        inspection:
          mode: static
        protocol_detection:
          enabled: true
        sandbox:
          enabled: true
          fallbackAction: allow
        tls_decrypt:
          enabled: true

    Create TeamsAccount Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new TeamsAccount(name: string, args: TeamsAccountArgs, opts?: CustomResourceOptions);
    @overload
def TeamsAccount(resource_name: str,
                 args: TeamsAccountArgs,
                 opts: Optional[ResourceOptions] = None)

@overload
def TeamsAccount(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 account_id: Optional[str] = None,
                 settings: Optional[TeamsAccountSettingsArgs] = None)
    func NewTeamsAccount(ctx *Context, name string, args TeamsAccountArgs, opts ...ResourceOption) (*TeamsAccount, error)
    public TeamsAccount(string name, TeamsAccountArgs args, CustomResourceOptions? opts = null)
    public TeamsAccount(String name, TeamsAccountArgs args)
public TeamsAccount(String name, TeamsAccountArgs args, CustomResourceOptions options)

    type: cloudflare:TeamsAccount
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args TeamsAccountArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TeamsAccountArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TeamsAccountArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TeamsAccountArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TeamsAccountArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    TeamsAccount Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The TeamsAccount resource accepts the following input properties:

    AccountId string
    Settings TeamsAccountSettings
    Specify account settings.
    AccountId string
    Settings TeamsAccountSettingsArgs
    Specify account settings.
    accountId String
    settings TeamsAccountSettings
    Specify account settings.
    accountId string
    settings TeamsAccountSettings
    Specify account settings.
    account_id str
    settings TeamsAccountSettingsArgs
    Specify account settings.
    accountId String
    settings Property Map
    Specify account settings.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TeamsAccount resource produces the following output properties:

    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    createdAt string
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    created_at str
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String

    Look up Existing TeamsAccount Resource

    Get an existing TeamsAccount resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TeamsAccountState, opts?: CustomResourceOptions): TeamsAccount
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        created_at: Optional[str] = None,
        settings: Optional[TeamsAccountSettingsArgs] = None,
        updated_at: Optional[str] = None) -> TeamsAccount
    func GetTeamsAccount(ctx *Context, name string, id IDInput, state *TeamsAccountState, opts ...ResourceOption) (*TeamsAccount, error)
    public static TeamsAccount Get(string name, Input<string> id, TeamsAccountState? state, CustomResourceOptions? opts = null)
    public static TeamsAccount get(String name, Output<String> id, TeamsAccountState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:TeamsAccount    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    CreatedAt string
    Settings TeamsAccountSettings
    Specify account settings.
    UpdatedAt string
    AccountId string
    CreatedAt string
    Settings TeamsAccountSettingsArgs
    Specify account settings.
    UpdatedAt string
    accountId String
    createdAt String
    settings TeamsAccountSettings
    Specify account settings.
    updatedAt String
    accountId string
    createdAt string
    settings TeamsAccountSettings
    Specify account settings.
    updatedAt string
    accountId String
    createdAt String
    settings Property Map
    Specify account settings.
    updatedAt String

    Supporting Types

    TeamsAccountSettings, TeamsAccountSettingsArgs

    ActivityLog TeamsAccountSettingsActivityLog
    Specify activity log settings.
    Antivirus TeamsAccountSettingsAntivirus
    Specify anti-virus settings.
    BlockPage TeamsAccountSettingsBlockPage
    Specify block page layout settings.
    BodyScanning TeamsAccountSettingsBodyScanning
    Specify the DLP inspection mode.
    BrowserIsolation TeamsAccountSettingsBrowserIsolation
    Specify Clientless Browser Isolation settings.
    Certificate TeamsAccountSettingsCertificate
    Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception.
    CustomCertificate TeamsAccountSettingsCustomCertificate
    Specify custom certificate settings for BYO-PKI. This field is deprecated; use certificate instead.

    Deprecated: This attribute is deprecated.

    ExtendedEmailMatching TeamsAccountSettingsExtendedEmailMatching
    Specify user email settings for the firewall policies. When this is enabled, we standardize the email addresses in the identity part of the rule, so that they match the extended email variants in the firewall policies. When this setting is turned off, the email addresses in the identity part of the rule will be matched exactly as provided. If your email has . or + modifiers, you should enable this setting.
    Fips TeamsAccountSettingsFips
    Specify FIPS settings.
    HostSelector TeamsAccountSettingsHostSelector
    Enable host selection in egress policies.
    Inspection TeamsAccountSettingsInspection
    Define the proxy inspection mode.
    ProtocolDetection TeamsAccountSettingsProtocolDetection
    Specify whether to detect protocols from the initial bytes of client traffic.
    Sandbox TeamsAccountSettingsSandbox
    Specify whether to enable the sandbox.
    TlsDecrypt TeamsAccountSettingsTlsDecrypt
    Specify whether to inspect encrypted HTTP traffic.
    ActivityLog TeamsAccountSettingsActivityLog
    Specify activity log settings.
    Antivirus TeamsAccountSettingsAntivirus
    Specify anti-virus settings.
    BlockPage TeamsAccountSettingsBlockPage
    Specify block page layout settings.
    BodyScanning TeamsAccountSettingsBodyScanning
    Specify the DLP inspection mode.
    BrowserIsolation TeamsAccountSettingsBrowserIsolation
    Specify Clientless Browser Isolation settings.
    Certificate TeamsAccountSettingsCertificate
    Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception.
    CustomCertificate TeamsAccountSettingsCustomCertificate
    Specify custom certificate settings for BYO-PKI. This field is deprecated; use certificate instead.

    Deprecated: This attribute is deprecated.

    ExtendedEmailMatching TeamsAccountSettingsExtendedEmailMatching
    Specify user email settings for the firewall policies. When this is enabled, we standardize the email addresses in the identity part of the rule, so that they match the extended email variants in the firewall policies. When this setting is turned off, the email addresses in the identity part of the rule will be matched exactly as provided. If your email has . or + modifiers, you should enable this setting.
    Fips TeamsAccountSettingsFips
    Specify FIPS settings.
    HostSelector TeamsAccountSettingsHostSelector
    Enable host selection in egress policies.
    Inspection TeamsAccountSettingsInspection
    Define the proxy inspection mode.
    ProtocolDetection TeamsAccountSettingsProtocolDetection
    Specify whether to detect protocols from the initial bytes of client traffic.
    Sandbox TeamsAccountSettingsSandbox
    Specify whether to enable the sandbox.
    TlsDecrypt TeamsAccountSettingsTlsDecrypt
    Specify whether to inspect encrypted HTTP traffic.
    activityLog TeamsAccountSettingsActivityLog
    Specify activity log settings.
    antivirus TeamsAccountSettingsAntivirus
    Specify anti-virus settings.
    blockPage TeamsAccountSettingsBlockPage
    Specify block page layout settings.
    bodyScanning TeamsAccountSettingsBodyScanning
    Specify the DLP inspection mode.
    browserIsolation TeamsAccountSettingsBrowserIsolation
    Specify Clientless Browser Isolation settings.
    certificate TeamsAccountSettingsCertificate
    Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception.
    customCertificate TeamsAccountSettingsCustomCertificate
    Specify custom certificate settings for BYO-PKI. This field is deprecated; use certificate instead.

    Deprecated: This attribute is deprecated.

    extendedEmailMatching TeamsAccountSettingsExtendedEmailMatching
    Specify user email settings for the firewall policies. When this is enabled, we standardize the email addresses in the identity part of the rule, so that they match the extended email variants in the firewall policies. When this setting is turned off, the email addresses in the identity part of the rule will be matched exactly as provided. If your email has . or + modifiers, you should enable this setting.
    fips TeamsAccountSettingsFips
    Specify FIPS settings.
    hostSelector TeamsAccountSettingsHostSelector
    Enable host selection in egress policies.
    inspection TeamsAccountSettingsInspection
    Define the proxy inspection mode.
    protocolDetection TeamsAccountSettingsProtocolDetection
    Specify whether to detect protocols from the initial bytes of client traffic.
    sandbox TeamsAccountSettingsSandbox
    Specify whether to enable the sandbox.
    tlsDecrypt TeamsAccountSettingsTlsDecrypt
    Specify whether to inspect encrypted HTTP traffic.
    activityLog TeamsAccountSettingsActivityLog
    Specify activity log settings.
    antivirus TeamsAccountSettingsAntivirus
    Specify anti-virus settings.
    blockPage TeamsAccountSettingsBlockPage
    Specify block page layout settings.
    bodyScanning TeamsAccountSettingsBodyScanning
    Specify the DLP inspection mode.
    browserIsolation TeamsAccountSettingsBrowserIsolation
    Specify Clientless Browser Isolation settings.
    certificate TeamsAccountSettingsCertificate
    Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception.
    customCertificate TeamsAccountSettingsCustomCertificate
    Specify custom certificate settings for BYO-PKI. This field is deprecated; use certificate instead.

    Deprecated: This attribute is deprecated.

    extendedEmailMatching TeamsAccountSettingsExtendedEmailMatching
    Specify user email settings for the firewall policies. When this is enabled, we standardize the email addresses in the identity part of the rule, so that they match the extended email variants in the firewall policies. When this setting is turned off, the email addresses in the identity part of the rule will be matched exactly as provided. If your email has . or + modifiers, you should enable this setting.
    fips TeamsAccountSettingsFips
    Specify FIPS settings.
    hostSelector TeamsAccountSettingsHostSelector
    Enable host selection in egress policies.
    inspection TeamsAccountSettingsInspection
    Define the proxy inspection mode.
    protocolDetection TeamsAccountSettingsProtocolDetection
    Specify whether to detect protocols from the initial bytes of client traffic.
    sandbox TeamsAccountSettingsSandbox
    Specify whether to enable the sandbox.
    tlsDecrypt TeamsAccountSettingsTlsDecrypt
    Specify whether to inspect encrypted HTTP traffic.
    activity_log TeamsAccountSettingsActivityLog
    Specify activity log settings.
    antivirus TeamsAccountSettingsAntivirus
    Specify anti-virus settings.
    block_page TeamsAccountSettingsBlockPage
    Specify block page layout settings.
    body_scanning TeamsAccountSettingsBodyScanning
    Specify the DLP inspection mode.
    browser_isolation TeamsAccountSettingsBrowserIsolation
    Specify Clientless Browser Isolation settings.
    certificate TeamsAccountSettingsCertificate
    Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception.
    custom_certificate TeamsAccountSettingsCustomCertificate
    Specify custom certificate settings for BYO-PKI. This field is deprecated; use certificate instead.

    Deprecated: This attribute is deprecated.

    extended_email_matching TeamsAccountSettingsExtendedEmailMatching
    Specify user email settings for the firewall policies. When this is enabled, we standardize the email addresses in the identity part of the rule, so that they match the extended email variants in the firewall policies. When this setting is turned off, the email addresses in the identity part of the rule will be matched exactly as provided. If your email has . or + modifiers, you should enable this setting.
    fips TeamsAccountSettingsFips
    Specify FIPS settings.
    host_selector TeamsAccountSettingsHostSelector
    Enable host selection in egress policies.
    inspection TeamsAccountSettingsInspection
    Define the proxy inspection mode.
    protocol_detection TeamsAccountSettingsProtocolDetection
    Specify whether to detect protocols from the initial bytes of client traffic.
    sandbox TeamsAccountSettingsSandbox
    Specify whether to enable the sandbox.
    tls_decrypt TeamsAccountSettingsTlsDecrypt
    Specify whether to inspect encrypted HTTP traffic.
    activityLog Property Map
    Specify activity log settings.
    antivirus Property Map
    Specify anti-virus settings.
    blockPage Property Map
    Specify block page layout settings.
    bodyScanning Property Map
    Specify the DLP inspection mode.
    browserIsolation Property Map
    Specify Clientless Browser Isolation settings.
    certificate Property Map
    Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception.
    customCertificate Property Map
    Specify custom certificate settings for BYO-PKI. This field is deprecated; use certificate instead.

    Deprecated: This attribute is deprecated.

    extendedEmailMatching Property Map
    Specify user email settings for the firewall policies. When this is enabled, we standardize the email addresses in the identity part of the rule, so that they match the extended email variants in the firewall policies. When this setting is turned off, the email addresses in the identity part of the rule will be matched exactly as provided. If your email has . or + modifiers, you should enable this setting.
    fips Property Map
    Specify FIPS settings.
    hostSelector Property Map
    Enable host selection in egress policies.
    inspection Property Map
    Define the proxy inspection mode.
    protocolDetection Property Map
    Specify whether to detect protocols from the initial bytes of client traffic.
    sandbox Property Map
    Specify whether to enable the sandbox.
    tlsDecrypt Property Map
    Specify whether to inspect encrypted HTTP traffic.

    TeamsAccountSettingsActivityLog, TeamsAccountSettingsActivityLogArgs

    Enabled bool
    Specify whether to log activity.
    Enabled bool
    Specify whether to log activity.
    enabled Boolean
    Specify whether to log activity.
    enabled boolean
    Specify whether to log activity.
    enabled bool
    Specify whether to log activity.
    enabled Boolean
    Specify whether to log activity.

    TeamsAccountSettingsAntivirus, TeamsAccountSettingsAntivirusArgs

    EnabledDownloadPhase bool
    Specify whether to enable anti-virus scanning on downloads.
    EnabledUploadPhase bool
    Specify whether to enable anti-virus scanning on uploads.
    FailClosed bool
    Specify whether to block requests for unscannable files.
    NotificationSettings TeamsAccountSettingsAntivirusNotificationSettings
    Configure the message the user's device shows during an antivirus scan.
    EnabledDownloadPhase bool
    Specify whether to enable anti-virus scanning on downloads.
    EnabledUploadPhase bool
    Specify whether to enable anti-virus scanning on uploads.
    FailClosed bool
    Specify whether to block requests for unscannable files.
    NotificationSettings TeamsAccountSettingsAntivirusNotificationSettings
    Configure the message the user's device shows during an antivirus scan.
    enabledDownloadPhase Boolean
    Specify whether to enable anti-virus scanning on downloads.
    enabledUploadPhase Boolean
    Specify whether to enable anti-virus scanning on uploads.
    failClosed Boolean
    Specify whether to block requests for unscannable files.
    notificationSettings TeamsAccountSettingsAntivirusNotificationSettings
    Configure the message the user's device shows during an antivirus scan.
    enabledDownloadPhase boolean
    Specify whether to enable anti-virus scanning on downloads.
    enabledUploadPhase boolean
    Specify whether to enable anti-virus scanning on uploads.
    failClosed boolean
    Specify whether to block requests for unscannable files.
    notificationSettings TeamsAccountSettingsAntivirusNotificationSettings
    Configure the message the user's device shows during an antivirus scan.
    enabled_download_phase bool
    Specify whether to enable anti-virus scanning on downloads.
    enabled_upload_phase bool
    Specify whether to enable anti-virus scanning on uploads.
    fail_closed bool
    Specify whether to block requests for unscannable files.
    notification_settings TeamsAccountSettingsAntivirusNotificationSettings
    Configure the message the user's device shows during an antivirus scan.
    enabledDownloadPhase Boolean
    Specify whether to enable anti-virus scanning on downloads.
    enabledUploadPhase Boolean
    Specify whether to enable anti-virus scanning on uploads.
    failClosed Boolean
    Specify whether to block requests for unscannable files.
    notificationSettings Property Map
    Configure the message the user's device shows during an antivirus scan.

    TeamsAccountSettingsAntivirusNotificationSettings, TeamsAccountSettingsAntivirusNotificationSettingsArgs

    Enabled bool
    Specify whether to enable notifications.
    IncludeContext bool
    Specify whether to include context information as query parameters.
    Msg string
    Specify the message to show in the notification.
    SupportUrl string
    Specify a URL that directs users to more information. If unset, the notification opens a block page.
    Enabled bool
    Specify whether to enable notifications.
    IncludeContext bool
    Specify whether to include context information as query parameters.
    Msg string
    Specify the message to show in the notification.
    SupportUrl string
    Specify a URL that directs users to more information. If unset, the notification opens a block page.
    enabled Boolean
    Specify whether to enable notifications.
    includeContext Boolean
    Specify whether to include context information as query parameters.
    msg String
    Specify the message to show in the notification.
    supportUrl String
    Specify a URL that directs users to more information. If unset, the notification opens a block page.
    enabled boolean
    Specify whether to enable notifications.
    includeContext boolean
    Specify whether to include context information as query parameters.
    msg string
    Specify the message to show in the notification.
    supportUrl string
    Specify a URL that directs users to more information. If unset, the notification opens a block page.
    enabled bool
    Specify whether to enable notifications.
    include_context bool
    Specify whether to include context information as query parameters.
    msg str
    Specify the message to show in the notification.
    support_url str
    Specify a URL that directs users to more information. If unset, the notification opens a block page.
    enabled Boolean
    Specify whether to enable notifications.
    includeContext Boolean
    Specify whether to include context information as query parameters.
    msg String
    Specify the message to show in the notification.
    supportUrl String
    Specify a URL that directs users to more information. If unset, the notification opens a block page.

    TeamsAccountSettingsBlockPage, TeamsAccountSettingsBlockPageArgs

    BackgroundColor string
    Specify the block page background color in #rrggbb format when the mode is customizedblockpage.
    Enabled bool
    Specify whether to enable the custom block page.
    FooterText string
    Specify the block page footer text when the mode is customizedblockpage.
    HeaderText string
    Specify the block page header text when the mode is customizedblockpage.
    IncludeContext bool
    Specify whether to append context to targeturi as query parameters. This applies only when the mode is redirecturi.
    LogoPath string
    Specify the full URL to the logo file when the mode is customizedblockpage.
    MailtoAddress string
    Specify the admin email for users to contact when the mode is customizedblockpage.
    MailtoSubject string
    Specify the subject line for emails created from the block page when the mode is customizedblockpage.
    Mode string
    Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. Available values: "", "customizedblockpage", "redirect_uri".
    Name string
    Specify the block page title when the mode is customizedblockpage.
    ReadOnly bool
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    SourceAccount string
    Indicate the account tag of the account that shared this setting.
    SuppressFooter bool
    Specify whether to suppress detailed information at the bottom of the block page when the mode is customizedblockpage.
    TargetUri string
    Specify the URI to redirect users to when the mode is redirect_uri.
    Version int
    Indicate the version number of the setting.
    BackgroundColor string
    Specify the block page background color in #rrggbb format when the mode is customizedblockpage.
    Enabled bool
    Specify whether to enable the custom block page.
    FooterText string
    Specify the block page footer text when the mode is customizedblockpage.
    HeaderText string
    Specify the block page header text when the mode is customizedblockpage.
    IncludeContext bool
    Specify whether to append context to targeturi as query parameters. This applies only when the mode is redirecturi.
    LogoPath string
    Specify the full URL to the logo file when the mode is customizedblockpage.
    MailtoAddress string
    Specify the admin email for users to contact when the mode is customizedblockpage.
    MailtoSubject string
    Specify the subject line for emails created from the block page when the mode is customizedblockpage.
    Mode string
    Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. Available values: "", "customizedblockpage", "redirect_uri".
    Name string
    Specify the block page title when the mode is customizedblockpage.
    ReadOnly bool
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    SourceAccount string
    Indicate the account tag of the account that shared this setting.
    SuppressFooter bool
    Specify whether to suppress detailed information at the bottom of the block page when the mode is customizedblockpage.
    TargetUri string
    Specify the URI to redirect users to when the mode is redirect_uri.
    Version int
    Indicate the version number of the setting.
    backgroundColor String
    Specify the block page background color in #rrggbb format when the mode is customizedblockpage.
    enabled Boolean
    Specify whether to enable the custom block page.
    footerText String
    Specify the block page footer text when the mode is customizedblockpage.
    headerText String
    Specify the block page header text when the mode is customizedblockpage.
    includeContext Boolean
    Specify whether to append context to targeturi as query parameters. This applies only when the mode is redirecturi.
    logoPath String
    Specify the full URL to the logo file when the mode is customizedblockpage.
    mailtoAddress String
    Specify the admin email for users to contact when the mode is customizedblockpage.
    mailtoSubject String
    Specify the subject line for emails created from the block page when the mode is customizedblockpage.
    mode String
    Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. Available values: "", "customizedblockpage", "redirect_uri".
    name String
    Specify the block page title when the mode is customizedblockpage.
    readOnly Boolean
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    sourceAccount String
    Indicate the account tag of the account that shared this setting.
    suppressFooter Boolean
    Specify whether to suppress detailed information at the bottom of the block page when the mode is customizedblockpage.
    targetUri String
    Specify the URI to redirect users to when the mode is redirect_uri.
    version Integer
    Indicate the version number of the setting.
    backgroundColor string
    Specify the block page background color in #rrggbb format when the mode is customizedblockpage.
    enabled boolean
    Specify whether to enable the custom block page.
    footerText string
    Specify the block page footer text when the mode is customizedblockpage.
    headerText string
    Specify the block page header text when the mode is customizedblockpage.
    includeContext boolean
    Specify whether to append context to targeturi as query parameters. This applies only when the mode is redirecturi.
    logoPath string
    Specify the full URL to the logo file when the mode is customizedblockpage.
    mailtoAddress string
    Specify the admin email for users to contact when the mode is customizedblockpage.
    mailtoSubject string
    Specify the subject line for emails created from the block page when the mode is customizedblockpage.
    mode string
    Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. Available values: "", "customizedblockpage", "redirect_uri".
    name string
    Specify the block page title when the mode is customizedblockpage.
    readOnly boolean
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    sourceAccount string
    Indicate the account tag of the account that shared this setting.
    suppressFooter boolean
    Specify whether to suppress detailed information at the bottom of the block page when the mode is customizedblockpage.
    targetUri string
    Specify the URI to redirect users to when the mode is redirect_uri.
    version number
    Indicate the version number of the setting.
    background_color str
    Specify the block page background color in #rrggbb format when the mode is customizedblockpage.
    enabled bool
    Specify whether to enable the custom block page.
    footer_text str
    Specify the block page footer text when the mode is customizedblockpage.
    header_text str
    Specify the block page header text when the mode is customizedblockpage.
    include_context bool
    Specify whether to append context to targeturi as query parameters. This applies only when the mode is redirecturi.
    logo_path str
    Specify the full URL to the logo file when the mode is customizedblockpage.
    mailto_address str
    Specify the admin email for users to contact when the mode is customizedblockpage.
    mailto_subject str
    Specify the subject line for emails created from the block page when the mode is customizedblockpage.
    mode str
    Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. Available values: "", "customizedblockpage", "redirect_uri".
    name str
    Specify the block page title when the mode is customizedblockpage.
    read_only bool
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    source_account str
    Indicate the account tag of the account that shared this setting.
    suppress_footer bool
    Specify whether to suppress detailed information at the bottom of the block page when the mode is customizedblockpage.
    target_uri str
    Specify the URI to redirect users to when the mode is redirect_uri.
    version int
    Indicate the version number of the setting.
    backgroundColor String
    Specify the block page background color in #rrggbb format when the mode is customizedblockpage.
    enabled Boolean
    Specify whether to enable the custom block page.
    footerText String
    Specify the block page footer text when the mode is customizedblockpage.
    headerText String
    Specify the block page header text when the mode is customizedblockpage.
    includeContext Boolean
    Specify whether to append context to targeturi as query parameters. This applies only when the mode is redirecturi.
    logoPath String
    Specify the full URL to the logo file when the mode is customizedblockpage.
    mailtoAddress String
    Specify the admin email for users to contact when the mode is customizedblockpage.
    mailtoSubject String
    Specify the subject line for emails created from the block page when the mode is customizedblockpage.
    mode String
    Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI. Available values: "", "customizedblockpage", "redirect_uri".
    name String
    Specify the block page title when the mode is customizedblockpage.
    readOnly Boolean
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    sourceAccount String
    Indicate the account tag of the account that shared this setting.
    suppressFooter Boolean
    Specify whether to suppress detailed information at the bottom of the block page when the mode is customizedblockpage.
    targetUri String
    Specify the URI to redirect users to when the mode is redirect_uri.
    version Number
    Indicate the version number of the setting.

    TeamsAccountSettingsBodyScanning, TeamsAccountSettingsBodyScanningArgs

    InspectionMode string
    Specify the inspection mode as either deep or shallow. Available values: "deep", "shallow".
    InspectionMode string
    Specify the inspection mode as either deep or shallow. Available values: "deep", "shallow".
    inspectionMode String
    Specify the inspection mode as either deep or shallow. Available values: "deep", "shallow".
    inspectionMode string
    Specify the inspection mode as either deep or shallow. Available values: "deep", "shallow".
    inspection_mode str
    Specify the inspection mode as either deep or shallow. Available values: "deep", "shallow".
    inspectionMode String
    Specify the inspection mode as either deep or shallow. Available values: "deep", "shallow".

    TeamsAccountSettingsBrowserIsolation, TeamsAccountSettingsBrowserIsolationArgs

    NonIdentityEnabled bool
    Specify whether to enable non-identity onramp support for Browser Isolation.
    UrlBrowserIsolationEnabled bool
    Specify whether to enable Clientless Browser Isolation.
    NonIdentityEnabled bool
    Specify whether to enable non-identity onramp support for Browser Isolation.
    UrlBrowserIsolationEnabled bool
    Specify whether to enable Clientless Browser Isolation.
    nonIdentityEnabled Boolean
    Specify whether to enable non-identity onramp support for Browser Isolation.
    urlBrowserIsolationEnabled Boolean
    Specify whether to enable Clientless Browser Isolation.
    nonIdentityEnabled boolean
    Specify whether to enable non-identity onramp support for Browser Isolation.
    urlBrowserIsolationEnabled boolean
    Specify whether to enable Clientless Browser Isolation.
    non_identity_enabled bool
    Specify whether to enable non-identity onramp support for Browser Isolation.
    url_browser_isolation_enabled bool
    Specify whether to enable Clientless Browser Isolation.
    nonIdentityEnabled Boolean
    Specify whether to enable non-identity onramp support for Browser Isolation.
    urlBrowserIsolationEnabled Boolean
    Specify whether to enable Clientless Browser Isolation.

    TeamsAccountSettingsCertificate, TeamsAccountSettingsCertificateArgs

    Id string
    Specify the UUID of the certificate used for interception. Ensure the certificate is available at the edge(previously called 'active'). A nil UUID directs Cloudflare to use the Root CA.
    Id string
    Specify the UUID of the certificate used for interception. Ensure the certificate is available at the edge(previously called 'active'). A nil UUID directs Cloudflare to use the Root CA.
    id String
    Specify the UUID of the certificate used for interception. Ensure the certificate is available at the edge(previously called 'active'). A nil UUID directs Cloudflare to use the Root CA.
    id string
    Specify the UUID of the certificate used for interception. Ensure the certificate is available at the edge(previously called 'active'). A nil UUID directs Cloudflare to use the Root CA.
    id str
    Specify the UUID of the certificate used for interception. Ensure the certificate is available at the edge(previously called 'active'). A nil UUID directs Cloudflare to use the Root CA.
    id String
    Specify the UUID of the certificate used for interception. Ensure the certificate is available at the edge(previously called 'active'). A nil UUID directs Cloudflare to use the Root CA.

    TeamsAccountSettingsCustomCertificate, TeamsAccountSettingsCustomCertificateArgs

    Enabled bool
    Specify whether to enable a custom certificate authority for signing Gateway traffic.
    BindingStatus string
    Indicate the internal certificate status.
    Id string
    Specify the UUID of the certificate (ID from MTLS certificate store).
    UpdatedAt string
    Enabled bool
    Specify whether to enable a custom certificate authority for signing Gateway traffic.
    BindingStatus string
    Indicate the internal certificate status.
    Id string
    Specify the UUID of the certificate (ID from MTLS certificate store).
    UpdatedAt string
    enabled Boolean
    Specify whether to enable a custom certificate authority for signing Gateway traffic.
    bindingStatus String
    Indicate the internal certificate status.
    id String
    Specify the UUID of the certificate (ID from MTLS certificate store).
    updatedAt String
    enabled boolean
    Specify whether to enable a custom certificate authority for signing Gateway traffic.
    bindingStatus string
    Indicate the internal certificate status.
    id string
    Specify the UUID of the certificate (ID from MTLS certificate store).
    updatedAt string
    enabled bool
    Specify whether to enable a custom certificate authority for signing Gateway traffic.
    binding_status str
    Indicate the internal certificate status.
    id str
    Specify the UUID of the certificate (ID from MTLS certificate store).
    updated_at str
    enabled Boolean
    Specify whether to enable a custom certificate authority for signing Gateway traffic.
    bindingStatus String
    Indicate the internal certificate status.
    id String
    Specify the UUID of the certificate (ID from MTLS certificate store).
    updatedAt String

    TeamsAccountSettingsExtendedEmailMatching, TeamsAccountSettingsExtendedEmailMatchingArgs

    Enabled bool
    Specify whether to match all variants of user emails (with + or . modifiers) used as criteria in Firewall policies.
    ReadOnly bool
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    SourceAccount string
    Indicate the account tag of the account that shared this setting.
    Version int
    Indicate the version number of the setting.
    Enabled bool
    Specify whether to match all variants of user emails (with + or . modifiers) used as criteria in Firewall policies.
    ReadOnly bool
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    SourceAccount string
    Indicate the account tag of the account that shared this setting.
    Version int
    Indicate the version number of the setting.
    enabled Boolean
    Specify whether to match all variants of user emails (with + or . modifiers) used as criteria in Firewall policies.
    readOnly Boolean
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    sourceAccount String
    Indicate the account tag of the account that shared this setting.
    version Integer
    Indicate the version number of the setting.
    enabled boolean
    Specify whether to match all variants of user emails (with + or . modifiers) used as criteria in Firewall policies.
    readOnly boolean
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    sourceAccount string
    Indicate the account tag of the account that shared this setting.
    version number
    Indicate the version number of the setting.
    enabled bool
    Specify whether to match all variants of user emails (with + or . modifiers) used as criteria in Firewall policies.
    read_only bool
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    source_account str
    Indicate the account tag of the account that shared this setting.
    version int
    Indicate the version number of the setting.
    enabled Boolean
    Specify whether to match all variants of user emails (with + or . modifiers) used as criteria in Firewall policies.
    readOnly Boolean
    Indicate that this setting was shared via the Orgs API and read only for the current account.
    sourceAccount String
    Indicate the account tag of the account that shared this setting.
    version Number
    Indicate the version number of the setting.

    TeamsAccountSettingsFips, TeamsAccountSettingsFipsArgs

    Tls bool
    Enforce cipher suites and TLS versions compliant with FIPS 140-2.
    Tls bool
    Enforce cipher suites and TLS versions compliant with FIPS 140-2.
    tls Boolean
    Enforce cipher suites and TLS versions compliant with FIPS 140-2.
    tls boolean
    Enforce cipher suites and TLS versions compliant with FIPS 140-2.
    tls bool
    Enforce cipher suites and TLS versions compliant with FIPS 140-2.
    tls Boolean
    Enforce cipher suites and TLS versions compliant with FIPS 140-2.

    TeamsAccountSettingsHostSelector, TeamsAccountSettingsHostSelectorArgs

    Enabled bool
    Specify whether to enable filtering via hosts for egress policies.
    Enabled bool
    Specify whether to enable filtering via hosts for egress policies.
    enabled Boolean
    Specify whether to enable filtering via hosts for egress policies.
    enabled boolean
    Specify whether to enable filtering via hosts for egress policies.
    enabled bool
    Specify whether to enable filtering via hosts for egress policies.
    enabled Boolean
    Specify whether to enable filtering via hosts for egress policies.

    TeamsAccountSettingsInspection, TeamsAccountSettingsInspectionArgs

    Mode string
    Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. Available values: "static", "dynamic".
    Mode string
    Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. Available values: "static", "dynamic".
    mode String
    Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. Available values: "static", "dynamic".
    mode string
    Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. Available values: "static", "dynamic".
    mode str
    Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. Available values: "static", "dynamic".
    mode String
    Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic. Available values: "static", "dynamic".

    TeamsAccountSettingsProtocolDetection, TeamsAccountSettingsProtocolDetectionArgs

    Enabled bool
    Specify whether to detect protocols from the initial bytes of client traffic.
    Enabled bool
    Specify whether to detect protocols from the initial bytes of client traffic.
    enabled Boolean
    Specify whether to detect protocols from the initial bytes of client traffic.
    enabled boolean
    Specify whether to detect protocols from the initial bytes of client traffic.
    enabled bool
    Specify whether to detect protocols from the initial bytes of client traffic.
    enabled Boolean
    Specify whether to detect protocols from the initial bytes of client traffic.

    TeamsAccountSettingsSandbox, TeamsAccountSettingsSandboxArgs

    Enabled bool
    Specify whether to enable the sandbox.
    FallbackAction string
    Specify the action to take when the system cannot scan the file. Available values: "allow", "block".
    Enabled bool
    Specify whether to enable the sandbox.
    FallbackAction string
    Specify the action to take when the system cannot scan the file. Available values: "allow", "block".
    enabled Boolean
    Specify whether to enable the sandbox.
    fallbackAction String
    Specify the action to take when the system cannot scan the file. Available values: "allow", "block".
    enabled boolean
    Specify whether to enable the sandbox.
    fallbackAction string
    Specify the action to take when the system cannot scan the file. Available values: "allow", "block".
    enabled bool
    Specify whether to enable the sandbox.
    fallback_action str
    Specify the action to take when the system cannot scan the file. Available values: "allow", "block".
    enabled Boolean
    Specify whether to enable the sandbox.
    fallbackAction String
    Specify the action to take when the system cannot scan the file. Available values: "allow", "block".

    TeamsAccountSettingsTlsDecrypt, TeamsAccountSettingsTlsDecryptArgs

    Enabled bool
    Specify whether to inspect encrypted HTTP traffic.
    Enabled bool
    Specify whether to inspect encrypted HTTP traffic.
    enabled Boolean
    Specify whether to inspect encrypted HTTP traffic.
    enabled boolean
    Specify whether to inspect encrypted HTTP traffic.
    enabled bool
    Specify whether to inspect encrypted HTTP traffic.
    enabled Boolean
    Specify whether to inspect encrypted HTTP traffic.

    Import

    $ pulumi import cloudflare:index/teamsAccount:TeamsAccount example '<account_id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Cloudflare v6.10.0 published on Thursday, Oct 2, 2025 by Pulumi
    pulumi/pulumi-cloudflare
      AI Agentic Workflows: Register now