1. Packages
  2. Cloudflare
  3. API Docs
  4. TeamsRule
Cloudflare v5.11.0 published on Wednesday, Sep 20, 2023 by Pulumi

cloudflare.TeamsRule

Explore with Pulumi AI

cloudflare logo
Cloudflare v5.11.0 published on Wednesday, Sep 20, 2023 by Pulumi

    Provides a Cloudflare Teams rule resource. Teams rules comprise secure web gateway policies.

    Example Usage

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Cloudflare = Pulumi.Cloudflare;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Cloudflare.TeamsRule("example", new()
        {
            AccountId = "f037e56e89293a057740de681ac9abbe",
            Action = "block",
            Description = "desc",
            Filters = new[]
            {
                "http",
            },
            Name = "office",
            Precedence = 1,
            RuleSettings = new Cloudflare.Inputs.TeamsRuleRuleSettingsArgs
            {
                BlockPageEnabled = true,
                BlockPageReason = "access not permitted",
            },
            Traffic = "http.request.uri == \"https://www.example.com/malicious\"",
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-cloudflare/sdk/v5/go/cloudflare"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := cloudflare.NewTeamsRule(ctx, "example", &cloudflare.TeamsRuleArgs{
    			AccountId:   pulumi.String("f037e56e89293a057740de681ac9abbe"),
    			Action:      pulumi.String("block"),
    			Description: pulumi.String("desc"),
    			Filters: pulumi.StringArray{
    				pulumi.String("http"),
    			},
    			Name:       pulumi.String("office"),
    			Precedence: pulumi.Int(1),
    			RuleSettings: &cloudflare.TeamsRuleRuleSettingsArgs{
    				BlockPageEnabled: pulumi.Bool(true),
    				BlockPageReason:  pulumi.String("access not permitted"),
    			},
    			Traffic: pulumi.String("http.request.uri == \"https://www.example.com/malicious\""),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.cloudflare.TeamsRule;
    import com.pulumi.cloudflare.TeamsRuleArgs;
    import com.pulumi.cloudflare.inputs.TeamsRuleRuleSettingsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new TeamsRule("example", TeamsRuleArgs.builder()        
                .accountId("f037e56e89293a057740de681ac9abbe")
                .action("block")
                .description("desc")
                .filters("http")
                .name("office")
                .precedence(1)
                .ruleSettings(TeamsRuleRuleSettingsArgs.builder()
                    .blockPageEnabled(true)
                    .blockPageReason("access not permitted")
                    .build())
                .traffic("http.request.uri == \"https://www.example.com/malicious\"")
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_cloudflare as cloudflare
    
    example = cloudflare.TeamsRule("example",
        account_id="f037e56e89293a057740de681ac9abbe",
        action="block",
        description="desc",
        filters=["http"],
        name="office",
        precedence=1,
        rule_settings=cloudflare.TeamsRuleRuleSettingsArgs(
            block_page_enabled=True,
            block_page_reason="access not permitted",
        ),
        traffic="http.request.uri == \"https://www.example.com/malicious\"")
    
    import * as pulumi from "@pulumi/pulumi";
    import * as cloudflare from "@pulumi/cloudflare";
    
    const example = new cloudflare.TeamsRule("example", {
        accountId: "f037e56e89293a057740de681ac9abbe",
        action: "block",
        description: "desc",
        filters: ["http"],
        name: "office",
        precedence: 1,
        ruleSettings: {
            blockPageEnabled: true,
            blockPageReason: "access not permitted",
        },
        traffic: "http.request.uri == \"https://www.example.com/malicious\"",
    });
    
    resources:
      example:
        type: cloudflare:TeamsRule
        properties:
          accountId: f037e56e89293a057740de681ac9abbe
          action: block
          description: desc
          filters:
            - http
          name: office
          precedence: 1
          ruleSettings:
            blockPageEnabled: true
            blockPageReason: access not permitted
          traffic: http.request.uri == "https://www.example.com/malicious"
    

    Create TeamsRule Resource

    new TeamsRule(name: string, args: TeamsRuleArgs, opts?: CustomResourceOptions);
    @overload
    def TeamsRule(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  account_id: Optional[str] = None,
                  action: Optional[str] = None,
                  description: Optional[str] = None,
                  device_posture: Optional[str] = None,
                  enabled: Optional[bool] = None,
                  filters: Optional[Sequence[str]] = None,
                  identity: Optional[str] = None,
                  name: Optional[str] = None,
                  precedence: Optional[int] = None,
                  rule_settings: Optional[TeamsRuleRuleSettingsArgs] = None,
                  traffic: Optional[str] = None)
    @overload
    def TeamsRule(resource_name: str,
                  args: TeamsRuleArgs,
                  opts: Optional[ResourceOptions] = None)
    func NewTeamsRule(ctx *Context, name string, args TeamsRuleArgs, opts ...ResourceOption) (*TeamsRule, error)
    public TeamsRule(string name, TeamsRuleArgs args, CustomResourceOptions? opts = null)
    public TeamsRule(String name, TeamsRuleArgs args)
    public TeamsRule(String name, TeamsRuleArgs args, CustomResourceOptions options)
    
    type: cloudflare:TeamsRule
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    name string
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    TeamsRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The TeamsRule resource accepts the following input properties:

    AccountId string

    The account identifier to target for the resource.

    Action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    Description string

    The description of the teams rule.

    Name string

    The name of the teams rule.

    Precedence int

    The evaluation precedence of the teams rule.

    DevicePosture string

    The wirefilter expression to be used for device_posture check matching.

    Enabled bool

    Indicator of rule enablement.

    Filters List<string>

    The protocol or layer to evaluate the traffic and identity expressions.

    Identity string

    The wirefilter expression to be used for identity matching.

    RuleSettings TeamsRuleRuleSettings

    Additional rule settings.

    Traffic string

    The wirefilter expression to be used for traffic matching.

    AccountId string

    The account identifier to target for the resource.

    Action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    Description string

    The description of the teams rule.

    Name string

    The name of the teams rule.

    Precedence int

    The evaluation precedence of the teams rule.

    DevicePosture string

    The wirefilter expression to be used for device_posture check matching.

    Enabled bool

    Indicator of rule enablement.

    Filters []string

    The protocol or layer to evaluate the traffic and identity expressions.

    Identity string

    The wirefilter expression to be used for identity matching.

    RuleSettings TeamsRuleRuleSettingsArgs

    Additional rule settings.

    Traffic string

    The wirefilter expression to be used for traffic matching.

    accountId String

    The account identifier to target for the resource.

    action String

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    description String

    The description of the teams rule.

    name String

    The name of the teams rule.

    precedence Integer

    The evaluation precedence of the teams rule.

    devicePosture String

    The wirefilter expression to be used for device_posture check matching.

    enabled Boolean

    Indicator of rule enablement.

    filters List<String>

    The protocol or layer to evaluate the traffic and identity expressions.

    identity String

    The wirefilter expression to be used for identity matching.

    ruleSettings TeamsRuleRuleSettings

    Additional rule settings.

    traffic String

    The wirefilter expression to be used for traffic matching.

    accountId string

    The account identifier to target for the resource.

    action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    description string

    The description of the teams rule.

    name string

    The name of the teams rule.

    precedence number

    The evaluation precedence of the teams rule.

    devicePosture string

    The wirefilter expression to be used for device_posture check matching.

    enabled boolean

    Indicator of rule enablement.

    filters string[]

    The protocol or layer to evaluate the traffic and identity expressions.

    identity string

    The wirefilter expression to be used for identity matching.

    ruleSettings TeamsRuleRuleSettings

    Additional rule settings.

    traffic string

    The wirefilter expression to be used for traffic matching.

    account_id str

    The account identifier to target for the resource.

    action str

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    description str

    The description of the teams rule.

    name str

    The name of the teams rule.

    precedence int

    The evaluation precedence of the teams rule.

    device_posture str

    The wirefilter expression to be used for device_posture check matching.

    enabled bool

    Indicator of rule enablement.

    filters Sequence[str]

    The protocol or layer to evaluate the traffic and identity expressions.

    identity str

    The wirefilter expression to be used for identity matching.

    rule_settings TeamsRuleRuleSettingsArgs

    Additional rule settings.

    traffic str

    The wirefilter expression to be used for traffic matching.

    accountId String

    The account identifier to target for the resource.

    action String

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    description String

    The description of the teams rule.

    name String

    The name of the teams rule.

    precedence Number

    The evaluation precedence of the teams rule.

    devicePosture String

    The wirefilter expression to be used for device_posture check matching.

    enabled Boolean

    Indicator of rule enablement.

    filters List<String>

    The protocol or layer to evaluate the traffic and identity expressions.

    identity String

    The wirefilter expression to be used for identity matching.

    ruleSettings Property Map

    Additional rule settings.

    traffic String

    The wirefilter expression to be used for traffic matching.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TeamsRule resource produces the following output properties:

    Id string

    The provider-assigned unique ID for this managed resource.

    Version int
    Id string

    The provider-assigned unique ID for this managed resource.

    Version int
    id String

    The provider-assigned unique ID for this managed resource.

    version Integer
    id string

    The provider-assigned unique ID for this managed resource.

    version number
    id str

    The provider-assigned unique ID for this managed resource.

    version int
    id String

    The provider-assigned unique ID for this managed resource.

    version Number

    Look up Existing TeamsRule Resource

    Get an existing TeamsRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TeamsRuleState, opts?: CustomResourceOptions): TeamsRule
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            account_id: Optional[str] = None,
            action: Optional[str] = None,
            description: Optional[str] = None,
            device_posture: Optional[str] = None,
            enabled: Optional[bool] = None,
            filters: Optional[Sequence[str]] = None,
            identity: Optional[str] = None,
            name: Optional[str] = None,
            precedence: Optional[int] = None,
            rule_settings: Optional[TeamsRuleRuleSettingsArgs] = None,
            traffic: Optional[str] = None,
            version: Optional[int] = None) -> TeamsRule
    func GetTeamsRule(ctx *Context, name string, id IDInput, state *TeamsRuleState, opts ...ResourceOption) (*TeamsRule, error)
    public static TeamsRule Get(string name, Input<string> id, TeamsRuleState? state, CustomResourceOptions? opts = null)
    public static TeamsRule get(String name, Output<String> id, TeamsRuleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string

    The account identifier to target for the resource.

    Action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    Description string

    The description of the teams rule.

    DevicePosture string

    The wirefilter expression to be used for device_posture check matching.

    Enabled bool

    Indicator of rule enablement.

    Filters List<string>

    The protocol or layer to evaluate the traffic and identity expressions.

    Identity string

    The wirefilter expression to be used for identity matching.

    Name string

    The name of the teams rule.

    Precedence int

    The evaluation precedence of the teams rule.

    RuleSettings TeamsRuleRuleSettings

    Additional rule settings.

    Traffic string

    The wirefilter expression to be used for traffic matching.

    Version int
    AccountId string

    The account identifier to target for the resource.

    Action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    Description string

    The description of the teams rule.

    DevicePosture string

    The wirefilter expression to be used for device_posture check matching.

    Enabled bool

    Indicator of rule enablement.

    Filters []string

    The protocol or layer to evaluate the traffic and identity expressions.

    Identity string

    The wirefilter expression to be used for identity matching.

    Name string

    The name of the teams rule.

    Precedence int

    The evaluation precedence of the teams rule.

    RuleSettings TeamsRuleRuleSettingsArgs

    Additional rule settings.

    Traffic string

    The wirefilter expression to be used for traffic matching.

    Version int
    accountId String

    The account identifier to target for the resource.

    action String

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    description String

    The description of the teams rule.

    devicePosture String

    The wirefilter expression to be used for device_posture check matching.

    enabled Boolean

    Indicator of rule enablement.

    filters List<String>

    The protocol or layer to evaluate the traffic and identity expressions.

    identity String

    The wirefilter expression to be used for identity matching.

    name String

    The name of the teams rule.

    precedence Integer

    The evaluation precedence of the teams rule.

    ruleSettings TeamsRuleRuleSettings

    Additional rule settings.

    traffic String

    The wirefilter expression to be used for traffic matching.

    version Integer
    accountId string

    The account identifier to target for the resource.

    action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    description string

    The description of the teams rule.

    devicePosture string

    The wirefilter expression to be used for device_posture check matching.

    enabled boolean

    Indicator of rule enablement.

    filters string[]

    The protocol or layer to evaluate the traffic and identity expressions.

    identity string

    The wirefilter expression to be used for identity matching.

    name string

    The name of the teams rule.

    precedence number

    The evaluation precedence of the teams rule.

    ruleSettings TeamsRuleRuleSettings

    Additional rule settings.

    traffic string

    The wirefilter expression to be used for traffic matching.

    version number
    account_id str

    The account identifier to target for the resource.

    action str

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    description str

    The description of the teams rule.

    device_posture str

    The wirefilter expression to be used for device_posture check matching.

    enabled bool

    Indicator of rule enablement.

    filters Sequence[str]

    The protocol or layer to evaluate the traffic and identity expressions.

    identity str

    The wirefilter expression to be used for identity matching.

    name str

    The name of the teams rule.

    precedence int

    The evaluation precedence of the teams rule.

    rule_settings TeamsRuleRuleSettingsArgs

    Additional rule settings.

    traffic str

    The wirefilter expression to be used for traffic matching.

    version int
    accountId String

    The account identifier to target for the resource.

    action String

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    description String

    The description of the teams rule.

    devicePosture String

    The wirefilter expression to be used for device_posture check matching.

    enabled Boolean

    Indicator of rule enablement.

    filters List<String>

    The protocol or layer to evaluate the traffic and identity expressions.

    identity String

    The wirefilter expression to be used for identity matching.

    name String

    The name of the teams rule.

    precedence Number

    The evaluation precedence of the teams rule.

    ruleSettings Property Map

    Additional rule settings.

    traffic String

    The wirefilter expression to be used for traffic matching.

    version Number

    Supporting Types

    TeamsRuleRuleSettings, TeamsRuleRuleSettingsArgs

    AddHeaders Dictionary<string, string>

    Add custom headers to allowed requests in the form of key-value pairs.

    AllowChildBypass bool

    Allow parent MSP accounts to enable bypass their children's rules.

    AuditSsh TeamsRuleRuleSettingsAuditSsh

    Settings for auditing SSH usage.

    BisoAdminControls TeamsRuleRuleSettingsBisoAdminControls

    Configure how browser isolation behaves.

    BlockPageEnabled bool

    Indicator of block page enablement.

    BlockPageReason string

    The displayed reason for a user being blocked.

    BypassParentRule bool

    Allow child MSP accounts to bypass their parent's rule.

    CheckSession TeamsRuleRuleSettingsCheckSession

    Configure how session check behaves.

    Egress TeamsRuleRuleSettingsEgress

    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.

    InsecureDisableDnssecValidation bool

    Disable DNSSEC validation (must be Allow rule).

    IpCategories bool

    Turns on IP category based filter on dns if the rule contains dns category checks.

    L4override TeamsRuleRuleSettingsL4override

    Settings to forward layer 4 traffic.

    OverrideHost string

    The host to override matching DNS queries with.

    OverrideIps List<string>

    The IPs to override matching DNS queries with.

    PayloadLog TeamsRuleRuleSettingsPayloadLog

    Configure DLP Payload Logging settings for this rule.

    UntrustedCert TeamsRuleRuleSettingsUntrustedCert

    Configure untrusted certificate settings for this rule.

    AddHeaders map[string]string

    Add custom headers to allowed requests in the form of key-value pairs.

    AllowChildBypass bool

    Allow parent MSP accounts to enable bypass their children's rules.

    AuditSsh TeamsRuleRuleSettingsAuditSsh

    Settings for auditing SSH usage.

    BisoAdminControls TeamsRuleRuleSettingsBisoAdminControls

    Configure how browser isolation behaves.

    BlockPageEnabled bool

    Indicator of block page enablement.

    BlockPageReason string

    The displayed reason for a user being blocked.

    BypassParentRule bool

    Allow child MSP accounts to bypass their parent's rule.

    CheckSession TeamsRuleRuleSettingsCheckSession

    Configure how session check behaves.

    Egress TeamsRuleRuleSettingsEgress

    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.

    InsecureDisableDnssecValidation bool

    Disable DNSSEC validation (must be Allow rule).

    IpCategories bool

    Turns on IP category based filter on dns if the rule contains dns category checks.

    L4override TeamsRuleRuleSettingsL4override

    Settings to forward layer 4 traffic.

    OverrideHost string

    The host to override matching DNS queries with.

    OverrideIps []string

    The IPs to override matching DNS queries with.

    PayloadLog TeamsRuleRuleSettingsPayloadLog

    Configure DLP Payload Logging settings for this rule.

    UntrustedCert TeamsRuleRuleSettingsUntrustedCert

    Configure untrusted certificate settings for this rule.

    addHeaders Map<String,String>

    Add custom headers to allowed requests in the form of key-value pairs.

    allowChildBypass Boolean

    Allow parent MSP accounts to enable bypass their children's rules.

    auditSsh TeamsRuleRuleSettingsAuditSsh

    Settings for auditing SSH usage.

    bisoAdminControls TeamsRuleRuleSettingsBisoAdminControls

    Configure how browser isolation behaves.

    blockPageEnabled Boolean

    Indicator of block page enablement.

    blockPageReason String

    The displayed reason for a user being blocked.

    bypassParentRule Boolean

    Allow child MSP accounts to bypass their parent's rule.

    checkSession TeamsRuleRuleSettingsCheckSession

    Configure how session check behaves.

    egress TeamsRuleRuleSettingsEgress

    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.

    insecureDisableDnssecValidation Boolean

    Disable DNSSEC validation (must be Allow rule).

    ipCategories Boolean

    Turns on IP category based filter on dns if the rule contains dns category checks.

    l4override TeamsRuleRuleSettingsL4override

    Settings to forward layer 4 traffic.

    overrideHost String

    The host to override matching DNS queries with.

    overrideIps List<String>

    The IPs to override matching DNS queries with.

    payloadLog TeamsRuleRuleSettingsPayloadLog

    Configure DLP Payload Logging settings for this rule.

    untrustedCert TeamsRuleRuleSettingsUntrustedCert

    Configure untrusted certificate settings for this rule.

    addHeaders {[key: string]: string}

    Add custom headers to allowed requests in the form of key-value pairs.

    allowChildBypass boolean

    Allow parent MSP accounts to enable bypass their children's rules.

    auditSsh TeamsRuleRuleSettingsAuditSsh

    Settings for auditing SSH usage.

    bisoAdminControls TeamsRuleRuleSettingsBisoAdminControls

    Configure how browser isolation behaves.

    blockPageEnabled boolean

    Indicator of block page enablement.

    blockPageReason string

    The displayed reason for a user being blocked.

    bypassParentRule boolean

    Allow child MSP accounts to bypass their parent's rule.

    checkSession TeamsRuleRuleSettingsCheckSession

    Configure how session check behaves.

    egress TeamsRuleRuleSettingsEgress

    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.

    insecureDisableDnssecValidation boolean

    Disable DNSSEC validation (must be Allow rule).

    ipCategories boolean

    Turns on IP category based filter on dns if the rule contains dns category checks.

    l4override TeamsRuleRuleSettingsL4override

    Settings to forward layer 4 traffic.

    overrideHost string

    The host to override matching DNS queries with.

    overrideIps string[]

    The IPs to override matching DNS queries with.

    payloadLog TeamsRuleRuleSettingsPayloadLog

    Configure DLP Payload Logging settings for this rule.

    untrustedCert TeamsRuleRuleSettingsUntrustedCert

    Configure untrusted certificate settings for this rule.

    add_headers Mapping[str, str]

    Add custom headers to allowed requests in the form of key-value pairs.

    allow_child_bypass bool

    Allow parent MSP accounts to enable bypass their children's rules.

    audit_ssh TeamsRuleRuleSettingsAuditSsh

    Settings for auditing SSH usage.

    biso_admin_controls TeamsRuleRuleSettingsBisoAdminControls

    Configure how browser isolation behaves.

    block_page_enabled bool

    Indicator of block page enablement.

    block_page_reason str

    The displayed reason for a user being blocked.

    bypass_parent_rule bool

    Allow child MSP accounts to bypass their parent's rule.

    check_session TeamsRuleRuleSettingsCheckSession

    Configure how session check behaves.

    egress TeamsRuleRuleSettingsEgress

    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.

    insecure_disable_dnssec_validation bool

    Disable DNSSEC validation (must be Allow rule).

    ip_categories bool

    Turns on IP category based filter on dns if the rule contains dns category checks.

    l4override TeamsRuleRuleSettingsL4override

    Settings to forward layer 4 traffic.

    override_host str

    The host to override matching DNS queries with.

    override_ips Sequence[str]

    The IPs to override matching DNS queries with.

    payload_log TeamsRuleRuleSettingsPayloadLog

    Configure DLP Payload Logging settings for this rule.

    untrusted_cert TeamsRuleRuleSettingsUntrustedCert

    Configure untrusted certificate settings for this rule.

    addHeaders Map<String>

    Add custom headers to allowed requests in the form of key-value pairs.

    allowChildBypass Boolean

    Allow parent MSP accounts to enable bypass their children's rules.

    auditSsh Property Map

    Settings for auditing SSH usage.

    bisoAdminControls Property Map

    Configure how browser isolation behaves.

    blockPageEnabled Boolean

    Indicator of block page enablement.

    blockPageReason String

    The displayed reason for a user being blocked.

    bypassParentRule Boolean

    Allow child MSP accounts to bypass their parent's rule.

    checkSession Property Map

    Configure how session check behaves.

    egress Property Map

    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.

    insecureDisableDnssecValidation Boolean

    Disable DNSSEC validation (must be Allow rule).

    ipCategories Boolean

    Turns on IP category based filter on dns if the rule contains dns category checks.

    l4override Property Map

    Settings to forward layer 4 traffic.

    overrideHost String

    The host to override matching DNS queries with.

    overrideIps List<String>

    The IPs to override matching DNS queries with.

    payloadLog Property Map

    Configure DLP Payload Logging settings for this rule.

    untrustedCert Property Map

    Configure untrusted certificate settings for this rule.

    TeamsRuleRuleSettingsAuditSsh, TeamsRuleRuleSettingsAuditSshArgs

    TeamsRuleRuleSettingsBisoAdminControls, TeamsRuleRuleSettingsBisoAdminControlsArgs

    TeamsRuleRuleSettingsCheckSession, TeamsRuleRuleSettingsCheckSessionArgs

    Duration string
    Enforce bool
    Duration string
    Enforce bool
    duration String
    enforce Boolean
    duration string
    enforce boolean
    duration String
    enforce Boolean

    TeamsRuleRuleSettingsEgress, TeamsRuleRuleSettingsEgressArgs

    Ipv4 string
    Ipv6 string
    Ipv4Fallback string
    Ipv4 string
    Ipv6 string
    Ipv4Fallback string
    ipv4 String
    ipv6 String
    ipv4Fallback String
    ipv4 string
    ipv6 string
    ipv4Fallback string
    ipv4 String
    ipv6 String
    ipv4Fallback String

    TeamsRuleRuleSettingsL4override, TeamsRuleRuleSettingsL4overrideArgs

    Ip string
    Port int
    Ip string
    Port int
    ip String
    port Integer
    ip string
    port number
    ip str
    port int
    ip String
    port Number

    TeamsRuleRuleSettingsPayloadLog, TeamsRuleRuleSettingsPayloadLogArgs

    Enabled bool

    Indicator of rule enablement.

    Enabled bool

    Indicator of rule enablement.

    enabled Boolean

    Indicator of rule enablement.

    enabled boolean

    Indicator of rule enablement.

    enabled bool

    Indicator of rule enablement.

    enabled Boolean

    Indicator of rule enablement.

    TeamsRuleRuleSettingsUntrustedCert, TeamsRuleRuleSettingsUntrustedCertArgs

    Action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    Action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    action String

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    action string

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    action str

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    action String

    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress, audit_ssh.

    Import

     $ pulumi import cloudflare:index/teamsRule:TeamsRule example <account_id>/<teams_rule_id>
    

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes

    This Pulumi package is based on the cloudflare Terraform Provider.

    cloudflare logo
    Cloudflare v5.11.0 published on Wednesday, Sep 20, 2023 by Pulumi