Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. ZeroTrustAccessGroup
Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
pulumi/pulumi-cloudflare

cloudflare.ZeroTrustAccessGroup

Explore with Pulumi AI

cloudflare logo
Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
pulumi/pulumi-cloudflare

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustAccessGroup = new cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group", {
    includes: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    name: "Allow devs",
    zoneId: "zone_id",
    excludes: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    isDefault: true,
    requires: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_access_group = cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group",
    includes=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    name="Allow devs",
    zone_id="zone_id",
    excludes=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    is_default=True,
    requires=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }])

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewZeroTrustAccessGroup(ctx, "example_zero_trust_access_group", &cloudflare.ZeroTrustAccessGroupArgs{
			Includes: cloudflare.ZeroTrustAccessGroupIncludeArray{
				&cloudflare.ZeroTrustAccessGroupIncludeArgs{
					Group: &cloudflare.ZeroTrustAccessGroupIncludeGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
			Name:   pulumi.String("Allow devs"),
			ZoneId: pulumi.String("zone_id"),
			Excludes: cloudflare.ZeroTrustAccessGroupExcludeArray{
				&cloudflare.ZeroTrustAccessGroupExcludeArgs{
					Group: &cloudflare.ZeroTrustAccessGroupExcludeGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
			IsDefault: pulumi.Bool(true),
			Requires: cloudflare.ZeroTrustAccessGroupRequireArray{
				&cloudflare.ZeroTrustAccessGroupRequireArgs{
					Group: &cloudflare.ZeroTrustAccessGroupRequireGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustAccessGroup = new Cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group", new()
    {
        Includes = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
        Name = "Allow devs",
        ZoneId = "zone_id",
        Excludes = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
        IsDefault = true,
        Requires = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupRequireArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.ZeroTrustAccessGroup;
import com.pulumi.cloudflare.ZeroTrustAccessGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupIncludeArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupIncludeGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupExcludeArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupExcludeGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupRequireArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupRequireGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleZeroTrustAccessGroup = new ZeroTrustAccessGroup("exampleZeroTrustAccessGroup", ZeroTrustAccessGroupArgs.builder()
            .includes(ZeroTrustAccessGroupIncludeArgs.builder()
                .group(ZeroTrustAccessGroupIncludeGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .name("Allow devs")
            .zoneId("zone_id")
            .excludes(ZeroTrustAccessGroupExcludeArgs.builder()
                .group(ZeroTrustAccessGroupExcludeGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .isDefault(true)
            .requires(ZeroTrustAccessGroupRequireArgs.builder()
                .group(ZeroTrustAccessGroupRequireGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .build());

    }
}

    resources:
  exampleZeroTrustAccessGroup:
    type: cloudflare:ZeroTrustAccessGroup
    name: example_zero_trust_access_group
    properties:
      includes:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      name: Allow devs
      zoneId: zone_id
      excludes:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      isDefault: true
      requires:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f

    Create ZeroTrustAccessGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZeroTrustAccessGroup(name: string, args: ZeroTrustAccessGroupArgs, opts?: CustomResourceOptions);
    @overload
def ZeroTrustAccessGroup(resource_name: str,
                         args: ZeroTrustAccessGroupArgs,
                         opts: Optional[ResourceOptions] = None)

@overload
def ZeroTrustAccessGroup(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         includes: Optional[Sequence[ZeroTrustAccessGroupIncludeArgs]] = None,
                         name: Optional[str] = None,
                         account_id: Optional[str] = None,
                         excludes: Optional[Sequence[ZeroTrustAccessGroupExcludeArgs]] = None,
                         is_default: Optional[bool] = None,
                         requires: Optional[Sequence[ZeroTrustAccessGroupRequireArgs]] = None,
                         zone_id: Optional[str] = None)
    func NewZeroTrustAccessGroup(ctx *Context, name string, args ZeroTrustAccessGroupArgs, opts ...ResourceOption) (*ZeroTrustAccessGroup, error)
    public ZeroTrustAccessGroup(string name, ZeroTrustAccessGroupArgs args, CustomResourceOptions? opts = null)
    public ZeroTrustAccessGroup(String name, ZeroTrustAccessGroupArgs args)
public ZeroTrustAccessGroup(String name, ZeroTrustAccessGroupArgs args, CustomResourceOptions options)

    type: cloudflare:ZeroTrustAccessGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ZeroTrustAccessGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZeroTrustAccessGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZeroTrustAccessGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZeroTrustAccessGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZeroTrustAccessGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var zeroTrustAccessGroupResource = new Cloudflare.ZeroTrustAccessGroup("zeroTrustAccessGroupResource", new()
{
    Includes = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeArgs
        {
            AnyValidServiceToken = null,
            AuthContext = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeAuthContextArgs
            {
                AcId = "string",
                Id = "string",
                IdentityProviderId = "string",
            },
            AuthMethod = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeAuthMethodArgs
            {
                AuthMethod = "string",
            },
            AzureAd = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeAzureAdArgs
            {
                Id = "string",
                IdentityProviderId = "string",
            },
            Certificate = null,
            CommonName = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeCommonNameArgs
            {
                CommonName = "string",
            },
            DevicePosture = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeDevicePostureArgs
            {
                IntegrationUid = "string",
            },
            Email = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeEmailArgs
            {
                Email = "string",
            },
            EmailDomain = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeEmailDomainArgs
            {
                Domain = "string",
            },
            EmailList = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeEmailListArgs
            {
                Id = "string",
            },
            Everyone = null,
            ExternalEvaluation = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geo = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGeoArgs
            {
                CountryCode = "string",
            },
            GithubOrganization = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGithubOrganizationArgs
            {
                IdentityProviderId = "string",
                Name = "string",
                Team = "string",
            },
            Group = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGroupArgs
            {
                Id = "string",
            },
            Gsuite = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGsuiteArgs
            {
                Email = "string",
                IdentityProviderId = "string",
            },
            Ip = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeIpArgs
            {
                Ip = "string",
            },
            IpList = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeIpListArgs
            {
                Id = "string",
            },
            LoginMethod = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeLoginMethodArgs
            {
                Id = "string",
            },
            Okta = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeOktaArgs
            {
                IdentityProviderId = "string",
                Name = "string",
            },
            Saml = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeSamlArgs
            {
                AttributeName = "string",
                AttributeValue = "string",
                IdentityProviderId = "string",
            },
            ServiceToken = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeServiceTokenArgs
            {
                TokenId = "string",
            },
        },
    },
    Name = "string",
    AccountId = "string",
    Excludes = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeArgs
        {
            AnyValidServiceToken = null,
            AuthContext = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeAuthContextArgs
            {
                AcId = "string",
                Id = "string",
                IdentityProviderId = "string",
            },
            AuthMethod = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeAuthMethodArgs
            {
                AuthMethod = "string",
            },
            AzureAd = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeAzureAdArgs
            {
                Id = "string",
                IdentityProviderId = "string",
            },
            Certificate = null,
            CommonName = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeCommonNameArgs
            {
                CommonName = "string",
            },
            DevicePosture = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeDevicePostureArgs
            {
                IntegrationUid = "string",
            },
            Email = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeEmailArgs
            {
                Email = "string",
            },
            EmailDomain = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeEmailDomainArgs
            {
                Domain = "string",
            },
            EmailList = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeEmailListArgs
            {
                Id = "string",
            },
            Everyone = null,
            ExternalEvaluation = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geo = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGeoArgs
            {
                CountryCode = "string",
            },
            GithubOrganization = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGithubOrganizationArgs
            {
                IdentityProviderId = "string",
                Name = "string",
                Team = "string",
            },
            Group = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGroupArgs
            {
                Id = "string",
            },
            Gsuite = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGsuiteArgs
            {
                Email = "string",
                IdentityProviderId = "string",
            },
            Ip = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeIpArgs
            {
                Ip = "string",
            },
            IpList = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeIpListArgs
            {
                Id = "string",
            },
            LoginMethod = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeLoginMethodArgs
            {
                Id = "string",
            },
            Okta = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeOktaArgs
            {
                IdentityProviderId = "string",
                Name = "string",
            },
            Saml = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeSamlArgs
            {
                AttributeName = "string",
                AttributeValue = "string",
                IdentityProviderId = "string",
            },
            ServiceToken = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeServiceTokenArgs
            {
                TokenId = "string",
            },
        },
    },
    IsDefault = false,
    Requires = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessGroupRequireArgs
        {
            AnyValidServiceToken = null,
            AuthContext = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireAuthContextArgs
            {
                AcId = "string",
                Id = "string",
                IdentityProviderId = "string",
            },
            AuthMethod = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireAuthMethodArgs
            {
                AuthMethod = "string",
            },
            AzureAd = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireAzureAdArgs
            {
                Id = "string",
                IdentityProviderId = "string",
            },
            Certificate = null,
            CommonName = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireCommonNameArgs
            {
                CommonName = "string",
            },
            DevicePosture = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireDevicePostureArgs
            {
                IntegrationUid = "string",
            },
            Email = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireEmailArgs
            {
                Email = "string",
            },
            EmailDomain = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireEmailDomainArgs
            {
                Domain = "string",
            },
            EmailList = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireEmailListArgs
            {
                Id = "string",
            },
            Everyone = null,
            ExternalEvaluation = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geo = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGeoArgs
            {
                CountryCode = "string",
            },
            GithubOrganization = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGithubOrganizationArgs
            {
                IdentityProviderId = "string",
                Name = "string",
                Team = "string",
            },
            Group = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGroupArgs
            {
                Id = "string",
            },
            Gsuite = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGsuiteArgs
            {
                Email = "string",
                IdentityProviderId = "string",
            },
            Ip = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireIpArgs
            {
                Ip = "string",
            },
            IpList = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireIpListArgs
            {
                Id = "string",
            },
            LoginMethod = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireLoginMethodArgs
            {
                Id = "string",
            },
            Okta = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireOktaArgs
            {
                IdentityProviderId = "string",
                Name = "string",
            },
            Saml = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireSamlArgs
            {
                AttributeName = "string",
                AttributeValue = "string",
                IdentityProviderId = "string",
            },
            ServiceToken = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireServiceTokenArgs
            {
                TokenId = "string",
            },
        },
    },
    ZoneId = "string",
});

    example, err := cloudflare.NewZeroTrustAccessGroup(ctx, "zeroTrustAccessGroupResource", &cloudflare.ZeroTrustAccessGroupArgs{
	Includes: cloudflare.ZeroTrustAccessGroupIncludeArray{
		&cloudflare.ZeroTrustAccessGroupIncludeArgs{
			AnyValidServiceToken: &cloudflare.ZeroTrustAccessGroupIncludeAnyValidServiceTokenArgs{},
			AuthContext: &cloudflare.ZeroTrustAccessGroupIncludeAuthContextArgs{
				AcId:               pulumi.String("string"),
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			AuthMethod: &cloudflare.ZeroTrustAccessGroupIncludeAuthMethodArgs{
				AuthMethod: pulumi.String("string"),
			},
			AzureAd: &cloudflare.ZeroTrustAccessGroupIncludeAzureAdArgs{
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Certificate: &cloudflare.ZeroTrustAccessGroupIncludeCertificateArgs{},
			CommonName: &cloudflare.ZeroTrustAccessGroupIncludeCommonNameArgs{
				CommonName: pulumi.String("string"),
			},
			DevicePosture: &cloudflare.ZeroTrustAccessGroupIncludeDevicePostureArgs{
				IntegrationUid: pulumi.String("string"),
			},
			Email: &cloudflare.ZeroTrustAccessGroupIncludeEmailArgs{
				Email: pulumi.String("string"),
			},
			EmailDomain: &cloudflare.ZeroTrustAccessGroupIncludeEmailDomainArgs{
				Domain: pulumi.String("string"),
			},
			EmailList: &cloudflare.ZeroTrustAccessGroupIncludeEmailListArgs{
				Id: pulumi.String("string"),
			},
			Everyone: &cloudflare.ZeroTrustAccessGroupIncludeEveryoneArgs{},
			ExternalEvaluation: &cloudflare.ZeroTrustAccessGroupIncludeExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geo: &cloudflare.ZeroTrustAccessGroupIncludeGeoArgs{
				CountryCode: pulumi.String("string"),
			},
			GithubOrganization: &cloudflare.ZeroTrustAccessGroupIncludeGithubOrganizationArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
				Team:               pulumi.String("string"),
			},
			Group: &cloudflare.ZeroTrustAccessGroupIncludeGroupArgs{
				Id: pulumi.String("string"),
			},
			Gsuite: &cloudflare.ZeroTrustAccessGroupIncludeGsuiteArgs{
				Email:              pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Ip: &cloudflare.ZeroTrustAccessGroupIncludeIpArgs{
				Ip: pulumi.String("string"),
			},
			IpList: &cloudflare.ZeroTrustAccessGroupIncludeIpListArgs{
				Id: pulumi.String("string"),
			},
			LoginMethod: &cloudflare.ZeroTrustAccessGroupIncludeLoginMethodArgs{
				Id: pulumi.String("string"),
			},
			Okta: &cloudflare.ZeroTrustAccessGroupIncludeOktaArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
			},
			Saml: &cloudflare.ZeroTrustAccessGroupIncludeSamlArgs{
				AttributeName:      pulumi.String("string"),
				AttributeValue:     pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			ServiceToken: &cloudflare.ZeroTrustAccessGroupIncludeServiceTokenArgs{
				TokenId: pulumi.String("string"),
			},
		},
	},
	Name:      pulumi.String("string"),
	AccountId: pulumi.String("string"),
	Excludes: cloudflare.ZeroTrustAccessGroupExcludeArray{
		&cloudflare.ZeroTrustAccessGroupExcludeArgs{
			AnyValidServiceToken: &cloudflare.ZeroTrustAccessGroupExcludeAnyValidServiceTokenArgs{},
			AuthContext: &cloudflare.ZeroTrustAccessGroupExcludeAuthContextArgs{
				AcId:               pulumi.String("string"),
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			AuthMethod: &cloudflare.ZeroTrustAccessGroupExcludeAuthMethodArgs{
				AuthMethod: pulumi.String("string"),
			},
			AzureAd: &cloudflare.ZeroTrustAccessGroupExcludeAzureAdArgs{
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Certificate: &cloudflare.ZeroTrustAccessGroupExcludeCertificateArgs{},
			CommonName: &cloudflare.ZeroTrustAccessGroupExcludeCommonNameArgs{
				CommonName: pulumi.String("string"),
			},
			DevicePosture: &cloudflare.ZeroTrustAccessGroupExcludeDevicePostureArgs{
				IntegrationUid: pulumi.String("string"),
			},
			Email: &cloudflare.ZeroTrustAccessGroupExcludeEmailArgs{
				Email: pulumi.String("string"),
			},
			EmailDomain: &cloudflare.ZeroTrustAccessGroupExcludeEmailDomainArgs{
				Domain: pulumi.String("string"),
			},
			EmailList: &cloudflare.ZeroTrustAccessGroupExcludeEmailListArgs{
				Id: pulumi.String("string"),
			},
			Everyone: &cloudflare.ZeroTrustAccessGroupExcludeEveryoneArgs{},
			ExternalEvaluation: &cloudflare.ZeroTrustAccessGroupExcludeExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geo: &cloudflare.ZeroTrustAccessGroupExcludeGeoArgs{
				CountryCode: pulumi.String("string"),
			},
			GithubOrganization: &cloudflare.ZeroTrustAccessGroupExcludeGithubOrganizationArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
				Team:               pulumi.String("string"),
			},
			Group: &cloudflare.ZeroTrustAccessGroupExcludeGroupArgs{
				Id: pulumi.String("string"),
			},
			Gsuite: &cloudflare.ZeroTrustAccessGroupExcludeGsuiteArgs{
				Email:              pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Ip: &cloudflare.ZeroTrustAccessGroupExcludeIpArgs{
				Ip: pulumi.String("string"),
			},
			IpList: &cloudflare.ZeroTrustAccessGroupExcludeIpListArgs{
				Id: pulumi.String("string"),
			},
			LoginMethod: &cloudflare.ZeroTrustAccessGroupExcludeLoginMethodArgs{
				Id: pulumi.String("string"),
			},
			Okta: &cloudflare.ZeroTrustAccessGroupExcludeOktaArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
			},
			Saml: &cloudflare.ZeroTrustAccessGroupExcludeSamlArgs{
				AttributeName:      pulumi.String("string"),
				AttributeValue:     pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			ServiceToken: &cloudflare.ZeroTrustAccessGroupExcludeServiceTokenArgs{
				TokenId: pulumi.String("string"),
			},
		},
	},
	IsDefault: pulumi.Bool(false),
	Requires: cloudflare.ZeroTrustAccessGroupRequireArray{
		&cloudflare.ZeroTrustAccessGroupRequireArgs{
			AnyValidServiceToken: &cloudflare.ZeroTrustAccessGroupRequireAnyValidServiceTokenArgs{},
			AuthContext: &cloudflare.ZeroTrustAccessGroupRequireAuthContextArgs{
				AcId:               pulumi.String("string"),
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			AuthMethod: &cloudflare.ZeroTrustAccessGroupRequireAuthMethodArgs{
				AuthMethod: pulumi.String("string"),
			},
			AzureAd: &cloudflare.ZeroTrustAccessGroupRequireAzureAdArgs{
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Certificate: &cloudflare.ZeroTrustAccessGroupRequireCertificateArgs{},
			CommonName: &cloudflare.ZeroTrustAccessGroupRequireCommonNameArgs{
				CommonName: pulumi.String("string"),
			},
			DevicePosture: &cloudflare.ZeroTrustAccessGroupRequireDevicePostureArgs{
				IntegrationUid: pulumi.String("string"),
			},
			Email: &cloudflare.ZeroTrustAccessGroupRequireEmailArgs{
				Email: pulumi.String("string"),
			},
			EmailDomain: &cloudflare.ZeroTrustAccessGroupRequireEmailDomainArgs{
				Domain: pulumi.String("string"),
			},
			EmailList: &cloudflare.ZeroTrustAccessGroupRequireEmailListArgs{
				Id: pulumi.String("string"),
			},
			Everyone: &cloudflare.ZeroTrustAccessGroupRequireEveryoneArgs{},
			ExternalEvaluation: &cloudflare.ZeroTrustAccessGroupRequireExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geo: &cloudflare.ZeroTrustAccessGroupRequireGeoArgs{
				CountryCode: pulumi.String("string"),
			},
			GithubOrganization: &cloudflare.ZeroTrustAccessGroupRequireGithubOrganizationArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
				Team:               pulumi.String("string"),
			},
			Group: &cloudflare.ZeroTrustAccessGroupRequireGroupArgs{
				Id: pulumi.String("string"),
			},
			Gsuite: &cloudflare.ZeroTrustAccessGroupRequireGsuiteArgs{
				Email:              pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Ip: &cloudflare.ZeroTrustAccessGroupRequireIpArgs{
				Ip: pulumi.String("string"),
			},
			IpList: &cloudflare.ZeroTrustAccessGroupRequireIpListArgs{
				Id: pulumi.String("string"),
			},
			LoginMethod: &cloudflare.ZeroTrustAccessGroupRequireLoginMethodArgs{
				Id: pulumi.String("string"),
			},
			Okta: &cloudflare.ZeroTrustAccessGroupRequireOktaArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
			},
			Saml: &cloudflare.ZeroTrustAccessGroupRequireSamlArgs{
				AttributeName:      pulumi.String("string"),
				AttributeValue:     pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			ServiceToken: &cloudflare.ZeroTrustAccessGroupRequireServiceTokenArgs{
				TokenId: pulumi.String("string"),
			},
		},
	},
	ZoneId: pulumi.String("string"),
})

    var zeroTrustAccessGroupResource = new ZeroTrustAccessGroup("zeroTrustAccessGroupResource", ZeroTrustAccessGroupArgs.builder()
    .includes(ZeroTrustAccessGroupIncludeArgs.builder()
        .anyValidServiceToken()
        .authContext(ZeroTrustAccessGroupIncludeAuthContextArgs.builder()
            .acId("string")
            .id("string")
            .identityProviderId("string")
            .build())
        .authMethod(ZeroTrustAccessGroupIncludeAuthMethodArgs.builder()
            .authMethod("string")
            .build())
        .azureAd(ZeroTrustAccessGroupIncludeAzureAdArgs.builder()
            .id("string")
            .identityProviderId("string")
            .build())
        .certificate()
        .commonName(ZeroTrustAccessGroupIncludeCommonNameArgs.builder()
            .commonName("string")
            .build())
        .devicePosture(ZeroTrustAccessGroupIncludeDevicePostureArgs.builder()
            .integrationUid("string")
            .build())
        .email(ZeroTrustAccessGroupIncludeEmailArgs.builder()
            .email("string")
            .build())
        .emailDomain(ZeroTrustAccessGroupIncludeEmailDomainArgs.builder()
            .domain("string")
            .build())
        .emailList(ZeroTrustAccessGroupIncludeEmailListArgs.builder()
            .id("string")
            .build())
        .everyone()
        .externalEvaluation(ZeroTrustAccessGroupIncludeExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geo(ZeroTrustAccessGroupIncludeGeoArgs.builder()
            .countryCode("string")
            .build())
        .githubOrganization(ZeroTrustAccessGroupIncludeGithubOrganizationArgs.builder()
            .identityProviderId("string")
            .name("string")
            .team("string")
            .build())
        .group(ZeroTrustAccessGroupIncludeGroupArgs.builder()
            .id("string")
            .build())
        .gsuite(ZeroTrustAccessGroupIncludeGsuiteArgs.builder()
            .email("string")
            .identityProviderId("string")
            .build())
        .ip(ZeroTrustAccessGroupIncludeIpArgs.builder()
            .ip("string")
            .build())
        .ipList(ZeroTrustAccessGroupIncludeIpListArgs.builder()
            .id("string")
            .build())
        .loginMethod(ZeroTrustAccessGroupIncludeLoginMethodArgs.builder()
            .id("string")
            .build())
        .okta(ZeroTrustAccessGroupIncludeOktaArgs.builder()
            .identityProviderId("string")
            .name("string")
            .build())
        .saml(ZeroTrustAccessGroupIncludeSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceToken(ZeroTrustAccessGroupIncludeServiceTokenArgs.builder()
            .tokenId("string")
            .build())
        .build())
    .name("string")
    .accountId("string")
    .excludes(ZeroTrustAccessGroupExcludeArgs.builder()
        .anyValidServiceToken()
        .authContext(ZeroTrustAccessGroupExcludeAuthContextArgs.builder()
            .acId("string")
            .id("string")
            .identityProviderId("string")
            .build())
        .authMethod(ZeroTrustAccessGroupExcludeAuthMethodArgs.builder()
            .authMethod("string")
            .build())
        .azureAd(ZeroTrustAccessGroupExcludeAzureAdArgs.builder()
            .id("string")
            .identityProviderId("string")
            .build())
        .certificate()
        .commonName(ZeroTrustAccessGroupExcludeCommonNameArgs.builder()
            .commonName("string")
            .build())
        .devicePosture(ZeroTrustAccessGroupExcludeDevicePostureArgs.builder()
            .integrationUid("string")
            .build())
        .email(ZeroTrustAccessGroupExcludeEmailArgs.builder()
            .email("string")
            .build())
        .emailDomain(ZeroTrustAccessGroupExcludeEmailDomainArgs.builder()
            .domain("string")
            .build())
        .emailList(ZeroTrustAccessGroupExcludeEmailListArgs.builder()
            .id("string")
            .build())
        .everyone()
        .externalEvaluation(ZeroTrustAccessGroupExcludeExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geo(ZeroTrustAccessGroupExcludeGeoArgs.builder()
            .countryCode("string")
            .build())
        .githubOrganization(ZeroTrustAccessGroupExcludeGithubOrganizationArgs.builder()
            .identityProviderId("string")
            .name("string")
            .team("string")
            .build())
        .group(ZeroTrustAccessGroupExcludeGroupArgs.builder()
            .id("string")
            .build())
        .gsuite(ZeroTrustAccessGroupExcludeGsuiteArgs.builder()
            .email("string")
            .identityProviderId("string")
            .build())
        .ip(ZeroTrustAccessGroupExcludeIpArgs.builder()
            .ip("string")
            .build())
        .ipList(ZeroTrustAccessGroupExcludeIpListArgs.builder()
            .id("string")
            .build())
        .loginMethod(ZeroTrustAccessGroupExcludeLoginMethodArgs.builder()
            .id("string")
            .build())
        .okta(ZeroTrustAccessGroupExcludeOktaArgs.builder()
            .identityProviderId("string")
            .name("string")
            .build())
        .saml(ZeroTrustAccessGroupExcludeSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceToken(ZeroTrustAccessGroupExcludeServiceTokenArgs.builder()
            .tokenId("string")
            .build())
        .build())
    .isDefault(false)
    .requires(ZeroTrustAccessGroupRequireArgs.builder()
        .anyValidServiceToken()
        .authContext(ZeroTrustAccessGroupRequireAuthContextArgs.builder()
            .acId("string")
            .id("string")
            .identityProviderId("string")
            .build())
        .authMethod(ZeroTrustAccessGroupRequireAuthMethodArgs.builder()
            .authMethod("string")
            .build())
        .azureAd(ZeroTrustAccessGroupRequireAzureAdArgs.builder()
            .id("string")
            .identityProviderId("string")
            .build())
        .certificate()
        .commonName(ZeroTrustAccessGroupRequireCommonNameArgs.builder()
            .commonName("string")
            .build())
        .devicePosture(ZeroTrustAccessGroupRequireDevicePostureArgs.builder()
            .integrationUid("string")
            .build())
        .email(ZeroTrustAccessGroupRequireEmailArgs.builder()
            .email("string")
            .build())
        .emailDomain(ZeroTrustAccessGroupRequireEmailDomainArgs.builder()
            .domain("string")
            .build())
        .emailList(ZeroTrustAccessGroupRequireEmailListArgs.builder()
            .id("string")
            .build())
        .everyone()
        .externalEvaluation(ZeroTrustAccessGroupRequireExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geo(ZeroTrustAccessGroupRequireGeoArgs.builder()
            .countryCode("string")
            .build())
        .githubOrganization(ZeroTrustAccessGroupRequireGithubOrganizationArgs.builder()
            .identityProviderId("string")
            .name("string")
            .team("string")
            .build())
        .group(ZeroTrustAccessGroupRequireGroupArgs.builder()
            .id("string")
            .build())
        .gsuite(ZeroTrustAccessGroupRequireGsuiteArgs.builder()
            .email("string")
            .identityProviderId("string")
            .build())
        .ip(ZeroTrustAccessGroupRequireIpArgs.builder()
            .ip("string")
            .build())
        .ipList(ZeroTrustAccessGroupRequireIpListArgs.builder()
            .id("string")
            .build())
        .loginMethod(ZeroTrustAccessGroupRequireLoginMethodArgs.builder()
            .id("string")
            .build())
        .okta(ZeroTrustAccessGroupRequireOktaArgs.builder()
            .identityProviderId("string")
            .name("string")
            .build())
        .saml(ZeroTrustAccessGroupRequireSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceToken(ZeroTrustAccessGroupRequireServiceTokenArgs.builder()
            .tokenId("string")
            .build())
        .build())
    .zoneId("string")
    .build());

    zero_trust_access_group_resource = cloudflare.ZeroTrustAccessGroup("zeroTrustAccessGroupResource",
    includes=[{
        "any_valid_service_token": {},
        "auth_context": {
            "ac_id": "string",
            "id": "string",
            "identity_provider_id": "string",
        },
        "auth_method": {
            "auth_method": "string",
        },
        "azure_ad": {
            "id": "string",
            "identity_provider_id": "string",
        },
        "certificate": {},
        "common_name": {
            "common_name": "string",
        },
        "device_posture": {
            "integration_uid": "string",
        },
        "email": {
            "email": "string",
        },
        "email_domain": {
            "domain": "string",
        },
        "email_list": {
            "id": "string",
        },
        "everyone": {},
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geo": {
            "country_code": "string",
        },
        "github_organization": {
            "identity_provider_id": "string",
            "name": "string",
            "team": "string",
        },
        "group": {
            "id": "string",
        },
        "gsuite": {
            "email": "string",
            "identity_provider_id": "string",
        },
        "ip": {
            "ip": "string",
        },
        "ip_list": {
            "id": "string",
        },
        "login_method": {
            "id": "string",
        },
        "okta": {
            "identity_provider_id": "string",
            "name": "string",
        },
        "saml": {
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        },
        "service_token": {
            "token_id": "string",
        },
    }],
    name="string",
    account_id="string",
    excludes=[{
        "any_valid_service_token": {},
        "auth_context": {
            "ac_id": "string",
            "id": "string",
            "identity_provider_id": "string",
        },
        "auth_method": {
            "auth_method": "string",
        },
        "azure_ad": {
            "id": "string",
            "identity_provider_id": "string",
        },
        "certificate": {},
        "common_name": {
            "common_name": "string",
        },
        "device_posture": {
            "integration_uid": "string",
        },
        "email": {
            "email": "string",
        },
        "email_domain": {
            "domain": "string",
        },
        "email_list": {
            "id": "string",
        },
        "everyone": {},
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geo": {
            "country_code": "string",
        },
        "github_organization": {
            "identity_provider_id": "string",
            "name": "string",
            "team": "string",
        },
        "group": {
            "id": "string",
        },
        "gsuite": {
            "email": "string",
            "identity_provider_id": "string",
        },
        "ip": {
            "ip": "string",
        },
        "ip_list": {
            "id": "string",
        },
        "login_method": {
            "id": "string",
        },
        "okta": {
            "identity_provider_id": "string",
            "name": "string",
        },
        "saml": {
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        },
        "service_token": {
            "token_id": "string",
        },
    }],
    is_default=False,
    requires=[{
        "any_valid_service_token": {},
        "auth_context": {
            "ac_id": "string",
            "id": "string",
            "identity_provider_id": "string",
        },
        "auth_method": {
            "auth_method": "string",
        },
        "azure_ad": {
            "id": "string",
            "identity_provider_id": "string",
        },
        "certificate": {},
        "common_name": {
            "common_name": "string",
        },
        "device_posture": {
            "integration_uid": "string",
        },
        "email": {
            "email": "string",
        },
        "email_domain": {
            "domain": "string",
        },
        "email_list": {
            "id": "string",
        },
        "everyone": {},
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geo": {
            "country_code": "string",
        },
        "github_organization": {
            "identity_provider_id": "string",
            "name": "string",
            "team": "string",
        },
        "group": {
            "id": "string",
        },
        "gsuite": {
            "email": "string",
            "identity_provider_id": "string",
        },
        "ip": {
            "ip": "string",
        },
        "ip_list": {
            "id": "string",
        },
        "login_method": {
            "id": "string",
        },
        "okta": {
            "identity_provider_id": "string",
            "name": "string",
        },
        "saml": {
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        },
        "service_token": {
            "token_id": "string",
        },
    }],
    zone_id="string")

    const zeroTrustAccessGroupResource = new cloudflare.ZeroTrustAccessGroup("zeroTrustAccessGroupResource", {
    includes: [{
        anyValidServiceToken: {},
        authContext: {
            acId: "string",
            id: "string",
            identityProviderId: "string",
        },
        authMethod: {
            authMethod: "string",
        },
        azureAd: {
            id: "string",
            identityProviderId: "string",
        },
        certificate: {},
        commonName: {
            commonName: "string",
        },
        devicePosture: {
            integrationUid: "string",
        },
        email: {
            email: "string",
        },
        emailDomain: {
            domain: "string",
        },
        emailList: {
            id: "string",
        },
        everyone: {},
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geo: {
            countryCode: "string",
        },
        githubOrganization: {
            identityProviderId: "string",
            name: "string",
            team: "string",
        },
        group: {
            id: "string",
        },
        gsuite: {
            email: "string",
            identityProviderId: "string",
        },
        ip: {
            ip: "string",
        },
        ipList: {
            id: "string",
        },
        loginMethod: {
            id: "string",
        },
        okta: {
            identityProviderId: "string",
            name: "string",
        },
        saml: {
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        },
        serviceToken: {
            tokenId: "string",
        },
    }],
    name: "string",
    accountId: "string",
    excludes: [{
        anyValidServiceToken: {},
        authContext: {
            acId: "string",
            id: "string",
            identityProviderId: "string",
        },
        authMethod: {
            authMethod: "string",
        },
        azureAd: {
            id: "string",
            identityProviderId: "string",
        },
        certificate: {},
        commonName: {
            commonName: "string",
        },
        devicePosture: {
            integrationUid: "string",
        },
        email: {
            email: "string",
        },
        emailDomain: {
            domain: "string",
        },
        emailList: {
            id: "string",
        },
        everyone: {},
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geo: {
            countryCode: "string",
        },
        githubOrganization: {
            identityProviderId: "string",
            name: "string",
            team: "string",
        },
        group: {
            id: "string",
        },
        gsuite: {
            email: "string",
            identityProviderId: "string",
        },
        ip: {
            ip: "string",
        },
        ipList: {
            id: "string",
        },
        loginMethod: {
            id: "string",
        },
        okta: {
            identityProviderId: "string",
            name: "string",
        },
        saml: {
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        },
        serviceToken: {
            tokenId: "string",
        },
    }],
    isDefault: false,
    requires: [{
        anyValidServiceToken: {},
        authContext: {
            acId: "string",
            id: "string",
            identityProviderId: "string",
        },
        authMethod: {
            authMethod: "string",
        },
        azureAd: {
            id: "string",
            identityProviderId: "string",
        },
        certificate: {},
        commonName: {
            commonName: "string",
        },
        devicePosture: {
            integrationUid: "string",
        },
        email: {
            email: "string",
        },
        emailDomain: {
            domain: "string",
        },
        emailList: {
            id: "string",
        },
        everyone: {},
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geo: {
            countryCode: "string",
        },
        githubOrganization: {
            identityProviderId: "string",
            name: "string",
            team: "string",
        },
        group: {
            id: "string",
        },
        gsuite: {
            email: "string",
            identityProviderId: "string",
        },
        ip: {
            ip: "string",
        },
        ipList: {
            id: "string",
        },
        loginMethod: {
            id: "string",
        },
        okta: {
            identityProviderId: "string",
            name: "string",
        },
        saml: {
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        },
        serviceToken: {
            tokenId: "string",
        },
    }],
    zoneId: "string",
});

    type: cloudflare:ZeroTrustAccessGroup
properties:
    accountId: string
    excludes:
        - anyValidServiceToken: {}
          authContext:
            acId: string
            id: string
            identityProviderId: string
          authMethod:
            authMethod: string
          azureAd:
            id: string
            identityProviderId: string
          certificate: {}
          commonName:
            commonName: string
          devicePosture:
            integrationUid: string
          email:
            email: string
          emailDomain:
            domain: string
          emailList:
            id: string
          everyone: {}
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geo:
            countryCode: string
          githubOrganization:
            identityProviderId: string
            name: string
            team: string
          group:
            id: string
          gsuite:
            email: string
            identityProviderId: string
          ip:
            ip: string
          ipList:
            id: string
          loginMethod:
            id: string
          okta:
            identityProviderId: string
            name: string
          saml:
            attributeName: string
            attributeValue: string
            identityProviderId: string
          serviceToken:
            tokenId: string
    includes:
        - anyValidServiceToken: {}
          authContext:
            acId: string
            id: string
            identityProviderId: string
          authMethod:
            authMethod: string
          azureAd:
            id: string
            identityProviderId: string
          certificate: {}
          commonName:
            commonName: string
          devicePosture:
            integrationUid: string
          email:
            email: string
          emailDomain:
            domain: string
          emailList:
            id: string
          everyone: {}
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geo:
            countryCode: string
          githubOrganization:
            identityProviderId: string
            name: string
            team: string
          group:
            id: string
          gsuite:
            email: string
            identityProviderId: string
          ip:
            ip: string
          ipList:
            id: string
          loginMethod:
            id: string
          okta:
            identityProviderId: string
            name: string
          saml:
            attributeName: string
            attributeValue: string
            identityProviderId: string
          serviceToken:
            tokenId: string
    isDefault: false
    name: string
    requires:
        - anyValidServiceToken: {}
          authContext:
            acId: string
            id: string
            identityProviderId: string
          authMethod:
            authMethod: string
          azureAd:
            id: string
            identityProviderId: string
          certificate: {}
          commonName:
            commonName: string
          devicePosture:
            integrationUid: string
          email:
            email: string
          emailDomain:
            domain: string
          emailList:
            id: string
          everyone: {}
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geo:
            countryCode: string
          githubOrganization:
            identityProviderId: string
            name: string
            team: string
          group:
            id: string
          gsuite:
            email: string
            identityProviderId: string
          ip:
            ip: string
          ipList:
            id: string
          loginMethod:
            id: string
          okta:
            identityProviderId: string
            name: string
          saml:
            attributeName: string
            attributeValue: string
            identityProviderId: string
          serviceToken:
            tokenId: string
    zoneId: string

    ZeroTrustAccessGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZeroTrustAccessGroup resource accepts the following input properties:

    Includes List<ZeroTrustAccessGroupInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    Name string
    The name of the Access group.
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    Excludes List<ZeroTrustAccessGroupExclude>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    IsDefault bool
    Whether this is the default group
    Requires List<ZeroTrustAccessGroupRequire>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    Includes []ZeroTrustAccessGroupIncludeArgs
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    Name string
    The name of the Access group.
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    Excludes []ZeroTrustAccessGroupExcludeArgs
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    IsDefault bool
    Whether this is the default group
    Requires []ZeroTrustAccessGroupRequireArgs
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    includes List<ZeroTrustAccessGroupInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name String
    The name of the Access group.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    excludes List<ZeroTrustAccessGroupExclude>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    isDefault Boolean
    Whether this is the default group
    requires List<ZeroTrustAccessGroupRequire>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    includes ZeroTrustAccessGroupInclude[]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name string
    The name of the Access group.
    accountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    excludes ZeroTrustAccessGroupExclude[]
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    isDefault boolean
    Whether this is the default group
    requires ZeroTrustAccessGroupRequire[]
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    zoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    includes Sequence[ZeroTrustAccessGroupIncludeArgs]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name str
    The name of the Access group.
    account_id str
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    excludes Sequence[ZeroTrustAccessGroupExcludeArgs]
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    is_default bool
    Whether this is the default group
    requires Sequence[ZeroTrustAccessGroupRequireArgs]
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    zone_id str
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    includes List<Property Map>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name String
    The name of the Access group.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    excludes List<Property Map>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    isDefault Boolean
    Whether this is the default group
    requires List<Property Map>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZeroTrustAccessGroup resource produces the following output properties:

    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    createdAt string
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    created_at str
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String

    Look up Existing ZeroTrustAccessGroup Resource

    Get an existing ZeroTrustAccessGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZeroTrustAccessGroupState, opts?: CustomResourceOptions): ZeroTrustAccessGroup
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        created_at: Optional[str] = None,
        excludes: Optional[Sequence[ZeroTrustAccessGroupExcludeArgs]] = None,
        includes: Optional[Sequence[ZeroTrustAccessGroupIncludeArgs]] = None,
        is_default: Optional[bool] = None,
        name: Optional[str] = None,
        requires: Optional[Sequence[ZeroTrustAccessGroupRequireArgs]] = None,
        updated_at: Optional[str] = None,
        zone_id: Optional[str] = None) -> ZeroTrustAccessGroup
    func GetZeroTrustAccessGroup(ctx *Context, name string, id IDInput, state *ZeroTrustAccessGroupState, opts ...ResourceOption) (*ZeroTrustAccessGroup, error)
    public static ZeroTrustAccessGroup Get(string name, Input<string> id, ZeroTrustAccessGroupState? state, CustomResourceOptions? opts = null)
    public static ZeroTrustAccessGroup get(String name, Output<String> id, ZeroTrustAccessGroupState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:ZeroTrustAccessGroup    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    CreatedAt string
    Excludes List<ZeroTrustAccessGroupExclude>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    Includes List<ZeroTrustAccessGroupInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    IsDefault bool
    Whether this is the default group
    Name string
    The name of the Access group.
    Requires List<ZeroTrustAccessGroupRequire>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    UpdatedAt string
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    CreatedAt string
    Excludes []ZeroTrustAccessGroupExcludeArgs
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    Includes []ZeroTrustAccessGroupIncludeArgs
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    IsDefault bool
    Whether this is the default group
    Name string
    The name of the Access group.
    Requires []ZeroTrustAccessGroupRequireArgs
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    UpdatedAt string
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    createdAt String
    excludes List<ZeroTrustAccessGroupExclude>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    includes List<ZeroTrustAccessGroupInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isDefault Boolean
    Whether this is the default group
    name String
    The name of the Access group.
    requires List<ZeroTrustAccessGroupRequire>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    updatedAt String
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    createdAt string
    excludes ZeroTrustAccessGroupExclude[]
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    includes ZeroTrustAccessGroupInclude[]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isDefault boolean
    Whether this is the default group
    name string
    The name of the Access group.
    requires ZeroTrustAccessGroupRequire[]
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    updatedAt string
    zoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    account_id str
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    created_at str
    excludes Sequence[ZeroTrustAccessGroupExcludeArgs]
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    includes Sequence[ZeroTrustAccessGroupIncludeArgs]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    is_default bool
    Whether this is the default group
    name str
    The name of the Access group.
    requires Sequence[ZeroTrustAccessGroupRequireArgs]
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    updated_at str
    zone_id str
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    createdAt String
    excludes List<Property Map>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    includes List<Property Map>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isDefault Boolean
    Whether this is the default group
    name String
    The name of the Access group.
    requires List<Property Map>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    updatedAt String
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

    Supporting Types

    ZeroTrustAccessGroupExclude, ZeroTrustAccessGroupExcludeArgs

    AnyValidServiceToken ZeroTrustAccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessGroupExcludeAuthContext
    AuthMethod ZeroTrustAccessGroupExcludeAuthMethod
    AzureAd ZeroTrustAccessGroupExcludeAzureAd
    Certificate ZeroTrustAccessGroupExcludeCertificate
    CommonName ZeroTrustAccessGroupExcludeCommonName
    DevicePosture ZeroTrustAccessGroupExcludeDevicePosture
    Email ZeroTrustAccessGroupExcludeEmail
    EmailDomain ZeroTrustAccessGroupExcludeEmailDomain
    EmailList ZeroTrustAccessGroupExcludeEmailList
    Everyone ZeroTrustAccessGroupExcludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessGroupExcludeExternalEvaluation
    Geo ZeroTrustAccessGroupExcludeGeo
    GithubOrganization ZeroTrustAccessGroupExcludeGithubOrganization
    Group ZeroTrustAccessGroupExcludeGroup
    Gsuite ZeroTrustAccessGroupExcludeGsuite
    Ip ZeroTrustAccessGroupExcludeIp
    IpList ZeroTrustAccessGroupExcludeIpList
    LoginMethod ZeroTrustAccessGroupExcludeLoginMethod
    Okta ZeroTrustAccessGroupExcludeOkta
    Saml ZeroTrustAccessGroupExcludeSaml
    ServiceToken ZeroTrustAccessGroupExcludeServiceToken
    AnyValidServiceToken ZeroTrustAccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessGroupExcludeAuthContext
    AuthMethod ZeroTrustAccessGroupExcludeAuthMethod
    AzureAd ZeroTrustAccessGroupExcludeAzureAd
    Certificate ZeroTrustAccessGroupExcludeCertificate
    CommonName ZeroTrustAccessGroupExcludeCommonName
    DevicePosture ZeroTrustAccessGroupExcludeDevicePosture
    Email ZeroTrustAccessGroupExcludeEmail
    EmailDomain ZeroTrustAccessGroupExcludeEmailDomain
    EmailList ZeroTrustAccessGroupExcludeEmailList
    Everyone ZeroTrustAccessGroupExcludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessGroupExcludeExternalEvaluation
    Geo ZeroTrustAccessGroupExcludeGeo
    GithubOrganization ZeroTrustAccessGroupExcludeGithubOrganization
    Group ZeroTrustAccessGroupExcludeGroup
    Gsuite ZeroTrustAccessGroupExcludeGsuite
    Ip ZeroTrustAccessGroupExcludeIp
    IpList ZeroTrustAccessGroupExcludeIpList
    LoginMethod ZeroTrustAccessGroupExcludeLoginMethod
    Okta ZeroTrustAccessGroupExcludeOkta
    Saml ZeroTrustAccessGroupExcludeSaml
    ServiceToken ZeroTrustAccessGroupExcludeServiceToken
    anyValidServiceToken ZeroTrustAccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessGroupExcludeAuthContext
    authMethod ZeroTrustAccessGroupExcludeAuthMethod
    azureAd ZeroTrustAccessGroupExcludeAzureAd
    certificate ZeroTrustAccessGroupExcludeCertificate
    commonName ZeroTrustAccessGroupExcludeCommonName
    devicePosture ZeroTrustAccessGroupExcludeDevicePosture
    email ZeroTrustAccessGroupExcludeEmail
    emailDomain ZeroTrustAccessGroupExcludeEmailDomain
    emailList ZeroTrustAccessGroupExcludeEmailList
    everyone ZeroTrustAccessGroupExcludeEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessGroupExcludeExternalEvaluation
    geo ZeroTrustAccessGroupExcludeGeo
    githubOrganization ZeroTrustAccessGroupExcludeGithubOrganization
    group ZeroTrustAccessGroupExcludeGroup
    gsuite ZeroTrustAccessGroupExcludeGsuite
    ip ZeroTrustAccessGroupExcludeIp
    ipList ZeroTrustAccessGroupExcludeIpList
    loginMethod ZeroTrustAccessGroupExcludeLoginMethod
    okta ZeroTrustAccessGroupExcludeOkta
    saml ZeroTrustAccessGroupExcludeSaml
    serviceToken ZeroTrustAccessGroupExcludeServiceToken
    anyValidServiceToken ZeroTrustAccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessGroupExcludeAuthContext
    authMethod ZeroTrustAccessGroupExcludeAuthMethod
    azureAd ZeroTrustAccessGroupExcludeAzureAd
    certificate ZeroTrustAccessGroupExcludeCertificate
    commonName ZeroTrustAccessGroupExcludeCommonName
    devicePosture ZeroTrustAccessGroupExcludeDevicePosture
    email ZeroTrustAccessGroupExcludeEmail
    emailDomain ZeroTrustAccessGroupExcludeEmailDomain
    emailList ZeroTrustAccessGroupExcludeEmailList
    everyone ZeroTrustAccessGroupExcludeEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessGroupExcludeExternalEvaluation
    geo ZeroTrustAccessGroupExcludeGeo
    githubOrganization ZeroTrustAccessGroupExcludeGithubOrganization
    group ZeroTrustAccessGroupExcludeGroup
    gsuite ZeroTrustAccessGroupExcludeGsuite
    ip ZeroTrustAccessGroupExcludeIp
    ipList ZeroTrustAccessGroupExcludeIpList
    loginMethod ZeroTrustAccessGroupExcludeLoginMethod
    okta ZeroTrustAccessGroupExcludeOkta
    saml ZeroTrustAccessGroupExcludeSaml
    serviceToken ZeroTrustAccessGroupExcludeServiceToken
    any_valid_service_token ZeroTrustAccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context ZeroTrustAccessGroupExcludeAuthContext
    auth_method ZeroTrustAccessGroupExcludeAuthMethod
    azure_ad ZeroTrustAccessGroupExcludeAzureAd
    certificate ZeroTrustAccessGroupExcludeCertificate
    common_name ZeroTrustAccessGroupExcludeCommonName
    device_posture ZeroTrustAccessGroupExcludeDevicePosture
    email ZeroTrustAccessGroupExcludeEmail
    email_domain ZeroTrustAccessGroupExcludeEmailDomain
    email_list ZeroTrustAccessGroupExcludeEmailList
    everyone ZeroTrustAccessGroupExcludeEveryone
    An empty object which matches on all users.
    external_evaluation ZeroTrustAccessGroupExcludeExternalEvaluation
    geo ZeroTrustAccessGroupExcludeGeo
    github_organization ZeroTrustAccessGroupExcludeGithubOrganization
    group ZeroTrustAccessGroupExcludeGroup
    gsuite ZeroTrustAccessGroupExcludeGsuite
    ip ZeroTrustAccessGroupExcludeIp
    ip_list ZeroTrustAccessGroupExcludeIpList
    login_method ZeroTrustAccessGroupExcludeLoginMethod
    okta ZeroTrustAccessGroupExcludeOkta
    saml ZeroTrustAccessGroupExcludeSaml
    service_token ZeroTrustAccessGroupExcludeServiceToken

    ZeroTrustAccessGroupExcludeAuthContext, ZeroTrustAccessGroupExcludeAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessGroupExcludeAuthMethod, ZeroTrustAccessGroupExcludeAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    ZeroTrustAccessGroupExcludeAzureAd, ZeroTrustAccessGroupExcludeAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessGroupExcludeCommonName, ZeroTrustAccessGroupExcludeCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    ZeroTrustAccessGroupExcludeDevicePosture, ZeroTrustAccessGroupExcludeDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    ZeroTrustAccessGroupExcludeEmail, ZeroTrustAccessGroupExcludeEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    ZeroTrustAccessGroupExcludeEmailDomain, ZeroTrustAccessGroupExcludeEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    ZeroTrustAccessGroupExcludeEmailList, ZeroTrustAccessGroupExcludeEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    ZeroTrustAccessGroupExcludeExternalEvaluation, ZeroTrustAccessGroupExcludeExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    ZeroTrustAccessGroupExcludeGeo, ZeroTrustAccessGroupExcludeGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    ZeroTrustAccessGroupExcludeGithubOrganization, ZeroTrustAccessGroupExcludeGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    ZeroTrustAccessGroupExcludeGroup, ZeroTrustAccessGroupExcludeGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    ZeroTrustAccessGroupExcludeGsuite, ZeroTrustAccessGroupExcludeGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    ZeroTrustAccessGroupExcludeIp, ZeroTrustAccessGroupExcludeIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    ZeroTrustAccessGroupExcludeIpList, ZeroTrustAccessGroupExcludeIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    ZeroTrustAccessGroupExcludeLoginMethod, ZeroTrustAccessGroupExcludeLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    ZeroTrustAccessGroupExcludeOkta, ZeroTrustAccessGroupExcludeOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    ZeroTrustAccessGroupExcludeSaml, ZeroTrustAccessGroupExcludeSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    ZeroTrustAccessGroupExcludeServiceToken, ZeroTrustAccessGroupExcludeServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    ZeroTrustAccessGroupInclude, ZeroTrustAccessGroupIncludeArgs

    AnyValidServiceToken ZeroTrustAccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessGroupIncludeAuthContext
    AuthMethod ZeroTrustAccessGroupIncludeAuthMethod
    AzureAd ZeroTrustAccessGroupIncludeAzureAd
    Certificate ZeroTrustAccessGroupIncludeCertificate
    CommonName ZeroTrustAccessGroupIncludeCommonName
    DevicePosture ZeroTrustAccessGroupIncludeDevicePosture
    Email ZeroTrustAccessGroupIncludeEmail
    EmailDomain ZeroTrustAccessGroupIncludeEmailDomain
    EmailList ZeroTrustAccessGroupIncludeEmailList
    Everyone ZeroTrustAccessGroupIncludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessGroupIncludeExternalEvaluation
    Geo ZeroTrustAccessGroupIncludeGeo
    GithubOrganization ZeroTrustAccessGroupIncludeGithubOrganization
    Group ZeroTrustAccessGroupIncludeGroup
    Gsuite ZeroTrustAccessGroupIncludeGsuite
    Ip ZeroTrustAccessGroupIncludeIp
    IpList ZeroTrustAccessGroupIncludeIpList
    LoginMethod ZeroTrustAccessGroupIncludeLoginMethod
    Okta ZeroTrustAccessGroupIncludeOkta
    Saml ZeroTrustAccessGroupIncludeSaml
    ServiceToken ZeroTrustAccessGroupIncludeServiceToken
    AnyValidServiceToken ZeroTrustAccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessGroupIncludeAuthContext
    AuthMethod ZeroTrustAccessGroupIncludeAuthMethod
    AzureAd ZeroTrustAccessGroupIncludeAzureAd
    Certificate ZeroTrustAccessGroupIncludeCertificate
    CommonName ZeroTrustAccessGroupIncludeCommonName
    DevicePosture ZeroTrustAccessGroupIncludeDevicePosture
    Email ZeroTrustAccessGroupIncludeEmail
    EmailDomain ZeroTrustAccessGroupIncludeEmailDomain
    EmailList ZeroTrustAccessGroupIncludeEmailList
    Everyone ZeroTrustAccessGroupIncludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessGroupIncludeExternalEvaluation
    Geo ZeroTrustAccessGroupIncludeGeo
    GithubOrganization ZeroTrustAccessGroupIncludeGithubOrganization
    Group ZeroTrustAccessGroupIncludeGroup
    Gsuite ZeroTrustAccessGroupIncludeGsuite
    Ip ZeroTrustAccessGroupIncludeIp
    IpList ZeroTrustAccessGroupIncludeIpList
    LoginMethod ZeroTrustAccessGroupIncludeLoginMethod
    Okta ZeroTrustAccessGroupIncludeOkta
    Saml ZeroTrustAccessGroupIncludeSaml
    ServiceToken ZeroTrustAccessGroupIncludeServiceToken
    anyValidServiceToken ZeroTrustAccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessGroupIncludeAuthContext
    authMethod ZeroTrustAccessGroupIncludeAuthMethod
    azureAd ZeroTrustAccessGroupIncludeAzureAd
    certificate ZeroTrustAccessGroupIncludeCertificate
    commonName ZeroTrustAccessGroupIncludeCommonName
    devicePosture ZeroTrustAccessGroupIncludeDevicePosture
    email ZeroTrustAccessGroupIncludeEmail
    emailDomain ZeroTrustAccessGroupIncludeEmailDomain
    emailList ZeroTrustAccessGroupIncludeEmailList
    everyone ZeroTrustAccessGroupIncludeEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessGroupIncludeExternalEvaluation
    geo ZeroTrustAccessGroupIncludeGeo
    githubOrganization ZeroTrustAccessGroupIncludeGithubOrganization
    group ZeroTrustAccessGroupIncludeGroup
    gsuite ZeroTrustAccessGroupIncludeGsuite
    ip ZeroTrustAccessGroupIncludeIp
    ipList ZeroTrustAccessGroupIncludeIpList
    loginMethod ZeroTrustAccessGroupIncludeLoginMethod
    okta ZeroTrustAccessGroupIncludeOkta
    saml ZeroTrustAccessGroupIncludeSaml
    serviceToken ZeroTrustAccessGroupIncludeServiceToken
    anyValidServiceToken ZeroTrustAccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessGroupIncludeAuthContext
    authMethod ZeroTrustAccessGroupIncludeAuthMethod
    azureAd ZeroTrustAccessGroupIncludeAzureAd
    certificate ZeroTrustAccessGroupIncludeCertificate
    commonName ZeroTrustAccessGroupIncludeCommonName
    devicePosture ZeroTrustAccessGroupIncludeDevicePosture
    email ZeroTrustAccessGroupIncludeEmail
    emailDomain ZeroTrustAccessGroupIncludeEmailDomain
    emailList ZeroTrustAccessGroupIncludeEmailList
    everyone ZeroTrustAccessGroupIncludeEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessGroupIncludeExternalEvaluation
    geo ZeroTrustAccessGroupIncludeGeo
    githubOrganization ZeroTrustAccessGroupIncludeGithubOrganization
    group ZeroTrustAccessGroupIncludeGroup
    gsuite ZeroTrustAccessGroupIncludeGsuite
    ip ZeroTrustAccessGroupIncludeIp
    ipList ZeroTrustAccessGroupIncludeIpList
    loginMethod ZeroTrustAccessGroupIncludeLoginMethod
    okta ZeroTrustAccessGroupIncludeOkta
    saml ZeroTrustAccessGroupIncludeSaml
    serviceToken ZeroTrustAccessGroupIncludeServiceToken
    any_valid_service_token ZeroTrustAccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context ZeroTrustAccessGroupIncludeAuthContext
    auth_method ZeroTrustAccessGroupIncludeAuthMethod
    azure_ad ZeroTrustAccessGroupIncludeAzureAd
    certificate ZeroTrustAccessGroupIncludeCertificate
    common_name ZeroTrustAccessGroupIncludeCommonName
    device_posture ZeroTrustAccessGroupIncludeDevicePosture
    email ZeroTrustAccessGroupIncludeEmail
    email_domain ZeroTrustAccessGroupIncludeEmailDomain
    email_list ZeroTrustAccessGroupIncludeEmailList
    everyone ZeroTrustAccessGroupIncludeEveryone
    An empty object which matches on all users.
    external_evaluation ZeroTrustAccessGroupIncludeExternalEvaluation
    geo ZeroTrustAccessGroupIncludeGeo
    github_organization ZeroTrustAccessGroupIncludeGithubOrganization
    group ZeroTrustAccessGroupIncludeGroup
    gsuite ZeroTrustAccessGroupIncludeGsuite
    ip ZeroTrustAccessGroupIncludeIp
    ip_list ZeroTrustAccessGroupIncludeIpList
    login_method ZeroTrustAccessGroupIncludeLoginMethod
    okta ZeroTrustAccessGroupIncludeOkta
    saml ZeroTrustAccessGroupIncludeSaml
    service_token ZeroTrustAccessGroupIncludeServiceToken

    ZeroTrustAccessGroupIncludeAuthContext, ZeroTrustAccessGroupIncludeAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessGroupIncludeAuthMethod, ZeroTrustAccessGroupIncludeAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    ZeroTrustAccessGroupIncludeAzureAd, ZeroTrustAccessGroupIncludeAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessGroupIncludeCommonName, ZeroTrustAccessGroupIncludeCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    ZeroTrustAccessGroupIncludeDevicePosture, ZeroTrustAccessGroupIncludeDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    ZeroTrustAccessGroupIncludeEmail, ZeroTrustAccessGroupIncludeEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    ZeroTrustAccessGroupIncludeEmailDomain, ZeroTrustAccessGroupIncludeEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    ZeroTrustAccessGroupIncludeEmailList, ZeroTrustAccessGroupIncludeEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    ZeroTrustAccessGroupIncludeExternalEvaluation, ZeroTrustAccessGroupIncludeExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    ZeroTrustAccessGroupIncludeGeo, ZeroTrustAccessGroupIncludeGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    ZeroTrustAccessGroupIncludeGithubOrganization, ZeroTrustAccessGroupIncludeGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    ZeroTrustAccessGroupIncludeGroup, ZeroTrustAccessGroupIncludeGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    ZeroTrustAccessGroupIncludeGsuite, ZeroTrustAccessGroupIncludeGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    ZeroTrustAccessGroupIncludeIp, ZeroTrustAccessGroupIncludeIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    ZeroTrustAccessGroupIncludeIpList, ZeroTrustAccessGroupIncludeIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    ZeroTrustAccessGroupIncludeLoginMethod, ZeroTrustAccessGroupIncludeLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    ZeroTrustAccessGroupIncludeOkta, ZeroTrustAccessGroupIncludeOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    ZeroTrustAccessGroupIncludeSaml, ZeroTrustAccessGroupIncludeSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    ZeroTrustAccessGroupIncludeServiceToken, ZeroTrustAccessGroupIncludeServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    ZeroTrustAccessGroupRequire, ZeroTrustAccessGroupRequireArgs

    AnyValidServiceToken ZeroTrustAccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessGroupRequireAuthContext
    AuthMethod ZeroTrustAccessGroupRequireAuthMethod
    AzureAd ZeroTrustAccessGroupRequireAzureAd
    Certificate ZeroTrustAccessGroupRequireCertificate
    CommonName ZeroTrustAccessGroupRequireCommonName
    DevicePosture ZeroTrustAccessGroupRequireDevicePosture
    Email ZeroTrustAccessGroupRequireEmail
    EmailDomain ZeroTrustAccessGroupRequireEmailDomain
    EmailList ZeroTrustAccessGroupRequireEmailList
    Everyone ZeroTrustAccessGroupRequireEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessGroupRequireExternalEvaluation
    Geo ZeroTrustAccessGroupRequireGeo
    GithubOrganization ZeroTrustAccessGroupRequireGithubOrganization
    Group ZeroTrustAccessGroupRequireGroup
    Gsuite ZeroTrustAccessGroupRequireGsuite
    Ip ZeroTrustAccessGroupRequireIp
    IpList ZeroTrustAccessGroupRequireIpList
    LoginMethod ZeroTrustAccessGroupRequireLoginMethod
    Okta ZeroTrustAccessGroupRequireOkta
    Saml ZeroTrustAccessGroupRequireSaml
    ServiceToken ZeroTrustAccessGroupRequireServiceToken
    AnyValidServiceToken ZeroTrustAccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessGroupRequireAuthContext
    AuthMethod ZeroTrustAccessGroupRequireAuthMethod
    AzureAd ZeroTrustAccessGroupRequireAzureAd
    Certificate ZeroTrustAccessGroupRequireCertificate
    CommonName ZeroTrustAccessGroupRequireCommonName
    DevicePosture ZeroTrustAccessGroupRequireDevicePosture
    Email ZeroTrustAccessGroupRequireEmail
    EmailDomain ZeroTrustAccessGroupRequireEmailDomain
    EmailList ZeroTrustAccessGroupRequireEmailList
    Everyone ZeroTrustAccessGroupRequireEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessGroupRequireExternalEvaluation
    Geo ZeroTrustAccessGroupRequireGeo
    GithubOrganization ZeroTrustAccessGroupRequireGithubOrganization
    Group ZeroTrustAccessGroupRequireGroup
    Gsuite ZeroTrustAccessGroupRequireGsuite
    Ip ZeroTrustAccessGroupRequireIp
    IpList ZeroTrustAccessGroupRequireIpList
    LoginMethod ZeroTrustAccessGroupRequireLoginMethod
    Okta ZeroTrustAccessGroupRequireOkta
    Saml ZeroTrustAccessGroupRequireSaml
    ServiceToken ZeroTrustAccessGroupRequireServiceToken
    anyValidServiceToken ZeroTrustAccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessGroupRequireAuthContext
    authMethod ZeroTrustAccessGroupRequireAuthMethod
    azureAd ZeroTrustAccessGroupRequireAzureAd
    certificate ZeroTrustAccessGroupRequireCertificate
    commonName ZeroTrustAccessGroupRequireCommonName
    devicePosture ZeroTrustAccessGroupRequireDevicePosture
    email ZeroTrustAccessGroupRequireEmail
    emailDomain ZeroTrustAccessGroupRequireEmailDomain
    emailList ZeroTrustAccessGroupRequireEmailList
    everyone ZeroTrustAccessGroupRequireEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessGroupRequireExternalEvaluation
    geo ZeroTrustAccessGroupRequireGeo
    githubOrganization ZeroTrustAccessGroupRequireGithubOrganization
    group ZeroTrustAccessGroupRequireGroup
    gsuite ZeroTrustAccessGroupRequireGsuite
    ip ZeroTrustAccessGroupRequireIp
    ipList ZeroTrustAccessGroupRequireIpList
    loginMethod ZeroTrustAccessGroupRequireLoginMethod
    okta ZeroTrustAccessGroupRequireOkta
    saml ZeroTrustAccessGroupRequireSaml
    serviceToken ZeroTrustAccessGroupRequireServiceToken
    anyValidServiceToken ZeroTrustAccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessGroupRequireAuthContext
    authMethod ZeroTrustAccessGroupRequireAuthMethod
    azureAd ZeroTrustAccessGroupRequireAzureAd
    certificate ZeroTrustAccessGroupRequireCertificate
    commonName ZeroTrustAccessGroupRequireCommonName
    devicePosture ZeroTrustAccessGroupRequireDevicePosture
    email ZeroTrustAccessGroupRequireEmail
    emailDomain ZeroTrustAccessGroupRequireEmailDomain
    emailList ZeroTrustAccessGroupRequireEmailList
    everyone ZeroTrustAccessGroupRequireEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessGroupRequireExternalEvaluation
    geo ZeroTrustAccessGroupRequireGeo
    githubOrganization ZeroTrustAccessGroupRequireGithubOrganization
    group ZeroTrustAccessGroupRequireGroup
    gsuite ZeroTrustAccessGroupRequireGsuite
    ip ZeroTrustAccessGroupRequireIp
    ipList ZeroTrustAccessGroupRequireIpList
    loginMethod ZeroTrustAccessGroupRequireLoginMethod
    okta ZeroTrustAccessGroupRequireOkta
    saml ZeroTrustAccessGroupRequireSaml
    serviceToken ZeroTrustAccessGroupRequireServiceToken
    any_valid_service_token ZeroTrustAccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context ZeroTrustAccessGroupRequireAuthContext
    auth_method ZeroTrustAccessGroupRequireAuthMethod
    azure_ad ZeroTrustAccessGroupRequireAzureAd
    certificate ZeroTrustAccessGroupRequireCertificate
    common_name ZeroTrustAccessGroupRequireCommonName
    device_posture ZeroTrustAccessGroupRequireDevicePosture
    email ZeroTrustAccessGroupRequireEmail
    email_domain ZeroTrustAccessGroupRequireEmailDomain
    email_list ZeroTrustAccessGroupRequireEmailList
    everyone ZeroTrustAccessGroupRequireEveryone
    An empty object which matches on all users.
    external_evaluation ZeroTrustAccessGroupRequireExternalEvaluation
    geo ZeroTrustAccessGroupRequireGeo
    github_organization ZeroTrustAccessGroupRequireGithubOrganization
    group ZeroTrustAccessGroupRequireGroup
    gsuite ZeroTrustAccessGroupRequireGsuite
    ip ZeroTrustAccessGroupRequireIp
    ip_list ZeroTrustAccessGroupRequireIpList
    login_method ZeroTrustAccessGroupRequireLoginMethod
    okta ZeroTrustAccessGroupRequireOkta
    saml ZeroTrustAccessGroupRequireSaml
    service_token ZeroTrustAccessGroupRequireServiceToken

    ZeroTrustAccessGroupRequireAuthContext, ZeroTrustAccessGroupRequireAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessGroupRequireAuthMethod, ZeroTrustAccessGroupRequireAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    ZeroTrustAccessGroupRequireAzureAd, ZeroTrustAccessGroupRequireAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessGroupRequireCommonName, ZeroTrustAccessGroupRequireCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    ZeroTrustAccessGroupRequireDevicePosture, ZeroTrustAccessGroupRequireDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    ZeroTrustAccessGroupRequireEmail, ZeroTrustAccessGroupRequireEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    ZeroTrustAccessGroupRequireEmailDomain, ZeroTrustAccessGroupRequireEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    ZeroTrustAccessGroupRequireEmailList, ZeroTrustAccessGroupRequireEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    ZeroTrustAccessGroupRequireExternalEvaluation, ZeroTrustAccessGroupRequireExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    ZeroTrustAccessGroupRequireGeo, ZeroTrustAccessGroupRequireGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    ZeroTrustAccessGroupRequireGithubOrganization, ZeroTrustAccessGroupRequireGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    ZeroTrustAccessGroupRequireGroup, ZeroTrustAccessGroupRequireGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    ZeroTrustAccessGroupRequireGsuite, ZeroTrustAccessGroupRequireGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    ZeroTrustAccessGroupRequireIp, ZeroTrustAccessGroupRequireIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    ZeroTrustAccessGroupRequireIpList, ZeroTrustAccessGroupRequireIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    ZeroTrustAccessGroupRequireLoginMethod, ZeroTrustAccessGroupRequireLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    ZeroTrustAccessGroupRequireOkta, ZeroTrustAccessGroupRequireOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    ZeroTrustAccessGroupRequireSaml, ZeroTrustAccessGroupRequireSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    ZeroTrustAccessGroupRequireServiceToken, ZeroTrustAccessGroupRequireServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    Import

    $ pulumi import cloudflare:index/zeroTrustAccessGroup:ZeroTrustAccessGroup example '<{accounts|zones}/{account_id|zone_id}>/<group_id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
    pulumi/pulumi-cloudflare