Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. ZeroTrustAccessPolicy
Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
pulumi/pulumi-cloudflare

cloudflare.ZeroTrustAccessPolicy

Explore with Pulumi AI

cloudflare logo
Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
pulumi/pulumi-cloudflare

    If ‘application_id’ is omitted, the policy created can be reused by multiple access applications. Any cloudflare.ZeroTrustAccessApplication resource can reference reusable policies through its policies argument. To destroy a reusable policy and remove it from all applications’ policies lists on the same apply, preemptively set the lifecycle option create_before_destroy to true on the ‘cloudflare_zero_trust_access_policy’ resource.

    Example Usage

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    resources:
  exampleZeroTrustAccessPolicy:
    type: cloudflare:ZeroTrustAccessPolicy
    name: example_zero_trust_access_policy
    properties:
      accountId: 023e105f4ecef8ad9ca31a8372d0c353
      decision: allow
      includes:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      name: Allow devs
      approvalGroups:
        - approvals_needed: 1
          email_addresses:
            - test1@cloudflare.com
            - test2@cloudflare.com
          email_list_uuid: email_list_uuid
        - approvals_needed: 3
          email_addresses:
            - test@cloudflare.com
            - test2@cloudflare.com
          email_list_uuid: 597147a1-976b-4ef2-9af0-81d5d007fc34
      approvalRequired: true
      excludes:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      isolationRequired: false
      purposeJustificationPrompt: Please enter a justification for entering this protected domain.
      purposeJustificationRequired: true
      requires:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      sessionDuration: 24h

    Create ZeroTrustAccessPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZeroTrustAccessPolicy(name: string, args: ZeroTrustAccessPolicyArgs, opts?: CustomResourceOptions);
    @overload
def ZeroTrustAccessPolicy(resource_name: str,
                          args: ZeroTrustAccessPolicyArgs,
                          opts: Optional[ResourceOptions] = None)

@overload
def ZeroTrustAccessPolicy(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          account_id: Optional[str] = None,
                          decision: Optional[str] = None,
                          includes: Optional[Sequence[ZeroTrustAccessPolicyIncludeArgs]] = None,
                          name: Optional[str] = None,
                          approval_groups: Optional[Sequence[ZeroTrustAccessPolicyApprovalGroupArgs]] = None,
                          approval_required: Optional[bool] = None,
                          excludes: Optional[Sequence[ZeroTrustAccessPolicyExcludeArgs]] = None,
                          isolation_required: Optional[bool] = None,
                          purpose_justification_prompt: Optional[str] = None,
                          purpose_justification_required: Optional[bool] = None,
                          requires: Optional[Sequence[ZeroTrustAccessPolicyRequireArgs]] = None,
                          session_duration: Optional[str] = None)
    func NewZeroTrustAccessPolicy(ctx *Context, name string, args ZeroTrustAccessPolicyArgs, opts ...ResourceOption) (*ZeroTrustAccessPolicy, error)
    public ZeroTrustAccessPolicy(string name, ZeroTrustAccessPolicyArgs args, CustomResourceOptions? opts = null)
    public ZeroTrustAccessPolicy(String name, ZeroTrustAccessPolicyArgs args)
public ZeroTrustAccessPolicy(String name, ZeroTrustAccessPolicyArgs args, CustomResourceOptions options)

    type: cloudflare:ZeroTrustAccessPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ZeroTrustAccessPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZeroTrustAccessPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZeroTrustAccessPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZeroTrustAccessPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZeroTrustAccessPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var zeroTrustAccessPolicyResource = new Cloudflare.ZeroTrustAccessPolicy("zeroTrustAccessPolicyResource", new()
{
    AccountId = "string",
    Decision = "string",
    Includes = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeArgs
        {
            AnyValidServiceToken = null,
            AuthContext = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeAuthContextArgs
            {
                AcId = "string",
                Id = "string",
                IdentityProviderId = "string",
            },
            AuthMethod = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeAuthMethodArgs
            {
                AuthMethod = "string",
            },
            AzureAd = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeAzureAdArgs
            {
                Id = "string",
                IdentityProviderId = "string",
            },
            Certificate = null,
            CommonName = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeCommonNameArgs
            {
                CommonName = "string",
            },
            DevicePosture = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeDevicePostureArgs
            {
                IntegrationUid = "string",
            },
            Email = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeEmailArgs
            {
                Email = "string",
            },
            EmailDomain = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeEmailDomainArgs
            {
                Domain = "string",
            },
            EmailList = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeEmailListArgs
            {
                Id = "string",
            },
            Everyone = null,
            ExternalEvaluation = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geo = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeGeoArgs
            {
                CountryCode = "string",
            },
            GithubOrganization = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeGithubOrganizationArgs
            {
                IdentityProviderId = "string",
                Name = "string",
                Team = "string",
            },
            Group = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeGroupArgs
            {
                Id = "string",
            },
            Gsuite = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeGsuiteArgs
            {
                Email = "string",
                IdentityProviderId = "string",
            },
            Ip = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeIpArgs
            {
                Ip = "string",
            },
            IpList = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeIpListArgs
            {
                Id = "string",
            },
            LoginMethod = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeLoginMethodArgs
            {
                Id = "string",
            },
            Okta = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeOktaArgs
            {
                IdentityProviderId = "string",
                Name = "string",
            },
            Saml = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeSamlArgs
            {
                AttributeName = "string",
                AttributeValue = "string",
                IdentityProviderId = "string",
            },
            ServiceToken = new Cloudflare.Inputs.ZeroTrustAccessPolicyIncludeServiceTokenArgs
            {
                TokenId = "string",
            },
        },
    },
    Name = "string",
    ApprovalGroups = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessPolicyApprovalGroupArgs
        {
            ApprovalsNeeded = 0,
            EmailAddresses = new[]
            {
                "string",
            },
            EmailListUuid = "string",
        },
    },
    ApprovalRequired = false,
    Excludes = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeArgs
        {
            AnyValidServiceToken = null,
            AuthContext = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeAuthContextArgs
            {
                AcId = "string",
                Id = "string",
                IdentityProviderId = "string",
            },
            AuthMethod = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeAuthMethodArgs
            {
                AuthMethod = "string",
            },
            AzureAd = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeAzureAdArgs
            {
                Id = "string",
                IdentityProviderId = "string",
            },
            Certificate = null,
            CommonName = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeCommonNameArgs
            {
                CommonName = "string",
            },
            DevicePosture = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeDevicePostureArgs
            {
                IntegrationUid = "string",
            },
            Email = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeEmailArgs
            {
                Email = "string",
            },
            EmailDomain = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeEmailDomainArgs
            {
                Domain = "string",
            },
            EmailList = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeEmailListArgs
            {
                Id = "string",
            },
            Everyone = null,
            ExternalEvaluation = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geo = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeGeoArgs
            {
                CountryCode = "string",
            },
            GithubOrganization = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeGithubOrganizationArgs
            {
                IdentityProviderId = "string",
                Name = "string",
                Team = "string",
            },
            Group = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeGroupArgs
            {
                Id = "string",
            },
            Gsuite = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeGsuiteArgs
            {
                Email = "string",
                IdentityProviderId = "string",
            },
            Ip = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeIpArgs
            {
                Ip = "string",
            },
            IpList = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeIpListArgs
            {
                Id = "string",
            },
            LoginMethod = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeLoginMethodArgs
            {
                Id = "string",
            },
            Okta = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeOktaArgs
            {
                IdentityProviderId = "string",
                Name = "string",
            },
            Saml = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeSamlArgs
            {
                AttributeName = "string",
                AttributeValue = "string",
                IdentityProviderId = "string",
            },
            ServiceToken = new Cloudflare.Inputs.ZeroTrustAccessPolicyExcludeServiceTokenArgs
            {
                TokenId = "string",
            },
        },
    },
    IsolationRequired = false,
    PurposeJustificationPrompt = "string",
    PurposeJustificationRequired = false,
    Requires = new[]
    {
        new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireArgs
        {
            AnyValidServiceToken = null,
            AuthContext = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireAuthContextArgs
            {
                AcId = "string",
                Id = "string",
                IdentityProviderId = "string",
            },
            AuthMethod = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireAuthMethodArgs
            {
                AuthMethod = "string",
            },
            AzureAd = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireAzureAdArgs
            {
                Id = "string",
                IdentityProviderId = "string",
            },
            Certificate = null,
            CommonName = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireCommonNameArgs
            {
                CommonName = "string",
            },
            DevicePosture = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireDevicePostureArgs
            {
                IntegrationUid = "string",
            },
            Email = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireEmailArgs
            {
                Email = "string",
            },
            EmailDomain = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireEmailDomainArgs
            {
                Domain = "string",
            },
            EmailList = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireEmailListArgs
            {
                Id = "string",
            },
            Everyone = null,
            ExternalEvaluation = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geo = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireGeoArgs
            {
                CountryCode = "string",
            },
            GithubOrganization = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireGithubOrganizationArgs
            {
                IdentityProviderId = "string",
                Name = "string",
                Team = "string",
            },
            Group = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireGroupArgs
            {
                Id = "string",
            },
            Gsuite = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireGsuiteArgs
            {
                Email = "string",
                IdentityProviderId = "string",
            },
            Ip = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireIpArgs
            {
                Ip = "string",
            },
            IpList = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireIpListArgs
            {
                Id = "string",
            },
            LoginMethod = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireLoginMethodArgs
            {
                Id = "string",
            },
            Okta = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireOktaArgs
            {
                IdentityProviderId = "string",
                Name = "string",
            },
            Saml = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireSamlArgs
            {
                AttributeName = "string",
                AttributeValue = "string",
                IdentityProviderId = "string",
            },
            ServiceToken = new Cloudflare.Inputs.ZeroTrustAccessPolicyRequireServiceTokenArgs
            {
                TokenId = "string",
            },
        },
    },
    SessionDuration = "string",
});

    example, err := cloudflare.NewZeroTrustAccessPolicy(ctx, "zeroTrustAccessPolicyResource", &cloudflare.ZeroTrustAccessPolicyArgs{
	AccountId: pulumi.String("string"),
	Decision:  pulumi.String("string"),
	Includes: cloudflare.ZeroTrustAccessPolicyIncludeArray{
		&cloudflare.ZeroTrustAccessPolicyIncludeArgs{
			AnyValidServiceToken: &cloudflare.ZeroTrustAccessPolicyIncludeAnyValidServiceTokenArgs{},
			AuthContext: &cloudflare.ZeroTrustAccessPolicyIncludeAuthContextArgs{
				AcId:               pulumi.String("string"),
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			AuthMethod: &cloudflare.ZeroTrustAccessPolicyIncludeAuthMethodArgs{
				AuthMethod: pulumi.String("string"),
			},
			AzureAd: &cloudflare.ZeroTrustAccessPolicyIncludeAzureAdArgs{
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Certificate: &cloudflare.ZeroTrustAccessPolicyIncludeCertificateArgs{},
			CommonName: &cloudflare.ZeroTrustAccessPolicyIncludeCommonNameArgs{
				CommonName: pulumi.String("string"),
			},
			DevicePosture: &cloudflare.ZeroTrustAccessPolicyIncludeDevicePostureArgs{
				IntegrationUid: pulumi.String("string"),
			},
			Email: &cloudflare.ZeroTrustAccessPolicyIncludeEmailArgs{
				Email: pulumi.String("string"),
			},
			EmailDomain: &cloudflare.ZeroTrustAccessPolicyIncludeEmailDomainArgs{
				Domain: pulumi.String("string"),
			},
			EmailList: &cloudflare.ZeroTrustAccessPolicyIncludeEmailListArgs{
				Id: pulumi.String("string"),
			},
			Everyone: &cloudflare.ZeroTrustAccessPolicyIncludeEveryoneArgs{},
			ExternalEvaluation: &cloudflare.ZeroTrustAccessPolicyIncludeExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geo: &cloudflare.ZeroTrustAccessPolicyIncludeGeoArgs{
				CountryCode: pulumi.String("string"),
			},
			GithubOrganization: &cloudflare.ZeroTrustAccessPolicyIncludeGithubOrganizationArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
				Team:               pulumi.String("string"),
			},
			Group: &cloudflare.ZeroTrustAccessPolicyIncludeGroupArgs{
				Id: pulumi.String("string"),
			},
			Gsuite: &cloudflare.ZeroTrustAccessPolicyIncludeGsuiteArgs{
				Email:              pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Ip: &cloudflare.ZeroTrustAccessPolicyIncludeIpArgs{
				Ip: pulumi.String("string"),
			},
			IpList: &cloudflare.ZeroTrustAccessPolicyIncludeIpListArgs{
				Id: pulumi.String("string"),
			},
			LoginMethod: &cloudflare.ZeroTrustAccessPolicyIncludeLoginMethodArgs{
				Id: pulumi.String("string"),
			},
			Okta: &cloudflare.ZeroTrustAccessPolicyIncludeOktaArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
			},
			Saml: &cloudflare.ZeroTrustAccessPolicyIncludeSamlArgs{
				AttributeName:      pulumi.String("string"),
				AttributeValue:     pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			ServiceToken: &cloudflare.ZeroTrustAccessPolicyIncludeServiceTokenArgs{
				TokenId: pulumi.String("string"),
			},
		},
	},
	Name: pulumi.String("string"),
	ApprovalGroups: cloudflare.ZeroTrustAccessPolicyApprovalGroupArray{
		&cloudflare.ZeroTrustAccessPolicyApprovalGroupArgs{
			ApprovalsNeeded: pulumi.Float64(0),
			EmailAddresses: pulumi.StringArray{
				pulumi.String("string"),
			},
			EmailListUuid: pulumi.String("string"),
		},
	},
	ApprovalRequired: pulumi.Bool(false),
	Excludes: cloudflare.ZeroTrustAccessPolicyExcludeArray{
		&cloudflare.ZeroTrustAccessPolicyExcludeArgs{
			AnyValidServiceToken: &cloudflare.ZeroTrustAccessPolicyExcludeAnyValidServiceTokenArgs{},
			AuthContext: &cloudflare.ZeroTrustAccessPolicyExcludeAuthContextArgs{
				AcId:               pulumi.String("string"),
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			AuthMethod: &cloudflare.ZeroTrustAccessPolicyExcludeAuthMethodArgs{
				AuthMethod: pulumi.String("string"),
			},
			AzureAd: &cloudflare.ZeroTrustAccessPolicyExcludeAzureAdArgs{
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Certificate: &cloudflare.ZeroTrustAccessPolicyExcludeCertificateArgs{},
			CommonName: &cloudflare.ZeroTrustAccessPolicyExcludeCommonNameArgs{
				CommonName: pulumi.String("string"),
			},
			DevicePosture: &cloudflare.ZeroTrustAccessPolicyExcludeDevicePostureArgs{
				IntegrationUid: pulumi.String("string"),
			},
			Email: &cloudflare.ZeroTrustAccessPolicyExcludeEmailArgs{
				Email: pulumi.String("string"),
			},
			EmailDomain: &cloudflare.ZeroTrustAccessPolicyExcludeEmailDomainArgs{
				Domain: pulumi.String("string"),
			},
			EmailList: &cloudflare.ZeroTrustAccessPolicyExcludeEmailListArgs{
				Id: pulumi.String("string"),
			},
			Everyone: &cloudflare.ZeroTrustAccessPolicyExcludeEveryoneArgs{},
			ExternalEvaluation: &cloudflare.ZeroTrustAccessPolicyExcludeExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geo: &cloudflare.ZeroTrustAccessPolicyExcludeGeoArgs{
				CountryCode: pulumi.String("string"),
			},
			GithubOrganization: &cloudflare.ZeroTrustAccessPolicyExcludeGithubOrganizationArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
				Team:               pulumi.String("string"),
			},
			Group: &cloudflare.ZeroTrustAccessPolicyExcludeGroupArgs{
				Id: pulumi.String("string"),
			},
			Gsuite: &cloudflare.ZeroTrustAccessPolicyExcludeGsuiteArgs{
				Email:              pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Ip: &cloudflare.ZeroTrustAccessPolicyExcludeIpArgs{
				Ip: pulumi.String("string"),
			},
			IpList: &cloudflare.ZeroTrustAccessPolicyExcludeIpListArgs{
				Id: pulumi.String("string"),
			},
			LoginMethod: &cloudflare.ZeroTrustAccessPolicyExcludeLoginMethodArgs{
				Id: pulumi.String("string"),
			},
			Okta: &cloudflare.ZeroTrustAccessPolicyExcludeOktaArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
			},
			Saml: &cloudflare.ZeroTrustAccessPolicyExcludeSamlArgs{
				AttributeName:      pulumi.String("string"),
				AttributeValue:     pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			ServiceToken: &cloudflare.ZeroTrustAccessPolicyExcludeServiceTokenArgs{
				TokenId: pulumi.String("string"),
			},
		},
	},
	IsolationRequired:            pulumi.Bool(false),
	PurposeJustificationPrompt:   pulumi.String("string"),
	PurposeJustificationRequired: pulumi.Bool(false),
	Requires: cloudflare.ZeroTrustAccessPolicyRequireArray{
		&cloudflare.ZeroTrustAccessPolicyRequireArgs{
			AnyValidServiceToken: &cloudflare.ZeroTrustAccessPolicyRequireAnyValidServiceTokenArgs{},
			AuthContext: &cloudflare.ZeroTrustAccessPolicyRequireAuthContextArgs{
				AcId:               pulumi.String("string"),
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			AuthMethod: &cloudflare.ZeroTrustAccessPolicyRequireAuthMethodArgs{
				AuthMethod: pulumi.String("string"),
			},
			AzureAd: &cloudflare.ZeroTrustAccessPolicyRequireAzureAdArgs{
				Id:                 pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Certificate: &cloudflare.ZeroTrustAccessPolicyRequireCertificateArgs{},
			CommonName: &cloudflare.ZeroTrustAccessPolicyRequireCommonNameArgs{
				CommonName: pulumi.String("string"),
			},
			DevicePosture: &cloudflare.ZeroTrustAccessPolicyRequireDevicePostureArgs{
				IntegrationUid: pulumi.String("string"),
			},
			Email: &cloudflare.ZeroTrustAccessPolicyRequireEmailArgs{
				Email: pulumi.String("string"),
			},
			EmailDomain: &cloudflare.ZeroTrustAccessPolicyRequireEmailDomainArgs{
				Domain: pulumi.String("string"),
			},
			EmailList: &cloudflare.ZeroTrustAccessPolicyRequireEmailListArgs{
				Id: pulumi.String("string"),
			},
			Everyone: &cloudflare.ZeroTrustAccessPolicyRequireEveryoneArgs{},
			ExternalEvaluation: &cloudflare.ZeroTrustAccessPolicyRequireExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geo: &cloudflare.ZeroTrustAccessPolicyRequireGeoArgs{
				CountryCode: pulumi.String("string"),
			},
			GithubOrganization: &cloudflare.ZeroTrustAccessPolicyRequireGithubOrganizationArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
				Team:               pulumi.String("string"),
			},
			Group: &cloudflare.ZeroTrustAccessPolicyRequireGroupArgs{
				Id: pulumi.String("string"),
			},
			Gsuite: &cloudflare.ZeroTrustAccessPolicyRequireGsuiteArgs{
				Email:              pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			Ip: &cloudflare.ZeroTrustAccessPolicyRequireIpArgs{
				Ip: pulumi.String("string"),
			},
			IpList: &cloudflare.ZeroTrustAccessPolicyRequireIpListArgs{
				Id: pulumi.String("string"),
			},
			LoginMethod: &cloudflare.ZeroTrustAccessPolicyRequireLoginMethodArgs{
				Id: pulumi.String("string"),
			},
			Okta: &cloudflare.ZeroTrustAccessPolicyRequireOktaArgs{
				IdentityProviderId: pulumi.String("string"),
				Name:               pulumi.String("string"),
			},
			Saml: &cloudflare.ZeroTrustAccessPolicyRequireSamlArgs{
				AttributeName:      pulumi.String("string"),
				AttributeValue:     pulumi.String("string"),
				IdentityProviderId: pulumi.String("string"),
			},
			ServiceToken: &cloudflare.ZeroTrustAccessPolicyRequireServiceTokenArgs{
				TokenId: pulumi.String("string"),
			},
		},
	},
	SessionDuration: pulumi.String("string"),
})

    var zeroTrustAccessPolicyResource = new ZeroTrustAccessPolicy("zeroTrustAccessPolicyResource", ZeroTrustAccessPolicyArgs.builder()
    .accountId("string")
    .decision("string")
    .includes(ZeroTrustAccessPolicyIncludeArgs.builder()
        .anyValidServiceToken()
        .authContext(ZeroTrustAccessPolicyIncludeAuthContextArgs.builder()
            .acId("string")
            .id("string")
            .identityProviderId("string")
            .build())
        .authMethod(ZeroTrustAccessPolicyIncludeAuthMethodArgs.builder()
            .authMethod("string")
            .build())
        .azureAd(ZeroTrustAccessPolicyIncludeAzureAdArgs.builder()
            .id("string")
            .identityProviderId("string")
            .build())
        .certificate()
        .commonName(ZeroTrustAccessPolicyIncludeCommonNameArgs.builder()
            .commonName("string")
            .build())
        .devicePosture(ZeroTrustAccessPolicyIncludeDevicePostureArgs.builder()
            .integrationUid("string")
            .build())
        .email(ZeroTrustAccessPolicyIncludeEmailArgs.builder()
            .email("string")
            .build())
        .emailDomain(ZeroTrustAccessPolicyIncludeEmailDomainArgs.builder()
            .domain("string")
            .build())
        .emailList(ZeroTrustAccessPolicyIncludeEmailListArgs.builder()
            .id("string")
            .build())
        .everyone()
        .externalEvaluation(ZeroTrustAccessPolicyIncludeExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geo(ZeroTrustAccessPolicyIncludeGeoArgs.builder()
            .countryCode("string")
            .build())
        .githubOrganization(ZeroTrustAccessPolicyIncludeGithubOrganizationArgs.builder()
            .identityProviderId("string")
            .name("string")
            .team("string")
            .build())
        .group(ZeroTrustAccessPolicyIncludeGroupArgs.builder()
            .id("string")
            .build())
        .gsuite(ZeroTrustAccessPolicyIncludeGsuiteArgs.builder()
            .email("string")
            .identityProviderId("string")
            .build())
        .ip(ZeroTrustAccessPolicyIncludeIpArgs.builder()
            .ip("string")
            .build())
        .ipList(ZeroTrustAccessPolicyIncludeIpListArgs.builder()
            .id("string")
            .build())
        .loginMethod(ZeroTrustAccessPolicyIncludeLoginMethodArgs.builder()
            .id("string")
            .build())
        .okta(ZeroTrustAccessPolicyIncludeOktaArgs.builder()
            .identityProviderId("string")
            .name("string")
            .build())
        .saml(ZeroTrustAccessPolicyIncludeSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceToken(ZeroTrustAccessPolicyIncludeServiceTokenArgs.builder()
            .tokenId("string")
            .build())
        .build())
    .name("string")
    .approvalGroups(ZeroTrustAccessPolicyApprovalGroupArgs.builder()
        .approvalsNeeded(0)
        .emailAddresses("string")
        .emailListUuid("string")
        .build())
    .approvalRequired(false)
    .excludes(ZeroTrustAccessPolicyExcludeArgs.builder()
        .anyValidServiceToken()
        .authContext(ZeroTrustAccessPolicyExcludeAuthContextArgs.builder()
            .acId("string")
            .id("string")
            .identityProviderId("string")
            .build())
        .authMethod(ZeroTrustAccessPolicyExcludeAuthMethodArgs.builder()
            .authMethod("string")
            .build())
        .azureAd(ZeroTrustAccessPolicyExcludeAzureAdArgs.builder()
            .id("string")
            .identityProviderId("string")
            .build())
        .certificate()
        .commonName(ZeroTrustAccessPolicyExcludeCommonNameArgs.builder()
            .commonName("string")
            .build())
        .devicePosture(ZeroTrustAccessPolicyExcludeDevicePostureArgs.builder()
            .integrationUid("string")
            .build())
        .email(ZeroTrustAccessPolicyExcludeEmailArgs.builder()
            .email("string")
            .build())
        .emailDomain(ZeroTrustAccessPolicyExcludeEmailDomainArgs.builder()
            .domain("string")
            .build())
        .emailList(ZeroTrustAccessPolicyExcludeEmailListArgs.builder()
            .id("string")
            .build())
        .everyone()
        .externalEvaluation(ZeroTrustAccessPolicyExcludeExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geo(ZeroTrustAccessPolicyExcludeGeoArgs.builder()
            .countryCode("string")
            .build())
        .githubOrganization(ZeroTrustAccessPolicyExcludeGithubOrganizationArgs.builder()
            .identityProviderId("string")
            .name("string")
            .team("string")
            .build())
        .group(ZeroTrustAccessPolicyExcludeGroupArgs.builder()
            .id("string")
            .build())
        .gsuite(ZeroTrustAccessPolicyExcludeGsuiteArgs.builder()
            .email("string")
            .identityProviderId("string")
            .build())
        .ip(ZeroTrustAccessPolicyExcludeIpArgs.builder()
            .ip("string")
            .build())
        .ipList(ZeroTrustAccessPolicyExcludeIpListArgs.builder()
            .id("string")
            .build())
        .loginMethod(ZeroTrustAccessPolicyExcludeLoginMethodArgs.builder()
            .id("string")
            .build())
        .okta(ZeroTrustAccessPolicyExcludeOktaArgs.builder()
            .identityProviderId("string")
            .name("string")
            .build())
        .saml(ZeroTrustAccessPolicyExcludeSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceToken(ZeroTrustAccessPolicyExcludeServiceTokenArgs.builder()
            .tokenId("string")
            .build())
        .build())
    .isolationRequired(false)
    .purposeJustificationPrompt("string")
    .purposeJustificationRequired(false)
    .requires(ZeroTrustAccessPolicyRequireArgs.builder()
        .anyValidServiceToken()
        .authContext(ZeroTrustAccessPolicyRequireAuthContextArgs.builder()
            .acId("string")
            .id("string")
            .identityProviderId("string")
            .build())
        .authMethod(ZeroTrustAccessPolicyRequireAuthMethodArgs.builder()
            .authMethod("string")
            .build())
        .azureAd(ZeroTrustAccessPolicyRequireAzureAdArgs.builder()
            .id("string")
            .identityProviderId("string")
            .build())
        .certificate()
        .commonName(ZeroTrustAccessPolicyRequireCommonNameArgs.builder()
            .commonName("string")
            .build())
        .devicePosture(ZeroTrustAccessPolicyRequireDevicePostureArgs.builder()
            .integrationUid("string")
            .build())
        .email(ZeroTrustAccessPolicyRequireEmailArgs.builder()
            .email("string")
            .build())
        .emailDomain(ZeroTrustAccessPolicyRequireEmailDomainArgs.builder()
            .domain("string")
            .build())
        .emailList(ZeroTrustAccessPolicyRequireEmailListArgs.builder()
            .id("string")
            .build())
        .everyone()
        .externalEvaluation(ZeroTrustAccessPolicyRequireExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geo(ZeroTrustAccessPolicyRequireGeoArgs.builder()
            .countryCode("string")
            .build())
        .githubOrganization(ZeroTrustAccessPolicyRequireGithubOrganizationArgs.builder()
            .identityProviderId("string")
            .name("string")
            .team("string")
            .build())
        .group(ZeroTrustAccessPolicyRequireGroupArgs.builder()
            .id("string")
            .build())
        .gsuite(ZeroTrustAccessPolicyRequireGsuiteArgs.builder()
            .email("string")
            .identityProviderId("string")
            .build())
        .ip(ZeroTrustAccessPolicyRequireIpArgs.builder()
            .ip("string")
            .build())
        .ipList(ZeroTrustAccessPolicyRequireIpListArgs.builder()
            .id("string")
            .build())
        .loginMethod(ZeroTrustAccessPolicyRequireLoginMethodArgs.builder()
            .id("string")
            .build())
        .okta(ZeroTrustAccessPolicyRequireOktaArgs.builder()
            .identityProviderId("string")
            .name("string")
            .build())
        .saml(ZeroTrustAccessPolicyRequireSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceToken(ZeroTrustAccessPolicyRequireServiceTokenArgs.builder()
            .tokenId("string")
            .build())
        .build())
    .sessionDuration("string")
    .build());

    zero_trust_access_policy_resource = cloudflare.ZeroTrustAccessPolicy("zeroTrustAccessPolicyResource",
    account_id="string",
    decision="string",
    includes=[{
        "any_valid_service_token": {},
        "auth_context": {
            "ac_id": "string",
            "id": "string",
            "identity_provider_id": "string",
        },
        "auth_method": {
            "auth_method": "string",
        },
        "azure_ad": {
            "id": "string",
            "identity_provider_id": "string",
        },
        "certificate": {},
        "common_name": {
            "common_name": "string",
        },
        "device_posture": {
            "integration_uid": "string",
        },
        "email": {
            "email": "string",
        },
        "email_domain": {
            "domain": "string",
        },
        "email_list": {
            "id": "string",
        },
        "everyone": {},
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geo": {
            "country_code": "string",
        },
        "github_organization": {
            "identity_provider_id": "string",
            "name": "string",
            "team": "string",
        },
        "group": {
            "id": "string",
        },
        "gsuite": {
            "email": "string",
            "identity_provider_id": "string",
        },
        "ip": {
            "ip": "string",
        },
        "ip_list": {
            "id": "string",
        },
        "login_method": {
            "id": "string",
        },
        "okta": {
            "identity_provider_id": "string",
            "name": "string",
        },
        "saml": {
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        },
        "service_token": {
            "token_id": "string",
        },
    }],
    name="string",
    approval_groups=[{
        "approvals_needed": 0,
        "email_addresses": ["string"],
        "email_list_uuid": "string",
    }],
    approval_required=False,
    excludes=[{
        "any_valid_service_token": {},
        "auth_context": {
            "ac_id": "string",
            "id": "string",
            "identity_provider_id": "string",
        },
        "auth_method": {
            "auth_method": "string",
        },
        "azure_ad": {
            "id": "string",
            "identity_provider_id": "string",
        },
        "certificate": {},
        "common_name": {
            "common_name": "string",
        },
        "device_posture": {
            "integration_uid": "string",
        },
        "email": {
            "email": "string",
        },
        "email_domain": {
            "domain": "string",
        },
        "email_list": {
            "id": "string",
        },
        "everyone": {},
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geo": {
            "country_code": "string",
        },
        "github_organization": {
            "identity_provider_id": "string",
            "name": "string",
            "team": "string",
        },
        "group": {
            "id": "string",
        },
        "gsuite": {
            "email": "string",
            "identity_provider_id": "string",
        },
        "ip": {
            "ip": "string",
        },
        "ip_list": {
            "id": "string",
        },
        "login_method": {
            "id": "string",
        },
        "okta": {
            "identity_provider_id": "string",
            "name": "string",
        },
        "saml": {
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        },
        "service_token": {
            "token_id": "string",
        },
    }],
    isolation_required=False,
    purpose_justification_prompt="string",
    purpose_justification_required=False,
    requires=[{
        "any_valid_service_token": {},
        "auth_context": {
            "ac_id": "string",
            "id": "string",
            "identity_provider_id": "string",
        },
        "auth_method": {
            "auth_method": "string",
        },
        "azure_ad": {
            "id": "string",
            "identity_provider_id": "string",
        },
        "certificate": {},
        "common_name": {
            "common_name": "string",
        },
        "device_posture": {
            "integration_uid": "string",
        },
        "email": {
            "email": "string",
        },
        "email_domain": {
            "domain": "string",
        },
        "email_list": {
            "id": "string",
        },
        "everyone": {},
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geo": {
            "country_code": "string",
        },
        "github_organization": {
            "identity_provider_id": "string",
            "name": "string",
            "team": "string",
        },
        "group": {
            "id": "string",
        },
        "gsuite": {
            "email": "string",
            "identity_provider_id": "string",
        },
        "ip": {
            "ip": "string",
        },
        "ip_list": {
            "id": "string",
        },
        "login_method": {
            "id": "string",
        },
        "okta": {
            "identity_provider_id": "string",
            "name": "string",
        },
        "saml": {
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        },
        "service_token": {
            "token_id": "string",
        },
    }],
    session_duration="string")

    const zeroTrustAccessPolicyResource = new cloudflare.ZeroTrustAccessPolicy("zeroTrustAccessPolicyResource", {
    accountId: "string",
    decision: "string",
    includes: [{
        anyValidServiceToken: {},
        authContext: {
            acId: "string",
            id: "string",
            identityProviderId: "string",
        },
        authMethod: {
            authMethod: "string",
        },
        azureAd: {
            id: "string",
            identityProviderId: "string",
        },
        certificate: {},
        commonName: {
            commonName: "string",
        },
        devicePosture: {
            integrationUid: "string",
        },
        email: {
            email: "string",
        },
        emailDomain: {
            domain: "string",
        },
        emailList: {
            id: "string",
        },
        everyone: {},
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geo: {
            countryCode: "string",
        },
        githubOrganization: {
            identityProviderId: "string",
            name: "string",
            team: "string",
        },
        group: {
            id: "string",
        },
        gsuite: {
            email: "string",
            identityProviderId: "string",
        },
        ip: {
            ip: "string",
        },
        ipList: {
            id: "string",
        },
        loginMethod: {
            id: "string",
        },
        okta: {
            identityProviderId: "string",
            name: "string",
        },
        saml: {
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        },
        serviceToken: {
            tokenId: "string",
        },
    }],
    name: "string",
    approvalGroups: [{
        approvalsNeeded: 0,
        emailAddresses: ["string"],
        emailListUuid: "string",
    }],
    approvalRequired: false,
    excludes: [{
        anyValidServiceToken: {},
        authContext: {
            acId: "string",
            id: "string",
            identityProviderId: "string",
        },
        authMethod: {
            authMethod: "string",
        },
        azureAd: {
            id: "string",
            identityProviderId: "string",
        },
        certificate: {},
        commonName: {
            commonName: "string",
        },
        devicePosture: {
            integrationUid: "string",
        },
        email: {
            email: "string",
        },
        emailDomain: {
            domain: "string",
        },
        emailList: {
            id: "string",
        },
        everyone: {},
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geo: {
            countryCode: "string",
        },
        githubOrganization: {
            identityProviderId: "string",
            name: "string",
            team: "string",
        },
        group: {
            id: "string",
        },
        gsuite: {
            email: "string",
            identityProviderId: "string",
        },
        ip: {
            ip: "string",
        },
        ipList: {
            id: "string",
        },
        loginMethod: {
            id: "string",
        },
        okta: {
            identityProviderId: "string",
            name: "string",
        },
        saml: {
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        },
        serviceToken: {
            tokenId: "string",
        },
    }],
    isolationRequired: false,
    purposeJustificationPrompt: "string",
    purposeJustificationRequired: false,
    requires: [{
        anyValidServiceToken: {},
        authContext: {
            acId: "string",
            id: "string",
            identityProviderId: "string",
        },
        authMethod: {
            authMethod: "string",
        },
        azureAd: {
            id: "string",
            identityProviderId: "string",
        },
        certificate: {},
        commonName: {
            commonName: "string",
        },
        devicePosture: {
            integrationUid: "string",
        },
        email: {
            email: "string",
        },
        emailDomain: {
            domain: "string",
        },
        emailList: {
            id: "string",
        },
        everyone: {},
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geo: {
            countryCode: "string",
        },
        githubOrganization: {
            identityProviderId: "string",
            name: "string",
            team: "string",
        },
        group: {
            id: "string",
        },
        gsuite: {
            email: "string",
            identityProviderId: "string",
        },
        ip: {
            ip: "string",
        },
        ipList: {
            id: "string",
        },
        loginMethod: {
            id: "string",
        },
        okta: {
            identityProviderId: "string",
            name: "string",
        },
        saml: {
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        },
        serviceToken: {
            tokenId: "string",
        },
    }],
    sessionDuration: "string",
});

    type: cloudflare:ZeroTrustAccessPolicy
properties:
    accountId: string
    approvalGroups:
        - approvalsNeeded: 0
          emailAddresses:
            - string
          emailListUuid: string
    approvalRequired: false
    decision: string
    excludes:
        - anyValidServiceToken: {}
          authContext:
            acId: string
            id: string
            identityProviderId: string
          authMethod:
            authMethod: string
          azureAd:
            id: string
            identityProviderId: string
          certificate: {}
          commonName:
            commonName: string
          devicePosture:
            integrationUid: string
          email:
            email: string
          emailDomain:
            domain: string
          emailList:
            id: string
          everyone: {}
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geo:
            countryCode: string
          githubOrganization:
            identityProviderId: string
            name: string
            team: string
          group:
            id: string
          gsuite:
            email: string
            identityProviderId: string
          ip:
            ip: string
          ipList:
            id: string
          loginMethod:
            id: string
          okta:
            identityProviderId: string
            name: string
          saml:
            attributeName: string
            attributeValue: string
            identityProviderId: string
          serviceToken:
            tokenId: string
    includes:
        - anyValidServiceToken: {}
          authContext:
            acId: string
            id: string
            identityProviderId: string
          authMethod:
            authMethod: string
          azureAd:
            id: string
            identityProviderId: string
          certificate: {}
          commonName:
            commonName: string
          devicePosture:
            integrationUid: string
          email:
            email: string
          emailDomain:
            domain: string
          emailList:
            id: string
          everyone: {}
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geo:
            countryCode: string
          githubOrganization:
            identityProviderId: string
            name: string
            team: string
          group:
            id: string
          gsuite:
            email: string
            identityProviderId: string
          ip:
            ip: string
          ipList:
            id: string
          loginMethod:
            id: string
          okta:
            identityProviderId: string
            name: string
          saml:
            attributeName: string
            attributeValue: string
            identityProviderId: string
          serviceToken:
            tokenId: string
    isolationRequired: false
    name: string
    purposeJustificationPrompt: string
    purposeJustificationRequired: false
    requires:
        - anyValidServiceToken: {}
          authContext:
            acId: string
            id: string
            identityProviderId: string
          authMethod:
            authMethod: string
          azureAd:
            id: string
            identityProviderId: string
          certificate: {}
          commonName:
            commonName: string
          devicePosture:
            integrationUid: string
          email:
            email: string
          emailDomain:
            domain: string
          emailList:
            id: string
          everyone: {}
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geo:
            countryCode: string
          githubOrganization:
            identityProviderId: string
            name: string
            team: string
          group:
            id: string
          gsuite:
            email: string
            identityProviderId: string
          ip:
            ip: string
          ipList:
            id: string
          loginMethod:
            id: string
          okta:
            identityProviderId: string
            name: string
          saml:
            attributeName: string
            attributeValue: string
            identityProviderId: string
          serviceToken:
            tokenId: string
    sessionDuration: string

    ZeroTrustAccessPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZeroTrustAccessPolicy resource accepts the following input properties:

    AccountId string
    Identifier.
    Decision string
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    Includes List<ZeroTrustAccessPolicyInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    Name string
    The name of the Access policy.
    ApprovalGroups List<ZeroTrustAccessPolicyApprovalGroup>
    Administrators who can approve a temporary authentication request.
    ApprovalRequired bool
    Requires the user to request access from an administrator at the start of each session.
    Excludes List<ZeroTrustAccessPolicyExclude>
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    IsolationRequired bool
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    PurposeJustificationPrompt string
    A custom message that will appear on the purpose justification screen.
    PurposeJustificationRequired bool
    Require users to enter a justification when they log in to the application.
    Requires List<ZeroTrustAccessPolicyRequire>
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    SessionDuration string
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    AccountId string
    Identifier.
    Decision string
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    Includes []ZeroTrustAccessPolicyIncludeArgs
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    Name string
    The name of the Access policy.
    ApprovalGroups []ZeroTrustAccessPolicyApprovalGroupArgs
    Administrators who can approve a temporary authentication request.
    ApprovalRequired bool
    Requires the user to request access from an administrator at the start of each session.
    Excludes []ZeroTrustAccessPolicyExcludeArgs
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    IsolationRequired bool
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    PurposeJustificationPrompt string
    A custom message that will appear on the purpose justification screen.
    PurposeJustificationRequired bool
    Require users to enter a justification when they log in to the application.
    Requires []ZeroTrustAccessPolicyRequireArgs
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    SessionDuration string
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    accountId String
    Identifier.
    decision String
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    includes List<ZeroTrustAccessPolicyInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name String
    The name of the Access policy.
    approvalGroups List<ZeroTrustAccessPolicyApprovalGroup>
    Administrators who can approve a temporary authentication request.
    approvalRequired Boolean
    Requires the user to request access from an administrator at the start of each session.
    excludes List<ZeroTrustAccessPolicyExclude>
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    isolationRequired Boolean
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    purposeJustificationPrompt String
    A custom message that will appear on the purpose justification screen.
    purposeJustificationRequired Boolean
    Require users to enter a justification when they log in to the application.
    requires List<ZeroTrustAccessPolicyRequire>
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    sessionDuration String
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    accountId string
    Identifier.
    decision string
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    includes ZeroTrustAccessPolicyInclude[]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name string
    The name of the Access policy.
    approvalGroups ZeroTrustAccessPolicyApprovalGroup[]
    Administrators who can approve a temporary authentication request.
    approvalRequired boolean
    Requires the user to request access from an administrator at the start of each session.
    excludes ZeroTrustAccessPolicyExclude[]
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    isolationRequired boolean
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    purposeJustificationPrompt string
    A custom message that will appear on the purpose justification screen.
    purposeJustificationRequired boolean
    Require users to enter a justification when they log in to the application.
    requires ZeroTrustAccessPolicyRequire[]
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    sessionDuration string
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    account_id str
    Identifier.
    decision str
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    includes Sequence[ZeroTrustAccessPolicyIncludeArgs]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name str
    The name of the Access policy.
    approval_groups Sequence[ZeroTrustAccessPolicyApprovalGroupArgs]
    Administrators who can approve a temporary authentication request.
    approval_required bool
    Requires the user to request access from an administrator at the start of each session.
    excludes Sequence[ZeroTrustAccessPolicyExcludeArgs]
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    isolation_required bool
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    purpose_justification_prompt str
    A custom message that will appear on the purpose justification screen.
    purpose_justification_required bool
    Require users to enter a justification when they log in to the application.
    requires Sequence[ZeroTrustAccessPolicyRequireArgs]
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    session_duration str
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    accountId String
    Identifier.
    decision String
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    includes List<Property Map>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name String
    The name of the Access policy.
    approvalGroups List<Property Map>
    Administrators who can approve a temporary authentication request.
    approvalRequired Boolean
    Requires the user to request access from an administrator at the start of each session.
    excludes List<Property Map>
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    isolationRequired Boolean
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    purposeJustificationPrompt String
    A custom message that will appear on the purpose justification screen.
    purposeJustificationRequired Boolean
    Require users to enter a justification when they log in to the application.
    requires List<Property Map>
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    sessionDuration String
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZeroTrustAccessPolicy resource produces the following output properties:

    AppCount int
    Number of access applications currently using this policy.
    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    Reusable bool
    UpdatedAt string
    AppCount int
    Number of access applications currently using this policy.
    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    Reusable bool
    UpdatedAt string
    appCount Integer
    Number of access applications currently using this policy.
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    reusable Boolean
    updatedAt String
    appCount number
    Number of access applications currently using this policy.
    createdAt string
    id string
    The provider-assigned unique ID for this managed resource.
    reusable boolean
    updatedAt string
    app_count int
    Number of access applications currently using this policy.
    created_at str
    id str
    The provider-assigned unique ID for this managed resource.
    reusable bool
    updated_at str
    appCount Number
    Number of access applications currently using this policy.
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    reusable Boolean
    updatedAt String

    Look up Existing ZeroTrustAccessPolicy Resource

    Get an existing ZeroTrustAccessPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZeroTrustAccessPolicyState, opts?: CustomResourceOptions): ZeroTrustAccessPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        app_count: Optional[int] = None,
        approval_groups: Optional[Sequence[ZeroTrustAccessPolicyApprovalGroupArgs]] = None,
        approval_required: Optional[bool] = None,
        created_at: Optional[str] = None,
        decision: Optional[str] = None,
        excludes: Optional[Sequence[ZeroTrustAccessPolicyExcludeArgs]] = None,
        includes: Optional[Sequence[ZeroTrustAccessPolicyIncludeArgs]] = None,
        isolation_required: Optional[bool] = None,
        name: Optional[str] = None,
        purpose_justification_prompt: Optional[str] = None,
        purpose_justification_required: Optional[bool] = None,
        requires: Optional[Sequence[ZeroTrustAccessPolicyRequireArgs]] = None,
        reusable: Optional[bool] = None,
        session_duration: Optional[str] = None,
        updated_at: Optional[str] = None) -> ZeroTrustAccessPolicy
    func GetZeroTrustAccessPolicy(ctx *Context, name string, id IDInput, state *ZeroTrustAccessPolicyState, opts ...ResourceOption) (*ZeroTrustAccessPolicy, error)
    public static ZeroTrustAccessPolicy Get(string name, Input<string> id, ZeroTrustAccessPolicyState? state, CustomResourceOptions? opts = null)
    public static ZeroTrustAccessPolicy get(String name, Output<String> id, ZeroTrustAccessPolicyState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:ZeroTrustAccessPolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    Identifier.
    AppCount int
    Number of access applications currently using this policy.
    ApprovalGroups List<ZeroTrustAccessPolicyApprovalGroup>
    Administrators who can approve a temporary authentication request.
    ApprovalRequired bool
    Requires the user to request access from an administrator at the start of each session.
    CreatedAt string
    Decision string
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    Excludes List<ZeroTrustAccessPolicyExclude>
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    Includes List<ZeroTrustAccessPolicyInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    IsolationRequired bool
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    Name string
    The name of the Access policy.
    PurposeJustificationPrompt string
    A custom message that will appear on the purpose justification screen.
    PurposeJustificationRequired bool
    Require users to enter a justification when they log in to the application.
    Requires List<ZeroTrustAccessPolicyRequire>
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    Reusable bool
    SessionDuration string
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    UpdatedAt string
    AccountId string
    Identifier.
    AppCount int
    Number of access applications currently using this policy.
    ApprovalGroups []ZeroTrustAccessPolicyApprovalGroupArgs
    Administrators who can approve a temporary authentication request.
    ApprovalRequired bool
    Requires the user to request access from an administrator at the start of each session.
    CreatedAt string
    Decision string
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    Excludes []ZeroTrustAccessPolicyExcludeArgs
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    Includes []ZeroTrustAccessPolicyIncludeArgs
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    IsolationRequired bool
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    Name string
    The name of the Access policy.
    PurposeJustificationPrompt string
    A custom message that will appear on the purpose justification screen.
    PurposeJustificationRequired bool
    Require users to enter a justification when they log in to the application.
    Requires []ZeroTrustAccessPolicyRequireArgs
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    Reusable bool
    SessionDuration string
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    UpdatedAt string
    accountId String
    Identifier.
    appCount Integer
    Number of access applications currently using this policy.
    approvalGroups List<ZeroTrustAccessPolicyApprovalGroup>
    Administrators who can approve a temporary authentication request.
    approvalRequired Boolean
    Requires the user to request access from an administrator at the start of each session.
    createdAt String
    decision String
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    excludes List<ZeroTrustAccessPolicyExclude>
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    includes List<ZeroTrustAccessPolicyInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isolationRequired Boolean
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    name String
    The name of the Access policy.
    purposeJustificationPrompt String
    A custom message that will appear on the purpose justification screen.
    purposeJustificationRequired Boolean
    Require users to enter a justification when they log in to the application.
    requires List<ZeroTrustAccessPolicyRequire>
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    reusable Boolean
    sessionDuration String
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    updatedAt String
    accountId string
    Identifier.
    appCount number
    Number of access applications currently using this policy.
    approvalGroups ZeroTrustAccessPolicyApprovalGroup[]
    Administrators who can approve a temporary authentication request.
    approvalRequired boolean
    Requires the user to request access from an administrator at the start of each session.
    createdAt string
    decision string
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    excludes ZeroTrustAccessPolicyExclude[]
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    includes ZeroTrustAccessPolicyInclude[]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isolationRequired boolean
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    name string
    The name of the Access policy.
    purposeJustificationPrompt string
    A custom message that will appear on the purpose justification screen.
    purposeJustificationRequired boolean
    Require users to enter a justification when they log in to the application.
    requires ZeroTrustAccessPolicyRequire[]
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    reusable boolean
    sessionDuration string
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    updatedAt string
    account_id str
    Identifier.
    app_count int
    Number of access applications currently using this policy.
    approval_groups Sequence[ZeroTrustAccessPolicyApprovalGroupArgs]
    Administrators who can approve a temporary authentication request.
    approval_required bool
    Requires the user to request access from an administrator at the start of each session.
    created_at str
    decision str
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    excludes Sequence[ZeroTrustAccessPolicyExcludeArgs]
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    includes Sequence[ZeroTrustAccessPolicyIncludeArgs]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isolation_required bool
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    name str
    The name of the Access policy.
    purpose_justification_prompt str
    A custom message that will appear on the purpose justification screen.
    purpose_justification_required bool
    Require users to enter a justification when they log in to the application.
    requires Sequence[ZeroTrustAccessPolicyRequireArgs]
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    reusable bool
    session_duration str
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    updated_at str
    accountId String
    Identifier.
    appCount Number
    Number of access applications currently using this policy.
    approvalGroups List<Property Map>
    Administrators who can approve a temporary authentication request.
    approvalRequired Boolean
    Requires the user to request access from an administrator at the start of each session.
    createdAt String
    decision String
    The action Access will take if a user matches this policy. Infrastructure application policies can only use the Allow action. Available values: "allow", "deny", "non_identity", "bypass".
    excludes List<Property Map>
    Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
    includes List<Property Map>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isolationRequired Boolean
    Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use this feature.
    name String
    The name of the Access policy.
    purposeJustificationPrompt String
    A custom message that will appear on the purpose justification screen.
    purposeJustificationRequired Boolean
    Require users to enter a justification when they log in to the application.
    requires List<Property Map>
    Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
    reusable Boolean
    sessionDuration String
    The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h.
    updatedAt String

    Supporting Types

    ZeroTrustAccessPolicyApprovalGroup, ZeroTrustAccessPolicyApprovalGroupArgs

    ApprovalsNeeded double
    The number of approvals needed to obtain access.
    EmailAddresses List<string>
    A list of emails that can approve the access request.
    EmailListUuid string
    The UUID of an re-usable email list.
    ApprovalsNeeded float64
    The number of approvals needed to obtain access.
    EmailAddresses []string
    A list of emails that can approve the access request.
    EmailListUuid string
    The UUID of an re-usable email list.
    approvalsNeeded Double
    The number of approvals needed to obtain access.
    emailAddresses List<String>
    A list of emails that can approve the access request.
    emailListUuid String
    The UUID of an re-usable email list.
    approvalsNeeded number
    The number of approvals needed to obtain access.
    emailAddresses string[]
    A list of emails that can approve the access request.
    emailListUuid string
    The UUID of an re-usable email list.
    approvals_needed float
    The number of approvals needed to obtain access.
    email_addresses Sequence[str]
    A list of emails that can approve the access request.
    email_list_uuid str
    The UUID of an re-usable email list.
    approvalsNeeded Number
    The number of approvals needed to obtain access.
    emailAddresses List<String>
    A list of emails that can approve the access request.
    emailListUuid String
    The UUID of an re-usable email list.

    ZeroTrustAccessPolicyExclude, ZeroTrustAccessPolicyExcludeArgs

    AnyValidServiceToken ZeroTrustAccessPolicyExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessPolicyExcludeAuthContext
    AuthMethod ZeroTrustAccessPolicyExcludeAuthMethod
    AzureAd ZeroTrustAccessPolicyExcludeAzureAd
    Certificate ZeroTrustAccessPolicyExcludeCertificate
    CommonName ZeroTrustAccessPolicyExcludeCommonName
    DevicePosture ZeroTrustAccessPolicyExcludeDevicePosture
    Email ZeroTrustAccessPolicyExcludeEmail
    EmailDomain ZeroTrustAccessPolicyExcludeEmailDomain
    EmailList ZeroTrustAccessPolicyExcludeEmailList
    Everyone ZeroTrustAccessPolicyExcludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessPolicyExcludeExternalEvaluation
    Geo ZeroTrustAccessPolicyExcludeGeo
    GithubOrganization ZeroTrustAccessPolicyExcludeGithubOrganization
    Group ZeroTrustAccessPolicyExcludeGroup
    Gsuite ZeroTrustAccessPolicyExcludeGsuite
    Ip ZeroTrustAccessPolicyExcludeIp
    IpList ZeroTrustAccessPolicyExcludeIpList
    LoginMethod ZeroTrustAccessPolicyExcludeLoginMethod
    Okta ZeroTrustAccessPolicyExcludeOkta
    Saml ZeroTrustAccessPolicyExcludeSaml
    ServiceToken ZeroTrustAccessPolicyExcludeServiceToken
    AnyValidServiceToken ZeroTrustAccessPolicyExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessPolicyExcludeAuthContext
    AuthMethod ZeroTrustAccessPolicyExcludeAuthMethod
    AzureAd ZeroTrustAccessPolicyExcludeAzureAd
    Certificate ZeroTrustAccessPolicyExcludeCertificate
    CommonName ZeroTrustAccessPolicyExcludeCommonName
    DevicePosture ZeroTrustAccessPolicyExcludeDevicePosture
    Email ZeroTrustAccessPolicyExcludeEmail
    EmailDomain ZeroTrustAccessPolicyExcludeEmailDomain
    EmailList ZeroTrustAccessPolicyExcludeEmailList
    Everyone ZeroTrustAccessPolicyExcludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessPolicyExcludeExternalEvaluation
    Geo ZeroTrustAccessPolicyExcludeGeo
    GithubOrganization ZeroTrustAccessPolicyExcludeGithubOrganization
    Group ZeroTrustAccessPolicyExcludeGroup
    Gsuite ZeroTrustAccessPolicyExcludeGsuite
    Ip ZeroTrustAccessPolicyExcludeIp
    IpList ZeroTrustAccessPolicyExcludeIpList
    LoginMethod ZeroTrustAccessPolicyExcludeLoginMethod
    Okta ZeroTrustAccessPolicyExcludeOkta
    Saml ZeroTrustAccessPolicyExcludeSaml
    ServiceToken ZeroTrustAccessPolicyExcludeServiceToken
    anyValidServiceToken ZeroTrustAccessPolicyExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessPolicyExcludeAuthContext
    authMethod ZeroTrustAccessPolicyExcludeAuthMethod
    azureAd ZeroTrustAccessPolicyExcludeAzureAd
    certificate ZeroTrustAccessPolicyExcludeCertificate
    commonName ZeroTrustAccessPolicyExcludeCommonName
    devicePosture ZeroTrustAccessPolicyExcludeDevicePosture
    email ZeroTrustAccessPolicyExcludeEmail
    emailDomain ZeroTrustAccessPolicyExcludeEmailDomain
    emailList ZeroTrustAccessPolicyExcludeEmailList
    everyone ZeroTrustAccessPolicyExcludeEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessPolicyExcludeExternalEvaluation
    geo ZeroTrustAccessPolicyExcludeGeo
    githubOrganization ZeroTrustAccessPolicyExcludeGithubOrganization
    group ZeroTrustAccessPolicyExcludeGroup
    gsuite ZeroTrustAccessPolicyExcludeGsuite
    ip ZeroTrustAccessPolicyExcludeIp
    ipList ZeroTrustAccessPolicyExcludeIpList
    loginMethod ZeroTrustAccessPolicyExcludeLoginMethod
    okta ZeroTrustAccessPolicyExcludeOkta
    saml ZeroTrustAccessPolicyExcludeSaml
    serviceToken ZeroTrustAccessPolicyExcludeServiceToken
    anyValidServiceToken ZeroTrustAccessPolicyExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessPolicyExcludeAuthContext
    authMethod ZeroTrustAccessPolicyExcludeAuthMethod
    azureAd ZeroTrustAccessPolicyExcludeAzureAd
    certificate ZeroTrustAccessPolicyExcludeCertificate
    commonName ZeroTrustAccessPolicyExcludeCommonName
    devicePosture ZeroTrustAccessPolicyExcludeDevicePosture
    email ZeroTrustAccessPolicyExcludeEmail
    emailDomain ZeroTrustAccessPolicyExcludeEmailDomain
    emailList ZeroTrustAccessPolicyExcludeEmailList
    everyone ZeroTrustAccessPolicyExcludeEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessPolicyExcludeExternalEvaluation
    geo ZeroTrustAccessPolicyExcludeGeo
    githubOrganization ZeroTrustAccessPolicyExcludeGithubOrganization
    group ZeroTrustAccessPolicyExcludeGroup
    gsuite ZeroTrustAccessPolicyExcludeGsuite
    ip ZeroTrustAccessPolicyExcludeIp
    ipList ZeroTrustAccessPolicyExcludeIpList
    loginMethod ZeroTrustAccessPolicyExcludeLoginMethod
    okta ZeroTrustAccessPolicyExcludeOkta
    saml ZeroTrustAccessPolicyExcludeSaml
    serviceToken ZeroTrustAccessPolicyExcludeServiceToken
    any_valid_service_token ZeroTrustAccessPolicyExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context ZeroTrustAccessPolicyExcludeAuthContext
    auth_method ZeroTrustAccessPolicyExcludeAuthMethod
    azure_ad ZeroTrustAccessPolicyExcludeAzureAd
    certificate ZeroTrustAccessPolicyExcludeCertificate
    common_name ZeroTrustAccessPolicyExcludeCommonName
    device_posture ZeroTrustAccessPolicyExcludeDevicePosture
    email ZeroTrustAccessPolicyExcludeEmail
    email_domain ZeroTrustAccessPolicyExcludeEmailDomain
    email_list ZeroTrustAccessPolicyExcludeEmailList
    everyone ZeroTrustAccessPolicyExcludeEveryone
    An empty object which matches on all users.
    external_evaluation ZeroTrustAccessPolicyExcludeExternalEvaluation
    geo ZeroTrustAccessPolicyExcludeGeo
    github_organization ZeroTrustAccessPolicyExcludeGithubOrganization
    group ZeroTrustAccessPolicyExcludeGroup
    gsuite ZeroTrustAccessPolicyExcludeGsuite
    ip ZeroTrustAccessPolicyExcludeIp
    ip_list ZeroTrustAccessPolicyExcludeIpList
    login_method ZeroTrustAccessPolicyExcludeLoginMethod
    okta ZeroTrustAccessPolicyExcludeOkta
    saml ZeroTrustAccessPolicyExcludeSaml
    service_token ZeroTrustAccessPolicyExcludeServiceToken

    ZeroTrustAccessPolicyExcludeAuthContext, ZeroTrustAccessPolicyExcludeAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessPolicyExcludeAuthMethod, ZeroTrustAccessPolicyExcludeAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    ZeroTrustAccessPolicyExcludeAzureAd, ZeroTrustAccessPolicyExcludeAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessPolicyExcludeCommonName, ZeroTrustAccessPolicyExcludeCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    ZeroTrustAccessPolicyExcludeDevicePosture, ZeroTrustAccessPolicyExcludeDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    ZeroTrustAccessPolicyExcludeEmail, ZeroTrustAccessPolicyExcludeEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    ZeroTrustAccessPolicyExcludeEmailDomain, ZeroTrustAccessPolicyExcludeEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    ZeroTrustAccessPolicyExcludeEmailList, ZeroTrustAccessPolicyExcludeEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    ZeroTrustAccessPolicyExcludeExternalEvaluation, ZeroTrustAccessPolicyExcludeExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    ZeroTrustAccessPolicyExcludeGeo, ZeroTrustAccessPolicyExcludeGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    ZeroTrustAccessPolicyExcludeGithubOrganization, ZeroTrustAccessPolicyExcludeGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    ZeroTrustAccessPolicyExcludeGroup, ZeroTrustAccessPolicyExcludeGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    ZeroTrustAccessPolicyExcludeGsuite, ZeroTrustAccessPolicyExcludeGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    ZeroTrustAccessPolicyExcludeIp, ZeroTrustAccessPolicyExcludeIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    ZeroTrustAccessPolicyExcludeIpList, ZeroTrustAccessPolicyExcludeIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    ZeroTrustAccessPolicyExcludeLoginMethod, ZeroTrustAccessPolicyExcludeLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    ZeroTrustAccessPolicyExcludeOkta, ZeroTrustAccessPolicyExcludeOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    ZeroTrustAccessPolicyExcludeSaml, ZeroTrustAccessPolicyExcludeSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    ZeroTrustAccessPolicyExcludeServiceToken, ZeroTrustAccessPolicyExcludeServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    ZeroTrustAccessPolicyInclude, ZeroTrustAccessPolicyIncludeArgs

    AnyValidServiceToken ZeroTrustAccessPolicyIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessPolicyIncludeAuthContext
    AuthMethod ZeroTrustAccessPolicyIncludeAuthMethod
    AzureAd ZeroTrustAccessPolicyIncludeAzureAd
    Certificate ZeroTrustAccessPolicyIncludeCertificate
    CommonName ZeroTrustAccessPolicyIncludeCommonName
    DevicePosture ZeroTrustAccessPolicyIncludeDevicePosture
    Email ZeroTrustAccessPolicyIncludeEmail
    EmailDomain ZeroTrustAccessPolicyIncludeEmailDomain
    EmailList ZeroTrustAccessPolicyIncludeEmailList
    Everyone ZeroTrustAccessPolicyIncludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessPolicyIncludeExternalEvaluation
    Geo ZeroTrustAccessPolicyIncludeGeo
    GithubOrganization ZeroTrustAccessPolicyIncludeGithubOrganization
    Group ZeroTrustAccessPolicyIncludeGroup
    Gsuite ZeroTrustAccessPolicyIncludeGsuite
    Ip ZeroTrustAccessPolicyIncludeIp
    IpList ZeroTrustAccessPolicyIncludeIpList
    LoginMethod ZeroTrustAccessPolicyIncludeLoginMethod
    Okta ZeroTrustAccessPolicyIncludeOkta
    Saml ZeroTrustAccessPolicyIncludeSaml
    ServiceToken ZeroTrustAccessPolicyIncludeServiceToken
    AnyValidServiceToken ZeroTrustAccessPolicyIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessPolicyIncludeAuthContext
    AuthMethod ZeroTrustAccessPolicyIncludeAuthMethod
    AzureAd ZeroTrustAccessPolicyIncludeAzureAd
    Certificate ZeroTrustAccessPolicyIncludeCertificate
    CommonName ZeroTrustAccessPolicyIncludeCommonName
    DevicePosture ZeroTrustAccessPolicyIncludeDevicePosture
    Email ZeroTrustAccessPolicyIncludeEmail
    EmailDomain ZeroTrustAccessPolicyIncludeEmailDomain
    EmailList ZeroTrustAccessPolicyIncludeEmailList
    Everyone ZeroTrustAccessPolicyIncludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessPolicyIncludeExternalEvaluation
    Geo ZeroTrustAccessPolicyIncludeGeo
    GithubOrganization ZeroTrustAccessPolicyIncludeGithubOrganization
    Group ZeroTrustAccessPolicyIncludeGroup
    Gsuite ZeroTrustAccessPolicyIncludeGsuite
    Ip ZeroTrustAccessPolicyIncludeIp
    IpList ZeroTrustAccessPolicyIncludeIpList
    LoginMethod ZeroTrustAccessPolicyIncludeLoginMethod
    Okta ZeroTrustAccessPolicyIncludeOkta
    Saml ZeroTrustAccessPolicyIncludeSaml
    ServiceToken ZeroTrustAccessPolicyIncludeServiceToken
    anyValidServiceToken ZeroTrustAccessPolicyIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessPolicyIncludeAuthContext
    authMethod ZeroTrustAccessPolicyIncludeAuthMethod
    azureAd ZeroTrustAccessPolicyIncludeAzureAd
    certificate ZeroTrustAccessPolicyIncludeCertificate
    commonName ZeroTrustAccessPolicyIncludeCommonName
    devicePosture ZeroTrustAccessPolicyIncludeDevicePosture
    email ZeroTrustAccessPolicyIncludeEmail
    emailDomain ZeroTrustAccessPolicyIncludeEmailDomain
    emailList ZeroTrustAccessPolicyIncludeEmailList
    everyone ZeroTrustAccessPolicyIncludeEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessPolicyIncludeExternalEvaluation
    geo ZeroTrustAccessPolicyIncludeGeo
    githubOrganization ZeroTrustAccessPolicyIncludeGithubOrganization
    group ZeroTrustAccessPolicyIncludeGroup
    gsuite ZeroTrustAccessPolicyIncludeGsuite
    ip ZeroTrustAccessPolicyIncludeIp
    ipList ZeroTrustAccessPolicyIncludeIpList
    loginMethod ZeroTrustAccessPolicyIncludeLoginMethod
    okta ZeroTrustAccessPolicyIncludeOkta
    saml ZeroTrustAccessPolicyIncludeSaml
    serviceToken ZeroTrustAccessPolicyIncludeServiceToken
    anyValidServiceToken ZeroTrustAccessPolicyIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessPolicyIncludeAuthContext
    authMethod ZeroTrustAccessPolicyIncludeAuthMethod
    azureAd ZeroTrustAccessPolicyIncludeAzureAd
    certificate ZeroTrustAccessPolicyIncludeCertificate
    commonName ZeroTrustAccessPolicyIncludeCommonName
    devicePosture ZeroTrustAccessPolicyIncludeDevicePosture
    email ZeroTrustAccessPolicyIncludeEmail
    emailDomain ZeroTrustAccessPolicyIncludeEmailDomain
    emailList ZeroTrustAccessPolicyIncludeEmailList
    everyone ZeroTrustAccessPolicyIncludeEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessPolicyIncludeExternalEvaluation
    geo ZeroTrustAccessPolicyIncludeGeo
    githubOrganization ZeroTrustAccessPolicyIncludeGithubOrganization
    group ZeroTrustAccessPolicyIncludeGroup
    gsuite ZeroTrustAccessPolicyIncludeGsuite
    ip ZeroTrustAccessPolicyIncludeIp
    ipList ZeroTrustAccessPolicyIncludeIpList
    loginMethod ZeroTrustAccessPolicyIncludeLoginMethod
    okta ZeroTrustAccessPolicyIncludeOkta
    saml ZeroTrustAccessPolicyIncludeSaml
    serviceToken ZeroTrustAccessPolicyIncludeServiceToken
    any_valid_service_token ZeroTrustAccessPolicyIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context ZeroTrustAccessPolicyIncludeAuthContext
    auth_method ZeroTrustAccessPolicyIncludeAuthMethod
    azure_ad ZeroTrustAccessPolicyIncludeAzureAd
    certificate ZeroTrustAccessPolicyIncludeCertificate
    common_name ZeroTrustAccessPolicyIncludeCommonName
    device_posture ZeroTrustAccessPolicyIncludeDevicePosture
    email ZeroTrustAccessPolicyIncludeEmail
    email_domain ZeroTrustAccessPolicyIncludeEmailDomain
    email_list ZeroTrustAccessPolicyIncludeEmailList
    everyone ZeroTrustAccessPolicyIncludeEveryone
    An empty object which matches on all users.
    external_evaluation ZeroTrustAccessPolicyIncludeExternalEvaluation
    geo ZeroTrustAccessPolicyIncludeGeo
    github_organization ZeroTrustAccessPolicyIncludeGithubOrganization
    group ZeroTrustAccessPolicyIncludeGroup
    gsuite ZeroTrustAccessPolicyIncludeGsuite
    ip ZeroTrustAccessPolicyIncludeIp
    ip_list ZeroTrustAccessPolicyIncludeIpList
    login_method ZeroTrustAccessPolicyIncludeLoginMethod
    okta ZeroTrustAccessPolicyIncludeOkta
    saml ZeroTrustAccessPolicyIncludeSaml
    service_token ZeroTrustAccessPolicyIncludeServiceToken

    ZeroTrustAccessPolicyIncludeAuthContext, ZeroTrustAccessPolicyIncludeAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessPolicyIncludeAuthMethod, ZeroTrustAccessPolicyIncludeAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    ZeroTrustAccessPolicyIncludeAzureAd, ZeroTrustAccessPolicyIncludeAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessPolicyIncludeCommonName, ZeroTrustAccessPolicyIncludeCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    ZeroTrustAccessPolicyIncludeDevicePosture, ZeroTrustAccessPolicyIncludeDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    ZeroTrustAccessPolicyIncludeEmail, ZeroTrustAccessPolicyIncludeEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    ZeroTrustAccessPolicyIncludeEmailDomain, ZeroTrustAccessPolicyIncludeEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    ZeroTrustAccessPolicyIncludeEmailList, ZeroTrustAccessPolicyIncludeEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    ZeroTrustAccessPolicyIncludeExternalEvaluation, ZeroTrustAccessPolicyIncludeExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    ZeroTrustAccessPolicyIncludeGeo, ZeroTrustAccessPolicyIncludeGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    ZeroTrustAccessPolicyIncludeGithubOrganization, ZeroTrustAccessPolicyIncludeGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    ZeroTrustAccessPolicyIncludeGroup, ZeroTrustAccessPolicyIncludeGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    ZeroTrustAccessPolicyIncludeGsuite, ZeroTrustAccessPolicyIncludeGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    ZeroTrustAccessPolicyIncludeIp, ZeroTrustAccessPolicyIncludeIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    ZeroTrustAccessPolicyIncludeIpList, ZeroTrustAccessPolicyIncludeIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    ZeroTrustAccessPolicyIncludeLoginMethod, ZeroTrustAccessPolicyIncludeLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    ZeroTrustAccessPolicyIncludeOkta, ZeroTrustAccessPolicyIncludeOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    ZeroTrustAccessPolicyIncludeSaml, ZeroTrustAccessPolicyIncludeSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    ZeroTrustAccessPolicyIncludeServiceToken, ZeroTrustAccessPolicyIncludeServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    ZeroTrustAccessPolicyRequire, ZeroTrustAccessPolicyRequireArgs

    AnyValidServiceToken ZeroTrustAccessPolicyRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessPolicyRequireAuthContext
    AuthMethod ZeroTrustAccessPolicyRequireAuthMethod
    AzureAd ZeroTrustAccessPolicyRequireAzureAd
    Certificate ZeroTrustAccessPolicyRequireCertificate
    CommonName ZeroTrustAccessPolicyRequireCommonName
    DevicePosture ZeroTrustAccessPolicyRequireDevicePosture
    Email ZeroTrustAccessPolicyRequireEmail
    EmailDomain ZeroTrustAccessPolicyRequireEmailDomain
    EmailList ZeroTrustAccessPolicyRequireEmailList
    Everyone ZeroTrustAccessPolicyRequireEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessPolicyRequireExternalEvaluation
    Geo ZeroTrustAccessPolicyRequireGeo
    GithubOrganization ZeroTrustAccessPolicyRequireGithubOrganization
    Group ZeroTrustAccessPolicyRequireGroup
    Gsuite ZeroTrustAccessPolicyRequireGsuite
    Ip ZeroTrustAccessPolicyRequireIp
    IpList ZeroTrustAccessPolicyRequireIpList
    LoginMethod ZeroTrustAccessPolicyRequireLoginMethod
    Okta ZeroTrustAccessPolicyRequireOkta
    Saml ZeroTrustAccessPolicyRequireSaml
    ServiceToken ZeroTrustAccessPolicyRequireServiceToken
    AnyValidServiceToken ZeroTrustAccessPolicyRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext ZeroTrustAccessPolicyRequireAuthContext
    AuthMethod ZeroTrustAccessPolicyRequireAuthMethod
    AzureAd ZeroTrustAccessPolicyRequireAzureAd
    Certificate ZeroTrustAccessPolicyRequireCertificate
    CommonName ZeroTrustAccessPolicyRequireCommonName
    DevicePosture ZeroTrustAccessPolicyRequireDevicePosture
    Email ZeroTrustAccessPolicyRequireEmail
    EmailDomain ZeroTrustAccessPolicyRequireEmailDomain
    EmailList ZeroTrustAccessPolicyRequireEmailList
    Everyone ZeroTrustAccessPolicyRequireEveryone
    An empty object which matches on all users.
    ExternalEvaluation ZeroTrustAccessPolicyRequireExternalEvaluation
    Geo ZeroTrustAccessPolicyRequireGeo
    GithubOrganization ZeroTrustAccessPolicyRequireGithubOrganization
    Group ZeroTrustAccessPolicyRequireGroup
    Gsuite ZeroTrustAccessPolicyRequireGsuite
    Ip ZeroTrustAccessPolicyRequireIp
    IpList ZeroTrustAccessPolicyRequireIpList
    LoginMethod ZeroTrustAccessPolicyRequireLoginMethod
    Okta ZeroTrustAccessPolicyRequireOkta
    Saml ZeroTrustAccessPolicyRequireSaml
    ServiceToken ZeroTrustAccessPolicyRequireServiceToken
    anyValidServiceToken ZeroTrustAccessPolicyRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessPolicyRequireAuthContext
    authMethod ZeroTrustAccessPolicyRequireAuthMethod
    azureAd ZeroTrustAccessPolicyRequireAzureAd
    certificate ZeroTrustAccessPolicyRequireCertificate
    commonName ZeroTrustAccessPolicyRequireCommonName
    devicePosture ZeroTrustAccessPolicyRequireDevicePosture
    email ZeroTrustAccessPolicyRequireEmail
    emailDomain ZeroTrustAccessPolicyRequireEmailDomain
    emailList ZeroTrustAccessPolicyRequireEmailList
    everyone ZeroTrustAccessPolicyRequireEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessPolicyRequireExternalEvaluation
    geo ZeroTrustAccessPolicyRequireGeo
    githubOrganization ZeroTrustAccessPolicyRequireGithubOrganization
    group ZeroTrustAccessPolicyRequireGroup
    gsuite ZeroTrustAccessPolicyRequireGsuite
    ip ZeroTrustAccessPolicyRequireIp
    ipList ZeroTrustAccessPolicyRequireIpList
    loginMethod ZeroTrustAccessPolicyRequireLoginMethod
    okta ZeroTrustAccessPolicyRequireOkta
    saml ZeroTrustAccessPolicyRequireSaml
    serviceToken ZeroTrustAccessPolicyRequireServiceToken
    anyValidServiceToken ZeroTrustAccessPolicyRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext ZeroTrustAccessPolicyRequireAuthContext
    authMethod ZeroTrustAccessPolicyRequireAuthMethod
    azureAd ZeroTrustAccessPolicyRequireAzureAd
    certificate ZeroTrustAccessPolicyRequireCertificate
    commonName ZeroTrustAccessPolicyRequireCommonName
    devicePosture ZeroTrustAccessPolicyRequireDevicePosture
    email ZeroTrustAccessPolicyRequireEmail
    emailDomain ZeroTrustAccessPolicyRequireEmailDomain
    emailList ZeroTrustAccessPolicyRequireEmailList
    everyone ZeroTrustAccessPolicyRequireEveryone
    An empty object which matches on all users.
    externalEvaluation ZeroTrustAccessPolicyRequireExternalEvaluation
    geo ZeroTrustAccessPolicyRequireGeo
    githubOrganization ZeroTrustAccessPolicyRequireGithubOrganization
    group ZeroTrustAccessPolicyRequireGroup
    gsuite ZeroTrustAccessPolicyRequireGsuite
    ip ZeroTrustAccessPolicyRequireIp
    ipList ZeroTrustAccessPolicyRequireIpList
    loginMethod ZeroTrustAccessPolicyRequireLoginMethod
    okta ZeroTrustAccessPolicyRequireOkta
    saml ZeroTrustAccessPolicyRequireSaml
    serviceToken ZeroTrustAccessPolicyRequireServiceToken
    any_valid_service_token ZeroTrustAccessPolicyRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context ZeroTrustAccessPolicyRequireAuthContext
    auth_method ZeroTrustAccessPolicyRequireAuthMethod
    azure_ad ZeroTrustAccessPolicyRequireAzureAd
    certificate ZeroTrustAccessPolicyRequireCertificate
    common_name ZeroTrustAccessPolicyRequireCommonName
    device_posture ZeroTrustAccessPolicyRequireDevicePosture
    email ZeroTrustAccessPolicyRequireEmail
    email_domain ZeroTrustAccessPolicyRequireEmailDomain
    email_list ZeroTrustAccessPolicyRequireEmailList
    everyone ZeroTrustAccessPolicyRequireEveryone
    An empty object which matches on all users.
    external_evaluation ZeroTrustAccessPolicyRequireExternalEvaluation
    geo ZeroTrustAccessPolicyRequireGeo
    github_organization ZeroTrustAccessPolicyRequireGithubOrganization
    group ZeroTrustAccessPolicyRequireGroup
    gsuite ZeroTrustAccessPolicyRequireGsuite
    ip ZeroTrustAccessPolicyRequireIp
    ip_list ZeroTrustAccessPolicyRequireIpList
    login_method ZeroTrustAccessPolicyRequireLoginMethod
    okta ZeroTrustAccessPolicyRequireOkta
    saml ZeroTrustAccessPolicyRequireSaml
    service_token ZeroTrustAccessPolicyRequireServiceToken

    ZeroTrustAccessPolicyRequireAuthContext, ZeroTrustAccessPolicyRequireAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessPolicyRequireAuthMethod, ZeroTrustAccessPolicyRequireAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    ZeroTrustAccessPolicyRequireAzureAd, ZeroTrustAccessPolicyRequireAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    ZeroTrustAccessPolicyRequireCommonName, ZeroTrustAccessPolicyRequireCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    ZeroTrustAccessPolicyRequireDevicePosture, ZeroTrustAccessPolicyRequireDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    ZeroTrustAccessPolicyRequireEmail, ZeroTrustAccessPolicyRequireEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    ZeroTrustAccessPolicyRequireEmailDomain, ZeroTrustAccessPolicyRequireEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    ZeroTrustAccessPolicyRequireEmailList, ZeroTrustAccessPolicyRequireEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    ZeroTrustAccessPolicyRequireExternalEvaluation, ZeroTrustAccessPolicyRequireExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    ZeroTrustAccessPolicyRequireGeo, ZeroTrustAccessPolicyRequireGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    ZeroTrustAccessPolicyRequireGithubOrganization, ZeroTrustAccessPolicyRequireGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    ZeroTrustAccessPolicyRequireGroup, ZeroTrustAccessPolicyRequireGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    ZeroTrustAccessPolicyRequireGsuite, ZeroTrustAccessPolicyRequireGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    ZeroTrustAccessPolicyRequireIp, ZeroTrustAccessPolicyRequireIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    ZeroTrustAccessPolicyRequireIpList, ZeroTrustAccessPolicyRequireIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    ZeroTrustAccessPolicyRequireLoginMethod, ZeroTrustAccessPolicyRequireLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    ZeroTrustAccessPolicyRequireOkta, ZeroTrustAccessPolicyRequireOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    ZeroTrustAccessPolicyRequireSaml, ZeroTrustAccessPolicyRequireSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    ZeroTrustAccessPolicyRequireServiceToken, ZeroTrustAccessPolicyRequireServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    Import

    $ pulumi import cloudflare:index/zeroTrustAccessPolicy:ZeroTrustAccessPolicy example '<account_id>/<policy_id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
    pulumi/pulumi-cloudflare