Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Cloudflare Provider
  4. API Docs
  5. ZeroTrustCasbIntegration
Viewing docs for Cloudflare v6.23.1
published on Wednesday, Oct 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.ZeroTrustCasbIntegration

cloudflare logo cloudflare logo
Viewing docs for Cloudflare v6.23.1
published on Wednesday, Oct 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Creates and manages a CASB integration. Exactly one vendor and exactly one authentication method must be configured.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";
import * as std from "@pulumi/std";

// Exactly one vendor and exactly one authentication method must be configured.
//
// Confidential arguments (API keys, service account keys) are write-only:
// Pulumi sends them to the provider but does not store them directly in state.
// Only a secure digest is stored so Pulumi can detect secret rotation. Rotating
// a secret updates the integration in place; it does not recreate it.
//
// Non-confidential arguments are stored in state and diffed normally.
//
// Changing the vendor or the authentication method does force the integration to
// be recreated, because the update API cannot change either one.
//
// Write-only arguments require Pulumi 1.11 or later, and may be fed from
// ephemeral resources so the secret never touches disk.
const googleCloudPlatform = new cloudflare.ZeroTrustCasbIntegration("google_cloud_platform", {
    accountId: "023e105f4ecef8ad9ca31a8372d0c353",
    name: "My Google Cloud Platform integration",
    paused: false,
    googleCloudPlatform: {
        googleCloudPlatformServiceAccount: {
            serviceAccountKeyJson: std.file({
                input: "service-account-key.json",
            }).then(invoke => invoke.result),
        },
    },
});
const googleWorkspace = new cloudflare.ZeroTrustCasbIntegration("google_workspace", {
    accountId: "023e105f4ecef8ad9ca31a8372d0c353",
    name: "My Google Workspace integration",
    paused: false,
    googleWorkspace: {
        googleDomainWideDelegationServiceAccount: {
            serviceAccountKeyJson: std.file({
                input: "service-account-key.json",
            }).then(invoke => invoke.result),
            administratorEmail: "admin@example.com",
        },
    },
});
const anthropic = new cloudflare.ZeroTrustCasbIntegration("anthropic", {
    accountId: "023e105f4ecef8ad9ca31a8372d0c353",
    name: "My Anthropic integration",
    paused: false,
    anthropic: {
        anthropicAdminApiKey: {
            apiKey: anthropicAdminApiKey,
            tenantId: "org_01234567-89ab-cdef-0123-456789abcdef",
        },
    },
});
const openai = new cloudflare.ZeroTrustCasbIntegration("openai", {
    accountId: "023e105f4ecef8ad9ca31a8372d0c353",
    name: "My OpenAI integration",
    paused: false,
    useCases: [
        "casb",
        "ces",
        "auto_remediation",
    ],
    openai: {
        chatgptStandardApiKey: {
            adminApiKey: openaiAdminApiKey,
            organizationId: "org-abc123",
            projectApiKey: openaiProjectApiKey,
            projectId: "proj_abc123",
        },
    },
});
const aws = new cloudflare.ZeroTrustCasbIntegration("aws", {
    accountId: "023e105f4ecef8ad9ca31a8372d0c353",
    name: "My AWS integration",
    paused: false,
    aws: {
        awsIamRole: {
            roleArn: "arn:aws:iam::123456789012:role/Cloudflare_DSPM_Auditor",
            externalId: awsExternalId,
        },
    },
});
// Before creating a Box integration, add the Cloudflare CASB application to
// your Box account:
//
// 1. Sign in to the Box Admin Console with Admin permission.
// 2. Open Integrations > Platform Apps Manager and select Server Authentication Apps.
// 3. Click Add Platform App and enter the Cloudflare CASB client ID:
//    puaghckpy0578r8p6f3g0rf860unup4r
// 4. In Accounts & Billing, copy the Enterprise ID and use it below.
//
// For details, refer to:
// https://developer.box.com/guides/authorization/platform-app-approval/#as-an-admin
const box = new cloudflare.ZeroTrustCasbIntegration("box", {
    accountId: "023e105f4ecef8ad9ca31a8372d0c353",
    name: "My Box integration",
    paused: false,
    dlpProfiles: ["b0d1e2f3-4567-89ab-cdef-0123456789ab"],
    box: {
        boxServerAuthentication: {
            enterpriseId: "1234567",
        },
    },
});

    import pulumi
import pulumi_cloudflare as cloudflare
import pulumi_std as std

# Exactly one vendor and exactly one authentication method must be configured.
#
# Confidential arguments (API keys, service account keys) are write-only:
# Pulumi sends them to the provider but does not store them directly in state.
# Only a secure digest is stored so Pulumi can detect secret rotation. Rotating
# a secret updates the integration in place; it does not recreate it.
#
# Non-confidential arguments are stored in state and diffed normally.
#
# Changing the vendor or the authentication method does force the integration to
# be recreated, because the update API cannot change either one.
#
# Write-only arguments require Pulumi 1.11 or later, and may be fed from
# ephemeral resources so the secret never touches disk.
google_cloud_platform = cloudflare.ZeroTrustCasbIntegration("google_cloud_platform",
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
    name="My Google Cloud Platform integration",
    paused=False,
    google_cloud_platform={
        "google_cloud_platform_service_account": {
            "service_account_key_json": std.file(input="service-account-key.json").result,
        },
    })
google_workspace = cloudflare.ZeroTrustCasbIntegration("google_workspace",
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
    name="My Google Workspace integration",
    paused=False,
    google_workspace={
        "google_domain_wide_delegation_service_account": {
            "service_account_key_json": std.file(input="service-account-key.json").result,
            "administrator_email": "admin@example.com",
        },
    })
anthropic = cloudflare.ZeroTrustCasbIntegration("anthropic",
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
    name="My Anthropic integration",
    paused=False,
    anthropic={
        "anthropic_admin_api_key": {
            "api_key": anthropic_admin_api_key,
            "tenant_id": "org_01234567-89ab-cdef-0123-456789abcdef",
        },
    })
openai = cloudflare.ZeroTrustCasbIntegration("openai",
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
    name="My OpenAI integration",
    paused=False,
    use_cases=[
        "casb",
        "ces",
        "auto_remediation",
    ],
    openai={
        "chatgpt_standard_api_key": {
            "admin_api_key": openai_admin_api_key,
            "organization_id": "org-abc123",
            "project_api_key": openai_project_api_key,
            "project_id": "proj_abc123",
        },
    })
aws = cloudflare.ZeroTrustCasbIntegration("aws",
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
    name="My AWS integration",
    paused=False,
    aws={
        "aws_iam_role": {
            "role_arn": "arn:aws:iam::123456789012:role/Cloudflare_DSPM_Auditor",
            "external_id": aws_external_id,
        },
    })
# Before creating a Box integration, add the Cloudflare CASB application to
# your Box account:
#
# 1. Sign in to the Box Admin Console with Admin permission.
# 2. Open Integrations > Platform Apps Manager and select Server Authentication Apps.
# 3. Click Add Platform App and enter the Cloudflare CASB client ID:
#    puaghckpy0578r8p6f3g0rf860unup4r
# 4. In Accounts & Billing, copy the Enterprise ID and use it below.
#
# For details, refer to:
# https://developer.box.com/guides/authorization/platform-app-approval/#as-an-admin
box = cloudflare.ZeroTrustCasbIntegration("box",
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
    name="My Box integration",
    paused=False,
    dlp_profiles=["b0d1e2f3-4567-89ab-cdef-0123456789ab"],
    box={
        "box_server_authentication": {
            "enterprise_id": "1234567",
        },
    })

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi-std/sdk/go/std"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		invokeFile, err := std.File(ctx, &std.FileArgs{
			Input: "service-account-key.json",
		}, nil)
		if err != nil {
			return err
		}
		// Exactly one vendor and exactly one authentication method must be configured.
		//
		// Confidential arguments (API keys, service account keys) are write-only:
		// Pulumi sends them to the provider but does not store them directly in state.
		// Only a secure digest is stored so Pulumi can detect secret rotation. Rotating
		// a secret updates the integration in place; it does not recreate it.
		//
		// Non-confidential arguments are stored in state and diffed normally.
		//
		// Changing the vendor or the authentication method does force the integration to
		// be recreated, because the update API cannot change either one.
		//
		// Write-only arguments require Pulumi 1.11 or later, and may be fed from
		// ephemeral resources so the secret never touches disk.
		_, err = cloudflare.NewZeroTrustCasbIntegration(ctx, "google_cloud_platform", &cloudflare.ZeroTrustCasbIntegrationArgs{
			AccountId: pulumi.String("023e105f4ecef8ad9ca31a8372d0c353"),
			Name:      pulumi.String("My Google Cloud Platform integration"),
			Paused:    pulumi.Bool(false),
			GoogleCloudPlatform: &cloudflare.ZeroTrustCasbIntegrationGoogleCloudPlatformArgs{
				GoogleCloudPlatformServiceAccount: &cloudflare.ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccountArgs{
					ServiceAccountKeyJson: pulumi.String(invokeFile.Result),
				},
			},
		})
		if err != nil {
			return err
		}
		invokeFile1, err := std.File(ctx, &std.FileArgs{
			Input: "service-account-key.json",
		}, nil)
		if err != nil {
			return err
		}
		_, err = cloudflare.NewZeroTrustCasbIntegration(ctx, "google_workspace", &cloudflare.ZeroTrustCasbIntegrationArgs{
			AccountId: pulumi.String("023e105f4ecef8ad9ca31a8372d0c353"),
			Name:      pulumi.String("My Google Workspace integration"),
			Paused:    pulumi.Bool(false),
			GoogleWorkspace: &cloudflare.ZeroTrustCasbIntegrationGoogleWorkspaceArgs{
				GoogleDomainWideDelegationServiceAccount: &cloudflare.ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccountArgs{
					ServiceAccountKeyJson: pulumi.String(invokeFile1.Result),
					AdministratorEmail:    pulumi.String("admin@example.com"),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = cloudflare.NewZeroTrustCasbIntegration(ctx, "anthropic", &cloudflare.ZeroTrustCasbIntegrationArgs{
			AccountId: pulumi.String("023e105f4ecef8ad9ca31a8372d0c353"),
			Name:      pulumi.String("My Anthropic integration"),
			Paused:    pulumi.Bool(false),
			Anthropic: &cloudflare.ZeroTrustCasbIntegrationAnthropicArgs{
				AnthropicAdminApiKey: &cloudflare.ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKeyArgs{
					ApiKey:   pulumi.Any(anthropicAdminApiKey),
					TenantId: pulumi.String("org_01234567-89ab-cdef-0123-456789abcdef"),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = cloudflare.NewZeroTrustCasbIntegration(ctx, "openai", &cloudflare.ZeroTrustCasbIntegrationArgs{
			AccountId: pulumi.String("023e105f4ecef8ad9ca31a8372d0c353"),
			Name:      pulumi.String("My OpenAI integration"),
			Paused:    pulumi.Bool(false),
			UseCases: pulumi.StringArray{
				pulumi.String("casb"),
				pulumi.String("ces"),
				pulumi.String("auto_remediation"),
			},
			Openai: &cloudflare.ZeroTrustCasbIntegrationOpenaiArgs{
				ChatgptStandardApiKey: &cloudflare.ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKeyArgs{
					AdminApiKey:    pulumi.Any(openaiAdminApiKey),
					OrganizationId: pulumi.String("org-abc123"),
					ProjectApiKey:  pulumi.Any(openaiProjectApiKey),
					ProjectId:      pulumi.String("proj_abc123"),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = cloudflare.NewZeroTrustCasbIntegration(ctx, "aws", &cloudflare.ZeroTrustCasbIntegrationArgs{
			AccountId: pulumi.String("023e105f4ecef8ad9ca31a8372d0c353"),
			Name:      pulumi.String("My AWS integration"),
			Paused:    pulumi.Bool(false),
			Aws: &cloudflare.ZeroTrustCasbIntegrationAwsArgs{
				AwsIamRole: &cloudflare.ZeroTrustCasbIntegrationAwsAwsIamRoleArgs{
					RoleArn:    pulumi.String("arn:aws:iam::123456789012:role/Cloudflare_DSPM_Auditor"),
					ExternalId: pulumi.Any(awsExternalId),
				},
			},
		})
		if err != nil {
			return err
		}
		// Before creating a Box integration, add the Cloudflare CASB application to
		// your Box account:
		//
		// 1. Sign in to the Box Admin Console with Admin permission.
		// 2. Open Integrations > Platform Apps Manager and select Server Authentication Apps.
		// 3. Click Add Platform App and enter the Cloudflare CASB client ID:
		//    puaghckpy0578r8p6f3g0rf860unup4r
		// 4. In Accounts & Billing, copy the Enterprise ID and use it below.
		//
		// For details, refer to:
		// https://developer.box.com/guides/authorization/platform-app-approval/#as-an-admin
		_, err = cloudflare.NewZeroTrustCasbIntegration(ctx, "box", &cloudflare.ZeroTrustCasbIntegrationArgs{
			AccountId: pulumi.String("023e105f4ecef8ad9ca31a8372d0c353"),
			Name:      pulumi.String("My Box integration"),
			Paused:    pulumi.Bool(false),
			DlpProfiles: pulumi.StringArray{
				pulumi.String("b0d1e2f3-4567-89ab-cdef-0123456789ab"),
			},
			Box: &cloudflare.ZeroTrustCasbIntegrationBoxArgs{
				BoxServerAuthentication: &cloudflare.ZeroTrustCasbIntegrationBoxBoxServerAuthenticationArgs{
					EnterpriseId: pulumi.String("1234567"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;
using Std = Pulumi.Std;

return await Deployment.RunAsync(() => 
{
    // Exactly one vendor and exactly one authentication method must be configured.
    //
    // Confidential arguments (API keys, service account keys) are write-only:
    // Pulumi sends them to the provider but does not store them directly in state.
    // Only a secure digest is stored so Pulumi can detect secret rotation. Rotating
    // a secret updates the integration in place; it does not recreate it.
    //
    // Non-confidential arguments are stored in state and diffed normally.
    //
    // Changing the vendor or the authentication method does force the integration to
    // be recreated, because the update API cannot change either one.
    //
    // Write-only arguments require Pulumi 1.11 or later, and may be fed from
    // ephemeral resources so the secret never touches disk.
    var googleCloudPlatform = new Cloudflare.ZeroTrustCasbIntegration("google_cloud_platform", new()
    {
        AccountId = "023e105f4ecef8ad9ca31a8372d0c353",
        Name = "My Google Cloud Platform integration",
        Paused = false,
        GoogleCloudPlatform = new Cloudflare.Inputs.ZeroTrustCasbIntegrationGoogleCloudPlatformArgs
        {
            GoogleCloudPlatformServiceAccount = new Cloudflare.Inputs.ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccountArgs
            {
                ServiceAccountKeyJson = Std.File.Invoke(new()
                {
                    Input = "service-account-key.json",
                }).Apply(invoke => invoke.Result),
            },
        },
    });

    var googleWorkspace = new Cloudflare.ZeroTrustCasbIntegration("google_workspace", new()
    {
        AccountId = "023e105f4ecef8ad9ca31a8372d0c353",
        Name = "My Google Workspace integration",
        Paused = false,
        GoogleWorkspace = new Cloudflare.Inputs.ZeroTrustCasbIntegrationGoogleWorkspaceArgs
        {
            GoogleDomainWideDelegationServiceAccount = new Cloudflare.Inputs.ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccountArgs
            {
                ServiceAccountKeyJson = Std.File.Invoke(new()
                {
                    Input = "service-account-key.json",
                }).Apply(invoke => invoke.Result),
                AdministratorEmail = "admin@example.com",
            },
        },
    });

    var anthropic = new Cloudflare.ZeroTrustCasbIntegration("anthropic", new()
    {
        AccountId = "023e105f4ecef8ad9ca31a8372d0c353",
        Name = "My Anthropic integration",
        Paused = false,
        Anthropic = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAnthropicArgs
        {
            AnthropicAdminApiKey = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKeyArgs
            {
                ApiKey = anthropicAdminApiKey,
                TenantId = "org_01234567-89ab-cdef-0123-456789abcdef",
            },
        },
    });

    var openai = new Cloudflare.ZeroTrustCasbIntegration("openai", new()
    {
        AccountId = "023e105f4ecef8ad9ca31a8372d0c353",
        Name = "My OpenAI integration",
        Paused = false,
        UseCases = new[]
        {
            "casb",
            "ces",
            "auto_remediation",
        },
        Openai = new Cloudflare.Inputs.ZeroTrustCasbIntegrationOpenaiArgs
        {
            ChatgptStandardApiKey = new Cloudflare.Inputs.ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKeyArgs
            {
                AdminApiKey = openaiAdminApiKey,
                OrganizationId = "org-abc123",
                ProjectApiKey = openaiProjectApiKey,
                ProjectId = "proj_abc123",
            },
        },
    });

    var aws = new Cloudflare.ZeroTrustCasbIntegration("aws", new()
    {
        AccountId = "023e105f4ecef8ad9ca31a8372d0c353",
        Name = "My AWS integration",
        Paused = false,
        Aws = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAwsArgs
        {
            AwsIamRole = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAwsAwsIamRoleArgs
            {
                RoleArn = "arn:aws:iam::123456789012:role/Cloudflare_DSPM_Auditor",
                ExternalId = awsExternalId,
            },
        },
    });

    // Before creating a Box integration, add the Cloudflare CASB application to
    // your Box account:
    //
    // 1. Sign in to the Box Admin Console with Admin permission.
    // 2. Open Integrations > Platform Apps Manager and select Server Authentication Apps.
    // 3. Click Add Platform App and enter the Cloudflare CASB client ID:
    //    puaghckpy0578r8p6f3g0rf860unup4r
    // 4. In Accounts & Billing, copy the Enterprise ID and use it below.
    //
    // For details, refer to:
    // https://developer.box.com/guides/authorization/platform-app-approval/#as-an-admin
    var box = new Cloudflare.ZeroTrustCasbIntegration("box", new()
    {
        AccountId = "023e105f4ecef8ad9ca31a8372d0c353",
        Name = "My Box integration",
        Paused = false,
        DlpProfiles = new[]
        {
            "b0d1e2f3-4567-89ab-cdef-0123456789ab",
        },
        Box = new Cloudflare.Inputs.ZeroTrustCasbIntegrationBoxArgs
        {
            BoxServerAuthentication = new Cloudflare.Inputs.ZeroTrustCasbIntegrationBoxBoxServerAuthenticationArgs
            {
                EnterpriseId = "1234567",
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.ZeroTrustCasbIntegration;
import com.pulumi.cloudflare.ZeroTrustCasbIntegrationArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationGoogleCloudPlatformArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccountArgs;
import com.pulumi.std.StdFunctions;
import com.pulumi.std.inputs.FileArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationGoogleWorkspaceArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccountArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationAnthropicArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKeyArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationOpenaiArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKeyArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationAwsArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationAwsAwsIamRoleArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationBoxArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbIntegrationBoxBoxServerAuthenticationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Exactly one vendor and exactly one authentication method must be configured.
        //
        // Confidential arguments (API keys, service account keys) are write-only:
        // Pulumi sends them to the provider but does not store them directly in state.
        // Only a secure digest is stored so Pulumi can detect secret rotation. Rotating
        // a secret updates the integration in place; it does not recreate it.
        //
        // Non-confidential arguments are stored in state and diffed normally.
        //
        // Changing the vendor or the authentication method does force the integration to
        // be recreated, because the update API cannot change either one.
        //
        // Write-only arguments require Pulumi 1.11 or later, and may be fed from
        // ephemeral resources so the secret never touches disk.
        var googleCloudPlatform = new ZeroTrustCasbIntegration("googleCloudPlatform", ZeroTrustCasbIntegrationArgs.builder()
            .accountId("023e105f4ecef8ad9ca31a8372d0c353")
            .name("My Google Cloud Platform integration")
            .paused(false)
            .googleCloudPlatform(ZeroTrustCasbIntegrationGoogleCloudPlatformArgs.builder()
                .googleCloudPlatformServiceAccount(ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccountArgs.builder()
                    .serviceAccountKeyJson(StdFunctions.file(FileArgs.builder()
                        .input("service-account-key.json")
                        .build()).result())
                    .build())
                .build())
            .build());

        var googleWorkspace = new ZeroTrustCasbIntegration("googleWorkspace", ZeroTrustCasbIntegrationArgs.builder()
            .accountId("023e105f4ecef8ad9ca31a8372d0c353")
            .name("My Google Workspace integration")
            .paused(false)
            .googleWorkspace(ZeroTrustCasbIntegrationGoogleWorkspaceArgs.builder()
                .googleDomainWideDelegationServiceAccount(ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccountArgs.builder()
                    .serviceAccountKeyJson(StdFunctions.file(FileArgs.builder()
                        .input("service-account-key.json")
                        .build()).result())
                    .administratorEmail("admin@example.com")
                    .build())
                .build())
            .build());

        var anthropic = new ZeroTrustCasbIntegration("anthropic", ZeroTrustCasbIntegrationArgs.builder()
            .accountId("023e105f4ecef8ad9ca31a8372d0c353")
            .name("My Anthropic integration")
            .paused(false)
            .anthropic(ZeroTrustCasbIntegrationAnthropicArgs.builder()
                .anthropicAdminApiKey(ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKeyArgs.builder()
                    .apiKey(anthropicAdminApiKey)
                    .tenantId("org_01234567-89ab-cdef-0123-456789abcdef")
                    .build())
                .build())
            .build());

        var openai = new ZeroTrustCasbIntegration("openai", ZeroTrustCasbIntegrationArgs.builder()
            .accountId("023e105f4ecef8ad9ca31a8372d0c353")
            .name("My OpenAI integration")
            .paused(false)
            .useCases(            
                "casb",
                "ces",
                "auto_remediation")
            .openai(ZeroTrustCasbIntegrationOpenaiArgs.builder()
                .chatgptStandardApiKey(ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKeyArgs.builder()
                    .adminApiKey(openaiAdminApiKey)
                    .organizationId("org-abc123")
                    .projectApiKey(openaiProjectApiKey)
                    .projectId("proj_abc123")
                    .build())
                .build())
            .build());

        var aws = new ZeroTrustCasbIntegration("aws", ZeroTrustCasbIntegrationArgs.builder()
            .accountId("023e105f4ecef8ad9ca31a8372d0c353")
            .name("My AWS integration")
            .paused(false)
            .aws(ZeroTrustCasbIntegrationAwsArgs.builder()
                .awsIamRole(ZeroTrustCasbIntegrationAwsAwsIamRoleArgs.builder()
                    .roleArn("arn:aws:iam::123456789012:role/Cloudflare_DSPM_Auditor")
                    .externalId(awsExternalId)
                    .build())
                .build())
            .build());

        // Before creating a Box integration, add the Cloudflare CASB application to
        // your Box account:
        //
        // 1. Sign in to the Box Admin Console with Admin permission.
        // 2. Open Integrations > Platform Apps Manager and select Server Authentication Apps.
        // 3. Click Add Platform App and enter the Cloudflare CASB client ID:
        //    puaghckpy0578r8p6f3g0rf860unup4r
        // 4. In Accounts & Billing, copy the Enterprise ID and use it below.
        //
        // For details, refer to:
        // https://developer.box.com/guides/authorization/platform-app-approval/#as-an-admin
        var box = new ZeroTrustCasbIntegration("box", ZeroTrustCasbIntegrationArgs.builder()
            .accountId("023e105f4ecef8ad9ca31a8372d0c353")
            .name("My Box integration")
            .paused(false)
            .dlpProfiles("b0d1e2f3-4567-89ab-cdef-0123456789ab")
            .box(ZeroTrustCasbIntegrationBoxArgs.builder()
                .boxServerAuthentication(ZeroTrustCasbIntegrationBoxBoxServerAuthenticationArgs.builder()
                    .enterpriseId("1234567")
                    .build())
                .build())
            .build());

    }
}

    resources:
  # Exactly one vendor and exactly one authentication method must be configured.
  #
  # Confidential arguments (API keys, service account keys) are write-only:
  # Pulumi sends them to the provider but does not store them directly in state.
  # Only a secure digest is stored so Pulumi can detect secret rotation. Rotating
  # a secret updates the integration in place; it does not recreate it.
  #
  # Non-confidential arguments are stored in state and diffed normally.
  #
  # Changing the vendor or the authentication method does force the integration to
  # be recreated, because the update API cannot change either one.
  #
  # Write-only arguments require Pulumi 1.11 or later, and may be fed from
  # ephemeral resources so the secret never touches disk.
  googleCloudPlatform:
    type: cloudflare:ZeroTrustCasbIntegration
    name: google_cloud_platform
    properties:
      accountId: 023e105f4ecef8ad9ca31a8372d0c353
      name: My Google Cloud Platform integration
      paused: false
      googleCloudPlatform:
        googleCloudPlatformServiceAccount:
          serviceAccountKeyJson:
            fn::invoke:
              function: std:file
              arguments:
                input: service-account-key.json
              return: result
  googleWorkspace:
    type: cloudflare:ZeroTrustCasbIntegration
    name: google_workspace
    properties:
      accountId: 023e105f4ecef8ad9ca31a8372d0c353
      name: My Google Workspace integration
      paused: false
      googleWorkspace:
        googleDomainWideDelegationServiceAccount:
          serviceAccountKeyJson:
            fn::invoke:
              function: std:file
              arguments:
                input: service-account-key.json
              return: result
          administratorEmail: admin@example.com
  anthropic:
    type: cloudflare:ZeroTrustCasbIntegration
    properties:
      accountId: 023e105f4ecef8ad9ca31a8372d0c353
      name: My Anthropic integration
      paused: false
      anthropic:
        anthropicAdminApiKey:
          apiKey: ${anthropicAdminApiKey}
          tenantId: org_01234567-89ab-cdef-0123-456789abcdef
  openai:
    type: cloudflare:ZeroTrustCasbIntegration
    properties:
      accountId: 023e105f4ecef8ad9ca31a8372d0c353
      name: My OpenAI integration
      paused: false # Also enrol the integration in continuous evaluation and let it remediate
      #   # findings automatically. Defaults to ["casb"] when omitted.
      useCases:
        - casb
        - ces
        - auto_remediation
      openai:
        chatgptStandardApiKey:
          adminApiKey: ${openaiAdminApiKey}
          organizationId: org-abc123
          projectApiKey: ${openaiProjectApiKey}
          projectId: proj_abc123
  aws:
    type: cloudflare:ZeroTrustCasbIntegration
    properties:
      accountId: 023e105f4ecef8ad9ca31a8372d0c353
      name: My AWS integration
      paused: false
      aws:
        awsIamRole:
          roleArn: arn:aws:iam::123456789012:role/Cloudflare_DSPM_Auditor
          externalId: ${awsExternalId}
  # Before creating a Box integration, add the Cloudflare CASB application to
  # your Box account:
  #
  # 1. Sign in to the Box Admin Console with Admin permission.
  # 2. Open Integrations > Platform Apps Manager and select Server Authentication Apps.
  # 3. Click Add Platform App and enter the Cloudflare CASB client ID:
  #    puaghckpy0578r8p6f3g0rf860unup4r
  # 4. In Accounts & Billing, copy the Enterprise ID and use it below.
  #
  # For details, refer to:
  # https://developer.box.com/guides/authorization/platform-app-approval/#as-an-admin
  box:
    type: cloudflare:ZeroTrustCasbIntegration
    properties:
      accountId: 023e105f4ecef8ad9ca31a8372d0c353
      name: My Box integration
      paused: false # Restrict DLP scanning to specific profiles. Omit to let Cloudflare assign
      #   # the account defaults.
      dlpProfiles:
        - b0d1e2f3-4567-89ab-cdef-0123456789ab
      box:
        boxServerAuthentication:
          enterpriseId: '1234567'

    terraform {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
    std = {
      source = "pulumi/std"
    }
  }
}

# Exactly one vendor and exactly one authentication method must be configured.
#
# Confidential arguments (API keys, service account keys) are write-only:
# Pulumi sends them to the provider but does not store them directly in state.
# Only a secure digest is stored so Pulumi can detect secret rotation. Rotating
# a secret updates the integration in place; it does not recreate it.
#
# Non-confidential arguments are stored in state and diffed normally.
#
# Changing the vendor or the authentication method does force the integration to
# be recreated, because the update API cannot change either one.
#
# Write-only arguments require Pulumi 1.11 or later, and may be fed from
# ephemeral resources so the secret never touches disk.
resource "cloudflare_zero_trust_casb_integration" "google_cloud_platform" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "023e105f4ecef8ad9ca31a8372d0c353"
  name       = "My Google Cloud Platform integration"
  paused     = false
  google_cloud_platform = {
    google_cloud_platform_service_account = {
      service_account_key_json = file("service-account-key.json")
    }
  }
}
resource "cloudflare_zero_trust_casb_integration" "google_workspace" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "023e105f4ecef8ad9ca31a8372d0c353"
  name       = "My Google Workspace integration"
  paused     = false
  google_workspace = {
    google_domain_wide_delegation_service_account = {
      service_account_key_json = file("service-account-key.json")
      administrator_email      = "admin@example.com"
    }
  }
}
resource "cloudflare_zero_trust_casb_integration" "anthropic" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "023e105f4ecef8ad9ca31a8372d0c353"
  name       = "My Anthropic integration"
  paused     = false
  anthropic = {
    anthropic_admin_api_key = {
      api_key   = anthropicAdminApiKey
      tenant_id = "org_01234567-89ab-cdef-0123-456789abcdef"
    }
  }
}
resource "cloudflare_zero_trust_casb_integration" "openai" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "023e105f4ecef8ad9ca31a8372d0c353"
  name       = "My OpenAI integration"
  paused     = false
  # Also enrol the integration in continuous evaluation and let it remediate
  # findings automatically. Defaults to ["casb"] when omitted.
  use_cases = ["casb", "ces", "auto_remediation"]
  openai = {
    chatgpt_standard_api_key = {
      admin_api_key   = openaiAdminApiKey
      organization_id = "org-abc123"
      project_api_key = openaiProjectApiKey
      project_id      = "proj_abc123"
    }
  }
}
resource "cloudflare_zero_trust_casb_integration" "aws" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "023e105f4ecef8ad9ca31a8372d0c353"
  name       = "My AWS integration"
  paused     = false
  aws = {
    aws_iam_role = {
      role_arn    = "arn:aws:iam::123456789012:role/Cloudflare_DSPM_Auditor"
      external_id = awsExternalId
    }
  }
}
# Before creating a Box integration, add the Cloudflare CASB application to
# your Box account:
#
# 1. Sign in to the Box Admin Console with Admin permission.
# 2. Open Integrations > Platform Apps Manager and select Server Authentication Apps.
# 3. Click Add Platform App and enter the Cloudflare CASB client ID:
#    puaghckpy0578r8p6f3g0rf860unup4r
# 4. In Accounts & Billing, copy the Enterprise ID and use it below.
#
# For details, refer to:
# https://developer.box.com/guides/authorization/platform-app-approval/#as-an-admin
resource "cloudflare_zero_trust_casb_integration" "box" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "023e105f4ecef8ad9ca31a8372d0c353"
  name       = "My Box integration"
  paused     = false
  # Restrict DLP scanning to specific profiles. Omit to let Cloudflare assign
  # the account defaults.
  dlp_profiles = ["b0d1e2f3-4567-89ab-cdef-0123456789ab"]
  box = {
    box_server_authentication = {
      enterprise_id = "1234567"
    }
  }
}

    Create ZeroTrustCasbIntegration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZeroTrustCasbIntegration(name: string, args: ZeroTrustCasbIntegrationArgs, opts?: CustomResourceOptions);
    @overload
def ZeroTrustCasbIntegration(resource_name: str,
                             args: ZeroTrustCasbIntegrationArgs,
                             opts: Optional[ResourceOptions] = None)

@overload
def ZeroTrustCasbIntegration(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             account_id: Optional[str] = None,
                             name: Optional[str] = None,
                             paused: Optional[bool] = None,
                             anthropic: Optional[ZeroTrustCasbIntegrationAnthropicArgs] = None,
                             aws: Optional[ZeroTrustCasbIntegrationAwsArgs] = None,
                             box: Optional[ZeroTrustCasbIntegrationBoxArgs] = None,
                             dlp_profiles: Optional[Sequence[str]] = None,
                             google_cloud_platform: Optional[ZeroTrustCasbIntegrationGoogleCloudPlatformArgs] = None,
                             google_workspace: Optional[ZeroTrustCasbIntegrationGoogleWorkspaceArgs] = None,
                             openai: Optional[ZeroTrustCasbIntegrationOpenaiArgs] = None,
                             permissions: Optional[Sequence[str]] = None,
                             use_cases: Optional[Sequence[str]] = None)
    func NewZeroTrustCasbIntegration(ctx *Context, name string, args ZeroTrustCasbIntegrationArgs, opts ...ResourceOption) (*ZeroTrustCasbIntegration, error)
    public ZeroTrustCasbIntegration(string name, ZeroTrustCasbIntegrationArgs args, CustomResourceOptions? opts = null)
    public ZeroTrustCasbIntegration(String name, ZeroTrustCasbIntegrationArgs args)
public ZeroTrustCasbIntegration(String name, ZeroTrustCasbIntegrationArgs args, CustomResourceOptions options)

    type: cloudflare:ZeroTrustCasbIntegration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "cloudflare_zero_trust_casb_integration" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ZeroTrustCasbIntegrationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZeroTrustCasbIntegrationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZeroTrustCasbIntegrationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZeroTrustCasbIntegrationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZeroTrustCasbIntegrationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var zeroTrustCasbIntegrationResource = new Cloudflare.ZeroTrustCasbIntegration("zeroTrustCasbIntegrationResource", new()
{
    AccountId = "string",
    Name = "string",
    Paused = false,
    Anthropic = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAnthropicArgs
    {
        AnthropicAdminApiKey = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKeyArgs
        {
            ApiKey = "string",
            TenantId = "string",
        },
        AnthropicComplianceApiKey = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAnthropicAnthropicComplianceApiKeyArgs
        {
            ComplianceApiKey = "string",
            TenantId = "string",
        },
        AnthropicWorkspaceApiKey = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAnthropicAnthropicWorkspaceApiKeyArgs
        {
            ApiKey = "string",
            TenantId = "string",
        },
    },
    Aws = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAwsArgs
    {
        AwsIamRole = new Cloudflare.Inputs.ZeroTrustCasbIntegrationAwsAwsIamRoleArgs
        {
            ExternalId = "string",
            RoleArn = "string",
        },
    },
    Box = new Cloudflare.Inputs.ZeroTrustCasbIntegrationBoxArgs
    {
        BoxServerAuthentication = new Cloudflare.Inputs.ZeroTrustCasbIntegrationBoxBoxServerAuthenticationArgs
        {
            EnterpriseId = "string",
        },
    },
    DlpProfiles = new[]
    {
        "string",
    },
    GoogleCloudPlatform = new Cloudflare.Inputs.ZeroTrustCasbIntegrationGoogleCloudPlatformArgs
    {
        GoogleCloudPlatformServiceAccount = new Cloudflare.Inputs.ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccountArgs
        {
            ServiceAccountKeyJson = "string",
        },
    },
    GoogleWorkspace = new Cloudflare.Inputs.ZeroTrustCasbIntegrationGoogleWorkspaceArgs
    {
        GoogleDomainWideDelegationServiceAccount = new Cloudflare.Inputs.ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccountArgs
        {
            AdministratorEmail = "string",
            ServiceAccountKeyJson = "string",
        },
    },
    Openai = new Cloudflare.Inputs.ZeroTrustCasbIntegrationOpenaiArgs
    {
        ChatgptComplianceApiKey = new Cloudflare.Inputs.ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKeyArgs
        {
            AdminApiKey = "string",
            ComplianceApiKey = "string",
            OrganizationId = "string",
            WorkspaceId = "string",
            ProjectApiKey = "string",
            ProjectId = "string",
        },
        ChatgptStandardApiKey = new Cloudflare.Inputs.ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKeyArgs
        {
            AdminApiKey = "string",
            OrganizationId = "string",
            ProjectApiKey = "string",
            ProjectId = "string",
        },
    },
    Permissions = new[]
    {
        "string",
    },
    UseCases = new[]
    {
        "string",
    },
});

    example, err := cloudflare.NewZeroTrustCasbIntegration(ctx, "zeroTrustCasbIntegrationResource", &cloudflare.ZeroTrustCasbIntegrationArgs{
	AccountId: pulumi.String("string"),
	Name:      pulumi.String("string"),
	Paused:    pulumi.Bool(false),
	Anthropic: &cloudflare.ZeroTrustCasbIntegrationAnthropicArgs{
		AnthropicAdminApiKey: &cloudflare.ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKeyArgs{
			ApiKey:   pulumi.String("string"),
			TenantId: pulumi.String("string"),
		},
		AnthropicComplianceApiKey: &cloudflare.ZeroTrustCasbIntegrationAnthropicAnthropicComplianceApiKeyArgs{
			ComplianceApiKey: pulumi.String("string"),
			TenantId:         pulumi.String("string"),
		},
		AnthropicWorkspaceApiKey: &cloudflare.ZeroTrustCasbIntegrationAnthropicAnthropicWorkspaceApiKeyArgs{
			ApiKey:   pulumi.String("string"),
			TenantId: pulumi.String("string"),
		},
	},
	Aws: &cloudflare.ZeroTrustCasbIntegrationAwsArgs{
		AwsIamRole: &cloudflare.ZeroTrustCasbIntegrationAwsAwsIamRoleArgs{
			ExternalId: pulumi.String("string"),
			RoleArn:    pulumi.String("string"),
		},
	},
	Box: &cloudflare.ZeroTrustCasbIntegrationBoxArgs{
		BoxServerAuthentication: &cloudflare.ZeroTrustCasbIntegrationBoxBoxServerAuthenticationArgs{
			EnterpriseId: pulumi.String("string"),
		},
	},
	DlpProfiles: pulumi.StringArray{
		pulumi.String("string"),
	},
	GoogleCloudPlatform: &cloudflare.ZeroTrustCasbIntegrationGoogleCloudPlatformArgs{
		GoogleCloudPlatformServiceAccount: &cloudflare.ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccountArgs{
			ServiceAccountKeyJson: pulumi.String("string"),
		},
	},
	GoogleWorkspace: &cloudflare.ZeroTrustCasbIntegrationGoogleWorkspaceArgs{
		GoogleDomainWideDelegationServiceAccount: &cloudflare.ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccountArgs{
			AdministratorEmail:    pulumi.String("string"),
			ServiceAccountKeyJson: pulumi.String("string"),
		},
	},
	Openai: &cloudflare.ZeroTrustCasbIntegrationOpenaiArgs{
		ChatgptComplianceApiKey: &cloudflare.ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKeyArgs{
			AdminApiKey:      pulumi.String("string"),
			ComplianceApiKey: pulumi.String("string"),
			OrganizationId:   pulumi.String("string"),
			WorkspaceId:      pulumi.String("string"),
			ProjectApiKey:    pulumi.String("string"),
			ProjectId:        pulumi.String("string"),
		},
		ChatgptStandardApiKey: &cloudflare.ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKeyArgs{
			AdminApiKey:    pulumi.String("string"),
			OrganizationId: pulumi.String("string"),
			ProjectApiKey:  pulumi.String("string"),
			ProjectId:      pulumi.String("string"),
		},
	},
	Permissions: pulumi.StringArray{
		pulumi.String("string"),
	},
	UseCases: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    resource "cloudflare_zero_trust_casb_integration" "zeroTrustCasbIntegrationResource" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "string"
  name       = "string"
  paused     = false
  anthropic = {
    anthropic_admin_api_key = {
      api_key   = "string"
      tenant_id = "string"
    }
    anthropic_compliance_api_key = {
      compliance_api_key = "string"
      tenant_id          = "string"
    }
    anthropic_workspace_api_key = {
      api_key   = "string"
      tenant_id = "string"
    }
  }
  aws = {
    aws_iam_role = {
      external_id = "string"
      role_arn    = "string"
    }
  }
  box = {
    box_server_authentication = {
      enterprise_id = "string"
    }
  }
  dlp_profiles = ["string"]
  google_cloud_platform = {
    google_cloud_platform_service_account = {
      service_account_key_json = "string"
    }
  }
  google_workspace = {
    google_domain_wide_delegation_service_account = {
      administrator_email      = "string"
      service_account_key_json = "string"
    }
  }
  openai = {
    chatgpt_compliance_api_key = {
      admin_api_key      = "string"
      compliance_api_key = "string"
      organization_id    = "string"
      workspace_id       = "string"
      project_api_key    = "string"
      project_id         = "string"
    }
    chatgpt_standard_api_key = {
      admin_api_key   = "string"
      organization_id = "string"
      project_api_key = "string"
      project_id      = "string"
    }
  }
  permissions = ["string"]
  use_cases   = ["string"]
}

    var zeroTrustCasbIntegrationResource = new ZeroTrustCasbIntegration("zeroTrustCasbIntegrationResource", ZeroTrustCasbIntegrationArgs.builder()
    .accountId("string")
    .name("string")
    .paused(false)
    .anthropic(ZeroTrustCasbIntegrationAnthropicArgs.builder()
        .anthropicAdminApiKey(ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKeyArgs.builder()
            .apiKey("string")
            .tenantId("string")
            .build())
        .anthropicComplianceApiKey(ZeroTrustCasbIntegrationAnthropicAnthropicComplianceApiKeyArgs.builder()
            .complianceApiKey("string")
            .tenantId("string")
            .build())
        .anthropicWorkspaceApiKey(ZeroTrustCasbIntegrationAnthropicAnthropicWorkspaceApiKeyArgs.builder()
            .apiKey("string")
            .tenantId("string")
            .build())
        .build())
    .aws(ZeroTrustCasbIntegrationAwsArgs.builder()
        .awsIamRole(ZeroTrustCasbIntegrationAwsAwsIamRoleArgs.builder()
            .externalId("string")
            .roleArn("string")
            .build())
        .build())
    .box(ZeroTrustCasbIntegrationBoxArgs.builder()
        .boxServerAuthentication(ZeroTrustCasbIntegrationBoxBoxServerAuthenticationArgs.builder()
            .enterpriseId("string")
            .build())
        .build())
    .dlpProfiles("string")
    .googleCloudPlatform(ZeroTrustCasbIntegrationGoogleCloudPlatformArgs.builder()
        .googleCloudPlatformServiceAccount(ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccountArgs.builder()
            .serviceAccountKeyJson("string")
            .build())
        .build())
    .googleWorkspace(ZeroTrustCasbIntegrationGoogleWorkspaceArgs.builder()
        .googleDomainWideDelegationServiceAccount(ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccountArgs.builder()
            .administratorEmail("string")
            .serviceAccountKeyJson("string")
            .build())
        .build())
    .openai(ZeroTrustCasbIntegrationOpenaiArgs.builder()
        .chatgptComplianceApiKey(ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKeyArgs.builder()
            .adminApiKey("string")
            .complianceApiKey("string")
            .organizationId("string")
            .workspaceId("string")
            .projectApiKey("string")
            .projectId("string")
            .build())
        .chatgptStandardApiKey(ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKeyArgs.builder()
            .adminApiKey("string")
            .organizationId("string")
            .projectApiKey("string")
            .projectId("string")
            .build())
        .build())
    .permissions("string")
    .useCases("string")
    .build());

    zero_trust_casb_integration_resource = cloudflare.ZeroTrustCasbIntegration("zeroTrustCasbIntegrationResource",
    account_id="string",
    name="string",
    paused=False,
    anthropic={
        "anthropic_admin_api_key": {
            "api_key": "string",
            "tenant_id": "string",
        },
        "anthropic_compliance_api_key": {
            "compliance_api_key": "string",
            "tenant_id": "string",
        },
        "anthropic_workspace_api_key": {
            "api_key": "string",
            "tenant_id": "string",
        },
    },
    aws={
        "aws_iam_role": {
            "external_id": "string",
            "role_arn": "string",
        },
    },
    box={
        "box_server_authentication": {
            "enterprise_id": "string",
        },
    },
    dlp_profiles=["string"],
    google_cloud_platform={
        "google_cloud_platform_service_account": {
            "service_account_key_json": "string",
        },
    },
    google_workspace={
        "google_domain_wide_delegation_service_account": {
            "administrator_email": "string",
            "service_account_key_json": "string",
        },
    },
    openai={
        "chatgpt_compliance_api_key": {
            "admin_api_key": "string",
            "compliance_api_key": "string",
            "organization_id": "string",
            "workspace_id": "string",
            "project_api_key": "string",
            "project_id": "string",
        },
        "chatgpt_standard_api_key": {
            "admin_api_key": "string",
            "organization_id": "string",
            "project_api_key": "string",
            "project_id": "string",
        },
    },
    permissions=["string"],
    use_cases=["string"])

    const zeroTrustCasbIntegrationResource = new cloudflare.ZeroTrustCasbIntegration("zeroTrustCasbIntegrationResource", {
    accountId: "string",
    name: "string",
    paused: false,
    anthropic: {
        anthropicAdminApiKey: {
            apiKey: "string",
            tenantId: "string",
        },
        anthropicComplianceApiKey: {
            complianceApiKey: "string",
            tenantId: "string",
        },
        anthropicWorkspaceApiKey: {
            apiKey: "string",
            tenantId: "string",
        },
    },
    aws: {
        awsIamRole: {
            externalId: "string",
            roleArn: "string",
        },
    },
    box: {
        boxServerAuthentication: {
            enterpriseId: "string",
        },
    },
    dlpProfiles: ["string"],
    googleCloudPlatform: {
        googleCloudPlatformServiceAccount: {
            serviceAccountKeyJson: "string",
        },
    },
    googleWorkspace: {
        googleDomainWideDelegationServiceAccount: {
            administratorEmail: "string",
            serviceAccountKeyJson: "string",
        },
    },
    openai: {
        chatgptComplianceApiKey: {
            adminApiKey: "string",
            complianceApiKey: "string",
            organizationId: "string",
            workspaceId: "string",
            projectApiKey: "string",
            projectId: "string",
        },
        chatgptStandardApiKey: {
            adminApiKey: "string",
            organizationId: "string",
            projectApiKey: "string",
            projectId: "string",
        },
    },
    permissions: ["string"],
    useCases: ["string"],
});

    type: cloudflare:ZeroTrustCasbIntegration
properties:
    accountId: string
    anthropic:
        anthropicAdminApiKey:
            apiKey: string
            tenantId: string
        anthropicComplianceApiKey:
            complianceApiKey: string
            tenantId: string
        anthropicWorkspaceApiKey:
            apiKey: string
            tenantId: string
    aws:
        awsIamRole:
            externalId: string
            roleArn: string
    box:
        boxServerAuthentication:
            enterpriseId: string
    dlpProfiles:
        - string
    googleCloudPlatform:
        googleCloudPlatformServiceAccount:
            serviceAccountKeyJson: string
    googleWorkspace:
        googleDomainWideDelegationServiceAccount:
            administratorEmail: string
            serviceAccountKeyJson: string
    name: string
    openai:
        chatgptComplianceApiKey:
            adminApiKey: string
            complianceApiKey: string
            organizationId: string
            projectApiKey: string
            projectId: string
            workspaceId: string
        chatgptStandardApiKey:
            adminApiKey: string
            organizationId: string
            projectApiKey: string
            projectId: string
    paused: false
    permissions:
        - string
    useCases:
        - string

    ZeroTrustCasbIntegration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZeroTrustCasbIntegration resource accepts the following input properties:

    AccountId string
    Cloudflare account identifier.
    Name string
    Name of the integration.
    Paused bool
    Whether the integration is paused.
    Anthropic ZeroTrustCasbIntegrationAnthropic
    Anthropic integration configuration.
    Aws ZeroTrustCasbIntegrationAws
    AWS integration configuration.
    Box ZeroTrustCasbIntegrationBox
    Box integration configuration.
    DlpProfiles List<string>
    DLP profile IDs to associate with the integration.
    GoogleCloudPlatform ZeroTrustCasbIntegrationGoogleCloudPlatform
    Google Cloud Platform integration configuration.
    GoogleWorkspace ZeroTrustCasbIntegrationGoogleWorkspace
    Google Workspace integration configuration.
    Openai ZeroTrustCasbIntegrationOpenai
    OpenAI integration configuration.
    Permissions List<string>
    Permission scopes granted to the integration.
    UseCases List<string>
    Use cases to enroll the integration in.
    AccountId string
    Cloudflare account identifier.
    Name string
    Name of the integration.
    Paused bool
    Whether the integration is paused.
    Anthropic ZeroTrustCasbIntegrationAnthropicArgs
    Anthropic integration configuration.
    Aws ZeroTrustCasbIntegrationAwsArgs
    AWS integration configuration.
    Box ZeroTrustCasbIntegrationBoxArgs
    Box integration configuration.
    DlpProfiles []string
    DLP profile IDs to associate with the integration.
    GoogleCloudPlatform ZeroTrustCasbIntegrationGoogleCloudPlatformArgs
    Google Cloud Platform integration configuration.
    GoogleWorkspace ZeroTrustCasbIntegrationGoogleWorkspaceArgs
    Google Workspace integration configuration.
    Openai ZeroTrustCasbIntegrationOpenaiArgs
    OpenAI integration configuration.
    Permissions []string
    Permission scopes granted to the integration.
    UseCases []string
    Use cases to enroll the integration in.
    account_id string
    Cloudflare account identifier.
    name string
    Name of the integration.
    paused bool
    Whether the integration is paused.
    anthropic object
    Anthropic integration configuration.
    aws object
    AWS integration configuration.
    box object
    Box integration configuration.
    dlp_profiles list(string)
    DLP profile IDs to associate with the integration.
    google_cloud_platform object
    Google Cloud Platform integration configuration.
    google_workspace object
    Google Workspace integration configuration.
    openai object
    OpenAI integration configuration.
    permissions list(string)
    Permission scopes granted to the integration.
    use_cases list(string)
    Use cases to enroll the integration in.
    accountId String
    Cloudflare account identifier.
    name String
    Name of the integration.
    paused Boolean
    Whether the integration is paused.
    anthropic ZeroTrustCasbIntegrationAnthropic
    Anthropic integration configuration.
    aws ZeroTrustCasbIntegrationAws
    AWS integration configuration.
    box ZeroTrustCasbIntegrationBox
    Box integration configuration.
    dlpProfiles List<String>
    DLP profile IDs to associate with the integration.
    googleCloudPlatform ZeroTrustCasbIntegrationGoogleCloudPlatform
    Google Cloud Platform integration configuration.
    googleWorkspace ZeroTrustCasbIntegrationGoogleWorkspace
    Google Workspace integration configuration.
    openai ZeroTrustCasbIntegrationOpenai
    OpenAI integration configuration.
    permissions List<String>
    Permission scopes granted to the integration.
    useCases List<String>
    Use cases to enroll the integration in.
    accountId string
    Cloudflare account identifier.
    name string
    Name of the integration.
    paused boolean
    Whether the integration is paused.
    anthropic ZeroTrustCasbIntegrationAnthropic
    Anthropic integration configuration.
    aws ZeroTrustCasbIntegrationAws
    AWS integration configuration.
    box ZeroTrustCasbIntegrationBox
    Box integration configuration.
    dlpProfiles string[]
    DLP profile IDs to associate with the integration.
    googleCloudPlatform ZeroTrustCasbIntegrationGoogleCloudPlatform
    Google Cloud Platform integration configuration.
    googleWorkspace ZeroTrustCasbIntegrationGoogleWorkspace
    Google Workspace integration configuration.
    openai ZeroTrustCasbIntegrationOpenai
    OpenAI integration configuration.
    permissions string[]
    Permission scopes granted to the integration.
    useCases string[]
    Use cases to enroll the integration in.
    account_id str
    Cloudflare account identifier.
    name str
    Name of the integration.
    paused bool
    Whether the integration is paused.
    anthropic ZeroTrustCasbIntegrationAnthropicArgs
    Anthropic integration configuration.
    aws ZeroTrustCasbIntegrationAwsArgs
    AWS integration configuration.
    box ZeroTrustCasbIntegrationBoxArgs
    Box integration configuration.
    dlp_profiles Sequence[str]
    DLP profile IDs to associate with the integration.
    google_cloud_platform ZeroTrustCasbIntegrationGoogleCloudPlatformArgs
    Google Cloud Platform integration configuration.
    google_workspace ZeroTrustCasbIntegrationGoogleWorkspaceArgs
    Google Workspace integration configuration.
    openai ZeroTrustCasbIntegrationOpenaiArgs
    OpenAI integration configuration.
    permissions Sequence[str]
    Permission scopes granted to the integration.
    use_cases Sequence[str]
    Use cases to enroll the integration in.
    accountId String
    Cloudflare account identifier.
    name String
    Name of the integration.
    paused Boolean
    Whether the integration is paused.
    anthropic Property Map
    Anthropic integration configuration.
    aws Property Map
    AWS integration configuration.
    box Property Map
    Box integration configuration.
    dlpProfiles List<String>
    DLP profile IDs to associate with the integration.
    googleCloudPlatform Property Map
    Google Cloud Platform integration configuration.
    googleWorkspace Property Map
    Google Workspace integration configuration.
    openai Property Map
    OpenAI integration configuration.
    permissions List<String>
    Permission scopes granted to the integration.
    useCases List<String>
    Use cases to enroll the integration in.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZeroTrustCasbIntegration resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    SecretsDigest string
    Secure digest of the confidential arguments. Managed by the provider.
    Id string
    The provider-assigned unique ID for this managed resource.
    SecretsDigest string
    Secure digest of the confidential arguments. Managed by the provider.
    id string
    The provider-assigned unique ID for this managed resource.
    secrets_digest string
    Secure digest of the confidential arguments. Managed by the provider.
    id String
    The provider-assigned unique ID for this managed resource.
    secretsDigest String
    Secure digest of the confidential arguments. Managed by the provider.
    id string
    The provider-assigned unique ID for this managed resource.
    secretsDigest string
    Secure digest of the confidential arguments. Managed by the provider.
    id str
    The provider-assigned unique ID for this managed resource.
    secrets_digest str
    Secure digest of the confidential arguments. Managed by the provider.
    id String
    The provider-assigned unique ID for this managed resource.
    secretsDigest String
    Secure digest of the confidential arguments. Managed by the provider.

    Look up Existing ZeroTrustCasbIntegration Resource

    Get an existing ZeroTrustCasbIntegration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZeroTrustCasbIntegrationState, opts?: CustomResourceOptions): ZeroTrustCasbIntegration
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        anthropic: Optional[ZeroTrustCasbIntegrationAnthropicArgs] = None,
        aws: Optional[ZeroTrustCasbIntegrationAwsArgs] = None,
        box: Optional[ZeroTrustCasbIntegrationBoxArgs] = None,
        dlp_profiles: Optional[Sequence[str]] = None,
        google_cloud_platform: Optional[ZeroTrustCasbIntegrationGoogleCloudPlatformArgs] = None,
        google_workspace: Optional[ZeroTrustCasbIntegrationGoogleWorkspaceArgs] = None,
        name: Optional[str] = None,
        openai: Optional[ZeroTrustCasbIntegrationOpenaiArgs] = None,
        paused: Optional[bool] = None,
        permissions: Optional[Sequence[str]] = None,
        secrets_digest: Optional[str] = None,
        use_cases: Optional[Sequence[str]] = None) -> ZeroTrustCasbIntegration
    func GetZeroTrustCasbIntegration(ctx *Context, name string, id IDInput, state *ZeroTrustCasbIntegrationState, opts ...ResourceOption) (*ZeroTrustCasbIntegration, error)
    public static ZeroTrustCasbIntegration Get(string name, Input<string> id, ZeroTrustCasbIntegrationState? state, CustomResourceOptions? opts = null)
    public static ZeroTrustCasbIntegration get(String name, Output<String> id, ZeroTrustCasbIntegrationState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:ZeroTrustCasbIntegration    get:      id: ${id}
    import {
  to = cloudflare_zero_trust_casb_integration.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    Cloudflare account identifier.
    Anthropic ZeroTrustCasbIntegrationAnthropic
    Anthropic integration configuration.
    Aws ZeroTrustCasbIntegrationAws
    AWS integration configuration.
    Box ZeroTrustCasbIntegrationBox
    Box integration configuration.
    DlpProfiles List<string>
    DLP profile IDs to associate with the integration.
    GoogleCloudPlatform ZeroTrustCasbIntegrationGoogleCloudPlatform
    Google Cloud Platform integration configuration.
    GoogleWorkspace ZeroTrustCasbIntegrationGoogleWorkspace
    Google Workspace integration configuration.
    Name string
    Name of the integration.
    Openai ZeroTrustCasbIntegrationOpenai
    OpenAI integration configuration.
    Paused bool
    Whether the integration is paused.
    Permissions List<string>
    Permission scopes granted to the integration.
    SecretsDigest string
    Secure digest of the confidential arguments. Managed by the provider.
    UseCases List<string>
    Use cases to enroll the integration in.
    AccountId string
    Cloudflare account identifier.
    Anthropic ZeroTrustCasbIntegrationAnthropicArgs
    Anthropic integration configuration.
    Aws ZeroTrustCasbIntegrationAwsArgs
    AWS integration configuration.
    Box ZeroTrustCasbIntegrationBoxArgs
    Box integration configuration.
    DlpProfiles []string
    DLP profile IDs to associate with the integration.
    GoogleCloudPlatform ZeroTrustCasbIntegrationGoogleCloudPlatformArgs
    Google Cloud Platform integration configuration.
    GoogleWorkspace ZeroTrustCasbIntegrationGoogleWorkspaceArgs
    Google Workspace integration configuration.
    Name string
    Name of the integration.
    Openai ZeroTrustCasbIntegrationOpenaiArgs
    OpenAI integration configuration.
    Paused bool
    Whether the integration is paused.
    Permissions []string
    Permission scopes granted to the integration.
    SecretsDigest string
    Secure digest of the confidential arguments. Managed by the provider.
    UseCases []string
    Use cases to enroll the integration in.
    account_id string
    Cloudflare account identifier.
    anthropic object
    Anthropic integration configuration.
    aws object
    AWS integration configuration.
    box object
    Box integration configuration.
    dlp_profiles list(string)
    DLP profile IDs to associate with the integration.
    google_cloud_platform object
    Google Cloud Platform integration configuration.
    google_workspace object
    Google Workspace integration configuration.
    name string
    Name of the integration.
    openai object
    OpenAI integration configuration.
    paused bool
    Whether the integration is paused.
    permissions list(string)
    Permission scopes granted to the integration.
    secrets_digest string
    Secure digest of the confidential arguments. Managed by the provider.
    use_cases list(string)
    Use cases to enroll the integration in.
    accountId String
    Cloudflare account identifier.
    anthropic ZeroTrustCasbIntegrationAnthropic
    Anthropic integration configuration.
    aws ZeroTrustCasbIntegrationAws
    AWS integration configuration.
    box ZeroTrustCasbIntegrationBox
    Box integration configuration.
    dlpProfiles List<String>
    DLP profile IDs to associate with the integration.
    googleCloudPlatform ZeroTrustCasbIntegrationGoogleCloudPlatform
    Google Cloud Platform integration configuration.
    googleWorkspace ZeroTrustCasbIntegrationGoogleWorkspace
    Google Workspace integration configuration.
    name String
    Name of the integration.
    openai ZeroTrustCasbIntegrationOpenai
    OpenAI integration configuration.
    paused Boolean
    Whether the integration is paused.
    permissions List<String>
    Permission scopes granted to the integration.
    secretsDigest String
    Secure digest of the confidential arguments. Managed by the provider.
    useCases List<String>
    Use cases to enroll the integration in.
    accountId string
    Cloudflare account identifier.
    anthropic ZeroTrustCasbIntegrationAnthropic
    Anthropic integration configuration.
    aws ZeroTrustCasbIntegrationAws
    AWS integration configuration.
    box ZeroTrustCasbIntegrationBox
    Box integration configuration.
    dlpProfiles string[]
    DLP profile IDs to associate with the integration.
    googleCloudPlatform ZeroTrustCasbIntegrationGoogleCloudPlatform
    Google Cloud Platform integration configuration.
    googleWorkspace ZeroTrustCasbIntegrationGoogleWorkspace
    Google Workspace integration configuration.
    name string
    Name of the integration.
    openai ZeroTrustCasbIntegrationOpenai
    OpenAI integration configuration.
    paused boolean
    Whether the integration is paused.
    permissions string[]
    Permission scopes granted to the integration.
    secretsDigest string
    Secure digest of the confidential arguments. Managed by the provider.
    useCases string[]
    Use cases to enroll the integration in.
    account_id str
    Cloudflare account identifier.
    anthropic ZeroTrustCasbIntegrationAnthropicArgs
    Anthropic integration configuration.
    aws ZeroTrustCasbIntegrationAwsArgs
    AWS integration configuration.
    box ZeroTrustCasbIntegrationBoxArgs
    Box integration configuration.
    dlp_profiles Sequence[str]
    DLP profile IDs to associate with the integration.
    google_cloud_platform ZeroTrustCasbIntegrationGoogleCloudPlatformArgs
    Google Cloud Platform integration configuration.
    google_workspace ZeroTrustCasbIntegrationGoogleWorkspaceArgs
    Google Workspace integration configuration.
    name str
    Name of the integration.
    openai ZeroTrustCasbIntegrationOpenaiArgs
    OpenAI integration configuration.
    paused bool
    Whether the integration is paused.
    permissions Sequence[str]
    Permission scopes granted to the integration.
    secrets_digest str
    Secure digest of the confidential arguments. Managed by the provider.
    use_cases Sequence[str]
    Use cases to enroll the integration in.
    accountId String
    Cloudflare account identifier.
    anthropic Property Map
    Anthropic integration configuration.
    aws Property Map
    AWS integration configuration.
    box Property Map
    Box integration configuration.
    dlpProfiles List<String>
    DLP profile IDs to associate with the integration.
    googleCloudPlatform Property Map
    Google Cloud Platform integration configuration.
    googleWorkspace Property Map
    Google Workspace integration configuration.
    name String
    Name of the integration.
    openai Property Map
    OpenAI integration configuration.
    paused Boolean
    Whether the integration is paused.
    permissions List<String>
    Permission scopes granted to the integration.
    secretsDigest String
    Secure digest of the confidential arguments. Managed by the provider.
    useCases List<String>
    Use cases to enroll the integration in.

    Supporting Types

    ZeroTrustCasbIntegrationAnthropic, ZeroTrustCasbIntegrationAnthropicArgs

    anthropic_admin_api_key object
    Authenticate with an Anthropic Admin API key.
    anthropic_compliance_api_key object
    Authenticate with an Anthropic Compliance API key.
    anthropic_workspace_api_key object
    Authenticate with an Anthropic Workspace API key.
    anthropicAdminApiKey Property Map
    Authenticate with an Anthropic Admin API key.
    anthropicComplianceApiKey Property Map
    Authenticate with an Anthropic Compliance API key.
    anthropicWorkspaceApiKey Property Map
    Authenticate with an Anthropic Workspace API key.

    ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKey, ZeroTrustCasbIntegrationAnthropicAnthropicAdminApiKeyArgs

    ApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Admin API key. This value is write-only and is never persisted to Terraform state.
    TenantId string
    Organization ID. Auto-extracted from the key if not provided.
    ApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Admin API key. This value is write-only and is never persisted to Terraform state.
    TenantId string
    Organization ID. Auto-extracted from the key if not provided.
    api_key string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Admin API key. This value is write-only and is never persisted to Terraform state.
    tenant_id string
    Organization ID. Auto-extracted from the key if not provided.
    apiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Admin API key. This value is write-only and is never persisted to Terraform state.
    tenantId String
    Organization ID. Auto-extracted from the key if not provided.
    apiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Admin API key. This value is write-only and is never persisted to Terraform state.
    tenantId string
    Organization ID. Auto-extracted from the key if not provided.
    api_key str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Admin API key. This value is write-only and is never persisted to Terraform state.
    tenant_id str
    Organization ID. Auto-extracted from the key if not provided.
    apiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Admin API key. This value is write-only and is never persisted to Terraform state.
    tenantId String
    Organization ID. Auto-extracted from the key if not provided.

    ZeroTrustCasbIntegrationAnthropicAnthropicComplianceApiKey, ZeroTrustCasbIntegrationAnthropicAnthropicComplianceApiKeyArgs

    ComplianceApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Compliance API key. This value is write-only and is never persisted to Terraform state.
    TenantId string
    Organization ID. Auto-extracted from the key if not provided.
    ComplianceApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Compliance API key. This value is write-only and is never persisted to Terraform state.
    TenantId string
    Organization ID. Auto-extracted from the key if not provided.
    compliance_api_key string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Compliance API key. This value is write-only and is never persisted to Terraform state.
    tenant_id string
    Organization ID. Auto-extracted from the key if not provided.
    complianceApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Compliance API key. This value is write-only and is never persisted to Terraform state.
    tenantId String
    Organization ID. Auto-extracted from the key if not provided.
    complianceApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Compliance API key. This value is write-only and is never persisted to Terraform state.
    tenantId string
    Organization ID. Auto-extracted from the key if not provided.
    compliance_api_key str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Compliance API key. This value is write-only and is never persisted to Terraform state.
    tenant_id str
    Organization ID. Auto-extracted from the key if not provided.
    complianceApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Compliance API key. This value is write-only and is never persisted to Terraform state.
    tenantId String
    Organization ID. Auto-extracted from the key if not provided.

    ZeroTrustCasbIntegrationAnthropicAnthropicWorkspaceApiKey, ZeroTrustCasbIntegrationAnthropicAnthropicWorkspaceApiKeyArgs

    ApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Workspace API key. This value is write-only and is never persisted to Terraform state.
    TenantId string
    Workspace ID, found in the Anthropic Console URL after /workspaces/.
    ApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Workspace API key. This value is write-only and is never persisted to Terraform state.
    TenantId string
    Workspace ID, found in the Anthropic Console URL after /workspaces/.
    api_key string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Workspace API key. This value is write-only and is never persisted to Terraform state.
    tenant_id string
    Workspace ID, found in the Anthropic Console URL after /workspaces/.
    apiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Workspace API key. This value is write-only and is never persisted to Terraform state.
    tenantId String
    Workspace ID, found in the Anthropic Console URL after /workspaces/.
    apiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Workspace API key. This value is write-only and is never persisted to Terraform state.
    tenantId string
    Workspace ID, found in the Anthropic Console URL after /workspaces/.
    api_key str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Workspace API key. This value is write-only and is never persisted to Terraform state.
    tenant_id str
    Workspace ID, found in the Anthropic Console URL after /workspaces/.
    apiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Anthropic Workspace API key. This value is write-only and is never persisted to Terraform state.
    tenantId String
    Workspace ID, found in the Anthropic Console URL after /workspaces/.

    ZeroTrustCasbIntegrationAws, ZeroTrustCasbIntegrationAwsArgs

    AwsIamRole ZeroTrustCasbIntegrationAwsAwsIamRole
    Authenticate by delegating to a cross-account IAM role.
    AwsIamRole ZeroTrustCasbIntegrationAwsAwsIamRole
    Authenticate by delegating to a cross-account IAM role.
    aws_iam_role object
    Authenticate by delegating to a cross-account IAM role.
    awsIamRole ZeroTrustCasbIntegrationAwsAwsIamRole
    Authenticate by delegating to a cross-account IAM role.
    awsIamRole ZeroTrustCasbIntegrationAwsAwsIamRole
    Authenticate by delegating to a cross-account IAM role.
    aws_iam_role ZeroTrustCasbIntegrationAwsAwsIamRole
    Authenticate by delegating to a cross-account IAM role.
    awsIamRole Property Map
    Authenticate by delegating to a cross-account IAM role.

    ZeroTrustCasbIntegrationAwsAwsIamRole, ZeroTrustCasbIntegrationAwsAwsIamRoleArgs

    ExternalId string
    External ID required when assuming the IAM role.
    RoleArn string
    ARN of the cross-account IAM role Cloudflare will assume.
    ExternalId string
    External ID required when assuming the IAM role.
    RoleArn string
    ARN of the cross-account IAM role Cloudflare will assume.
    external_id string
    External ID required when assuming the IAM role.
    role_arn string
    ARN of the cross-account IAM role Cloudflare will assume.
    externalId String
    External ID required when assuming the IAM role.
    roleArn String
    ARN of the cross-account IAM role Cloudflare will assume.
    externalId string
    External ID required when assuming the IAM role.
    roleArn string
    ARN of the cross-account IAM role Cloudflare will assume.
    external_id str
    External ID required when assuming the IAM role.
    role_arn str
    ARN of the cross-account IAM role Cloudflare will assume.
    externalId String
    External ID required when assuming the IAM role.
    roleArn String
    ARN of the cross-account IAM role Cloudflare will assume.

    ZeroTrustCasbIntegrationBox, ZeroTrustCasbIntegrationBoxArgs

    BoxServerAuthentication ZeroTrustCasbIntegrationBoxBoxServerAuthentication
    Authenticate with Box server authentication. Before creating the integration, add the Cloudflare CASB application in Box Admin Console > Integrations > Platform Apps Manager > Server Authentication Apps using client ID puaghckpy0578r8p6f3g0rf860unup4r.
    BoxServerAuthentication ZeroTrustCasbIntegrationBoxBoxServerAuthentication
    Authenticate with Box server authentication. Before creating the integration, add the Cloudflare CASB application in Box Admin Console > Integrations > Platform Apps Manager > Server Authentication Apps using client ID puaghckpy0578r8p6f3g0rf860unup4r.
    box_server_authentication object
    Authenticate with Box server authentication. Before creating the integration, add the Cloudflare CASB application in Box Admin Console > Integrations > Platform Apps Manager > Server Authentication Apps using client ID puaghckpy0578r8p6f3g0rf860unup4r.
    boxServerAuthentication ZeroTrustCasbIntegrationBoxBoxServerAuthentication
    Authenticate with Box server authentication. Before creating the integration, add the Cloudflare CASB application in Box Admin Console > Integrations > Platform Apps Manager > Server Authentication Apps using client ID puaghckpy0578r8p6f3g0rf860unup4r.
    boxServerAuthentication ZeroTrustCasbIntegrationBoxBoxServerAuthentication
    Authenticate with Box server authentication. Before creating the integration, add the Cloudflare CASB application in Box Admin Console > Integrations > Platform Apps Manager > Server Authentication Apps using client ID puaghckpy0578r8p6f3g0rf860unup4r.
    box_server_authentication ZeroTrustCasbIntegrationBoxBoxServerAuthentication
    Authenticate with Box server authentication. Before creating the integration, add the Cloudflare CASB application in Box Admin Console > Integrations > Platform Apps Manager > Server Authentication Apps using client ID puaghckpy0578r8p6f3g0rf860unup4r.
    boxServerAuthentication Property Map
    Authenticate with Box server authentication. Before creating the integration, add the Cloudflare CASB application in Box Admin Console > Integrations > Platform Apps Manager > Server Authentication Apps using client ID puaghckpy0578r8p6f3g0rf860unup4r.

    ZeroTrustCasbIntegrationBoxBoxServerAuthentication, ZeroTrustCasbIntegrationBoxBoxServerAuthenticationArgs

    EnterpriseId string
    Box Enterprise ID from Admin Console > Accounts & Billing.
    EnterpriseId string
    Box Enterprise ID from Admin Console > Accounts & Billing.
    enterprise_id string
    Box Enterprise ID from Admin Console > Accounts & Billing.
    enterpriseId String
    Box Enterprise ID from Admin Console > Accounts & Billing.
    enterpriseId string
    Box Enterprise ID from Admin Console > Accounts & Billing.
    enterprise_id str
    Box Enterprise ID from Admin Console > Accounts & Billing.
    enterpriseId String
    Box Enterprise ID from Admin Console > Accounts & Billing.

    ZeroTrustCasbIntegrationGoogleCloudPlatform, ZeroTrustCasbIntegrationGoogleCloudPlatformArgs

    google_cloud_platform_service_account object
    Authenticate with a service account key.
    googleCloudPlatformServiceAccount Property Map
    Authenticate with a service account key.

    ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccount, ZeroTrustCasbIntegrationGoogleCloudPlatformGoogleCloudPlatformServiceAccountArgs

    ServiceAccountKeyJson string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    ServiceAccountKeyJson string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    service_account_key_json string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    serviceAccountKeyJson String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    serviceAccountKeyJson string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    service_account_key_json str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    serviceAccountKeyJson String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.

    ZeroTrustCasbIntegrationGoogleWorkspace, ZeroTrustCasbIntegrationGoogleWorkspaceArgs

    google_domain_wide_delegation_service_account object
    Authenticate with a service account granted domain-wide delegation.
    googleDomainWideDelegationServiceAccount Property Map
    Authenticate with a service account granted domain-wide delegation.

    ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccount, ZeroTrustCasbIntegrationGoogleWorkspaceGoogleDomainWideDelegationServiceAccountArgs

    AdministratorEmail string
    A Google Workspace super administrator email address.
    ServiceAccountKeyJson string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    AdministratorEmail string
    A Google Workspace super administrator email address.
    ServiceAccountKeyJson string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    administrator_email string
    A Google Workspace super administrator email address.
    service_account_key_json string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    administratorEmail String
    A Google Workspace super administrator email address.
    serviceAccountKeyJson String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    administratorEmail string
    A Google Workspace super administrator email address.
    serviceAccountKeyJson string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    administrator_email str
    A Google Workspace super administrator email address.
    service_account_key_json str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.
    administratorEmail String
    A Google Workspace super administrator email address.
    serviceAccountKeyJson String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. Contents of a Google service account JSON key file. This value is write-only and is never persisted to Terraform state.

    ZeroTrustCasbIntegrationOpenai, ZeroTrustCasbIntegrationOpenaiArgs

    ChatgptComplianceApiKey ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKey
    Authenticate with an OpenAI Compliance API key. Requires an Enterprise plan.
    ChatgptStandardApiKey ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKey
    Authenticate with an OpenAI Admin API key.
    ChatgptComplianceApiKey ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKey
    Authenticate with an OpenAI Compliance API key. Requires an Enterprise plan.
    ChatgptStandardApiKey ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKey
    Authenticate with an OpenAI Admin API key.
    chatgpt_compliance_api_key object
    Authenticate with an OpenAI Compliance API key. Requires an Enterprise plan.
    chatgpt_standard_api_key object
    Authenticate with an OpenAI Admin API key.
    chatgptComplianceApiKey ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKey
    Authenticate with an OpenAI Compliance API key. Requires an Enterprise plan.
    chatgptStandardApiKey ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKey
    Authenticate with an OpenAI Admin API key.
    chatgptComplianceApiKey ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKey
    Authenticate with an OpenAI Compliance API key. Requires an Enterprise plan.
    chatgptStandardApiKey ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKey
    Authenticate with an OpenAI Admin API key.
    chatgpt_compliance_api_key ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKey
    Authenticate with an OpenAI Compliance API key. Requires an Enterprise plan.
    chatgpt_standard_api_key ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKey
    Authenticate with an OpenAI Admin API key.
    chatgptComplianceApiKey Property Map
    Authenticate with an OpenAI Compliance API key. Requires an Enterprise plan.
    chatgptStandardApiKey Property Map
    Authenticate with an OpenAI Admin API key.

    ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKey, ZeroTrustCasbIntegrationOpenaiChatgptComplianceApiKeyArgs

    AdminApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    ComplianceApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Compliance API key for audit logs. This value is write-only and is never persisted to Terraform state.
    OrganizationId string
    OpenAI Organization ID.
    WorkspaceId string
    OpenAI Workspace ID for compliance data.
    ProjectApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    ProjectId string
    OpenAI Project ID, used for DLP.
    AdminApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    ComplianceApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Compliance API key for audit logs. This value is write-only and is never persisted to Terraform state.
    OrganizationId string
    OpenAI Organization ID.
    WorkspaceId string
    OpenAI Workspace ID for compliance data.
    ProjectApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    ProjectId string
    OpenAI Project ID, used for DLP.
    admin_api_key string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    compliance_api_key string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Compliance API key for audit logs. This value is write-only and is never persisted to Terraform state.
    organization_id string
    OpenAI Organization ID.
    workspace_id string
    OpenAI Workspace ID for compliance data.
    project_api_key string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    project_id string
    OpenAI Project ID, used for DLP.
    adminApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    complianceApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Compliance API key for audit logs. This value is write-only and is never persisted to Terraform state.
    organizationId String
    OpenAI Organization ID.
    workspaceId String
    OpenAI Workspace ID for compliance data.
    projectApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    projectId String
    OpenAI Project ID, used for DLP.
    adminApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    complianceApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Compliance API key for audit logs. This value is write-only and is never persisted to Terraform state.
    organizationId string
    OpenAI Organization ID.
    workspaceId string
    OpenAI Workspace ID for compliance data.
    projectApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    projectId string
    OpenAI Project ID, used for DLP.
    admin_api_key str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    compliance_api_key str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Compliance API key for audit logs. This value is write-only and is never persisted to Terraform state.
    organization_id str
    OpenAI Organization ID.
    workspace_id str
    OpenAI Workspace ID for compliance data.
    project_api_key str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    project_id str
    OpenAI Project ID, used for DLP.
    adminApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    complianceApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Compliance API key for audit logs. This value is write-only and is never persisted to Terraform state.
    organizationId String
    OpenAI Organization ID.
    workspaceId String
    OpenAI Workspace ID for compliance data.
    projectApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    projectId String
    OpenAI Project ID, used for DLP.

    ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKey, ZeroTrustCasbIntegrationOpenaiChatgptStandardApiKeyArgs

    AdminApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    OrganizationId string
    OpenAI Organization ID.
    ProjectApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    ProjectId string
    OpenAI Project ID, used for DLP.
    AdminApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    OrganizationId string
    OpenAI Organization ID.
    ProjectApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    ProjectId string
    OpenAI Project ID, used for DLP.
    admin_api_key string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    organization_id string
    OpenAI Organization ID.
    project_api_key string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    project_id string
    OpenAI Project ID, used for DLP.
    adminApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    organizationId String
    OpenAI Organization ID.
    projectApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    projectId String
    OpenAI Project ID, used for DLP.
    adminApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    organizationId string
    OpenAI Organization ID.
    projectApiKey string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    projectId string
    OpenAI Project ID, used for DLP.
    admin_api_key str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    organization_id str
    OpenAI Organization ID.
    project_api_key str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    project_id str
    OpenAI Project ID, used for DLP.
    adminApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Admin API key with api.management.read access. This value is write-only and is never persisted to Terraform state.
    organizationId String
    OpenAI Organization ID.
    projectApiKey String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. OpenAI Project API key, used for DLP. This value is write-only and is never persisted to Terraform state.
    projectId String
    OpenAI Project ID, used for DLP.

    Import

    Define the resource with its vendor, authentication method, and credentials before importing.

    $ pulumi import cloudflare:index/zeroTrustCasbIntegration:ZeroTrustCasbIntegration example '<account_id>/<id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo cloudflare logo
    Viewing docs for Cloudflare v6.23.1
    published on Wednesday, Oct 21, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial