Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Cloudflare Provider
  4. API Docs
  5. ZeroTrustCasbPolicy
Viewing docs for Cloudflare v6.23.1
published on Wednesday, Oct 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.ZeroTrustCasbPolicy

cloudflare logo cloudflare logo
Viewing docs for Cloudflare v6.23.1
published on Wednesday, Oct 21, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Accepted Permissions

    • Zero Trust Read
    • Zero Trust Write

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustCasbPolicy = new cloudflare.ZeroTrustCasbPolicy("example_zero_trust_casb_policy", {
    accountId: "46148281d8a93d002ef242d8b0d5f9f6",
    actions: {
        remediationTypes: [{
            remediationTypeId: "5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a",
        }],
        webhookConfigs: [{
            webhookConfigId: "3f7b8c9d-6e5a-4f3b-9c2d-1e0a8b7c6d5e",
        }],
    },
    appliesToAllIntegrations: false,
    displayName: "Auto-remediate public files",
    enabled: true,
    findingTypeId: "5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a",
    description: "Automatically remove public access from files when detected",
    integrationIds: ["497f6eca-6276-4993-bfeb-53cbbbba6f08"],
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_casb_policy = cloudflare.ZeroTrustCasbPolicy("example_zero_trust_casb_policy",
    account_id="46148281d8a93d002ef242d8b0d5f9f6",
    actions={
        "remediation_types": [{
            "remediation_type_id": "5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a",
        }],
        "webhook_configs": [{
            "webhook_config_id": "3f7b8c9d-6e5a-4f3b-9c2d-1e0a8b7c6d5e",
        }],
    },
    applies_to_all_integrations=False,
    display_name="Auto-remediate public files",
    enabled=True,
    finding_type_id="5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a",
    description="Automatically remove public access from files when detected",
    integration_ids=["497f6eca-6276-4993-bfeb-53cbbbba6f08"])

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewZeroTrustCasbPolicy(ctx, "example_zero_trust_casb_policy", &cloudflare.ZeroTrustCasbPolicyArgs{
			AccountId: pulumi.String("46148281d8a93d002ef242d8b0d5f9f6"),
			Actions: &cloudflare.ZeroTrustCasbPolicyActionsArgs{
				RemediationTypes: cloudflare.ZeroTrustCasbPolicyActionsRemediationTypeArray{
					&cloudflare.ZeroTrustCasbPolicyActionsRemediationTypeArgs{
						RemediationTypeId: pulumi.String("5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a"),
					},
				},
				WebhookConfigs: cloudflare.ZeroTrustCasbPolicyActionsWebhookConfigArray{
					&cloudflare.ZeroTrustCasbPolicyActionsWebhookConfigArgs{
						WebhookConfigId: pulumi.String("3f7b8c9d-6e5a-4f3b-9c2d-1e0a8b7c6d5e"),
					},
				},
			},
			AppliesToAllIntegrations: pulumi.Bool(false),
			DisplayName:              pulumi.String("Auto-remediate public files"),
			Enabled:                  pulumi.Bool(true),
			FindingTypeId:            pulumi.String("5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a"),
			Description:              pulumi.String("Automatically remove public access from files when detected"),
			IntegrationIds: pulumi.StringArray{
				pulumi.String("497f6eca-6276-4993-bfeb-53cbbbba6f08"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustCasbPolicy = new Cloudflare.ZeroTrustCasbPolicy("example_zero_trust_casb_policy", new()
    {
        AccountId = "46148281d8a93d002ef242d8b0d5f9f6",
        Actions = new Cloudflare.Inputs.ZeroTrustCasbPolicyActionsArgs
        {
            RemediationTypes = new[]
            {
                new Cloudflare.Inputs.ZeroTrustCasbPolicyActionsRemediationTypeArgs
                {
                    RemediationTypeId = "5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a",
                },
            },
            WebhookConfigs = new[]
            {
                new Cloudflare.Inputs.ZeroTrustCasbPolicyActionsWebhookConfigArgs
                {
                    WebhookConfigId = "3f7b8c9d-6e5a-4f3b-9c2d-1e0a8b7c6d5e",
                },
            },
        },
        AppliesToAllIntegrations = false,
        DisplayName = "Auto-remediate public files",
        Enabled = true,
        FindingTypeId = "5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a",
        Description = "Automatically remove public access from files when detected",
        IntegrationIds = new[]
        {
            "497f6eca-6276-4993-bfeb-53cbbbba6f08",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.ZeroTrustCasbPolicy;
import com.pulumi.cloudflare.ZeroTrustCasbPolicyArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbPolicyActionsArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbPolicyActionsRemediationTypeArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustCasbPolicyActionsWebhookConfigArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleZeroTrustCasbPolicy = new ZeroTrustCasbPolicy("exampleZeroTrustCasbPolicy", ZeroTrustCasbPolicyArgs.builder()
            .accountId("46148281d8a93d002ef242d8b0d5f9f6")
            .actions(ZeroTrustCasbPolicyActionsArgs.builder()
                .remediationTypes(ZeroTrustCasbPolicyActionsRemediationTypeArgs.builder()
                    .remediationTypeId("5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a")
                    .build())
                .webhookConfigs(ZeroTrustCasbPolicyActionsWebhookConfigArgs.builder()
                    .webhookConfigId("3f7b8c9d-6e5a-4f3b-9c2d-1e0a8b7c6d5e")
                    .build())
                .build())
            .appliesToAllIntegrations(false)
            .displayName("Auto-remediate public files")
            .enabled(true)
            .findingTypeId("5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a")
            .description("Automatically remove public access from files when detected")
            .integrationIds("497f6eca-6276-4993-bfeb-53cbbbba6f08")
            .build());

    }
}

    resources:
  exampleZeroTrustCasbPolicy:
    type: cloudflare:ZeroTrustCasbPolicy
    name: example_zero_trust_casb_policy
    properties:
      accountId: 46148281d8a93d002ef242d8b0d5f9f6
      actions:
        remediationTypes:
          - remediationTypeId: 5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a
        webhookConfigs:
          - webhookConfigId: 3f7b8c9d-6e5a-4f3b-9c2d-1e0a8b7c6d5e
      appliesToAllIntegrations: false
      displayName: Auto-remediate public files
      enabled: true
      findingTypeId: 5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a
      description: Automatically remove public access from files when detected
      integrationIds:
        - 497f6eca-6276-4993-bfeb-53cbbbba6f08

    terraform {
  required_providers {
    cloudflare = {
      source = "pulumi/cloudflare"
    }
  }
}

resource "cloudflare_zero_trust_casb_policy" "example_zero_trust_casb_policy" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "46148281d8a93d002ef242d8b0d5f9f6"
  actions = {
    remediation_types = [{
      remediation_type_id = "5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a"
    }]
    webhook_configs = [{
      webhook_config_id = "3f7b8c9d-6e5a-4f3b-9c2d-1e0a8b7c6d5e"
    }]
  }
  applies_to_all_integrations = false
  display_name                = "Auto-remediate public files"
  enabled                     = true
  finding_type_id             = "5a7d9e2f-1b3c-4d5e-8f6a-7b8c9d0e1f2a"
  description                 = "Automatically remove public access from files when detected"
  integration_ids             = ["497f6eca-6276-4993-bfeb-53cbbbba6f08"]
}

    Create ZeroTrustCasbPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZeroTrustCasbPolicy(name: string, args: ZeroTrustCasbPolicyArgs, opts?: CustomResourceOptions);
    @overload
def ZeroTrustCasbPolicy(resource_name: str,
                        args: ZeroTrustCasbPolicyArgs,
                        opts: Optional[ResourceOptions] = None)

@overload
def ZeroTrustCasbPolicy(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        account_id: Optional[str] = None,
                        actions: Optional[ZeroTrustCasbPolicyActionsArgs] = None,
                        applies_to_all_integrations: Optional[bool] = None,
                        display_name: Optional[str] = None,
                        enabled: Optional[bool] = None,
                        finding_type_id: Optional[str] = None,
                        description: Optional[str] = None,
                        integration_ids: Optional[Sequence[str]] = None)
    func NewZeroTrustCasbPolicy(ctx *Context, name string, args ZeroTrustCasbPolicyArgs, opts ...ResourceOption) (*ZeroTrustCasbPolicy, error)
    public ZeroTrustCasbPolicy(string name, ZeroTrustCasbPolicyArgs args, CustomResourceOptions? opts = null)
    public ZeroTrustCasbPolicy(String name, ZeroTrustCasbPolicyArgs args)
public ZeroTrustCasbPolicy(String name, ZeroTrustCasbPolicyArgs args, CustomResourceOptions options)

    type: cloudflare:ZeroTrustCasbPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "cloudflare_zero_trust_casb_policy" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ZeroTrustCasbPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZeroTrustCasbPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZeroTrustCasbPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZeroTrustCasbPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZeroTrustCasbPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var zeroTrustCasbPolicyResource = new Cloudflare.ZeroTrustCasbPolicy("zeroTrustCasbPolicyResource", new()
{
    AccountId = "string",
    Actions = new Cloudflare.Inputs.ZeroTrustCasbPolicyActionsArgs
    {
        RemediationTypes = new[]
        {
            new Cloudflare.Inputs.ZeroTrustCasbPolicyActionsRemediationTypeArgs
            {
                RemediationTypeId = "string",
            },
        },
        WebhookConfigs = new[]
        {
            new Cloudflare.Inputs.ZeroTrustCasbPolicyActionsWebhookConfigArgs
            {
                WebhookConfigId = "string",
            },
        },
    },
    AppliesToAllIntegrations = false,
    DisplayName = "string",
    Enabled = false,
    FindingTypeId = "string",
    Description = "string",
    IntegrationIds = new[]
    {
        "string",
    },
});

    example, err := cloudflare.NewZeroTrustCasbPolicy(ctx, "zeroTrustCasbPolicyResource", &cloudflare.ZeroTrustCasbPolicyArgs{
	AccountId: pulumi.String("string"),
	Actions: &cloudflare.ZeroTrustCasbPolicyActionsArgs{
		RemediationTypes: cloudflare.ZeroTrustCasbPolicyActionsRemediationTypeArray{
			&cloudflare.ZeroTrustCasbPolicyActionsRemediationTypeArgs{
				RemediationTypeId: pulumi.String("string"),
			},
		},
		WebhookConfigs: cloudflare.ZeroTrustCasbPolicyActionsWebhookConfigArray{
			&cloudflare.ZeroTrustCasbPolicyActionsWebhookConfigArgs{
				WebhookConfigId: pulumi.String("string"),
			},
		},
	},
	AppliesToAllIntegrations: pulumi.Bool(false),
	DisplayName:              pulumi.String("string"),
	Enabled:                  pulumi.Bool(false),
	FindingTypeId:            pulumi.String("string"),
	Description:              pulumi.String("string"),
	IntegrationIds: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    resource "cloudflare_zero_trust_casb_policy" "zeroTrustCasbPolicyResource" {
  lifecycle {
    create_before_destroy = true
  }
  account_id = "string"
  actions = {
    remediation_types = [{
      remediation_type_id = "string"
    }]
    webhook_configs = [{
      webhook_config_id = "string"
    }]
  }
  applies_to_all_integrations = false
  display_name                = "string"
  enabled                     = false
  finding_type_id             = "string"
  description                 = "string"
  integration_ids             = ["string"]
}

    var zeroTrustCasbPolicyResource = new ZeroTrustCasbPolicy("zeroTrustCasbPolicyResource", ZeroTrustCasbPolicyArgs.builder()
    .accountId("string")
    .actions(ZeroTrustCasbPolicyActionsArgs.builder()
        .remediationTypes(ZeroTrustCasbPolicyActionsRemediationTypeArgs.builder()
            .remediationTypeId("string")
            .build())
        .webhookConfigs(ZeroTrustCasbPolicyActionsWebhookConfigArgs.builder()
            .webhookConfigId("string")
            .build())
        .build())
    .appliesToAllIntegrations(false)
    .displayName("string")
    .enabled(false)
    .findingTypeId("string")
    .description("string")
    .integrationIds("string")
    .build());

    zero_trust_casb_policy_resource = cloudflare.ZeroTrustCasbPolicy("zeroTrustCasbPolicyResource",
    account_id="string",
    actions={
        "remediation_types": [{
            "remediation_type_id": "string",
        }],
        "webhook_configs": [{
            "webhook_config_id": "string",
        }],
    },
    applies_to_all_integrations=False,
    display_name="string",
    enabled=False,
    finding_type_id="string",
    description="string",
    integration_ids=["string"])

    const zeroTrustCasbPolicyResource = new cloudflare.ZeroTrustCasbPolicy("zeroTrustCasbPolicyResource", {
    accountId: "string",
    actions: {
        remediationTypes: [{
            remediationTypeId: "string",
        }],
        webhookConfigs: [{
            webhookConfigId: "string",
        }],
    },
    appliesToAllIntegrations: false,
    displayName: "string",
    enabled: false,
    findingTypeId: "string",
    description: "string",
    integrationIds: ["string"],
});

    type: cloudflare:ZeroTrustCasbPolicy
properties:
    accountId: string
    actions:
        remediationTypes:
            - remediationTypeId: string
        webhookConfigs:
            - webhookConfigId: string
    appliesToAllIntegrations: false
    description: string
    displayName: string
    enabled: false
    findingTypeId: string
    integrationIds:
        - string

    ZeroTrustCasbPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZeroTrustCasbPolicy resource accepts the following input properties:

    AccountId string
    Actions ZeroTrustCasbPolicyActions
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    AppliesToAllIntegrations bool
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    DisplayName string
    Display name for the policy configuration.
    Enabled bool
    Boolean specifying if the policy is enabled or disabled.
    FindingTypeId string
    The finding type this policy is associated with. All remediation actions must match this finding type.
    Description string
    Optional description of what this policy does.
    IntegrationIds List<string>
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    AccountId string
    Actions ZeroTrustCasbPolicyActionsArgs
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    AppliesToAllIntegrations bool
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    DisplayName string
    Display name for the policy configuration.
    Enabled bool
    Boolean specifying if the policy is enabled or disabled.
    FindingTypeId string
    The finding type this policy is associated with. All remediation actions must match this finding type.
    Description string
    Optional description of what this policy does.
    IntegrationIds []string
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    account_id string
    actions object
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    applies_to_all_integrations bool
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    display_name string
    Display name for the policy configuration.
    enabled bool
    Boolean specifying if the policy is enabled or disabled.
    finding_type_id string
    The finding type this policy is associated with. All remediation actions must match this finding type.
    description string
    Optional description of what this policy does.
    integration_ids list(string)
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    accountId String
    actions ZeroTrustCasbPolicyActions
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    appliesToAllIntegrations Boolean
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    displayName String
    Display name for the policy configuration.
    enabled Boolean
    Boolean specifying if the policy is enabled or disabled.
    findingTypeId String
    The finding type this policy is associated with. All remediation actions must match this finding type.
    description String
    Optional description of what this policy does.
    integrationIds List<String>
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    accountId string
    actions ZeroTrustCasbPolicyActions
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    appliesToAllIntegrations boolean
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    displayName string
    Display name for the policy configuration.
    enabled boolean
    Boolean specifying if the policy is enabled or disabled.
    findingTypeId string
    The finding type this policy is associated with. All remediation actions must match this finding type.
    description string
    Optional description of what this policy does.
    integrationIds string[]
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    account_id str
    actions ZeroTrustCasbPolicyActionsArgs
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    applies_to_all_integrations bool
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    display_name str
    Display name for the policy configuration.
    enabled bool
    Boolean specifying if the policy is enabled or disabled.
    finding_type_id str
    The finding type this policy is associated with. All remediation actions must match this finding type.
    description str
    Optional description of what this policy does.
    integration_ids Sequence[str]
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    accountId String
    actions Property Map
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    appliesToAllIntegrations Boolean
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    displayName String
    Display name for the policy configuration.
    enabled Boolean
    Boolean specifying if the policy is enabled or disabled.
    findingTypeId String
    The finding type this policy is associated with. All remediation actions must match this finding type.
    description String
    Optional description of what this policy does.
    integrationIds List<String>
    The integrations this policy applies to. Required when appliestoall_integrations is false.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZeroTrustCasbPolicy resource produces the following output properties:

    CreatedAt string
    Timestamp when the policy was created.
    DisabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    UpdatedAt string
    Timestamp when the policy was last updated.
    CreatedAt string
    Timestamp when the policy was created.
    DisabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    UpdatedAt string
    Timestamp when the policy was last updated.
    created_at string
    Timestamp when the policy was created.
    disabled_at string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    id string
    The provider-assigned unique ID for this managed resource.
    last_triggered_at string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updated_at string
    Timestamp when the policy was last updated.
    createdAt String
    Timestamp when the policy was created.
    disabledAt String
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    id String
    The provider-assigned unique ID for this managed resource.
    lastTriggeredAt String
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updatedAt String
    Timestamp when the policy was last updated.
    createdAt string
    Timestamp when the policy was created.
    disabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    id string
    The provider-assigned unique ID for this managed resource.
    lastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updatedAt string
    Timestamp when the policy was last updated.
    created_at str
    Timestamp when the policy was created.
    disabled_at str
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    id str
    The provider-assigned unique ID for this managed resource.
    last_triggered_at str
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updated_at str
    Timestamp when the policy was last updated.
    createdAt String
    Timestamp when the policy was created.
    disabledAt String
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    id String
    The provider-assigned unique ID for this managed resource.
    lastTriggeredAt String
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updatedAt String
    Timestamp when the policy was last updated.

    Look up Existing ZeroTrustCasbPolicy Resource

    Get an existing ZeroTrustCasbPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZeroTrustCasbPolicyState, opts?: CustomResourceOptions): ZeroTrustCasbPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        actions: Optional[ZeroTrustCasbPolicyActionsArgs] = None,
        applies_to_all_integrations: Optional[bool] = None,
        created_at: Optional[str] = None,
        description: Optional[str] = None,
        disabled_at: Optional[str] = None,
        display_name: Optional[str] = None,
        enabled: Optional[bool] = None,
        finding_type_id: Optional[str] = None,
        integration_ids: Optional[Sequence[str]] = None,
        last_triggered_at: Optional[str] = None,
        updated_at: Optional[str] = None) -> ZeroTrustCasbPolicy
    func GetZeroTrustCasbPolicy(ctx *Context, name string, id IDInput, state *ZeroTrustCasbPolicyState, opts ...ResourceOption) (*ZeroTrustCasbPolicy, error)
    public static ZeroTrustCasbPolicy Get(string name, Input<string> id, ZeroTrustCasbPolicyState? state, CustomResourceOptions? opts = null)
    public static ZeroTrustCasbPolicy get(String name, Output<String> id, ZeroTrustCasbPolicyState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:ZeroTrustCasbPolicy    get:      id: ${id}
    import {
  to = cloudflare_zero_trust_casb_policy.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    Actions ZeroTrustCasbPolicyActions
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    AppliesToAllIntegrations bool
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    CreatedAt string
    Timestamp when the policy was created.
    Description string
    Optional description of what this policy does.
    DisabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    DisplayName string
    Display name for the policy configuration.
    Enabled bool
    Boolean specifying if the policy is enabled or disabled.
    FindingTypeId string
    The finding type this policy is associated with. All remediation actions must match this finding type.
    IntegrationIds List<string>
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    LastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    UpdatedAt string
    Timestamp when the policy was last updated.
    AccountId string
    Actions ZeroTrustCasbPolicyActionsArgs
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    AppliesToAllIntegrations bool
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    CreatedAt string
    Timestamp when the policy was created.
    Description string
    Optional description of what this policy does.
    DisabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    DisplayName string
    Display name for the policy configuration.
    Enabled bool
    Boolean specifying if the policy is enabled or disabled.
    FindingTypeId string
    The finding type this policy is associated with. All remediation actions must match this finding type.
    IntegrationIds []string
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    LastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    UpdatedAt string
    Timestamp when the policy was last updated.
    account_id string
    actions object
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    applies_to_all_integrations bool
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    created_at string
    Timestamp when the policy was created.
    description string
    Optional description of what this policy does.
    disabled_at string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    display_name string
    Display name for the policy configuration.
    enabled bool
    Boolean specifying if the policy is enabled or disabled.
    finding_type_id string
    The finding type this policy is associated with. All remediation actions must match this finding type.
    integration_ids list(string)
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    last_triggered_at string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updated_at string
    Timestamp when the policy was last updated.
    accountId String
    actions ZeroTrustCasbPolicyActions
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    appliesToAllIntegrations Boolean
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    createdAt String
    Timestamp when the policy was created.
    description String
    Optional description of what this policy does.
    disabledAt String
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    displayName String
    Display name for the policy configuration.
    enabled Boolean
    Boolean specifying if the policy is enabled or disabled.
    findingTypeId String
    The finding type this policy is associated with. All remediation actions must match this finding type.
    integrationIds List<String>
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    lastTriggeredAt String
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updatedAt String
    Timestamp when the policy was last updated.
    accountId string
    actions ZeroTrustCasbPolicyActions
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    appliesToAllIntegrations boolean
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    createdAt string
    Timestamp when the policy was created.
    description string
    Optional description of what this policy does.
    disabledAt string
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    displayName string
    Display name for the policy configuration.
    enabled boolean
    Boolean specifying if the policy is enabled or disabled.
    findingTypeId string
    The finding type this policy is associated with. All remediation actions must match this finding type.
    integrationIds string[]
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    lastTriggeredAt string
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updatedAt string
    Timestamp when the policy was last updated.
    account_id str
    actions ZeroTrustCasbPolicyActionsArgs
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    applies_to_all_integrations bool
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    created_at str
    Timestamp when the policy was created.
    description str
    Optional description of what this policy does.
    disabled_at str
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    display_name str
    Display name for the policy configuration.
    enabled bool
    Boolean specifying if the policy is enabled or disabled.
    finding_type_id str
    The finding type this policy is associated with. All remediation actions must match this finding type.
    integration_ids Sequence[str]
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    last_triggered_at str
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updated_at str
    Timestamp when the policy was last updated.
    accountId String
    actions Property Map
    Actions to execute when this policy is triggered, grouped by action type. A policy must contain at least one action across all groups and may include at most one remediation.
    appliesToAllIntegrations Boolean
    When true, the policy applies to all integrations for the account. When false, integrationIds must be provided.
    createdAt String
    Timestamp when the policy was created.
    description String
    Optional description of what this policy does.
    disabledAt String
    Timestamp when the policy was disabled. Omitted from the response when the policy is enabled.
    displayName String
    Display name for the policy configuration.
    enabled Boolean
    Boolean specifying if the policy is enabled or disabled.
    findingTypeId String
    The finding type this policy is associated with. All remediation actions must match this finding type.
    integrationIds List<String>
    The integrations this policy applies to. Required when appliestoall_integrations is false.
    lastTriggeredAt String
    Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints.
    updatedAt String
    Timestamp when the policy was last updated.

    Supporting Types

    ZeroTrustCasbPolicyActions, ZeroTrustCasbPolicyActionsArgs

    remediation_types list(object)
    Remediation actions to execute (at most one).
    webhook_configs list(object)
    Webhook actions to execute.
    remediationTypes List<Property Map>
    Remediation actions to execute (at most one).
    webhookConfigs List<Property Map>
    Webhook actions to execute.

    ZeroTrustCasbPolicyActionsRemediationType, ZeroTrustCasbPolicyActionsRemediationTypeArgs

    RemediationTypeId string
    The ID of the remediation type to execute.
    RemediationTypeId string
    The ID of the remediation type to execute.
    remediation_type_id string
    The ID of the remediation type to execute.
    remediationTypeId String
    The ID of the remediation type to execute.
    remediationTypeId string
    The ID of the remediation type to execute.
    remediation_type_id str
    The ID of the remediation type to execute.
    remediationTypeId String
    The ID of the remediation type to execute.

    ZeroTrustCasbPolicyActionsWebhookConfig, ZeroTrustCasbPolicyActionsWebhookConfigArgs

    WebhookConfigId string
    The ID of the webhook configuration to use.
    WebhookConfigId string
    The ID of the webhook configuration to use.
    webhook_config_id string
    The ID of the webhook configuration to use.
    webhookConfigId String
    The ID of the webhook configuration to use.
    webhookConfigId string
    The ID of the webhook configuration to use.
    webhook_config_id str
    The ID of the webhook configuration to use.
    webhookConfigId String
    The ID of the webhook configuration to use.

    Import

    $ pulumi import cloudflare:index/zeroTrustCasbPolicy:ZeroTrustCasbPolicy example '<account_id>/<policy_id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo cloudflare logo
    Viewing docs for Cloudflare v6.23.1
    published on Wednesday, Oct 21, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial