1. Packages
  2. Packages
  3. Cloudflare Provider
  4. API Docs
  5. ZeroTrustDeviceIpProfile
Viewing docs for Cloudflare v6.15.0
published on Saturday, May 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.ZeroTrustDeviceIpProfile

cloudflare logo
Viewing docs for Cloudflare v6.15.0
published on Saturday, May 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-cloudflare

    Accepted Permissions

    • Zero Trust Read
    • Zero Trust Write

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustDeviceIpProfile = new cloudflare.ZeroTrustDeviceIpProfile("example_zero_trust_device_ip_profile", {
    accountId: "account_id",
    match: "identity.email == \"test@cloudflare.com\"",
    name: "IPv4 Cloudflare Source IPs",
    precedence: 100,
    subnetId: "b70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    description: "example comment",
    enabled: true,
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_device_ip_profile = cloudflare.ZeroTrustDeviceIpProfile("example_zero_trust_device_ip_profile",
    account_id="account_id",
    match="identity.email == \"test@cloudflare.com\"",
    name="IPv4 Cloudflare Source IPs",
    precedence=100,
    subnet_id="b70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
    description="example comment",
    enabled=True)

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewZeroTrustDeviceIpProfile(ctx, "example_zero_trust_device_ip_profile", &cloudflare.ZeroTrustDeviceIpProfileArgs{
			AccountId:   pulumi.String("account_id"),
			Match:       pulumi.String("identity.email == \"test@cloudflare.com\""),
			Name:        pulumi.String("IPv4 Cloudflare Source IPs"),
			Precedence:  pulumi.Int(100),
			SubnetId:    pulumi.String("b70ff985-a4ef-4643-bbbc-4a0ed4fc8415"),
			Description: pulumi.String("example comment"),
			Enabled:     pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustDeviceIpProfile = new Cloudflare.Index.ZeroTrustDeviceIpProfile("example_zero_trust_device_ip_profile", new()
    {
        AccountId = "account_id",
        Match = "identity.email == \"test@cloudflare.com\"",
        Name = "IPv4 Cloudflare Source IPs",
        Precedence = 100,
        SubnetId = "b70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
        Description = "example comment",
        Enabled = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.ZeroTrustDeviceIpProfile;
import com.pulumi.cloudflare.ZeroTrustDeviceIpProfileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleZeroTrustDeviceIpProfile = new ZeroTrustDeviceIpProfile("exampleZeroTrustDeviceIpProfile", ZeroTrustDeviceIpProfileArgs.builder()
            .accountId("account_id")
            .match("identity.email == \"test@cloudflare.com\"")
            .name("IPv4 Cloudflare Source IPs")
            .precedence(100)
            .subnetId("b70ff985-a4ef-4643-bbbc-4a0ed4fc8415")
            .description("example comment")
            .enabled(true)
            .build());

    }
}

    resources:
  exampleZeroTrustDeviceIpProfile:
    type: cloudflare:ZeroTrustDeviceIpProfile
    name: example_zero_trust_device_ip_profile
    properties:
      accountId: account_id
      match: identity.email == "test@cloudflare.com"
      name: IPv4 Cloudflare Source IPs
      precedence: 100
      subnetId: b70ff985-a4ef-4643-bbbc-4a0ed4fc8415
      description: example comment
      enabled: true

    Create ZeroTrustDeviceIpProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ZeroTrustDeviceIpProfile(name: string, args: ZeroTrustDeviceIpProfileArgs, opts?: CustomResourceOptions);
    @overload
def ZeroTrustDeviceIpProfile(resource_name: str,
                             args: ZeroTrustDeviceIpProfileArgs,
                             opts: Optional[ResourceOptions] = None)

@overload
def ZeroTrustDeviceIpProfile(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             match: Optional[str] = None,
                             name: Optional[str] = None,
                             precedence: Optional[int] = None,
                             subnet_id: Optional[str] = None,
                             account_id: Optional[str] = None,
                             description: Optional[str] = None,
                             enabled: Optional[bool] = None)
    func NewZeroTrustDeviceIpProfile(ctx *Context, name string, args ZeroTrustDeviceIpProfileArgs, opts ...ResourceOption) (*ZeroTrustDeviceIpProfile, error)
    public ZeroTrustDeviceIpProfile(string name, ZeroTrustDeviceIpProfileArgs args, CustomResourceOptions? opts = null)
    public ZeroTrustDeviceIpProfile(String name, ZeroTrustDeviceIpProfileArgs args)
public ZeroTrustDeviceIpProfile(String name, ZeroTrustDeviceIpProfileArgs args, CustomResourceOptions options)

    type: cloudflare:ZeroTrustDeviceIpProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ZeroTrustDeviceIpProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ZeroTrustDeviceIpProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ZeroTrustDeviceIpProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ZeroTrustDeviceIpProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ZeroTrustDeviceIpProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    ZeroTrustDeviceIpProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ZeroTrustDeviceIpProfile resource accepts the following input properties:

    Match string
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    Name string
    A user-friendly name for the Device IP profile.
    Precedence int
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    SubnetId string
    The ID of the Subnet.
    AccountId string
    Description string
    An optional description of the Device IP profile.
    Enabled bool
    Whether the Device IP profile will be applied to matching devices.
    Match string
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    Name string
    A user-friendly name for the Device IP profile.
    Precedence int
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    SubnetId string
    The ID of the Subnet.
    AccountId string
    Description string
    An optional description of the Device IP profile.
    Enabled bool
    Whether the Device IP profile will be applied to matching devices.
    match String
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    name String
    A user-friendly name for the Device IP profile.
    precedence Integer
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    subnetId String
    The ID of the Subnet.
    accountId String
    description String
    An optional description of the Device IP profile.
    enabled Boolean
    Whether the Device IP profile will be applied to matching devices.
    match string
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    name string
    A user-friendly name for the Device IP profile.
    precedence number
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    subnetId string
    The ID of the Subnet.
    accountId string
    description string
    An optional description of the Device IP profile.
    enabled boolean
    Whether the Device IP profile will be applied to matching devices.
    match str
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    name str
    A user-friendly name for the Device IP profile.
    precedence int
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    subnet_id str
    The ID of the Subnet.
    account_id str
    description str
    An optional description of the Device IP profile.
    enabled bool
    Whether the Device IP profile will be applied to matching devices.
    match String
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    name String
    A user-friendly name for the Device IP profile.
    precedence Number
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    subnetId String
    The ID of the Subnet.
    accountId String
    description String
    An optional description of the Device IP profile.
    enabled Boolean
    Whether the Device IP profile will be applied to matching devices.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ZeroTrustDeviceIpProfile resource produces the following output properties:

    CreatedAt string
    The RFC3339Nano timestamp when the Device IP profile was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    CreatedAt string
    The RFC3339Nano timestamp when the Device IP profile was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    createdAt String
    The RFC3339Nano timestamp when the Device IP profile was created.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    createdAt string
    The RFC3339Nano timestamp when the Device IP profile was created.
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    created_at str
    The RFC3339Nano timestamp when the Device IP profile was created.
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    createdAt String
    The RFC3339Nano timestamp when the Device IP profile was created.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    The RFC3339Nano timestamp when the Device IP profile was last updated.

    Look up Existing ZeroTrustDeviceIpProfile Resource

    Get an existing ZeroTrustDeviceIpProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ZeroTrustDeviceIpProfileState, opts?: CustomResourceOptions): ZeroTrustDeviceIpProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        created_at: Optional[str] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        match: Optional[str] = None,
        name: Optional[str] = None,
        precedence: Optional[int] = None,
        subnet_id: Optional[str] = None,
        updated_at: Optional[str] = None) -> ZeroTrustDeviceIpProfile
    func GetZeroTrustDeviceIpProfile(ctx *Context, name string, id IDInput, state *ZeroTrustDeviceIpProfileState, opts ...ResourceOption) (*ZeroTrustDeviceIpProfile, error)
    public static ZeroTrustDeviceIpProfile Get(string name, Input<string> id, ZeroTrustDeviceIpProfileState? state, CustomResourceOptions? opts = null)
    public static ZeroTrustDeviceIpProfile get(String name, Output<String> id, ZeroTrustDeviceIpProfileState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:ZeroTrustDeviceIpProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    CreatedAt string
    The RFC3339Nano timestamp when the Device IP profile was created.
    Description string
    An optional description of the Device IP profile.
    Enabled bool
    Whether the Device IP profile will be applied to matching devices.
    Match string
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    Name string
    A user-friendly name for the Device IP profile.
    Precedence int
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    SubnetId string
    The ID of the Subnet.
    UpdatedAt string
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    AccountId string
    CreatedAt string
    The RFC3339Nano timestamp when the Device IP profile was created.
    Description string
    An optional description of the Device IP profile.
    Enabled bool
    Whether the Device IP profile will be applied to matching devices.
    Match string
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    Name string
    A user-friendly name for the Device IP profile.
    Precedence int
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    SubnetId string
    The ID of the Subnet.
    UpdatedAt string
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    accountId String
    createdAt String
    The RFC3339Nano timestamp when the Device IP profile was created.
    description String
    An optional description of the Device IP profile.
    enabled Boolean
    Whether the Device IP profile will be applied to matching devices.
    match String
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    name String
    A user-friendly name for the Device IP profile.
    precedence Integer
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    subnetId String
    The ID of the Subnet.
    updatedAt String
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    accountId string
    createdAt string
    The RFC3339Nano timestamp when the Device IP profile was created.
    description string
    An optional description of the Device IP profile.
    enabled boolean
    Whether the Device IP profile will be applied to matching devices.
    match string
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    name string
    A user-friendly name for the Device IP profile.
    precedence number
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    subnetId string
    The ID of the Subnet.
    updatedAt string
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    account_id str
    created_at str
    The RFC3339Nano timestamp when the Device IP profile was created.
    description str
    An optional description of the Device IP profile.
    enabled bool
    Whether the Device IP profile will be applied to matching devices.
    match str
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    name str
    A user-friendly name for the Device IP profile.
    precedence int
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    subnet_id str
    The ID of the Subnet.
    updated_at str
    The RFC3339Nano timestamp when the Device IP profile was last updated.
    accountId String
    createdAt String
    The RFC3339Nano timestamp when the Device IP profile was created.
    description String
    An optional description of the Device IP profile.
    enabled Boolean
    Whether the Device IP profile will be applied to matching devices.
    match String
    The wirefilter expression to match registrations. Available values: "identity.name", "identity.email", "identity.groups.id", "identity.groups.name", "identity.groups.email", "identity.saml_attributes".
    name String
    A user-friendly name for the Device IP profile.
    precedence Number
    The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field.
    subnetId String
    The ID of the Subnet.
    updatedAt String
    The RFC3339Nano timestamp when the Device IP profile was last updated.

    Import

    $ pulumi import cloudflare:index/zeroTrustDeviceIpProfile:ZeroTrustDeviceIpProfile example '<account_id>/<profile_id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v6.15.0
    published on Saturday, May 2, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-cloudflare
      Try Pulumi Cloud free. Your team will thank you.