1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. TeamsRule
Viewing docs for Cloudflare v4.16.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi
Go to latest version
Schema (JSON)
pulumi/pulumi-cloudflare

cloudflare.TeamsRule

cloudflare logo
Viewing docs for Cloudflare v4.16.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi
Go to latest version
Schema (JSON)
pulumi/pulumi-cloudflare

    Provides a Cloudflare Teams rule resource. Teams rules comprise secure web gateway policies.

    Example Usage

    using System.Collections.Generic;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var example = new Cloudflare.TeamsRule("example", new()
    {
        AccountId = "f037e56e89293a057740de681ac9abbe",
        Action = "block",
        Description = "desc",
        Filters = new[]
        {
            "http",
        },
        Name = "office",
        Precedence = 1,
        RuleSettings = new Cloudflare.Inputs.TeamsRuleRuleSettingsArgs
        {
            BlockPageEnabled = true,
            BlockPageReason = "access not permitted",
        },
        Traffic = "http.request.uri == \"https://www.example.com/malicious\"",
    });

});

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v4/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewTeamsRule(ctx, "example", &cloudflare.TeamsRuleArgs{
			AccountId:   pulumi.String("f037e56e89293a057740de681ac9abbe"),
			Action:      pulumi.String("block"),
			Description: pulumi.String("desc"),
			Filters: pulumi.StringArray{
				pulumi.String("http"),
			},
			Name:       pulumi.String("office"),
			Precedence: pulumi.Int(1),
			RuleSettings: &cloudflare.TeamsRuleRuleSettingsArgs{
				BlockPageEnabled: pulumi.Bool(true),
				BlockPageReason:  pulumi.String("access not permitted"),
			},
			Traffic: pulumi.String("http.request.uri == \"https://www.example.com/malicious\""),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.TeamsRule;
import com.pulumi.cloudflare.TeamsRuleArgs;
import com.pulumi.cloudflare.inputs.TeamsRuleRuleSettingsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new TeamsRule("example", TeamsRuleArgs.builder()        
            .accountId("f037e56e89293a057740de681ac9abbe")
            .action("block")
            .description("desc")
            .filters("http")
            .name("office")
            .precedence(1)
            .ruleSettings(TeamsRuleRuleSettingsArgs.builder()
                .blockPageEnabled(true)
                .blockPageReason("access not permitted")
                .build())
            .traffic("http.request.uri == \"https://www.example.com/malicious\"")
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const example = new cloudflare.TeamsRule("example", {
    accountId: "f037e56e89293a057740de681ac9abbe",
    action: "block",
    description: "desc",
    filters: ["http"],
    name: "office",
    precedence: 1,
    ruleSettings: {
        blockPageEnabled: true,
        blockPageReason: "access not permitted",
    },
    traffic: "http.request.uri == \"https://www.example.com/malicious\"",
});

    import pulumi
import pulumi_cloudflare as cloudflare

example = cloudflare.TeamsRule("example",
    account_id="f037e56e89293a057740de681ac9abbe",
    action="block",
    description="desc",
    filters=["http"],
    name="office",
    precedence=1,
    rule_settings=cloudflare.TeamsRuleRuleSettingsArgs(
        block_page_enabled=True,
        block_page_reason="access not permitted",
    ),
    traffic="http.request.uri == \"https://www.example.com/malicious\"")

    resources:
  example:
    type: cloudflare:TeamsRule
    properties:
      accountId: f037e56e89293a057740de681ac9abbe
      action: block
      description: desc
      filters:
        - http
      name: office
      precedence: 1
      ruleSettings:
        blockPageEnabled: true
        blockPageReason: access not permitted
      traffic: http.request.uri == "https://www.example.com/malicious"

    Create TeamsRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new TeamsRule(name: string, args: TeamsRuleArgs, opts?: CustomResourceOptions);
    @overload
def TeamsRule(resource_name: str,
              args: TeamsRuleArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def TeamsRule(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              account_id: Optional[str] = None,
              action: Optional[str] = None,
              description: Optional[str] = None,
              name: Optional[str] = None,
              precedence: Optional[int] = None,
              device_posture: Optional[str] = None,
              enabled: Optional[bool] = None,
              filters: Optional[Sequence[str]] = None,
              identity: Optional[str] = None,
              rule_settings: Optional[TeamsRuleRuleSettingsArgs] = None,
              traffic: Optional[str] = None)
    func NewTeamsRule(ctx *Context, name string, args TeamsRuleArgs, opts ...ResourceOption) (*TeamsRule, error)
    public TeamsRule(string name, TeamsRuleArgs args, CustomResourceOptions? opts = null)
    public TeamsRule(String name, TeamsRuleArgs args)
public TeamsRule(String name, TeamsRuleArgs args, CustomResourceOptions options)

    type: cloudflare:TeamsRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TeamsRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var teamsRuleResource = new Cloudflare.TeamsRule("teamsRuleResource", new()
{
    AccountId = "string",
    Action = "string",
    Description = "string",
    Name = "string",
    Precedence = 0,
    DevicePosture = "string",
    Enabled = false,
    Filters = new[]
    {
        "string",
    },
    Identity = "string",
    RuleSettings = new Cloudflare.Inputs.TeamsRuleRuleSettingsArgs
    {
        AddHeaders = 
        {
            { "string", "string" },
        },
        BisoAdminControls = new Cloudflare.Inputs.TeamsRuleRuleSettingsBisoAdminControlsArgs
        {
            DisableCopyPaste = false,
            DisableDownload = false,
            DisableKeyboard = false,
            DisablePrinting = false,
            DisableUpload = false,
        },
        BlockPageEnabled = false,
        BlockPageReason = "string",
        CheckSession = new Cloudflare.Inputs.TeamsRuleRuleSettingsCheckSessionArgs
        {
            Duration = "string",
            Enforce = false,
        },
        Egress = new Cloudflare.Inputs.TeamsRuleRuleSettingsEgressArgs
        {
            Ipv4 = "string",
            Ipv6 = "string",
            Ipv4Fallback = "string",
        },
        InsecureDisableDnssecValidation = false,
        L4override = new Cloudflare.Inputs.TeamsRuleRuleSettingsL4overrideArgs
        {
            Ip = "string",
            Port = 0,
        },
        OverrideHost = "string",
        OverrideIps = new[]
        {
            "string",
        },
    },
    Traffic = "string",
});

    example, err := cloudflare.NewTeamsRule(ctx, "teamsRuleResource", &cloudflare.TeamsRuleArgs{
	AccountId:     pulumi.String("string"),
	Action:        pulumi.String("string"),
	Description:   pulumi.String("string"),
	Name:          pulumi.String("string"),
	Precedence:    pulumi.Int(0),
	DevicePosture: pulumi.String("string"),
	Enabled:       pulumi.Bool(false),
	Filters: pulumi.StringArray{
		pulumi.String("string"),
	},
	Identity: pulumi.String("string"),
	RuleSettings: &cloudflare.TeamsRuleRuleSettingsArgs{
		AddHeaders: pulumi.StringMap{
			"string": pulumi.String("string"),
		},
		BisoAdminControls: &cloudflare.TeamsRuleRuleSettingsBisoAdminControlsArgs{
			DisableCopyPaste: pulumi.Bool(false),
			DisableDownload:  pulumi.Bool(false),
			DisableKeyboard:  pulumi.Bool(false),
			DisablePrinting:  pulumi.Bool(false),
			DisableUpload:    pulumi.Bool(false),
		},
		BlockPageEnabled: pulumi.Bool(false),
		BlockPageReason:  pulumi.String("string"),
		CheckSession: &cloudflare.TeamsRuleRuleSettingsCheckSessionArgs{
			Duration: pulumi.String("string"),
			Enforce:  pulumi.Bool(false),
		},
		Egress: &cloudflare.TeamsRuleRuleSettingsEgressArgs{
			Ipv4:         pulumi.String("string"),
			Ipv6:         pulumi.String("string"),
			Ipv4Fallback: pulumi.String("string"),
		},
		InsecureDisableDnssecValidation: pulumi.Bool(false),
		L4override: &cloudflare.TeamsRuleRuleSettingsL4overrideArgs{
			Ip:   pulumi.String("string"),
			Port: pulumi.Int(0),
		},
		OverrideHost: pulumi.String("string"),
		OverrideIps: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	Traffic: pulumi.String("string"),
})

    var teamsRuleResource = new TeamsRule("teamsRuleResource", TeamsRuleArgs.builder()
    .accountId("string")
    .action("string")
    .description("string")
    .name("string")
    .precedence(0)
    .devicePosture("string")
    .enabled(false)
    .filters("string")
    .identity("string")
    .ruleSettings(TeamsRuleRuleSettingsArgs.builder()
        .addHeaders(Map.of("string", "string"))
        .bisoAdminControls(TeamsRuleRuleSettingsBisoAdminControlsArgs.builder()
            .disableCopyPaste(false)
            .disableDownload(false)
            .disableKeyboard(false)
            .disablePrinting(false)
            .disableUpload(false)
            .build())
        .blockPageEnabled(false)
        .blockPageReason("string")
        .checkSession(TeamsRuleRuleSettingsCheckSessionArgs.builder()
            .duration("string")
            .enforce(false)
            .build())
        .egress(TeamsRuleRuleSettingsEgressArgs.builder()
            .ipv4("string")
            .ipv6("string")
            .ipv4Fallback("string")
            .build())
        .insecureDisableDnssecValidation(false)
        .l4override(TeamsRuleRuleSettingsL4overrideArgs.builder()
            .ip("string")
            .port(0)
            .build())
        .overrideHost("string")
        .overrideIps("string")
        .build())
    .traffic("string")
    .build());

    teams_rule_resource = cloudflare.TeamsRule("teamsRuleResource",
    account_id="string",
    action="string",
    description="string",
    name="string",
    precedence=0,
    device_posture="string",
    enabled=False,
    filters=["string"],
    identity="string",
    rule_settings={
        "add_headers": {
            "string": "string",
        },
        "biso_admin_controls": {
            "disable_copy_paste": False,
            "disable_download": False,
            "disable_keyboard": False,
            "disable_printing": False,
            "disable_upload": False,
        },
        "block_page_enabled": False,
        "block_page_reason": "string",
        "check_session": {
            "duration": "string",
            "enforce": False,
        },
        "egress": {
            "ipv4": "string",
            "ipv6": "string",
            "ipv4_fallback": "string",
        },
        "insecure_disable_dnssec_validation": False,
        "l4override": {
            "ip": "string",
            "port": 0,
        },
        "override_host": "string",
        "override_ips": ["string"],
    },
    traffic="string")

    const teamsRuleResource = new cloudflare.TeamsRule("teamsRuleResource", {
    accountId: "string",
    action: "string",
    description: "string",
    name: "string",
    precedence: 0,
    devicePosture: "string",
    enabled: false,
    filters: ["string"],
    identity: "string",
    ruleSettings: {
        addHeaders: {
            string: "string",
        },
        bisoAdminControls: {
            disableCopyPaste: false,
            disableDownload: false,
            disableKeyboard: false,
            disablePrinting: false,
            disableUpload: false,
        },
        blockPageEnabled: false,
        blockPageReason: "string",
        checkSession: {
            duration: "string",
            enforce: false,
        },
        egress: {
            ipv4: "string",
            ipv6: "string",
            ipv4Fallback: "string",
        },
        insecureDisableDnssecValidation: false,
        l4override: {
            ip: "string",
            port: 0,
        },
        overrideHost: "string",
        overrideIps: ["string"],
    },
    traffic: "string",
});

    type: cloudflare:TeamsRule
properties:
    accountId: string
    action: string
    description: string
    devicePosture: string
    enabled: false
    filters:
        - string
    identity: string
    name: string
    precedence: 0
    ruleSettings:
        addHeaders:
            string: string
        bisoAdminControls:
            disableCopyPaste: false
            disableDownload: false
            disableKeyboard: false
            disablePrinting: false
            disableUpload: false
        blockPageEnabled: false
        blockPageReason: string
        checkSession:
            duration: string
            enforce: false
        egress:
            ipv4: string
            ipv4Fallback: string
            ipv6: string
        insecureDisableDnssecValidation: false
        l4override:
            ip: string
            port: 0
        overrideHost: string
        overrideIps:
            - string
    traffic: string

    TeamsRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The TeamsRule resource accepts the following input properties:

    AccountId string
    The account identifier to target for the resource.
    Action string
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    Description string
    The description of the teams rule.
    Name string
    The name of the teams rule.
    Precedence int
    The evaluation precedence of the teams rule.
    DevicePosture string
    The wirefilter expression to be used for device_posture check matching.
    Enabled bool
    Indicator of rule enablement.
    Filters List<string>
    The protocol or layer to evaluate the traffic and identity expressions.
    Identity string
    The wirefilter expression to be used for identity matching.
    RuleSettings TeamsRuleRuleSettings
    Additional rule settings.
    Traffic string
    The wirefilter expression to be used for traffic matching.
    AccountId string
    The account identifier to target for the resource.
    Action string
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    Description string
    The description of the teams rule.
    Name string
    The name of the teams rule.
    Precedence int
    The evaluation precedence of the teams rule.
    DevicePosture string
    The wirefilter expression to be used for device_posture check matching.
    Enabled bool
    Indicator of rule enablement.
    Filters []string
    The protocol or layer to evaluate the traffic and identity expressions.
    Identity string
    The wirefilter expression to be used for identity matching.
    RuleSettings TeamsRuleRuleSettingsArgs
    Additional rule settings.
    Traffic string
    The wirefilter expression to be used for traffic matching.
    accountId String
    The account identifier to target for the resource.
    action String
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    description String
    The description of the teams rule.
    name String
    The name of the teams rule.
    precedence Integer
    The evaluation precedence of the teams rule.
    devicePosture String
    The wirefilter expression to be used for device_posture check matching.
    enabled Boolean
    Indicator of rule enablement.
    filters List<String>
    The protocol or layer to evaluate the traffic and identity expressions.
    identity String
    The wirefilter expression to be used for identity matching.
    ruleSettings TeamsRuleRuleSettings
    Additional rule settings.
    traffic String
    The wirefilter expression to be used for traffic matching.
    accountId string
    The account identifier to target for the resource.
    action string
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    description string
    The description of the teams rule.
    name string
    The name of the teams rule.
    precedence number
    The evaluation precedence of the teams rule.
    devicePosture string
    The wirefilter expression to be used for device_posture check matching.
    enabled boolean
    Indicator of rule enablement.
    filters string[]
    The protocol or layer to evaluate the traffic and identity expressions.
    identity string
    The wirefilter expression to be used for identity matching.
    ruleSettings TeamsRuleRuleSettings
    Additional rule settings.
    traffic string
    The wirefilter expression to be used for traffic matching.
    account_id str
    The account identifier to target for the resource.
    action str
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    description str
    The description of the teams rule.
    name str
    The name of the teams rule.
    precedence int
    The evaluation precedence of the teams rule.
    device_posture str
    The wirefilter expression to be used for device_posture check matching.
    enabled bool
    Indicator of rule enablement.
    filters Sequence[str]
    The protocol or layer to evaluate the traffic and identity expressions.
    identity str
    The wirefilter expression to be used for identity matching.
    rule_settings TeamsRuleRuleSettingsArgs
    Additional rule settings.
    traffic str
    The wirefilter expression to be used for traffic matching.
    accountId String
    The account identifier to target for the resource.
    action String
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    description String
    The description of the teams rule.
    name String
    The name of the teams rule.
    precedence Number
    The evaluation precedence of the teams rule.
    devicePosture String
    The wirefilter expression to be used for device_posture check matching.
    enabled Boolean
    Indicator of rule enablement.
    filters List<String>
    The protocol or layer to evaluate the traffic and identity expressions.
    identity String
    The wirefilter expression to be used for identity matching.
    ruleSettings Property Map
    Additional rule settings.
    traffic String
    The wirefilter expression to be used for traffic matching.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TeamsRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    Id string
    The provider-assigned unique ID for this managed resource.
    Version int
    id String
    The provider-assigned unique ID for this managed resource.
    version Integer
    id string
    The provider-assigned unique ID for this managed resource.
    version number
    id str
    The provider-assigned unique ID for this managed resource.
    version int
    id String
    The provider-assigned unique ID for this managed resource.
    version Number

    Look up Existing TeamsRule Resource

    Get an existing TeamsRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TeamsRuleState, opts?: CustomResourceOptions): TeamsRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        action: Optional[str] = None,
        description: Optional[str] = None,
        device_posture: Optional[str] = None,
        enabled: Optional[bool] = None,
        filters: Optional[Sequence[str]] = None,
        identity: Optional[str] = None,
        name: Optional[str] = None,
        precedence: Optional[int] = None,
        rule_settings: Optional[TeamsRuleRuleSettingsArgs] = None,
        traffic: Optional[str] = None,
        version: Optional[int] = None) -> TeamsRule
    func GetTeamsRule(ctx *Context, name string, id IDInput, state *TeamsRuleState, opts ...ResourceOption) (*TeamsRule, error)
    public static TeamsRule Get(string name, Input<string> id, TeamsRuleState? state, CustomResourceOptions? opts = null)
    public static TeamsRule get(String name, Output<String> id, TeamsRuleState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:TeamsRule    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The account identifier to target for the resource.
    Action string
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    Description string
    The description of the teams rule.
    DevicePosture string
    The wirefilter expression to be used for device_posture check matching.
    Enabled bool
    Indicator of rule enablement.
    Filters List<string>
    The protocol or layer to evaluate the traffic and identity expressions.
    Identity string
    The wirefilter expression to be used for identity matching.
    Name string
    The name of the teams rule.
    Precedence int
    The evaluation precedence of the teams rule.
    RuleSettings TeamsRuleRuleSettings
    Additional rule settings.
    Traffic string
    The wirefilter expression to be used for traffic matching.
    Version int
    AccountId string
    The account identifier to target for the resource.
    Action string
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    Description string
    The description of the teams rule.
    DevicePosture string
    The wirefilter expression to be used for device_posture check matching.
    Enabled bool
    Indicator of rule enablement.
    Filters []string
    The protocol or layer to evaluate the traffic and identity expressions.
    Identity string
    The wirefilter expression to be used for identity matching.
    Name string
    The name of the teams rule.
    Precedence int
    The evaluation precedence of the teams rule.
    RuleSettings TeamsRuleRuleSettingsArgs
    Additional rule settings.
    Traffic string
    The wirefilter expression to be used for traffic matching.
    Version int
    accountId String
    The account identifier to target for the resource.
    action String
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    description String
    The description of the teams rule.
    devicePosture String
    The wirefilter expression to be used for device_posture check matching.
    enabled Boolean
    Indicator of rule enablement.
    filters List<String>
    The protocol or layer to evaluate the traffic and identity expressions.
    identity String
    The wirefilter expression to be used for identity matching.
    name String
    The name of the teams rule.
    precedence Integer
    The evaluation precedence of the teams rule.
    ruleSettings TeamsRuleRuleSettings
    Additional rule settings.
    traffic String
    The wirefilter expression to be used for traffic matching.
    version Integer
    accountId string
    The account identifier to target for the resource.
    action string
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    description string
    The description of the teams rule.
    devicePosture string
    The wirefilter expression to be used for device_posture check matching.
    enabled boolean
    Indicator of rule enablement.
    filters string[]
    The protocol or layer to evaluate the traffic and identity expressions.
    identity string
    The wirefilter expression to be used for identity matching.
    name string
    The name of the teams rule.
    precedence number
    The evaluation precedence of the teams rule.
    ruleSettings TeamsRuleRuleSettings
    Additional rule settings.
    traffic string
    The wirefilter expression to be used for traffic matching.
    version number
    account_id str
    The account identifier to target for the resource.
    action str
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    description str
    The description of the teams rule.
    device_posture str
    The wirefilter expression to be used for device_posture check matching.
    enabled bool
    Indicator of rule enablement.
    filters Sequence[str]
    The protocol or layer to evaluate the traffic and identity expressions.
    identity str
    The wirefilter expression to be used for identity matching.
    name str
    The name of the teams rule.
    precedence int
    The evaluation precedence of the teams rule.
    rule_settings TeamsRuleRuleSettingsArgs
    Additional rule settings.
    traffic str
    The wirefilter expression to be used for traffic matching.
    version int
    accountId String
    The account identifier to target for the resource.
    action String
    The action executed by matched teams rule. Available values: allow, block, safesearch, ytrestricted, on, off, scan, noscan, isolate, noisolate, override, l4_override, egress.
    description String
    The description of the teams rule.
    devicePosture String
    The wirefilter expression to be used for device_posture check matching.
    enabled Boolean
    Indicator of rule enablement.
    filters List<String>
    The protocol or layer to evaluate the traffic and identity expressions.
    identity String
    The wirefilter expression to be used for identity matching.
    name String
    The name of the teams rule.
    precedence Number
    The evaluation precedence of the teams rule.
    ruleSettings Property Map
    Additional rule settings.
    traffic String
    The wirefilter expression to be used for traffic matching.
    version Number

    Supporting Types

    TeamsRuleRuleSettings, TeamsRuleRuleSettingsArgs

    AddHeaders Dictionary<string, string>
    Add custom headers to allowed requests in the form of key-value pairs.
    BisoAdminControls TeamsRuleRuleSettingsBisoAdminControls
    Configure how browser isolation behaves.
    BlockPageEnabled bool
    Indicator of block page enablement.
    BlockPageReason string
    The displayed reason for a user being blocked.
    CheckSession TeamsRuleRuleSettingsCheckSession
    Configure how session check behaves.
    Egress TeamsRuleRuleSettingsEgress
    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.
    InsecureDisableDnssecValidation bool
    Disable DNSSEC validation (must be Allow rule).
    L4override TeamsRuleRuleSettingsL4override
    Settings to forward layer 4 traffic.
    OverrideHost string
    The host to override matching DNS queries with.
    OverrideIps List<string>
    The IPs to override matching DNS queries with.
    AddHeaders map[string]string
    Add custom headers to allowed requests in the form of key-value pairs.
    BisoAdminControls TeamsRuleRuleSettingsBisoAdminControls
    Configure how browser isolation behaves.
    BlockPageEnabled bool
    Indicator of block page enablement.
    BlockPageReason string
    The displayed reason for a user being blocked.
    CheckSession TeamsRuleRuleSettingsCheckSession
    Configure how session check behaves.
    Egress TeamsRuleRuleSettingsEgress
    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.
    InsecureDisableDnssecValidation bool
    Disable DNSSEC validation (must be Allow rule).
    L4override TeamsRuleRuleSettingsL4override
    Settings to forward layer 4 traffic.
    OverrideHost string
    The host to override matching DNS queries with.
    OverrideIps []string
    The IPs to override matching DNS queries with.
    addHeaders Map<String,String>
    Add custom headers to allowed requests in the form of key-value pairs.
    bisoAdminControls TeamsRuleRuleSettingsBisoAdminControls
    Configure how browser isolation behaves.
    blockPageEnabled Boolean
    Indicator of block page enablement.
    blockPageReason String
    The displayed reason for a user being blocked.
    checkSession TeamsRuleRuleSettingsCheckSession
    Configure how session check behaves.
    egress TeamsRuleRuleSettingsEgress
    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.
    insecureDisableDnssecValidation Boolean
    Disable DNSSEC validation (must be Allow rule).
    l4override TeamsRuleRuleSettingsL4override
    Settings to forward layer 4 traffic.
    overrideHost String
    The host to override matching DNS queries with.
    overrideIps List<String>
    The IPs to override matching DNS queries with.
    addHeaders {[key: string]: string}
    Add custom headers to allowed requests in the form of key-value pairs.
    bisoAdminControls TeamsRuleRuleSettingsBisoAdminControls
    Configure how browser isolation behaves.
    blockPageEnabled boolean
    Indicator of block page enablement.
    blockPageReason string
    The displayed reason for a user being blocked.
    checkSession TeamsRuleRuleSettingsCheckSession
    Configure how session check behaves.
    egress TeamsRuleRuleSettingsEgress
    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.
    insecureDisableDnssecValidation boolean
    Disable DNSSEC validation (must be Allow rule).
    l4override TeamsRuleRuleSettingsL4override
    Settings to forward layer 4 traffic.
    overrideHost string
    The host to override matching DNS queries with.
    overrideIps string[]
    The IPs to override matching DNS queries with.
    add_headers Mapping[str, str]
    Add custom headers to allowed requests in the form of key-value pairs.
    biso_admin_controls TeamsRuleRuleSettingsBisoAdminControls
    Configure how browser isolation behaves.
    block_page_enabled bool
    Indicator of block page enablement.
    block_page_reason str
    The displayed reason for a user being blocked.
    check_session TeamsRuleRuleSettingsCheckSession
    Configure how session check behaves.
    egress TeamsRuleRuleSettingsEgress
    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.
    insecure_disable_dnssec_validation bool
    Disable DNSSEC validation (must be Allow rule).
    l4override TeamsRuleRuleSettingsL4override
    Settings to forward layer 4 traffic.
    override_host str
    The host to override matching DNS queries with.
    override_ips Sequence[str]
    The IPs to override matching DNS queries with.
    addHeaders Map<String>
    Add custom headers to allowed requests in the form of key-value pairs.
    bisoAdminControls Property Map
    Configure how browser isolation behaves.
    blockPageEnabled Boolean
    Indicator of block page enablement.
    blockPageReason String
    The displayed reason for a user being blocked.
    checkSession Property Map
    Configure how session check behaves.
    egress Property Map
    Configure how Proxy traffic egresses. Can be set for rules with Egress action and Egress filter. Can be omitted to indicate local egress via Warp IPs.
    insecureDisableDnssecValidation Boolean
    Disable DNSSEC validation (must be Allow rule).
    l4override Property Map
    Settings to forward layer 4 traffic.
    overrideHost String
    The host to override matching DNS queries with.
    overrideIps List<String>
    The IPs to override matching DNS queries with.

    TeamsRuleRuleSettingsBisoAdminControls, TeamsRuleRuleSettingsBisoAdminControlsArgs

    TeamsRuleRuleSettingsCheckSession, TeamsRuleRuleSettingsCheckSessionArgs

    Duration string
    Enforce bool
    Duration string
    Enforce bool
    duration String
    enforce Boolean
    duration string
    enforce boolean
    duration String
    enforce Boolean

    TeamsRuleRuleSettingsEgress, TeamsRuleRuleSettingsEgressArgs

    Ipv4 string
    Ipv6 string
    Ipv4Fallback string
    Ipv4 string
    Ipv6 string
    Ipv4Fallback string
    ipv4 String
    ipv6 String
    ipv4Fallback String
    ipv4 string
    ipv6 string
    ipv4Fallback string
    ipv4 String
    ipv6 String
    ipv4Fallback String

    TeamsRuleRuleSettingsL4override, TeamsRuleRuleSettingsL4overrideArgs

    Ip string
    Port int
    Ip string
    Port int
    ip String
    port Integer
    ip string
    port number
    ip str
    port int
    ip String
    port Number

    Import

     $ pulumi import cloudflare:index/teamsRule:TeamsRule example <account_id>/<teams_rule_id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Viewing docs for Cloudflare v4.16.0 (Older version)
    published on Monday, Mar 9, 2026 by Pulumi
    Go to latest version
    Schema (JSON)
    pulumi/pulumi-cloudflare
      Try Pulumi Cloud free. Your team will thank you.