Reference
cloudflare Dialect
See which types this Dialect interprets and which architectural facts its Rules can establish.
On this pageOverview
Version and compatibility
Version: 0.1.0.
Provider bindings and declared compatibility
cloudflare/cloudflare:= 5.24.0.
Each row identifies a type and instance kind. Conditional Rules retain their individual conditions in the details below.
cloudflare.concept.access-applicationSource-
An application or infrastructure destination protected by Cloudflare Access.
-
Used by
access-application. cloudflare.concept.accountSource-
A Cloudflare account as a tenancy and ownership boundary.
-
Used by
account,account-dns-settings. cloudflare.concept.account-configurationSource-
Configuration applied to a Cloudflare account boundary.
-
Used by
account-dns-settings. cloudflare.concept.ai-controls-endpointSource-
An MCP server or portal governed through Cloudflare AI Controls.
-
Used by
access-ai-controls-mcp-portal,access-ai-controls-mcp-server. cloudflare.concept.ai-gatewaySource-
A Cloudflare AI Gateway controlling and observing AI inference traffic.
-
Used by
ai-gateway,ai-gateway-dynamic-routing. cloudflare.concept.ai-gateway-routingSource-
Dynamic routing configuration contributing to a Cloudflare AI Gateway.
-
Used by
ai-gateway-dynamic-routing. cloudflare.concept.cloudflare-tunnelSource-
A Cloudflare Tunnel logical link from private resources to the Cloudflare network.
cloudflare.concept.connectivity-serviceSource-
A service published through Cloudflare Connectivity Directory.
cloudflare.concept.custom-hostnameSource-
A customer hostname onboarded through Cloudflare for SaaS.
-
Used by
custom-hostname. cloudflare.concept.data-loss-prevention-configurationSource-
Cloudflare One Data Loss Prevention profile, dataset, integration, or service configuration.
cloudflare.concept.device-posture-configurationSource-
Cloudflare One device profile, posture, managed-network, deployment, or subnet configuration.
cloudflare.concept.dns-record-detailSource-
A DNS record contributing to a Cloudflare zone without independent architecture identity.
-
Used by
dns-record. cloudflare.concept.dns-transfer-configurationSource-
Secondary DNS transfer, ACL, or TSIG configuration.
-
Used by 4 Rules
cloudflare.concept.dns-transfer-peerSource-
An authoritative DNS peer participating in secondary zone transfers.
-
Used by
dns-transfer-incoming,dns-transfer-outgoing,dns-transfer-peer. cloudflare.concept.dns-viewSource-
A Cloudflare internal DNS view grouping zones for split-horizon resolution.
-
Used by
account-dns-internal-view. cloudflare.concept.dns-zoneSource-
A managed DNS namespace containing resource records.
-
Used by 78 Rules
account-dns-internal-viewapi-shieldapi-shield-discovery-operationapi-shield-operationapi-shield-operation-schema-validationapi-shield-schemaapi-shield-schema-validationargo-smart-routingargo-tiered-cachingauthenticated-origin-pullsauthenticated-origin-pulls-certificateauthenticated-origin-pulls-hostname-certificateauthenticated-origin-pulls-settingsbot-managementcertificate-authority-hostname-associationscertificate-packcertificate-transparency-alertingclient-certificatecloud-connector-rulescontent-scanningcontent-scanning-expressioncustom-csrcustom-hostnamecustom-hostname-fallback-origincustom-origin-trust-storecustom-ssldns-recorddns-transfer-incomingdns-transfer-outgoingemail-routing-catch-allemail-routing-ruleemail-routing-settingsfirewall-rulegoogle-tag-gatewayhostname-tls-settingkeyless-certificateload-balancermanaged-transformsorigin-cloud-regionorigin-tls-compliance-modespage-rulepage-shield-policyprecursorproxied-dns-recordr2-custom-domainrate-limitregional-hostnameregional-tiered-cacherulesetschema-validation-operation-settingsschema-validation-schemasschema-validation-settingssnippetsnippet-rulessnippetsspectrum-applicationtiered-cachetoken-validation-configtotal-tlsuniversal-ssl-settingurl-normalization-settingsuser-agent-blocking-rulewaiting-roomwaiting-room-eventwaiting-room-ruleswaiting-room-settingsweb3-hostnameworkers-custom-domainworkers-routezonezone-auto-origin-tls-kexzone-cache-reservezone-cache-variantszone-dns-settingszone-dnsseczone-holdzone-lockdownzone-setting
cloudflare.concept.edge-delivery-configurationSource-
Cache, routing, transformation, or delivery configuration applied at the Cloudflare edge.
cloudflare.concept.edge-routeSource-
A Cloudflare proxied hostname routing edge traffic to an application endpoint.
-
Used by
proxied-dns-record,regional-hostname,workers-custom-domain. cloudflare.concept.edge-security-configurationSource-
WAF, API, bot, content, credential, or certificate protection applied at the Cloudflare edge.
-
Used by 20 Rules
api-shieldapi-shield-discovery-operationapi-shield-operationapi-shield-operation-schema-validationapi-shield-schemaapi-shield-schema-validationbot-managementcontent-scanningcontent-scanning-expressionfirewall-rulepage-shield-policyprecursorrate-limitrulesetschema-validation-operation-settingsschema-validation-schemasschema-validation-settingstoken-validation-configuser-agent-blocking-rulezone-lockdown
cloudflare.concept.email-routing-configurationSource-
Cloudflare Email Routing configuration for a zone.
-
Used by
email-routing-catch-all,email-routing-rule,email-routing-settings. cloudflare.concept.email-security-configurationSource-
Trusted-domain, sender-blocking, or impersonation configuration for Cloudflare Email Security.
-
Used by
email-security-block-sender,email-security-impersonation-registry,email-security-trusted-domains. cloudflare.concept.feature-flagSource-
A feature flag owned by a feature-flag application.
-
Used by
flagship-flag. cloudflare.concept.feature-flag-applicationSource-
A Cloudflare feature-flag application.
-
Used by
flagship-app,flagship-flag. cloudflare.concept.gateway-configurationSource-
Logging, inspection, or risk-integration configuration for Cloudflare Gateway.
-
Used by
gateway-logging,gateway-settings,risk-scoring-integration. cloudflare.concept.hyperdrive-configurationSource-
A Cloudflare Hyperdrive database accelerator and connection pool.
-
Used by
hyperdrive-config. cloudflare.concept.identity-groupSource-
A managed group principal used to assign access collectively.
-
No Rule in this Dialect uses this definition.
cloudflare.concept.identity-providerSource-
An identity provider integrated with Cloudflare Zero Trust.
-
Used by
access-identity-provider,sso-connector. cloudflare.concept.load-balancerSource-
A load-balancing service composed from routing infrastructure.
-
Used by
load-balancer. cloudflare.concept.load-balancer-monitoringSource-
Health monitoring configuration supporting Cloudflare Load Balancing.
-
Used by
healthcheck,load-balancer-monitor,load-balancer-monitor-group. cloudflare.concept.magic-transit-siteSource-
A Cloudflare Magic Transit or Cloudflare WAN network site.
cloudflare.concept.managed-secretSource-
A managed secret identity whose sensitive value stays outside architecture output.
-
Used by
secrets-store-secret. cloudflare.concept.message-queueSource-
A managed queue buffering work or messages for asynchronous consumers.
-
Used by 5 Rules
cloudflare.concept.network-monitorSource-
A Cloudflare Network Monitoring configuration.
-
Used by
dex-test,network-monitoring. cloudflare.concept.network-route-configurationSource-
A LAN, WAN, ACL, route, or prefix configuration supporting Cloudflare WAN.
cloudflare.concept.observability-configurationSource-
A rule or test supporting Cloudflare observability.
cloudflare.concept.origin-poolSource-
A Cloudflare Load Balancing pool grouping origin endpoints.
-
Used by
load-balancer,load-balancer-pool. cloudflare.concept.pages-domainSource-
A custom domain serving a Cloudflare Pages project.
-
Used by
pages-domain. cloudflare.concept.pages-projectSource-
A Cloudflare Pages application project.
-
Used by
pages-domain,pages-project. cloudflare.concept.queue-consumer-bindingSource-
A consumer binding connecting a Cloudflare Queue to a Worker.
-
Used by
queue-consumer. cloudflare.concept.r2-configurationSource-
Lifecycle, access, event, migration, or domain configuration contributing to an R2 bucket.
cloudflare.concept.r2-data-catalogSource-
A Cloudflare R2 Data Catalog for tabular data.
-
Used by
r2-data-catalog. cloudflare.concept.saas-fallback-originSource-
A default origin for Cloudflare for SaaS custom hostnames.
-
Used by
custom-hostname-fallback-origin. cloudflare.concept.secrets-storeSource-
A Cloudflare Secrets Store boundary.
-
Used by
secrets-store,secrets-store-secret. cloudflare.concept.spectrum-applicationSource-
A Cloudflare Spectrum TCP or UDP application.
-
Used by
spectrum-application. cloudflare.concept.tls-configurationSource-
TLS, certificate, trust-store, or authenticated-origin configuration at the Cloudflare edge.
-
Used by 19 Rules
authenticated-origin-pullsauthenticated-origin-pulls-certificateauthenticated-origin-pulls-hostname-certificateauthenticated-origin-pulls-settingscertificate-authority-hostname-associationscertificate-packcertificate-transparency-alertingclient-certificatecustom-csrcustom-origin-trust-storecustom-sslhostname-tls-settingkeyless-certificatemtls-certificateorigin-ca-certificateorigin-tls-compliance-modestotal-tlsuniversal-ssl-settingzone-auto-origin-tls-kex
cloudflare.concept.tunnel-configurationSource-
Ingress, private route, hostname route, or connector configuration supporting a Cloudflare Tunnel.
cloudflare.concept.waiting-roomSource-
A Cloudflare Waiting Room controlling application admission.
-
Used by
waiting-room,waiting-room-event,waiting-room-rules. cloudflare.concept.waiting-room-configurationSource-
An event, bypass rule, or setting supporting a Cloudflare Waiting Room.
-
Used by
waiting-room-event,waiting-room-rules,waiting-room-settings. cloudflare.concept.warp-connectorSource-
A Cloudflare WARP Connector joining a private network to Cloudflare.
-
Used by
warp-connector,warp-connector-config. cloudflare.concept.worker-deploymentSource-
The active version rollout of a Cloudflare Worker.
-
Used by
workers-deployment. cloudflare.concept.worker-routeSource-
A route, custom domain, trigger, or subdomain exposing a Cloudflare Worker.
-
Used by
workers-cron-trigger,workers-route,workers-script-subdomain. cloudflare.concept.worker-versionSource-
An immutable version and resource bindings of a Cloudflare Worker.
-
Used by
worker-version. cloudflare.concept.workers-kv-entrySource-
A Workers KV entry contributing to its namespace.
-
Used by
workers-kv. cloudflare.concept.workflowSource-
A managed workflow coordinating steps and service calls.
-
No Rule in this Dialect uses this definition.
cloudflare.concept.zone-configurationSource-
Configuration contributing to a Cloudflare zone.
-
Used by 4 Rules
cloudflare.relation.catalogsSource-
Introduced by a labeled emission. Used by
r2-data-catalog. cloudflare.relation.connects-throughSource-
Introduced by a labeled emission. Used by
hyperdrive-config. cloudflare.relation.connects-toSource-
Introduced by a labeled emission. Used by
hyperdrive-config. cloudflare.relation.includes-zoneSource-
Introduced by a labeled emission. Used by
account-dns-internal-view. cloudflare.relation.protectsSource-
Introduced by a labeled emission. Used by
access-application. cloudflare.relation.publishes-toSource-
Introduced by a labeled emission. Used by
workers-script. cloudflare.relation.routes-toSource-
Introduced by a labeled emission. Used by
workers-custom-domain. cloudflare.relation.usesSource-
Introduced by a labeled emission. Used by
workers-script. cloudflare.relation.uses-origin-poolSource-
Introduced by a labeled emission. Used by
load-balancer. cloudflare.relation.uses-tunnelSource-
Introduced by a labeled emission. Used by
connectivity-directory-service.
rf.concept.managed-databaserf.concept.object-storage-containerrf.concept.service-identityrf.concept.virtual-networkrf.context.network
Open a Rule for its declared behavior and source. Matching, emission resolution and composition define how evidence can establish it.
cloudflare.rule.account-dns-internal-view Source
Matches resource instances of cloudflare_account_dns_settings_internal_view.
Classification: cloudflare.concept.dns-view.
Relations
cloudflare.relation.includes-zone: targetscloudflare.concept.dns-zonethroughsource.zones.
Conditions, identity and resolution
Relation through source.zones
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.account-dns-settings Source
Matches resource instances of cloudflare_account_dns_settings.
Classification: cloudflare.concept.account-configuration.
Contributions
- targets
cloudflare.concept.accountthroughsource.account_id.
Conditions, identity and resolution
Contribution through source.account_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.account Source
Matches resource instances of cloudflare_account.
Classification: cloudflare.concept.account.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.ai-gateway-dynamic-routing Source
Matches resource instances of cloudflare_ai_gateway_dynamic_routing.
Classification: cloudflare.concept.ai-gateway-routing.
Contributions
- targets
cloudflare.concept.ai-gatewaythroughsource.gateway_id.
Conditions, identity and resolution
Contribution through source.gateway_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.ai-gateway Source
Matches resource instances of cloudflare_ai_gateway.
Classification: cloudflare.concept.ai-gateway.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.api-shield-discovery-operation Source
Matches resource instances of cloudflare_api_shield_discovery_operation.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.api-shield-operation-schema-validation Source
Matches resource instances of cloudflare_api_shield_operation_schema_validation_settings.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.api-shield-operation Source
Matches resource instances of cloudflare_api_shield_operation.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.api-shield-schema-validation Source
Matches resource instances of cloudflare_api_shield_schema_validation_settings.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.api-shield-schema Source
Matches resource instances of cloudflare_api_shield_schema.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.api-shield Source
Matches resource instances of cloudflare_api_shield.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.argo-smart-routing Source
Matches resource instances of cloudflare_argo_smart_routing.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.argo-tiered-caching Source
Matches resource instances of cloudflare_argo_tiered_caching.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.authenticated-origin-pulls-certificate Source
Matches resource instances of cloudflare_authenticated_origin_pulls_certificate.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.authenticated-origin-pulls-hostname-certificate Source
Matches resource instances of cloudflare_authenticated_origin_pulls_hostname_certificate.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.authenticated-origin-pulls-settings Source
Matches resource instances of cloudflare_authenticated_origin_pulls_settings.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.authenticated-origin-pulls Source
Matches resource instances of cloudflare_authenticated_origin_pulls.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.bot-management Source
Matches resource instances of cloudflare_bot_management.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.certificate-authority-hostname-associations Source
Matches resource instances of cloudflare_certificate_authorities_hostname_associations.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.certificate-pack Source
Matches resource instances of cloudflare_certificate_pack.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.client-certificate Source
Matches resource instances of cloudflare_client_certificate.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.cloud-connector-rules Source
Matches resource instances of cloudflare_cloud_connector_rules.
Classification: cloudflare.concept.network-route-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.connectivity-directory-service Source
Matches resource instances of cloudflare_connectivity_directory_service.
Classification: cloudflare.concept.connectivity-service.
Relations
cloudflare.relation.uses-tunnel: targetscloudflare.concept.cloudflare-tunnelthroughsource.host.network.tunnel_id.cloudflare.relation.uses-tunnel: targetscloudflare.concept.cloudflare-tunnelthroughsource.host.resolver_network.tunnel_id.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
Relation through source.host.network.tunnel_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Relation through source.host.resolver_network.tunnel_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.content-scanning-expression Source
Matches resource instances of cloudflare_content_scanning_expression.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.content-scanning Source
Matches resource instances of cloudflare_content_scanning.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.certificate-transparency-alerting Source
Matches resource instances of cloudflare_ct_alerting.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.custom-csr Source
Matches resource instances of cloudflare_custom_csr.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.custom-hostname-fallback-origin Source
Matches resource instances of cloudflare_custom_hostname_fallback_origin.
Classification: cloudflare.concept.saas-fallback-origin.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.custom-hostname Source
Matches resource instances of cloudflare_custom_hostname.
Classification: cloudflare.concept.custom-hostname.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.custom-origin-trust-store Source
Matches resource instances of cloudflare_custom_origin_trust_store.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.custom-ssl Source
Matches resource instances of cloudflare_custom_ssl.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.d1-database Source
Matches resource instances of cloudflare_d1_database.
Classification: rf.concept.managed-database.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.dns-record Source
Matches resource instances of cloudflare_dns_record.
Classification: cloudflare.concept.dns-record-detail.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Condition
source.proxied != trueContribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.proxied-dns-record Source
Matches resource instances of cloudflare_dns_record.
Classification: cloudflare.concept.edge-route.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Condition
source.proxied == trueContext through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.dns-transfer-acl Source
Matches resource instances of cloudflare_dns_zone_transfers_acl.
Classification: cloudflare.concept.dns-transfer-configuration.
cloudflare.rule.dns-transfer-incoming Source
Matches resource instances of cloudflare_dns_zone_transfers_incoming.
Classification: cloudflare.concept.dns-transfer-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id. - targets
cloudflare.concept.dns-transfer-peerthroughsource.peers.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
Contribution through source.peers
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.dns-transfer-outgoing Source
Matches resource instances of cloudflare_dns_zone_transfers_outgoing.
Classification: cloudflare.concept.dns-transfer-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id. - targets
cloudflare.concept.dns-transfer-peerthroughsource.peers.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
Contribution through source.peers
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.dns-transfer-peer Source
Matches resource instances of cloudflare_dns_zone_transfers_peer.
Classification: cloudflare.concept.dns-transfer-peer.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.dns-transfer-tsig Source
Matches resource instances of cloudflare_dns_zone_transfers_tsig.
Classification: cloudflare.concept.dns-transfer-configuration.
cloudflare.rule.email-routing-catch-all Source
Matches resource instances of cloudflare_email_routing_catch_all.
Classification: cloudflare.concept.email-routing-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.email-routing-rule Source
Matches resource instances of cloudflare_email_routing_rule.
Classification: cloudflare.concept.email-routing-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.email-routing-settings Source
Matches resource instances of cloudflare_email_routing_settings.
Classification: cloudflare.concept.email-routing-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.email-security-block-sender Source
Matches resource instances of cloudflare_email_security_block_sender.
Classification: cloudflare.concept.email-security-configuration.
cloudflare.rule.email-security-impersonation-registry Source
Matches resource instances of cloudflare_email_security_impersonation_registry.
Classification: cloudflare.concept.email-security-configuration.
cloudflare.rule.email-security-trusted-domains Source
Matches resource instances of cloudflare_email_security_trusted_domains.
Classification: cloudflare.concept.email-security-configuration.
cloudflare.rule.firewall-rule Source
Matches resource instances of cloudflare_firewall_rule.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.flagship-app Source
Matches resource instances of cloudflare_flagship_app.
Classification: cloudflare.concept.feature-flag-application.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.flagship-flag Source
Matches resource instances of cloudflare_flagship_flag.
Classification: cloudflare.concept.feature-flag.
Contributions
- targets
cloudflare.concept.feature-flag-applicationthroughsource.app_id.
Conditions, identity and resolution
Contribution through source.app_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.google-tag-gateway Source
Matches resource instances of cloudflare_google_tag_gateway.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.healthcheck Source
Matches resource instances of cloudflare_healthcheck.
Classification: cloudflare.concept.load-balancer-monitoring.
cloudflare.rule.hostname-tls-setting Source
Matches resource instances of cloudflare_hostname_tls_setting.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.hyperdrive-config Source
Matches resource instances of cloudflare_hyperdrive_config.
Classification: cloudflare.concept.hyperdrive-configuration.
Relations
cloudflare.relation.connects-to: targetsrf.concept.managed-databasethroughsource.origin.host.cloudflare.relation.connects-through: targetscloudflare.concept.connectivity-servicethroughsource.origin.service_id.
Conditions, identity and resolution
Relation through source.origin.host
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
Relation through source.origin.service_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.keyless-certificate Source
Matches resource instances of cloudflare_keyless_certificate.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.load-balancer-monitor-group Source
Matches resource instances of cloudflare_load_balancer_monitor_group.
Classification: cloudflare.concept.load-balancer-monitoring.
cloudflare.rule.load-balancer-monitor Source
Matches resource instances of cloudflare_load_balancer_monitor.
Classification: cloudflare.concept.load-balancer-monitoring.
cloudflare.rule.load-balancer-pool Source
Matches resource instances of cloudflare_load_balancer_pool.
Classification: cloudflare.concept.origin-pool.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.load-balancer Source
Matches resource instances of cloudflare_load_balancer.
Classification: cloudflare.concept.load-balancer.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Relations
cloudflare.relation.uses-origin-pool: targetscloudflare.concept.origin-poolthroughsource.default_pools.cloudflare.relation.uses-origin-pool: targetscloudflare.concept.origin-poolthroughsource.fallback_pool.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
Relation through source.default_pools
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Relation through source.fallback_pool
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.logpull-retention Source
Matches resource instances of cloudflare_logpull_retention.
Classification: cloudflare.concept.observability-configuration.
cloudflare.rule.network-monitoring Source
Matches resource instances of cloudflare_magic_network_monitoring_configuration.
Classification: cloudflare.concept.network-monitor.
cloudflare.rule.network-monitoring-rule Source
Matches resource instances of cloudflare_magic_network_monitoring_rule.
Classification: cloudflare.concept.observability-configuration.
cloudflare.rule.magic-transit-cf1-site Source
Matches resource instances of cloudflare_magic_transit_cf1_site.
Classification: cloudflare.concept.magic-transit-site.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.magic-transit-site-acl Source
Matches resource instances of cloudflare_magic_transit_site_acl.
Classification: cloudflare.concept.network-route-configuration.
Contexts
rf.context.network: targetscloudflare.concept.magic-transit-sitethroughsource.site_id.
Conditions, identity and resolution
Context through source.site_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.magic-transit-site-lan Source
Matches resource instances of cloudflare_magic_transit_site_lan.
Classification: cloudflare.concept.network-route-configuration.
Contexts
rf.context.network: targetscloudflare.concept.magic-transit-sitethroughsource.site_id.
Conditions, identity and resolution
Context through source.site_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.magic-transit-site-wan Source
Matches resource instances of cloudflare_magic_transit_site_wan.
Classification: cloudflare.concept.network-route-configuration.
Contexts
rf.context.network: targetscloudflare.concept.magic-transit-sitethroughsource.site_id.
Conditions, identity and resolution
Context through source.site_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.magic-transit-site Source
Matches resource instances of cloudflare_magic_transit_site.
Classification: cloudflare.concept.magic-transit-site.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.magic-wan-static-route Source
Matches resource instances of cloudflare_magic_wan_static_route.
Classification: cloudflare.concept.network-route-configuration.
cloudflare.rule.managed-transforms Source
Matches resource instances of cloudflare_managed_transforms.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.mtls-certificate Source
Matches resource instances of cloudflare_mtls_certificate.
Classification: cloudflare.concept.tls-configuration.
cloudflare.rule.notification-webhook Source
Matches resource instances of cloudflare_notification_policy_webhooks.
Classification: cloudflare.concept.observability-configuration.
cloudflare.rule.notification-policy Source
Matches resource instances of cloudflare_notification_policy.
Classification: cloudflare.concept.observability-configuration.
cloudflare.rule.oauth-client Source
Matches resource instances of cloudflare_oauth_client.
Classification: rf.concept.service-identity.
cloudflare.rule.origin-ca-certificate Source
Matches resource instances of cloudflare_origin_ca_certificate.
Classification: cloudflare.concept.tls-configuration.
cloudflare.rule.origin-cloud-region Source
Matches resource instances of cloudflare_origin_cloud_region.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.origin-tls-compliance-modes Source
Matches resource instances of cloudflare_origin_tls_compliance_modes.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.page-rule Source
Matches resource instances of cloudflare_page_rule.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.page-shield-policy Source
Matches resource instances of cloudflare_page_shield_policy.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.pages-domain Source
Matches resource instances of cloudflare_pages_domain.
Classification: cloudflare.concept.pages-domain.
Contributions
- targets
cloudflare.concept.pages-projectthroughsource.project_name.
Conditions, identity and resolution
Contribution through source.project_name
on_null:"absent"on_empty:"absent"match.by:target.namematch.strategy:"exact"
cloudflare.rule.pages-project Source
Matches resource instances of cloudflare_pages_project.
Classification: cloudflare.concept.pages-project.
Conditions, identity and resolution
Identity
attributes:["name"]scope:"provider"
Endpoint
attributes:["id", "name"]
cloudflare.rule.precursor Source
Matches resource instances of cloudflare_precursor.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.queue-consumer Source
Matches resource instances of cloudflare_queue_consumer.
Classification: cloudflare.concept.queue-consumer-binding.
Contributions
- targets
cloudflare.concept.message-queuethroughsource.queue_id. - targets
cloudflare.concept.serverless-functionthroughsource.script_name.
Conditions, identity and resolution
Contribution through source.queue_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Contribution through source.script_name
on_null:"absent"on_empty:"absent"match.by:target.namematch.strategy:"exact"
cloudflare.rule.queue Source
Matches resource instances of cloudflare_queue.
Classification: cloudflare.concept.message-queue.
Conditions, identity and resolution
Identity
attributes:["id", "queue_name"]scope:"provider"
Endpoint
attributes:["id", "queue_name"]
cloudflare.rule.r2-bucket-cors Source
Matches resource instances of cloudflare_r2_bucket_cors.
Classification: cloudflare.concept.r2-configuration.
Contributions
- targets
rf.concept.object-storage-containerthroughsource.bucket_name.
Conditions, identity and resolution
Contribution through source.bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
cloudflare.rule.r2-bucket-event-notification Source
Matches resource instances of cloudflare_r2_bucket_event_notification.
Classification: cloudflare.concept.r2-configuration.
Contributions
- targets
rf.concept.object-storage-containerthroughsource.bucket_name. - targets
cloudflare.concept.message-queuethroughsource.queue_id.
Conditions, identity and resolution
Contribution through source.bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
Contribution through source.queue_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.r2-bucket-lifecycle Source
Matches resource instances of cloudflare_r2_bucket_lifecycle.
Classification: cloudflare.concept.r2-configuration.
Contributions
- targets
rf.concept.object-storage-containerthroughsource.bucket_name.
Conditions, identity and resolution
Contribution through source.bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
cloudflare.rule.r2-bucket-lock Source
Matches resource instances of cloudflare_r2_bucket_lock.
Classification: cloudflare.concept.r2-configuration.
Contributions
- targets
rf.concept.object-storage-containerthroughsource.bucket_name.
Conditions, identity and resolution
Contribution through source.bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
cloudflare.rule.r2-bucket-sippy Source
Matches resource instances of cloudflare_r2_bucket_sippy.
Classification: cloudflare.concept.r2-configuration.
Contributions
- targets
rf.concept.object-storage-containerthroughsource.bucket_name.
Conditions, identity and resolution
Contribution through source.bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
cloudflare.rule.r2-bucket Source
Matches resource instances of cloudflare_r2_bucket.
Classification: rf.concept.object-storage-container.
Conditions, identity and resolution
Identity
attributes:["name"]scope:"provider"
Endpoint
attributes:["id", "name"]
cloudflare.rule.r2-custom-domain Source
Matches resource instances of cloudflare_r2_custom_domain.
Classification: cloudflare.concept.r2-configuration.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Contributions
- targets
rf.concept.object-storage-containerthroughsource.bucket_name.
Conditions, identity and resolution
Contribution through source.bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.r2-data-catalog Source
Matches resource instances of cloudflare_r2_data_catalog.
Classification: cloudflare.concept.r2-data-catalog.
Relations
cloudflare.relation.catalogs: targetsrf.concept.object-storage-containerthroughsource.bucket_name.
Conditions, identity and resolution
Relation through source.bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
cloudflare.rule.r2-managed-domain Source
Matches resource instances of cloudflare_r2_managed_domain.
Classification: cloudflare.concept.r2-configuration.
Contributions
- targets
rf.concept.object-storage-containerthroughsource.bucket_name.
Conditions, identity and resolution
Contribution through source.bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
cloudflare.rule.rate-limit Source
Matches resource instances of cloudflare_rate_limit.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.regional-hostname Source
Matches resource instances of cloudflare_regional_hostname.
Classification: cloudflare.concept.edge-route.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.regional-tiered-cache Source
Matches resource instances of cloudflare_regional_tiered_cache.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.ruleset Source
Matches resource instances of cloudflare_ruleset.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.schema-validation-operation-settings Source
Matches resource instances of cloudflare_schema_validation_operation_settings.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.schema-validation-schemas Source
Matches resource instances of cloudflare_schema_validation_schemas.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.schema-validation-settings Source
Matches resource instances of cloudflare_schema_validation_settings.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.secrets-store-secret Source
Matches resource instances of cloudflare_secrets_store_secret.
Classification: cloudflare.concept.managed-secret.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.secrets-storethroughsource.store_id.
Conditions, identity and resolution
Context through source.store_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.secrets-store Source
Matches resource instances of cloudflare_secrets_store.
Classification: cloudflare.concept.secrets-store.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.snippet-rules Source
Matches resource instances of cloudflare_snippet_rules.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.snippet Source
Matches resource instances of cloudflare_snippet.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.snippets Source
Matches resource instances of cloudflare_snippets.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.spectrum-application Source
Matches resource instances of cloudflare_spectrum_application.
Classification: cloudflare.concept.spectrum-application.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.sso-connector Source
Matches resource instances of cloudflare_sso_connector.
Classification: cloudflare.concept.identity-provider.
cloudflare.rule.tiered-cache Source
Matches resource instances of cloudflare_tiered_cache.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.token-validation-config Source
Matches resource instances of cloudflare_token_validation_config.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.total-tls Source
Matches resource instances of cloudflare_total_tls.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.universal-ssl-setting Source
Matches resource instances of cloudflare_universal_ssl_setting.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.url-normalization-settings Source
Matches resource instances of cloudflare_url_normalization_settings.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.user-agent-blocking-rule Source
Matches resource instances of cloudflare_user_agent_blocking_rule.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.waiting-room-event Source
Matches resource instances of cloudflare_waiting_room_event.
Classification: cloudflare.concept.waiting-room-configuration.
Contributions
- targets
cloudflare.concept.waiting-roomthroughsource.waiting_room_id. - targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.waiting_room_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.waiting-room-rules Source
Matches resource instances of cloudflare_waiting_room_rules.
Classification: cloudflare.concept.waiting-room-configuration.
Contributions
- targets
cloudflare.concept.waiting-roomthroughsource.waiting_room_id. - targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.waiting_room_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.waiting-room-settings Source
Matches resource instances of cloudflare_waiting_room_settings.
Classification: cloudflare.concept.waiting-room-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.waiting-room Source
Matches resource instances of cloudflare_waiting_room.
Classification: cloudflare.concept.waiting-room.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.web-analytics-rule Source
Matches resource instances of cloudflare_web_analytics_rule.
Classification: cloudflare.concept.observability-configuration.
cloudflare.rule.web3-hostname Source
Matches resource instances of cloudflare_web3_hostname.
Classification: cloudflare.concept.web3-hostname.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.worker-version Source
Matches resource instances of cloudflare_worker_version.
Classification: cloudflare.concept.worker-version.
Contributions
- targets
cloudflare.concept.serverless-functionthroughsource.worker_id. - targets
rf.concept.object-storage-containerthroughsource.bindings[0].bucket_name. - targets
rf.concept.managed-databasethroughsource.bindings[1].database_id. - targets
cloudflare.concept.message-queuethroughsource.bindings[2].queue_name. - targets
cloudflare.concept.workers-kv-namespacethroughsource.bindings[3].namespace_id.
Conditions, identity and resolution
Contribution through source.worker_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Contribution through source.bindings[0].bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
Contribution through source.bindings[1].database_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
Contribution through source.bindings[2].queue_name
on_null:"absent"on_empty:"absent"match.by:target.queue_namematch.strategy:"exact"
Contribution through source.bindings[3].namespace_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.worker Source
Matches resource instances of cloudflare_worker.
Classification: cloudflare.concept.serverless-function.
Conditions, identity and resolution
Identity
attributes:["id", "name"]scope:"provider"
Endpoint
attributes:["id", "name"]
cloudflare.rule.workers-cron-trigger Source
Matches resource instances of cloudflare_workers_cron_trigger.
Classification: cloudflare.concept.worker-route.
Contributions
- targets
cloudflare.concept.serverless-functionthroughsource.script_name.
Conditions, identity and resolution
Contribution through source.script_name
on_null:"absent"on_empty:"absent"match.by:target.namematch.strategy:"exact"
cloudflare.rule.workers-custom-domain Source
Matches resource instances of cloudflare_workers_custom_domain.
Classification: cloudflare.concept.edge-route.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Relations
cloudflare.relation.routes-to: targetscloudflare.concept.serverless-functionthroughsource.service.
Conditions, identity and resolution
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
Relation through source.service
on_null:"absent"on_empty:"absent"match.by:target.namematch.strategy:"exact"
cloudflare.rule.workers-deployment Source
Matches resource instances of cloudflare_workers_deployment.
Classification: cloudflare.concept.worker-deployment.
Contributions
- targets
cloudflare.concept.serverless-functionthroughsource.script_name.
Conditions, identity and resolution
Contribution through source.script_name
on_null:"absent"on_empty:"absent"match.by:target.namematch.strategy:"exact"
cloudflare.rule.workers-kv-namespace Source
Matches resource instances of cloudflare_workers_kv_namespace.
Classification: cloudflare.concept.workers-kv-namespace.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.workers-kv Source
Matches resource instances of cloudflare_workers_kv.
Classification: cloudflare.concept.workers-kv-entry.
Contributions
- targets
cloudflare.concept.workers-kv-namespacethroughsource.namespace_id.
Conditions, identity and resolution
Contribution through source.namespace_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.workers-route Source
Matches resource instances of cloudflare_workers_route.
Classification: cloudflare.concept.worker-route.
Contexts
cloudflare.context.ownership: targetscloudflare.concept.dns-zonethroughsource.zone_id.
Contributions
- targets
cloudflare.concept.serverless-functionthroughsource.script.
Conditions, identity and resolution
Contribution through source.script
on_null:"absent"on_empty:"absent"match.by:target.namematch.strategy:"exact"
Context through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.workers-script-subdomain Source
Matches resource instances of cloudflare_workers_script_subdomain.
Classification: cloudflare.concept.worker-route.
Contributions
- targets
cloudflare.concept.serverless-functionthroughsource.script_name.
Conditions, identity and resolution
Contribution through source.script_name
on_null:"absent"on_empty:"absent"match.by:target.namematch.strategy:"exact"
cloudflare.rule.workers-script Source
Matches resource instances of cloudflare_workers_script.
Classification: cloudflare.concept.serverless-function.
Relations
cloudflare.relation.uses: targetsrf.concept.object-storage-containerthroughsource.bindings[0].bucket_name.cloudflare.relation.uses: targetsrf.concept.managed-databasethroughsource.bindings[1].database_id.cloudflare.relation.publishes-to: targetscloudflare.concept.message-queuethroughsource.bindings[2].queue_name.cloudflare.relation.uses: targetscloudflare.concept.workers-kv-namespacethroughsource.bindings[3].namespace_id.cloudflare.relation.uses: targetsrf.concept.object-storage-containerthroughsource.bindings[4].bucket_name.cloudflare.relation.uses: targetsrf.concept.managed-databasethroughsource.bindings[5].database_id.cloudflare.relation.publishes-to: targetscloudflare.concept.message-queuethroughsource.bindings[6].queue_name.cloudflare.relation.uses: targetscloudflare.concept.workers-kv-namespacethroughsource.bindings[7].namespace_id.
Conditions, identity and resolution
Identity
attributes:["id", "script_name"]scope:"provider"
Endpoint
attributes:["id", "script_name"]
Relation through source.bindings[0].bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
Relation through source.bindings[1].database_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
Relation through source.bindings[2].queue_name
on_null:"absent"on_empty:"absent"match.by:target.queue_namematch.strategy:"exact"
Relation through source.bindings[3].namespace_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Relation through source.bindings[4].bucket_name
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.namematch.strategy:"exact"
Relation through source.bindings[5].database_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
Relation through source.bindings[6].queue_name
on_null:"absent"on_empty:"absent"match.by:target.queue_namematch.strategy:"exact"
Relation through source.bindings[7].namespace_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.access-ai-controls-mcp-portal Source
Matches resource instances of cloudflare_zero_trust_access_ai_controls_mcp_portal.
Classification: cloudflare.concept.ai-controls-endpoint.
cloudflare.rule.access-ai-controls-mcp-server Source
Matches resource instances of cloudflare_zero_trust_access_ai_controls_mcp_server.
Classification: cloudflare.concept.ai-controls-endpoint.
cloudflare.rule.access-application Source
Matches resource instances of cloudflare_zero_trust_access_application.
Classification: cloudflare.concept.access-application.
Relations
cloudflare.relation.protects: targetscloudflare.concept.serverless-functionthroughsource.destinations[0].worker_id.cloudflare.relation.protects: targetscloudflare.concept.serverless-functionthroughsource.destinations[1].worker_id.cloudflare.relation.protects: targetscloudflare.concept.serverless-functionthroughsource.destinations[2].worker_id.cloudflare.relation.protects: targetscloudflare.concept.serverless-functionthroughsource.destinations[3].worker_id.
Conditions, identity and resolution
Relation through source.destinations[0].worker_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Relation through source.destinations[1].worker_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Relation through source.destinations[2].worker_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Relation through source.destinations[3].worker_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.access-identity-provider Source
Matches resource instances of cloudflare_zero_trust_access_identity_provider.
Classification: cloudflare.concept.identity-provider.
cloudflare.rule.access-service-token Source
Matches resource instances of cloudflare_zero_trust_access_service_token.
Classification: rf.concept.service-identity.
cloudflare.rule.device-custom-profile Source
Matches resource instances of cloudflare_zero_trust_device_custom_profile.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.device-default-profile Source
Matches resource instances of cloudflare_zero_trust_device_default_profile.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.device-deployment-group Source
Matches resource instances of cloudflare_zero_trust_device_deployment_groups.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.device-ip-profile Source
Matches resource instances of cloudflare_zero_trust_device_ip_profile.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.device-managed-network Source
Matches resource instances of cloudflare_zero_trust_device_managed_networks.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.device-posture-integration Source
Matches resource instances of cloudflare_zero_trust_device_posture_integration.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.device-posture-rule Source
Matches resource instances of cloudflare_zero_trust_device_posture_rule.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.device-settings Source
Matches resource instances of cloudflare_zero_trust_device_settings.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.device-subnet Source
Matches resource instances of cloudflare_zero_trust_device_subnet.
Classification: cloudflare.concept.device-posture-configuration.
cloudflare.rule.dex-rule Source
Matches resource instances of cloudflare_zero_trust_dex_rule.
Classification: cloudflare.concept.observability-configuration.
cloudflare.rule.dex-test Source
Matches resource instances of cloudflare_zero_trust_dex_test.
Classification: cloudflare.concept.network-monitor.
cloudflare.rule.dlp-custom-profile Source
Matches resource instances of cloudflare_zero_trust_dlp_custom_profile.
Classification: cloudflare.concept.data-loss-prevention-configuration.
cloudflare.rule.dlp-dataset Source
Matches resource instances of cloudflare_zero_trust_dlp_dataset.
Classification: cloudflare.concept.data-loss-prevention-configuration.
cloudflare.rule.dlp-integration-entry Source
Matches resource instances of cloudflare_zero_trust_dlp_integration_entry.
Classification: cloudflare.concept.data-loss-prevention-configuration.
cloudflare.rule.dlp-predefined-profile Source
Matches resource instances of cloudflare_zero_trust_dlp_predefined_profile.
Classification: cloudflare.concept.data-loss-prevention-configuration.
cloudflare.rule.dlp-settings Source
Matches resource instances of cloudflare_zero_trust_dlp_settings.
Classification: cloudflare.concept.data-loss-prevention-configuration.
cloudflare.rule.gateway-logging Source
Matches resource instances of cloudflare_zero_trust_gateway_logging.
Classification: cloudflare.concept.gateway-configuration.
cloudflare.rule.gateway-settings Source
Matches resource instances of cloudflare_zero_trust_gateway_settings.
Classification: cloudflare.concept.gateway-configuration.
cloudflare.rule.cloudflare-tunnel-hostname-route Source
Matches resource instances of cloudflare_zero_trust_network_hostname_route.
Classification: cloudflare.concept.tunnel-configuration.
Contributions
- targets
cloudflare.concept.cloudflare-tunnelthroughsource.tunnel_id.
Conditions, identity and resolution
Contribution through source.tunnel_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.risk-scoring-integration Source
Matches resource instances of cloudflare_zero_trust_risk_scoring_integration.
Classification: cloudflare.concept.gateway-configuration.
cloudflare.rule.cloudflare-tunnel-config Source
Matches resource instances of cloudflare_zero_trust_tunnel_cloudflared_config.
Classification: cloudflare.concept.tunnel-configuration.
Contributions
- targets
cloudflare.concept.cloudflare-tunnelthroughsource.tunnel_id.
Conditions, identity and resolution
Contribution through source.tunnel_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.cloudflare-tunnel-route Source
Matches resource instances of cloudflare_zero_trust_tunnel_cloudflared_route.
Classification: cloudflare.concept.tunnel-configuration.
Contexts
rf.context.network: targetsrf.concept.virtual-networkthroughsource.network.
Contributions
- targets
cloudflare.concept.cloudflare-tunnelthroughsource.tunnel_id.
Conditions, identity and resolution
Contribution through source.tunnel_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
Context through source.network
on_null:"absent"on_empty:"absent"
cloudflare.rule.cloudflare-tunnel Source
Matches resource instances of cloudflare_zero_trust_tunnel_cloudflared.
Classification: cloudflare.concept.cloudflare-tunnel.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.warp-connector-config Source
Matches resource instances of cloudflare_zero_trust_tunnel_warp_connector_config.
Classification: cloudflare.concept.tunnel-configuration.
Contributions
- targets
cloudflare.concept.warp-connectorthroughsource.tunnel_id.
Conditions, identity and resolution
Contribution through source.tunnel_id
on_null:"absent"on_empty:"absent"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.warp-connector Source
Matches resource instances of cloudflare_zero_trust_tunnel_warp_connector.
Classification: cloudflare.concept.warp-connector.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]
cloudflare.rule.zone-auto-origin-tls-kex Source
Matches resource instances of cloudflare_zone_auto_origin_tls_kex.
Classification: cloudflare.concept.tls-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.zone-cache-reserve Source
Matches resource instances of cloudflare_zone_cache_reserve.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.zone-cache-variants Source
Matches resource instances of cloudflare_zone_cache_variants.
Classification: cloudflare.concept.edge-delivery-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.zone-dns-settings Source
Matches resource instances of cloudflare_zone_dns_settings.
Classification: cloudflare.concept.zone-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.zone-dnssec Source
Matches resource instances of cloudflare_zone_dnssec.
Classification: cloudflare.concept.zone-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.zone-hold Source
Matches resource instances of cloudflare_zone_hold.
Classification: cloudflare.concept.zone-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.zone-lockdown Source
Matches resource instances of cloudflare_zone_lockdown.
Classification: cloudflare.concept.edge-security-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.zone-setting Source
Matches resource instances of cloudflare_zone_setting.
Classification: cloudflare.concept.zone-configuration.
Contributions
- targets
cloudflare.concept.dns-zonethroughsource.zone_id.
Conditions, identity and resolution
Contribution through source.zone_id
on_null:"absent"on_empty:"absent"external:"allow"match.by:target.idmatch.strategy:"exact"
cloudflare.rule.zone Source
Matches resource instances of cloudflare_zone.
Classification: cloudflare.concept.dns-zone.
Conditions, identity and resolution
Identity
attributes:["id"]scope:"provider"
Endpoint
attributes:["id"]