Skip to content
Cloudflare API
Start here
API Reference
Cloudforce One
Threat Events
Tags

Creates a new tag

cloudforce_one.threat_events.tags.create(TagCreateParams**kwargs) -> TagCreateResponse
POST/accounts/{account_id}/cloudforce-one/events/tags/create

Creates a new tag to be used accross threat events.

Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example:Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
Accepted Permissions (at least one required)
Cloudforce One WriteCloudforce One Read
ParametersExpand Collapse
account_id: str

Account ID.

value: str
active_duration: Optional[str]
actor_category: Optional[str]
alias_group_names: Optional[Sequence[str]]
alias_group_names_internal: Optional[Sequence[str]]
analytic_priority: Optional[float]
attribution_confidence: Optional[str]
attribution_organization: Optional[str]
category_uuid: Optional[str]
internal_description: Optional[str]
motive: Optional[str]
opsec_level: Optional[str]
origin_country_iso: Optional[str]
priority: Optional[float]
sophistication_level: Optional[str]
ReturnsExpand Collapse
class TagCreateResponse: …
uuid: str
value: str
active_duration: Optional[str]
actor_category: Optional[str]
alias_group_names: Optional[List[str]]
alias_group_names_internal: Optional[List[str]]
analytic_priority: Optional[float]
attribution_confidence: Optional[str]
attribution_organization: Optional[str]
category_name: Optional[str]
category_uuid: Optional[str]
internal_description: Optional[str]
motive: Optional[str]
opsec_level: Optional[str]
origin_country_iso: Optional[str]
priority: Optional[float]
sophistication_level: Optional[str]

Creates a new tag

import os
from cloudflare import Cloudflare

client = Cloudflare(
    api_token=os.environ.get("CLOUDFLARE_API_TOKEN"),  # This is the default and can be omitted
)
tag = client.cloudforce_one.threat_events.tags.create(
    account_id="account_id",
    value="APT28",
)
print(tag.uuid)
{
  "uuid": "12345678-1234-1234-1234-1234567890ab",
  "value": "APT28",
  "activeDuration": "activeDuration",
  "actorCategory": "actorCategory",
  "aliasGroupNames": [
    "string"
  ],
  "aliasGroupNamesInternal": [
    "string"
  ],
  "analyticPriority": 0,
  "attributionConfidence": "attributionConfidence",
  "attributionOrganization": "attributionOrganization",
  "categoryName": "Nation State",
  "categoryUuid": "12345678-1234-1234-1234-1234567890ab",
  "externalReferenceLinks": [
    "string"
  ],
  "internalDescription": "internalDescription",
  "motive": "motive",
  "opsecLevel": "opsecLevel",
  "originCountryISO": "originCountryISO",
  "priority": 0,
  "sophisticationLevel": "sophisticationLevel"
}
Returns Examples
{
  "uuid": "12345678-1234-1234-1234-1234567890ab",
  "value": "APT28",
  "activeDuration": "activeDuration",
  "actorCategory": "actorCategory",
  "aliasGroupNames": [
    "string"
  ],
  "aliasGroupNamesInternal": [
    "string"
  ],
  "analyticPriority": 0,
  "attributionConfidence": "attributionConfidence",
  "attributionOrganization": "attributionOrganization",
  "categoryName": "Nation State",
  "categoryUuid": "12345678-1234-1234-1234-1234567890ab",
  "externalReferenceLinks": [
    "string"
  ],
  "internalDescription": "internalDescription",
  "motive": "motive",
  "opsecLevel": "opsecLevel",
  "originCountryISO": "originCountryISO",
  "priority": 0,
  "sophisticationLevel": "sophisticationLevel"
}