DLP

DLPDatasets

resource cloudflare_zero_trust_dlp_dataset

required Expand Collapse

account_id: String

optional Expand Collapse

dataset_id?: String

encoding_version?: Int64

Dataset encoding version

Non-secret custom word lists with no header are always version 1. Secret EDM lists with no header are version 1. Multicolumn CSV with headers are version 2. Omitting this field provides the default value 0, which is interpreted the same as 1.

secret?: Bool

Generate a secret dataset.

If true, the response will include a secret to use with the EDM encoder. If false, the response has no secret and the dataset is uploaded in plaintext.

case_sensitive?: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true or undefined

description?: String

The description of the dataset.

computed Expand Collapse

created_at: Time

id: String

max_cells: Int64

num_cells: Int64

status: String

updated_at: Time

Stores when the dataset was last updated.

This includes name or description changes as well as uploads.

version: Int64

The version to use when uploading the dataset.

columns: List[Attributes]

entry_id: String

header_name: String

num_cells: Int64

upload_status: String

dataset: Attributes

id: String

columns: List[Attributes]

entry_id: String

header_name: String

num_cells: Int64

upload_status: String

created_at: Time

encoding_version: Int64

num_cells: Int64

secret: Bool

status: String

updated_at: Time

Stores when the dataset was last updated.

This includes name or description changes as well as uploads.

uploads: List[Attributes]

num_cells: Int64

status: String

version: Int64

case_sensitive: Bool

description: String

The description of the dataset.

uploads: List[Attributes]

num_cells: Int64

status: String

version: Int64

cloudflare_zero_trust_dlp_dataset

resource "cloudflare_zero_trust_dlp_dataset" "example_zero_trust_dlp_dataset" {
  account_id = "account_id"
  name = "name"
  case_sensitive = true
  description = "description"
  encoding_version = 0
  secret = true
}

data cloudflare_zero_trust_dlp_dataset

required Expand Collapse

account_id: String

dataset_id: String

computed Expand Collapse

case_sensitive: Bool

created_at: Time

description: String

The description of the dataset.

encoding_version: Int64

id: String

num_cells: Int64

secret: Bool

status: String

updated_at: Time

Stores when the dataset was last updated.

This includes name or description changes as well as uploads.

columns: List[Attributes]

entry_id: String

header_name: String

num_cells: Int64

upload_status: String

uploads: List[Attributes]

num_cells: Int64

status: String

version: Int64

cloudflare_zero_trust_dlp_dataset

data "cloudflare_zero_trust_dlp_dataset" "example_zero_trust_dlp_dataset" {
  account_id = "account_id"
  dataset_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_datasets

required Expand Collapse

account_id: String

optional Expand Collapse

max_items?: Int64

Max items to fetch, default: 1000

computed Expand Collapse

result: List[Attributes]

The items returned by the data source

id: String

columns: List[Attributes]

entry_id: String

header_name: String

num_cells: Int64

upload_status: String

created_at: Time

encoding_version: Int64

num_cells: Int64

secret: Bool

status: String

updated_at: Time

Stores when the dataset was last updated.

This includes name or description changes as well as uploads.

uploads: List[Attributes]

num_cells: Int64

status: String

version: Int64

case_sensitive: Bool

description: String

The description of the dataset.

cloudflare_zero_trust_dlp_datasets

data "cloudflare_zero_trust_dlp_datasets" "example_zero_trust_dlp_datasets" {
  account_id = "account_id"
}

DLPProfilesCustom

resource cloudflare_zero_trust_dlp_custom_profile

required Expand Collapse

account_id: String

optional Expand Collapse

description?: String

The description of the profile.

data_classes?: List[String]

Data class IDs to associate with the profile.

data_tags?: List[String]

Data tag IDs to associate with the profile.

sensitivity_levels?: List[List[String]]

Sensitivity levels to associate with the profile as (group_id, level_id) tuples.

Deprecatedcontext_awareness?: Attributes

Scan the context of predefined entries to only return matches surrounded by keywords.

enabled: Bool

If true, scan the context of predefined entries to only return matches surrounded by keywords.

skip: Attributes

Content types to exclude from context analysis and return all matches.

files: Bool

If the content type is a file, skip context analysis and return all matches.

entries?: List[Attributes]

enabled: Bool

pattern?: Attributes

regex: String

Deprecatedvalidation?: String

description?: String

words?: List[String]

shared_entries?: List[Attributes]

Entries from other profiles (e.g. pre-defined Cloudflare profiles, or your Microsoft Information Protection profiles).

enabled: Bool

entry_id: String

ai_context_enabled?: Bool

allowed_match_count?: Int64

Related DLP policies will trigger when the match count exceeds the number set.

confidence_threshold?: String

ocr_enabled?: Bool

computed Expand Collapse

id: String

The id of the profile (uuid).

created_at: Time

When the profile was created.

open_access: Bool

Whether this profile can be accessed by anyone.

type: String

updated_at: Time

When the profile was lasted updated.

cloudflare_zero_trust_dlp_custom_profile

resource "cloudflare_zero_trust_dlp_custom_profile" "example_zero_trust_dlp_custom_profile" {
  account_id = "account_id"
  name = "name"
  ai_context_enabled = true
  allowed_match_count = 5
  confidence_threshold = "confidence_threshold"
  context_awareness = {
    enabled = true
    skip = {
      files = true
    }
  }
  data_classes = ["182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"]
  data_tags = ["182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"]
  description = "description"
  ocr_enabled = true
  sensitivity_levels = [["182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"]]
  shared_entries = [{
    enabled = true
    entry_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
  }]
}

data cloudflare_zero_trust_dlp_custom_profile

required Expand Collapse

profile_id: String

account_id: String

computed Expand Collapse

id: String

ai_context_enabled: Bool

allowed_match_count: Int64

Related DLP policies will trigger when the match count exceeds the number set.

confidence_threshold: String

created_at: Time

When the profile was created.

description: String

The description of the profile.

The name of the profile.

ocr_enabled: Bool

open_access: Bool

Whether this profile can be accessed by anyone.

type: String

updated_at: Time

When the profile was lasted updated.

data_classes: List[String]

Data classes associated with this profile.

data_tags: List[String]

Data tags associated with this profile.

sensitivity_levels: List[List[String]]

Sensitivity levels associated with this profile as (group_id, level_id) tuples.

Deprecatedcontext_awareness: Attributes

Scan the context of predefined entries to only return matches surrounded by keywords.

enabled: Bool

If true, scan the context of predefined entries to only return matches surrounded by keywords.

skip: Attributes

Content types to exclude from context analysis and return all matches.

files: Bool

If the content type is a file, skip context analysis and return all matches.

Deprecatedentries: List[Attributes]

id: String

created_at: Time

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation: String

type: String

updated_at: Time

description: String

profile_id: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

variant: Attributes

topic_type: String

type: String

description: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

secret: Bool

word_list: JSON

shared_entries: List[Attributes]

id: String

created_at: Time

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation: String

type: String

updated_at: Time

description: String

profile_id: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

variant: Attributes

topic_type: String

type: String

description: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

secret: Bool

word_list: JSON

cloudflare_zero_trust_dlp_custom_profile

data "cloudflare_zero_trust_dlp_custom_profile" "example_zero_trust_dlp_custom_profile" {
  account_id = "account_id"
  profile_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

DLPProfilesPredefined

resource cloudflare_zero_trust_dlp_predefined_profile

required Expand Collapse

profile_id: String

account_id: String

optional Expand Collapse

enabled_entries?: List[String]

ai_context_enabled?: Bool

allowed_match_count?: Int64

confidence_threshold?: String

ocr_enabled?: Bool

Deprecatedentries?: List[Attributes]

id: String

enabled: Bool

computed Expand Collapse

id: String

The name of the predefined profile.

open_access: Bool

Whether this profile can be accessed by anyone.

cloudflare_zero_trust_dlp_predefined_profile

resource "cloudflare_zero_trust_dlp_predefined_profile" "example_zero_trust_dlp_predefined_profile" {
  account_id = "account_id"
  profile_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
  ai_context_enabled = true
  allowed_match_count = 5
  confidence_threshold = "confidence_threshold"
  enabled_entries = ["182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"]
  entries = [{
    id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
    enabled = true
  }]
  ocr_enabled = true
}

data cloudflare_zero_trust_dlp_predefined_profile

required Expand Collapse

profile_id: String

account_id: String

computed Expand Collapse

id: String

ai_context_enabled: Bool

allowed_match_count: Int64

confidence_threshold: String

The name of the predefined profile.

ocr_enabled: Bool

open_access: Bool

Whether this profile can be accessed by anyone.

enabled_entries: List[String]

Entries to enable for this predefined profile. Any entries not provided will be disabled.

Deprecatedentries: List[Attributes]

This field has been deprecated for enabled_entries.

id: String

created_at: Time

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation: String

type: String

updated_at: Time

description: String

profile_id: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

variant: Attributes

topic_type: String

type: String

description: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

secret: Bool

word_list: JSON

cloudflare_zero_trust_dlp_predefined_profile

data "cloudflare_zero_trust_dlp_predefined_profile" "example_zero_trust_dlp_predefined_profile" {
  account_id = "account_id"
  profile_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

DLPEntries

resource cloudflare_zero_trust_dlp_entry

required Expand Collapse

account_id: String

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation?: String

optional Expand Collapse

profile_id?: String

description?: String

type?: String

computed Expand Collapse

id: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

created_at: Time

secret: Bool

updated_at: Time

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

profiles: List[Attributes]

id: String

variant: Attributes

topic_type: String

type: String

description: String

word_list: JSON

cloudflare_zero_trust_dlp_entry

resource "cloudflare_zero_trust_dlp_entry" "example_zero_trust_dlp_entry" {
  account_id = "account_id"
  enabled = true
  name = "name"
  pattern = {
    regex = "regex"
    validation = "luhn"
  }
  description = "description"
  profile_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_entry

required Expand Collapse

entry_id: String

account_id: String

computed Expand Collapse

id: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

created_at: Time

description: String

enabled: Bool

profile_id: String

secret: Bool

type: String

updated_at: Time

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

pattern: Attributes

regex: String

Deprecatedvalidation: String

profiles: List[Attributes]

id: String

variant: Attributes

topic_type: String

type: String

description: String

word_list: JSON

cloudflare_zero_trust_dlp_entry

data "cloudflare_zero_trust_dlp_entry" "example_zero_trust_dlp_entry" {
  account_id = "account_id"
  entry_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_entries

required Expand Collapse

account_id: String

optional Expand Collapse

max_items?: Int64

Max items to fetch, default: 1000

computed Expand Collapse

result: List[Attributes]

The items returned by the data source

id: String

created_at: Time

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation: String

type: String

updated_at: Time

description: String

profile_id: String

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

variant: Attributes

topic_type: String

type: String

description: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

secret: Bool

word_list: JSON

cloudflare_zero_trust_dlp_entries

data "cloudflare_zero_trust_dlp_entries" "example_zero_trust_dlp_entries" {
  account_id = "account_id"
}

DLPEntriesCustom

resource cloudflare_zero_trust_dlp_custom_entry

required Expand Collapse

account_id: String

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation?: String

optional Expand Collapse

profile_id?: String

description?: String

computed Expand Collapse

id: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

created_at: Time

secret: Bool

type: String

updated_at: Time

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

profiles: List[Attributes]

id: String

variant: Attributes

topic_type: String

type: String

description: String

word_list: JSON

cloudflare_zero_trust_dlp_custom_entry

resource "cloudflare_zero_trust_dlp_custom_entry" "example_zero_trust_dlp_custom_entry" {
  account_id = "account_id"
  enabled = true
  name = "name"
  pattern = {
    regex = "regex"
    validation = "luhn"
  }
  description = "description"
  profile_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_custom_entry

required Expand Collapse

entry_id: String

account_id: String

computed Expand Collapse

id: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

created_at: Time

description: String

enabled: Bool

profile_id: String

secret: Bool

type: String

updated_at: Time

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

pattern: Attributes

regex: String

Deprecatedvalidation: String

profiles: List[Attributes]

id: String

variant: Attributes

topic_type: String

type: String

description: String

word_list: JSON

cloudflare_zero_trust_dlp_custom_entry

data "cloudflare_zero_trust_dlp_custom_entry" "example_zero_trust_dlp_custom_entry" {
  account_id = "account_id"
  entry_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_custom_entries

required Expand Collapse

account_id: String

optional Expand Collapse

max_items?: Int64

Max items to fetch, default: 1000

computed Expand Collapse

result: List[Attributes]

The items returned by the data source

id: String

created_at: Time

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation: String

type: String

updated_at: Time

description: String

profile_id: String

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

variant: Attributes

topic_type: String

type: String

description: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

secret: Bool

word_list: JSON

cloudflare_zero_trust_dlp_custom_entries

data "cloudflare_zero_trust_dlp_custom_entries" "example_zero_trust_dlp_custom_entries" {
  account_id = "account_id"
}

DLPEntriesPredefined

resource cloudflare_zero_trust_dlp_predefined_entry

required Expand Collapse

account_id: String

entry_id: String

enabled: Bool

optional Expand Collapse

profile_id?: String

This field is not used as the owning profile. For predefined entries it is already set to a predefined profile.

computed Expand Collapse

id: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

created_at: Time

description: String

secret: Bool

type: String

updated_at: Time

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

pattern: Attributes

regex: String

Deprecatedvalidation: String

profiles: List[Attributes]

id: String

variant: Attributes

topic_type: String

type: String

description: String

word_list: JSON

cloudflare_zero_trust_dlp_predefined_entry

resource "cloudflare_zero_trust_dlp_predefined_entry" "example_zero_trust_dlp_predefined_entry" {
  account_id = "account_id"
  enabled = true
  entry_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
  profile_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_predefined_entry

required Expand Collapse

entry_id: String

account_id: String

computed Expand Collapse

id: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

created_at: Time

description: String

enabled: Bool

profile_id: String

secret: Bool

type: String

updated_at: Time

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

pattern: Attributes

regex: String

Deprecatedvalidation: String

profiles: List[Attributes]

id: String

variant: Attributes

topic_type: String

type: String

description: String

word_list: JSON

cloudflare_zero_trust_dlp_predefined_entry

data "cloudflare_zero_trust_dlp_predefined_entry" "example_zero_trust_dlp_predefined_entry" {
  account_id = "account_id"
  entry_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_predefined_entries

required Expand Collapse

account_id: String

optional Expand Collapse

max_items?: Int64

Max items to fetch, default: 1000

computed Expand Collapse

result: List[Attributes]

The items returned by the data source

id: String

created_at: Time

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation: String

type: String

updated_at: Time

description: String

profile_id: String

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

variant: Attributes

topic_type: String

type: String

description: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

secret: Bool

word_list: JSON

cloudflare_zero_trust_dlp_predefined_entries

data "cloudflare_zero_trust_dlp_predefined_entries" "example_zero_trust_dlp_predefined_entries" {
  account_id = "account_id"
}

DLPEntriesIntegration

resource cloudflare_zero_trust_dlp_integration_entry

required Expand Collapse

account_id: String

entry_id: String

enabled: Bool

optional Expand Collapse

profile_id?: String

This field is not used as the owning profile. For predefined entries it is already set to a predefined profile.

computed Expand Collapse

id: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

created_at: Time

description: String

secret: Bool

type: String

updated_at: Time

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

pattern: Attributes

regex: String

Deprecatedvalidation: String

profiles: List[Attributes]

id: String

variant: Attributes

topic_type: String

type: String

description: String

word_list: JSON

cloudflare_zero_trust_dlp_integration_entry

resource "cloudflare_zero_trust_dlp_integration_entry" "example_zero_trust_dlp_integration_entry" {
  account_id = "account_id"
  enabled = true
  entry_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
  profile_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_integration_entry

required Expand Collapse

entry_id: String

account_id: String

computed Expand Collapse

id: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

created_at: Time

description: String

enabled: Bool

profile_id: String

secret: Bool

type: String

updated_at: Time

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

pattern: Attributes

regex: String

Deprecatedvalidation: String

profiles: List[Attributes]

id: String

variant: Attributes

topic_type: String

type: String

description: String

word_list: JSON

cloudflare_zero_trust_dlp_integration_entry

data "cloudflare_zero_trust_dlp_integration_entry" "example_zero_trust_dlp_integration_entry" {
  account_id = "account_id"
  entry_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
}

data cloudflare_zero_trust_dlp_integration_entries

required Expand Collapse

account_id: String

optional Expand Collapse

max_items?: Int64

Max items to fetch, default: 1000

computed Expand Collapse

result: List[Attributes]

The items returned by the data source

id: String

created_at: Time

enabled: Bool

pattern: Attributes

regex: String

Deprecatedvalidation: String

type: String

updated_at: Time

description: String

profile_id: String

upload_status: String

confidence: Attributes

ai_context_available: Bool

Indicates whether this entry has AI remote service validation.

available: Bool

Indicates whether this entry has any form of validation that is not an AI remote service.

variant: Attributes

topic_type: String

type: String

description: String

case_sensitive: Bool

Only applies to custom word lists. Determines if the words should be matched in a case-sensitive manner Cannot be set to false if secret is true

secret: Bool

word_list: JSON

cloudflare_zero_trust_dlp_integration_entries

data "cloudflare_zero_trust_dlp_integration_entries" "example_zero_trust_dlp_integration_entries" {
  account_id = "account_id"
}