--- title: Casb --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [Zero Trust](https://developers.cloudflare.com/api/python/resources/zero_trust) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Casb #### CasbApplications ##### [List applications](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/applications/methods/list) zero\_trust.casb.applications.list(ApplicationListParams\*\*kwargs) -> SyncSinglePage\[[ApplicationListResponse]()] GET/accounts/{account\_id}/one/applications ##### [Get application details](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/applications/methods/get) zero\_trust.casb.applications.get(Literal\["ANTHROPIC", "AWS", "BITBUCKET", 12 more]application\_id, ApplicationGetParams\*\*kwargs) -> [ApplicationGetResponse]() GET/accounts/{account\_id}/one/applications/{application\_id} ##### ModelsExpand Collapse
class ApplicationListResponse: … Application item in list response.
id: Literal\["ANTHROPIC", "AWS", "BITBUCKET", 12 more] Vendor identifier (e.g. microsoft\_internal, google\_workspace). - ANTHROPIC - ANTHROPIC - AWS - AWS - BITBUCKET - BITBUCKET - BOX - BOX - CONFLUENCE - CONFLUENCE - DROPBOX - DROPBOX - GITHUB - GITHUB - GOOGLE_CLOUD_PLATFORM - GOOGLE\_CLOUD\_PLATFORM - GOOGLE_WORKSPACE - GOOGLE\_WORKSPACE - JIRA - JIRA - MICROSOFT_INTERNAL - MICROSOFT\_INTERNAL - OPENAI - OPENAI - SALESFORCE - SALESFORCE - SERVICENOW - SERVICENOW - SLACK - SLACK One of the following: "ANTHROPIC" Link to this property "AWS" Link to this property "BITBUCKET" Link to this property "BOX" Link to this property "CONFLUENCE" Link to this property "DROPBOX" Link to this property "GITHUB" Link to this property "GOOGLE\_CLOUD\_PLATFORM" Link to this property "GOOGLE\_WORKSPACE" Link to this property "JIRA" Link to this property "MICROSOFT\_INTERNAL" Link to this property "OPENAI" Link to this property "SALESFORCE" Link to this property "SERVICENOW" Link to this property "SLACK" Link to this property
Link to this property
auth\_methods: List\[AuthMethod] Available auth methods. id: str Auth method identifier. Link to this property display\_name: str Human-readable auth method name. Link to this property
Link to this property category: str Vendor category (e.g. Productivity, AI). Link to this property description: str Brief description of the integration. Link to this property display\_name: str Human-readable vendor name. Link to this property dlp\_enabled: bool Whether DLP scanning is supported. Link to this property logo: Optional\[str] Logo path. Link to this property
permissions: List\[Permission] All permissions with severity. display\_name: str Human-readable permission name. Link to this property scope: str Vendor-native scope identifier. Link to this property
severity: Literal\["low", "medium", "high", "critical"] Permission sensitivity level. - low - low - medium - medium - high - high - critical - critical One of the following: "low" Link to this property "medium" Link to this property "high" Link to this property "critical" Link to this property
Link to this property
Link to this property supported\_environments: List\[str] Environments this vendor supports (standard, fedramp). Link to this property
use\_cases: List\[UseCase] Supported use cases. id: str Use case identifier (e.g. casb, ces). Link to this property display\_name: str Human-readable use case name. Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.applications%20%3E%20(model)%20application_list_response%20%3E%20(schema)>)
class ApplicationGetResponse: … The requested item.
id: Literal\["ANTHROPIC", "AWS", "BITBUCKET", 12 more] Vendor identifier. - ANTHROPIC - ANTHROPIC - AWS - AWS - BITBUCKET - BITBUCKET - BOX - BOX - CONFLUENCE - CONFLUENCE - DROPBOX - DROPBOX - GITHUB - GITHUB - GOOGLE_CLOUD_PLATFORM - GOOGLE\_CLOUD\_PLATFORM - GOOGLE_WORKSPACE - GOOGLE\_WORKSPACE - JIRA - JIRA - MICROSOFT_INTERNAL - MICROSOFT\_INTERNAL - OPENAI - OPENAI - SALESFORCE - SALESFORCE - SERVICENOW - SERVICENOW - SLACK - SLACK One of the following: "ANTHROPIC" Link to this property "AWS" Link to this property "BITBUCKET" Link to this property "BOX" Link to this property "CONFLUENCE" Link to this property "DROPBOX" Link to this property "GITHUB" Link to this property "GOOGLE\_CLOUD\_PLATFORM" Link to this property "GOOGLE\_WORKSPACE" Link to this property "JIRA" Link to this property "MICROSOFT\_INTERNAL" Link to this property "OPENAI" Link to this property "SALESFORCE" Link to this property "SERVICENOW" Link to this property "SLACK" Link to this property
Link to this property
auth\_methods: List\[AuthMethod] Available authentication methods. id: str Auth method identifier. Link to this property display\_name: str Human-readable auth method name. Link to this property is\_default: bool Whether this is the default auth method. Link to this property supported\_environments: List\[str] Environments this auth method supports. Link to this property
Link to this property category: str Vendor category. Link to this property description: str Brief description. Link to this property display\_name: str Human-readable vendor name. Link to this property dlp\_enabled: bool Whether DLP scanning is supported. Link to this property instructions: Optional\[str] Setup instructions for the user. Link to this property logo: Optional\[str] Logo path. Link to this property
use\_cases: List\[UseCase] Use cases with full scope details. id: str Use case identifier. Link to this property
base\_scopes: List\[UseCaseBaseScope] Scopes always required for this use case. display\_name: str Human-readable permission name. Link to this property scope: str Vendor-native scope identifier. Link to this property
severity: Literal\["low", "medium", "high", "critical"] Permission sensitivity level. - low - low - medium - medium - high - high - critical - critical One of the following: "low" Link to this property "medium" Link to this property "high" Link to this property "critical" Link to this property
Link to this property
Link to this property description: str Use case description. Link to this property display\_name: str Human-readable use case name. Link to this property
features: List\[UseCaseFeature] Optional features with extra scopes. id: str Feature identifier. Link to this property description: str Feature description. Link to this property display\_name: str Human-readable feature name. Link to this property
scopes: List\[UseCaseFeatureScope] Additional scopes when feature is enabled. display\_name: str Human-readable permission name. Link to this property scope: str Vendor-native scope identifier. Link to this property
severity: Literal\["low", "medium", "high", "critical"] Permission sensitivity level. - low - low - medium - medium - high - high - critical - critical One of the following: "low" Link to this property "medium" Link to this property "high" Link to this property "critical" Link to this property
Link to this property
Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.applications%20%3E%20(model)%20application_get_response%20%3E%20(schema)>) #### CasbApplicationsAuth Methods ##### [Get auth methods](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/applications/subresources/auth_methods/methods/list) zero\_trust.casb.applications.auth\_methods.list(Literal\["ANTHROPIC", "AWS", "BITBUCKET", 12 more]application\_id, AuthMethodListParams\*\*kwargs) -> SyncSinglePage\[[AuthMethodListResponse]()] GET/accounts/{account\_id}/one/applications/{application\_id}/auth-methods ##### ModelsExpand Collapse
class AuthMethodListResponse: … Detailed auth method info including credentials schema and instructions. id: str Auth method identifier. Link to this property display\_name: str Human-readable auth method name. Link to this property human\_interaction\_required: bool Whether setup requires human interaction or integration can be created purely using API (e.g., For OAuth can not be created without user interaction). Link to this property
instructions: Instructions Step-by-step instructions for obtaining credentials. markdown: str Detailed instructions in markdown format. Link to this property
Link to this property payload\_example: Optional\[Dict\[str, object]] Example credentials payload with placeholder values. Link to this property payload\_schema: Optional\[Dict\[str, object]] JSON Schema for the credentials object in POST /v2/integrations request. Link to this property redirect\_url: Optional\[str] OAuth redirect URL for vendors requiring human interaction. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.applications.auth_methods%20%3E%20(model)%20auth_method_list_response%20%3E%20(schema)>) #### CasbIntegrations ##### [List integrations](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/integrations/methods/list) zero\_trust.casb.integrations.list(IntegrationListParams\*\*kwargs) -> SyncSinglePage\[[IntegrationListResponse]()] GET/accounts/{account\_id}/one/integrations ##### [Get integration details](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/integrations/methods/get) zero\_trust.casb.integrations.get(strid, IntegrationGetParams\*\*kwargs) -> [IntegrationGetResponse]() GET/accounts/{account\_id}/one/integrations/{id} ##### [Create integration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/integrations/methods/create) zero\_trust.casb.integrations.create(IntegrationCreateParams\*\*kwargs) -> [IntegrationCreateResponse]() POST/accounts/{account\_id}/one/integrations ##### [Update integration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/integrations/methods/update) zero\_trust.casb.integrations.update(strid, IntegrationUpdateParams\*\*kwargs) -> [IntegrationUpdateResponse]() PATCH/accounts/{account\_id}/one/integrations/{id} ##### [Delete integration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/integrations/methods/delete) zero\_trust.casb.integrations.delete(strid, IntegrationDeleteParams\*\*kwargs) DELETE/accounts/{account\_id}/one/integrations/{id} ##### [Pause integration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/integrations/methods/pause) zero\_trust.casb.integrations.pause(strid, IntegrationPauseParams\*\*kwargs) -> [IntegrationPauseResponse]() POST/accounts/{account\_id}/one/integrations/{id}/pause ##### [Resume integration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/integrations/methods/resume) zero\_trust.casb.integrations.resume(strid, IntegrationResumeParams\*\*kwargs) -> [IntegrationResumeResponse]() POST/accounts/{account\_id}/one/integrations/{id}/resume ##### ModelsExpand Collapse
class IntegrationListResponse: … Serializer for v2 integration list responses. id: str Integration ID. formatuuid Link to this property application: Dict\[str, Optional\[str]] Link to this property created: datetime When the integration was created. formatdate-time Link to this property is\_paused: bool Whether the user paused the integration. Link to this property name: str Name of the integration. Link to this property status: str Integration status. Link to this property updated: datetime When the integration was last updated. formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.integrations%20%3E%20(model)%20integration_list_response%20%3E%20(schema)>)
class IntegrationGetResponse: … The requested item. id: str Integration ID. formatuuid Link to this property application: Dict\[str, Optional\[str]] Link to this property auth\_method: Optional\[Dict\[str, str]] The integration’s authentication method. Link to this property
authorization\_link: Optional\[AuthorizationLink] Authorization link for the integration. components: Optional\[Dict\[str, object]] Link to this property link: Optional\[str] Link to this property
Link to this property created: datetime When the integration was created. formatdate-time Link to this property credentials\_expiry: datetime Credentials expiry time. formatdate-time Link to this property dlp\_profiles: List\[str] DLP Profiles enabled for the integration. Link to this property health\_details: List\[Dict\[str, object]] Health details with remediation hints. Link to this property is\_paused: bool Whether the user paused the integration. Link to this property last\_hydrated: datetime Last time the integration was hydrated. formatdate-time Link to this property name: str Name of the integration. Link to this property status: str Integration status. Link to this property updated: datetime When the integration was last updated. formatdate-time Link to this property use\_cases: List\[Dict\[str, object]] Use cases enabled for the integration. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.integrations%20%3E%20(model)%20integration_get_response%20%3E%20(schema)>)
class IntegrationCreateResponse: … The requested item. id: str Integration ID. formatuuid Link to this property application: Dict\[str, Optional\[str]] Link to this property auth\_method: Optional\[Dict\[str, str]] The integration’s authentication method. Link to this property
authorization\_link: Optional\[AuthorizationLink] Authorization link for the integration. components: Optional\[Dict\[str, object]] Link to this property link: Optional\[str] Link to this property
Link to this property created: datetime When the integration was created. formatdate-time Link to this property credentials\_expiry: datetime Credentials expiry time. formatdate-time Link to this property dlp\_profiles: List\[str] DLP Profiles enabled for the integration. Link to this property health\_details: List\[Dict\[str, object]] Health details with remediation hints. Link to this property is\_paused: bool Whether the user paused the integration. Link to this property last\_hydrated: datetime Last time the integration was hydrated. formatdate-time Link to this property name: str Name of the integration. Link to this property status: str Integration status. Link to this property updated: datetime When the integration was last updated. formatdate-time Link to this property use\_cases: List\[Dict\[str, object]] Use cases enabled for the integration. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.integrations%20%3E%20(model)%20integration_create_response%20%3E%20(schema)>)
class IntegrationUpdateResponse: … The requested item. id: str Integration ID. formatuuid Link to this property application: Dict\[str, Optional\[str]] Link to this property auth\_method: Optional\[Dict\[str, str]] The integration’s authentication method. Link to this property
authorization\_link: Optional\[AuthorizationLink] Authorization link for the integration. components: Optional\[Dict\[str, object]] Link to this property link: Optional\[str] Link to this property
Link to this property created: datetime When the integration was created. formatdate-time Link to this property credentials\_expiry: datetime Credentials expiry time. formatdate-time Link to this property dlp\_profiles: List\[str] DLP Profiles enabled for the integration. Link to this property health\_details: List\[Dict\[str, object]] Health details with remediation hints. Link to this property is\_paused: bool Whether the user paused the integration. Link to this property last\_hydrated: datetime Last time the integration was hydrated. formatdate-time Link to this property name: str Name of the integration. Link to this property status: str Integration status. Link to this property updated: datetime When the integration was last updated. formatdate-time Link to this property use\_cases: List\[Dict\[str, object]] Use cases enabled for the integration. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.integrations%20%3E%20(model)%20integration_update_response%20%3E%20(schema)>)
class IntegrationPauseResponse: … The requested item. id: str Integration ID. formatuuid Link to this property application: Dict\[str, Optional\[str]] Link to this property auth\_method: Optional\[Dict\[str, str]] The integration’s authentication method. Link to this property
authorization\_link: Optional\[AuthorizationLink] Authorization link for the integration. components: Optional\[Dict\[str, object]] Link to this property link: Optional\[str] Link to this property
Link to this property created: datetime When the integration was created. formatdate-time Link to this property credentials\_expiry: datetime Credentials expiry time. formatdate-time Link to this property dlp\_profiles: List\[str] DLP Profiles enabled for the integration. Link to this property health\_details: List\[Dict\[str, object]] Health details with remediation hints. Link to this property is\_paused: bool Whether the user paused the integration. Link to this property last\_hydrated: datetime Last time the integration was hydrated. formatdate-time Link to this property name: str Name of the integration. Link to this property status: str Integration status. Link to this property updated: datetime When the integration was last updated. formatdate-time Link to this property use\_cases: List\[Dict\[str, object]] Use cases enabled for the integration. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.integrations%20%3E%20(model)%20integration_pause_response%20%3E%20(schema)>)
class IntegrationResumeResponse: … The requested item. id: str Integration ID. formatuuid Link to this property application: Dict\[str, Optional\[str]] Link to this property auth\_method: Optional\[Dict\[str, str]] The integration’s authentication method. Link to this property
authorization\_link: Optional\[AuthorizationLink] Authorization link for the integration. components: Optional\[Dict\[str, object]] Link to this property link: Optional\[str] Link to this property
Link to this property created: datetime When the integration was created. formatdate-time Link to this property credentials\_expiry: datetime Credentials expiry time. formatdate-time Link to this property dlp\_profiles: List\[str] DLP Profiles enabled for the integration. Link to this property health\_details: List\[Dict\[str, object]] Health details with remediation hints. Link to this property is\_paused: bool Whether the user paused the integration. Link to this property last\_hydrated: datetime Last time the integration was hydrated. formatdate-time Link to this property name: str Name of the integration. Link to this property status: str Integration status. Link to this property updated: datetime When the integration was last updated. formatdate-time Link to this property use\_cases: List\[Dict\[str, object]] Use cases enabled for the integration. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.integrations%20%3E%20(model)%20integration_resume_response%20%3E%20(schema)>) #### CasbPosture #### CasbPostureFindings ##### [List posture findings](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/methods/list) zero\_trust.casb.posture.findings.list(FindingListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[FindingListResponse]()] GET/accounts/{account\_id}/data-security/posture/findings ##### [Get a posture finding](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/methods/get) zero\_trust.casb.posture.findings.get(strfinding\_id, FindingGetParams\*\*kwargs) -> [FindingGetResponse]() GET/accounts/{account\_id}/data-security/posture/findings/{finding\_id} ##### [Create new findings export request](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/methods/export) zero\_trust.casb.posture.findings.export(FindingExportParams\*\*kwargs) -> [FindingExportResponse]() POST/accounts/{account\_id}/data-security/posture/findings/export ##### [Mark a finding as ignored](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/methods/ignore) zero\_trust.casb.posture.findings.ignore(FindingIgnoreParams\*\*kwargs) -> [FindingIgnoreResponse]() POST/accounts/{account\_id}/data-security/posture/findings/ignore ##### [Remove ignore marker from a finding](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/methods/unignore) zero\_trust.casb.posture.findings.unignore(FindingUnignoreParams\*\*kwargs) -> [FindingUnignoreResponse]() POST/accounts/{account\_id}/data-security/posture/findings/unignore ##### [Update the severity for a finding](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/methods/tune_severity) zero\_trust.casb.posture.findings.tune\_severity(strfinding\_id, FindingTuneSeverityParams\*\*kwargs) -> [FindingTuneSeverityResponse]() POST/accounts/{account\_id}/data-security/posture/findings/{finding\_id}/tune\_finding\_severity ##### [Reset severity for a finding back to the default](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/methods/reset_severity) zero\_trust.casb.posture.findings.reset\_severity(strfinding\_id, FindingResetSeverityParams\*\*kwargs) -> [FindingResetSeverityResponse]() POST/accounts/{account\_id}/data-security/posture/findings/{finding\_id}/reset\_finding\_severity ##### ModelsExpand Collapse
class FindingListResponse: … Aggregated finding information with counts and metadata. This is optimized for list API queries and represents a finding along with its instance statistics. id: str Base64 encoded identifier of the security finding. formatbyte Link to this property active\_count: int Number of active problematic instances identified in the security finding. Link to this property archived\_count: int Number of archived instances identified in the security finding. Link to this property
finding: Finding Basic finding type information. id: str The unique identifier of the finding. formatuuid Link to this property
category: FindingCategory
observation: Literal\["Issue", "Insight", "Activity"] The type of the observation. One of the following: "Issue" Link to this property "Insight" Link to this property "Activity" Link to this property
Link to this property
product: Literal\["SaaS", "Cloud"] The product category. One of the following: "SaaS" Link to this property "Cloud" Link to this property
Link to this property
type: Literal\["Content", "Posture"] The type of the finding category. One of the following: "Content" Link to this property "Posture" Link to this property
Link to this property
Link to this property name: str The name of the finding. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] Default severity used when no integration-specific severity override exists. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property vendor: str The SaaS/Cloud vendor of the platform with which the finding is associated. Link to this property description: Optional\[str] Detailed description of the finding. Link to this property
remediation: Optional\[FindingRemediation] Remediation guide information for a finding. id: str Remediation Id. formatuuid Link to this property frameworks: List\[str] Relevant Compliance Frameworks. Link to this property guide: str Remediation guide text. Link to this property impact: str Description of the potential impact. Link to this property locale: str I18N Locale. Link to this property threat: str Description of the threat. Link to this property
Link to this property
Link to this property ignored: bool Determines if finding is currently ignored. Link to this property instance\_count: int Number of total (Active or archived) problematic instances identified in the security finding. Link to this property
integration: Integration Summary information about an integration. created: datetime When entity was created. formatdate-time Link to this property last\_hydrated: datetime When were the integration credentials last updated. formatdate-time Link to this property name: str Name of the integration. maxLength256 Link to this property permissions: List\[str] The vendor-specific permissions associated with the integration. Link to this property
policy: IntegrationPolicy Policy configuration for an integration. id: Optional\[str] Policy identifier. formatuuid Link to this property client\_id: Optional\[str] OAuth client ID for the policy. Link to this property compliance\_level: Optional\[str] Compliance level for the policy. Link to this property dlp\_enabled: Optional\[bool] Whether DLP is enabled for this policy. Link to this property link: Optional\[str] Link to policy documentation. formaturi Link to this property name: Optional\[str] Policy name. Link to this property permissions: Optional\[List\[str]] List of permissions included in the policy. Link to this property
Link to this property status: str Current status of the integration. Link to this property updated: datetime Last entity was updated. formatdate-time Link to this property upgradable: bool Whether the integrations permissions can be updated. Link to this property
vendor: IntegrationVendor Information about a vendor/service provider. id: str The id of the vendor. Link to this property description: Optional\[str] Detailed information about what kinds of issues are detected for this vendor. Link to this property display\_name: str The display name of the vendor. Link to this property logo: str Logo URL for the vendor. formaturi Link to this property name: str The name of the vendor. Link to this property static\_logo: str Static logo URL for the vendor. formaturi Link to this property zt\_enrollments: List\[str] The vendor’s compatible Zero Trust products. Link to this property policies: Optional\[List\[Dict\[str, object]]] The policies related to the vendor. Link to this property
Link to this property
zt\_enrollments: List\[IntegrationZtEnrollment] Zero Trust products associated with this integration. id: Optional\[str] The internal identifier of the Zero Trust Product. Link to this property description: Optional\[str] Brief description of the Zero Trust Product. Link to this property display\_name: Optional\[str] The verbose name of the Zero Trust Product. Link to this property enabled: Optional\[bool] Flag to enable/disable access to the listed integration from the corresponding Cloudflare product. Link to this property
Link to this property id: Optional\[str] Integration ID. formatuuid Link to this property
credential\_health\_status: Optional\[Literal\["Initializing", "Healthy", "Unhealthy"]] Health status of integration credentials. One of the following: "Initializing" Link to this property "Healthy" Link to this property "Unhealthy" Link to this property
Link to this property credentials\_expiry: Optional\[datetime] The date and time when the integration credentials will expire. formatdate-time Link to this property is\_paused: Optional\[bool] Whether the given integration is paused by the user. Link to this property upgrade\_dismissed: Optional\[bool] UI State as to whether a potential permissions upgrade has been dismissed. Link to this property
Link to this property latest\_affliction\_date: datetime Timestamp of the latest affliction date of an active finding. formatdate-time Link to this property
severity\_override: Optional\[SeverityOverride] Override information for finding severity. created\_by: str User ID who created the override. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] The severity level of a finding. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings%20%3E%20(model)%20finding_list_response%20%3E%20(schema)>)
class FindingGetResponse: … Aggregated finding information with counts and metadata. This is optimized for list API queries and represents a finding along with its instance statistics. id: str Base64 encoded identifier of the security finding. formatbyte Link to this property active\_count: int Number of active problematic instances identified in the security finding. Link to this property archived\_count: int Number of archived instances identified in the security finding. Link to this property
finding: Finding Basic finding type information. id: str The unique identifier of the finding. formatuuid Link to this property
category: FindingCategory
observation: Literal\["Issue", "Insight", "Activity"] The type of the observation. One of the following: "Issue" Link to this property "Insight" Link to this property "Activity" Link to this property
Link to this property
product: Literal\["SaaS", "Cloud"] The product category. One of the following: "SaaS" Link to this property "Cloud" Link to this property
Link to this property
type: Literal\["Content", "Posture"] The type of the finding category. One of the following: "Content" Link to this property "Posture" Link to this property
Link to this property
Link to this property name: str The name of the finding. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] Default severity used when no integration-specific severity override exists. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property vendor: str The SaaS/Cloud vendor of the platform with which the finding is associated. Link to this property description: Optional\[str] Detailed description of the finding. Link to this property
remediation: Optional\[FindingRemediation] Remediation guide information for a finding. id: str Remediation Id. formatuuid Link to this property frameworks: List\[str] Relevant Compliance Frameworks. Link to this property guide: str Remediation guide text. Link to this property impact: str Description of the potential impact. Link to this property locale: str I18N Locale. Link to this property threat: str Description of the threat. Link to this property
Link to this property
Link to this property ignored: bool Determines if finding is currently ignored. Link to this property instance\_count: int Number of total (Active or archived) problematic instances identified in the security finding. Link to this property
integration: Integration Summary information about an integration. created: datetime When entity was created. formatdate-time Link to this property last\_hydrated: datetime When were the integration credentials last updated. formatdate-time Link to this property name: str Name of the integration. maxLength256 Link to this property permissions: List\[str] The vendor-specific permissions associated with the integration. Link to this property
policy: IntegrationPolicy Policy configuration for an integration. id: Optional\[str] Policy identifier. formatuuid Link to this property client\_id: Optional\[str] OAuth client ID for the policy. Link to this property compliance\_level: Optional\[str] Compliance level for the policy. Link to this property dlp\_enabled: Optional\[bool] Whether DLP is enabled for this policy. Link to this property link: Optional\[str] Link to policy documentation. formaturi Link to this property name: Optional\[str] Policy name. Link to this property permissions: Optional\[List\[str]] List of permissions included in the policy. Link to this property
Link to this property status: str Current status of the integration. Link to this property updated: datetime Last entity was updated. formatdate-time Link to this property upgradable: bool Whether the integrations permissions can be updated. Link to this property
vendor: IntegrationVendor Information about a vendor/service provider. id: str The id of the vendor. Link to this property description: Optional\[str] Detailed information about what kinds of issues are detected for this vendor. Link to this property display\_name: str The display name of the vendor. Link to this property logo: str Logo URL for the vendor. formaturi Link to this property name: str The name of the vendor. Link to this property static\_logo: str Static logo URL for the vendor. formaturi Link to this property zt\_enrollments: List\[str] The vendor’s compatible Zero Trust products. Link to this property policies: Optional\[List\[Dict\[str, object]]] The policies related to the vendor. Link to this property
Link to this property
zt\_enrollments: List\[IntegrationZtEnrollment] Zero Trust products associated with this integration. id: Optional\[str] The internal identifier of the Zero Trust Product. Link to this property description: Optional\[str] Brief description of the Zero Trust Product. Link to this property display\_name: Optional\[str] The verbose name of the Zero Trust Product. Link to this property enabled: Optional\[bool] Flag to enable/disable access to the listed integration from the corresponding Cloudflare product. Link to this property
Link to this property id: Optional\[str] Integration ID. formatuuid Link to this property
credential\_health\_status: Optional\[Literal\["Initializing", "Healthy", "Unhealthy"]] Health status of integration credentials. One of the following: "Initializing" Link to this property "Healthy" Link to this property "Unhealthy" Link to this property
Link to this property credentials\_expiry: Optional\[datetime] The date and time when the integration credentials will expire. formatdate-time Link to this property is\_paused: Optional\[bool] Whether the given integration is paused by the user. Link to this property upgrade\_dismissed: Optional\[bool] UI State as to whether a potential permissions upgrade has been dismissed. Link to this property
Link to this property latest\_affliction\_date: datetime Timestamp of the latest affliction date of an active finding. formatdate-time Link to this property
severity\_override: Optional\[SeverityOverride] Override information for finding severity. created\_by: str User ID who created the override. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] The severity level of a finding. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings%20%3E%20(model)%20finding_get_response%20%3E%20(schema)>)
class FindingExportResponse: … Information about an export job. id: str Unique identifier for the export job. formatuuid Link to this property
status: Literal\["Pending", "Success", "Failure", 2 more] Status of an export job. One of the following: "Pending" Link to this property "Success" Link to this property "Failure" Link to this property "Rescheduled" Link to this property "In-Progress" Link to this property
Link to this property
type: Literal\["finding", "findingInstance", "content", "remediationJob"] Type of export job. One of the following: "finding" Link to this property "findingInstance" Link to this property "content" Link to this property "remediationJob" Link to this property
Link to this property user\_id: str ID of the export-requesting user. maxLength128 Link to this property download\_url: Optional\[str] The URL by which the successfully created export can be downloaded by the end users. formaturi maxLength1024 Link to this property errors: Optional\[str] Contains information on errors which may have occurred during export creation. Link to this property file\_name: Optional\[str] The base name of the file that is/was generated by the export job. maxLength256 Link to this property file\_path: Optional\[str] The full path of the file that is stored within external storage (currently R2). maxLength512 Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings%20%3E%20(model)%20finding_export_response%20%3E%20(schema)>)
class FindingIgnoreResponse: … Aggregated finding information with counts and metadata. This is optimized for list API queries and represents a finding along with its instance statistics. id: str Base64 encoded identifier of the security finding. formatbyte Link to this property active\_count: int Number of active problematic instances identified in the security finding. Link to this property archived\_count: int Number of archived instances identified in the security finding. Link to this property
finding: Finding Basic finding type information. id: str The unique identifier of the finding. formatuuid Link to this property
category: FindingCategory
observation: Literal\["Issue", "Insight", "Activity"] The type of the observation. One of the following: "Issue" Link to this property "Insight" Link to this property "Activity" Link to this property
Link to this property
product: Literal\["SaaS", "Cloud"] The product category. One of the following: "SaaS" Link to this property "Cloud" Link to this property
Link to this property
type: Literal\["Content", "Posture"] The type of the finding category. One of the following: "Content" Link to this property "Posture" Link to this property
Link to this property
Link to this property name: str The name of the finding. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] Default severity used when no integration-specific severity override exists. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property vendor: str The SaaS/Cloud vendor of the platform with which the finding is associated. Link to this property description: Optional\[str] Detailed description of the finding. Link to this property
remediation: Optional\[FindingRemediation] Remediation guide information for a finding. id: str Remediation Id. formatuuid Link to this property frameworks: List\[str] Relevant Compliance Frameworks. Link to this property guide: str Remediation guide text. Link to this property impact: str Description of the potential impact. Link to this property locale: str I18N Locale. Link to this property threat: str Description of the threat. Link to this property
Link to this property
Link to this property ignored: bool Determines if finding is currently ignored. Link to this property instance\_count: int Number of total (Active or archived) problematic instances identified in the security finding. Link to this property
integration: Integration Summary information about an integration. created: datetime When entity was created. formatdate-time Link to this property last\_hydrated: datetime When were the integration credentials last updated. formatdate-time Link to this property name: str Name of the integration. maxLength256 Link to this property permissions: List\[str] The vendor-specific permissions associated with the integration. Link to this property
policy: IntegrationPolicy Policy configuration for an integration. id: Optional\[str] Policy identifier. formatuuid Link to this property client\_id: Optional\[str] OAuth client ID for the policy. Link to this property compliance\_level: Optional\[str] Compliance level for the policy. Link to this property dlp\_enabled: Optional\[bool] Whether DLP is enabled for this policy. Link to this property link: Optional\[str] Link to policy documentation. formaturi Link to this property name: Optional\[str] Policy name. Link to this property permissions: Optional\[List\[str]] List of permissions included in the policy. Link to this property
Link to this property status: str Current status of the integration. Link to this property updated: datetime Last entity was updated. formatdate-time Link to this property upgradable: bool Whether the integrations permissions can be updated. Link to this property
vendor: IntegrationVendor Information about a vendor/service provider. id: str The id of the vendor. Link to this property description: Optional\[str] Detailed information about what kinds of issues are detected for this vendor. Link to this property display\_name: str The display name of the vendor. Link to this property logo: str Logo URL for the vendor. formaturi Link to this property name: str The name of the vendor. Link to this property static\_logo: str Static logo URL for the vendor. formaturi Link to this property zt\_enrollments: List\[str] The vendor’s compatible Zero Trust products. Link to this property policies: Optional\[List\[Dict\[str, object]]] The policies related to the vendor. Link to this property
Link to this property
zt\_enrollments: List\[IntegrationZtEnrollment] Zero Trust products associated with this integration. id: Optional\[str] The internal identifier of the Zero Trust Product. Link to this property description: Optional\[str] Brief description of the Zero Trust Product. Link to this property display\_name: Optional\[str] The verbose name of the Zero Trust Product. Link to this property enabled: Optional\[bool] Flag to enable/disable access to the listed integration from the corresponding Cloudflare product. Link to this property
Link to this property id: Optional\[str] Integration ID. formatuuid Link to this property
credential\_health\_status: Optional\[Literal\["Initializing", "Healthy", "Unhealthy"]] Health status of integration credentials. One of the following: "Initializing" Link to this property "Healthy" Link to this property "Unhealthy" Link to this property
Link to this property credentials\_expiry: Optional\[datetime] The date and time when the integration credentials will expire. formatdate-time Link to this property is\_paused: Optional\[bool] Whether the given integration is paused by the user. Link to this property upgrade\_dismissed: Optional\[bool] UI State as to whether a potential permissions upgrade has been dismissed. Link to this property
Link to this property latest\_affliction\_date: datetime Timestamp of the latest affliction date of an active finding. formatdate-time Link to this property
severity\_override: Optional\[SeverityOverride] Override information for finding severity. created\_by: str User ID who created the override. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] The severity level of a finding. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings%20%3E%20(model)%20finding_ignore_response%20%3E%20(schema)>)
class FindingUnignoreResponse: … Aggregated finding information with counts and metadata. This is optimized for list API queries and represents a finding along with its instance statistics. id: str Base64 encoded identifier of the security finding. formatbyte Link to this property active\_count: int Number of active problematic instances identified in the security finding. Link to this property archived\_count: int Number of archived instances identified in the security finding. Link to this property
finding: Finding Basic finding type information. id: str The unique identifier of the finding. formatuuid Link to this property
category: FindingCategory
observation: Literal\["Issue", "Insight", "Activity"] The type of the observation. One of the following: "Issue" Link to this property "Insight" Link to this property "Activity" Link to this property
Link to this property
product: Literal\["SaaS", "Cloud"] The product category. One of the following: "SaaS" Link to this property "Cloud" Link to this property
Link to this property
type: Literal\["Content", "Posture"] The type of the finding category. One of the following: "Content" Link to this property "Posture" Link to this property
Link to this property
Link to this property name: str The name of the finding. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] Default severity used when no integration-specific severity override exists. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property vendor: str The SaaS/Cloud vendor of the platform with which the finding is associated. Link to this property description: Optional\[str] Detailed description of the finding. Link to this property
remediation: Optional\[FindingRemediation] Remediation guide information for a finding. id: str Remediation Id. formatuuid Link to this property frameworks: List\[str] Relevant Compliance Frameworks. Link to this property guide: str Remediation guide text. Link to this property impact: str Description of the potential impact. Link to this property locale: str I18N Locale. Link to this property threat: str Description of the threat. Link to this property
Link to this property
Link to this property ignored: bool Determines if finding is currently ignored. Link to this property instance\_count: int Number of total (Active or archived) problematic instances identified in the security finding. Link to this property
integration: Integration Summary information about an integration. created: datetime When entity was created. formatdate-time Link to this property last\_hydrated: datetime When were the integration credentials last updated. formatdate-time Link to this property name: str Name of the integration. maxLength256 Link to this property permissions: List\[str] The vendor-specific permissions associated with the integration. Link to this property
policy: IntegrationPolicy Policy configuration for an integration. id: Optional\[str] Policy identifier. formatuuid Link to this property client\_id: Optional\[str] OAuth client ID for the policy. Link to this property compliance\_level: Optional\[str] Compliance level for the policy. Link to this property dlp\_enabled: Optional\[bool] Whether DLP is enabled for this policy. Link to this property link: Optional\[str] Link to policy documentation. formaturi Link to this property name: Optional\[str] Policy name. Link to this property permissions: Optional\[List\[str]] List of permissions included in the policy. Link to this property
Link to this property status: str Current status of the integration. Link to this property updated: datetime Last entity was updated. formatdate-time Link to this property upgradable: bool Whether the integrations permissions can be updated. Link to this property
vendor: IntegrationVendor Information about a vendor/service provider. id: str The id of the vendor. Link to this property description: Optional\[str] Detailed information about what kinds of issues are detected for this vendor. Link to this property display\_name: str The display name of the vendor. Link to this property logo: str Logo URL for the vendor. formaturi Link to this property name: str The name of the vendor. Link to this property static\_logo: str Static logo URL for the vendor. formaturi Link to this property zt\_enrollments: List\[str] The vendor’s compatible Zero Trust products. Link to this property policies: Optional\[List\[Dict\[str, object]]] The policies related to the vendor. Link to this property
Link to this property
zt\_enrollments: List\[IntegrationZtEnrollment] Zero Trust products associated with this integration. id: Optional\[str] The internal identifier of the Zero Trust Product. Link to this property description: Optional\[str] Brief description of the Zero Trust Product. Link to this property display\_name: Optional\[str] The verbose name of the Zero Trust Product. Link to this property enabled: Optional\[bool] Flag to enable/disable access to the listed integration from the corresponding Cloudflare product. Link to this property
Link to this property id: Optional\[str] Integration ID. formatuuid Link to this property
credential\_health\_status: Optional\[Literal\["Initializing", "Healthy", "Unhealthy"]] Health status of integration credentials. One of the following: "Initializing" Link to this property "Healthy" Link to this property "Unhealthy" Link to this property
Link to this property credentials\_expiry: Optional\[datetime] The date and time when the integration credentials will expire. formatdate-time Link to this property is\_paused: Optional\[bool] Whether the given integration is paused by the user. Link to this property upgrade\_dismissed: Optional\[bool] UI State as to whether a potential permissions upgrade has been dismissed. Link to this property
Link to this property latest\_affliction\_date: datetime Timestamp of the latest affliction date of an active finding. formatdate-time Link to this property
severity\_override: Optional\[SeverityOverride] Override information for finding severity. created\_by: str User ID who created the override. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] The severity level of a finding. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings%20%3E%20(model)%20finding_unignore_response%20%3E%20(schema)>)
class FindingTuneSeverityResponse: … Aggregated finding information with counts and metadata. This is optimized for list API queries and represents a finding along with its instance statistics. id: str Base64 encoded identifier of the security finding. formatbyte Link to this property active\_count: int Number of active problematic instances identified in the security finding. Link to this property archived\_count: int Number of archived instances identified in the security finding. Link to this property
finding: Finding Basic finding type information. id: str The unique identifier of the finding. formatuuid Link to this property
category: FindingCategory
observation: Literal\["Issue", "Insight", "Activity"] The type of the observation. One of the following: "Issue" Link to this property "Insight" Link to this property "Activity" Link to this property
Link to this property
product: Literal\["SaaS", "Cloud"] The product category. One of the following: "SaaS" Link to this property "Cloud" Link to this property
Link to this property
type: Literal\["Content", "Posture"] The type of the finding category. One of the following: "Content" Link to this property "Posture" Link to this property
Link to this property
Link to this property name: str The name of the finding. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] Default severity used when no integration-specific severity override exists. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property vendor: str The SaaS/Cloud vendor of the platform with which the finding is associated. Link to this property description: Optional\[str] Detailed description of the finding. Link to this property
remediation: Optional\[FindingRemediation] Remediation guide information for a finding. id: str Remediation Id. formatuuid Link to this property frameworks: List\[str] Relevant Compliance Frameworks. Link to this property guide: str Remediation guide text. Link to this property impact: str Description of the potential impact. Link to this property locale: str I18N Locale. Link to this property threat: str Description of the threat. Link to this property
Link to this property
Link to this property ignored: bool Determines if finding is currently ignored. Link to this property instance\_count: int Number of total (Active or archived) problematic instances identified in the security finding. Link to this property
integration: Integration Summary information about an integration. created: datetime When entity was created. formatdate-time Link to this property last\_hydrated: datetime When were the integration credentials last updated. formatdate-time Link to this property name: str Name of the integration. maxLength256 Link to this property permissions: List\[str] The vendor-specific permissions associated with the integration. Link to this property
policy: IntegrationPolicy Policy configuration for an integration. id: Optional\[str] Policy identifier. formatuuid Link to this property client\_id: Optional\[str] OAuth client ID for the policy. Link to this property compliance\_level: Optional\[str] Compliance level for the policy. Link to this property dlp\_enabled: Optional\[bool] Whether DLP is enabled for this policy. Link to this property link: Optional\[str] Link to policy documentation. formaturi Link to this property name: Optional\[str] Policy name. Link to this property permissions: Optional\[List\[str]] List of permissions included in the policy. Link to this property
Link to this property status: str Current status of the integration. Link to this property updated: datetime Last entity was updated. formatdate-time Link to this property upgradable: bool Whether the integrations permissions can be updated. Link to this property
vendor: IntegrationVendor Information about a vendor/service provider. id: str The id of the vendor. Link to this property description: Optional\[str] Detailed information about what kinds of issues are detected for this vendor. Link to this property display\_name: str The display name of the vendor. Link to this property logo: str Logo URL for the vendor. formaturi Link to this property name: str The name of the vendor. Link to this property static\_logo: str Static logo URL for the vendor. formaturi Link to this property zt\_enrollments: List\[str] The vendor’s compatible Zero Trust products. Link to this property policies: Optional\[List\[Dict\[str, object]]] The policies related to the vendor. Link to this property
Link to this property
zt\_enrollments: List\[IntegrationZtEnrollment] Zero Trust products associated with this integration. id: Optional\[str] The internal identifier of the Zero Trust Product. Link to this property description: Optional\[str] Brief description of the Zero Trust Product. Link to this property display\_name: Optional\[str] The verbose name of the Zero Trust Product. Link to this property enabled: Optional\[bool] Flag to enable/disable access to the listed integration from the corresponding Cloudflare product. Link to this property
Link to this property id: Optional\[str] Integration ID. formatuuid Link to this property
credential\_health\_status: Optional\[Literal\["Initializing", "Healthy", "Unhealthy"]] Health status of integration credentials. One of the following: "Initializing" Link to this property "Healthy" Link to this property "Unhealthy" Link to this property
Link to this property credentials\_expiry: Optional\[datetime] The date and time when the integration credentials will expire. formatdate-time Link to this property is\_paused: Optional\[bool] Whether the given integration is paused by the user. Link to this property upgrade\_dismissed: Optional\[bool] UI State as to whether a potential permissions upgrade has been dismissed. Link to this property
Link to this property latest\_affliction\_date: datetime Timestamp of the latest affliction date of an active finding. formatdate-time Link to this property
severity\_override: Optional\[SeverityOverride] Override information for finding severity. created\_by: str User ID who created the override. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] The severity level of a finding. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings%20%3E%20(model)%20finding_tune_severity_response%20%3E%20(schema)>)
class FindingResetSeverityResponse: … Aggregated finding information with counts and metadata. This is optimized for list API queries and represents a finding along with its instance statistics. id: str Base64 encoded identifier of the security finding. formatbyte Link to this property active\_count: int Number of active problematic instances identified in the security finding. Link to this property archived\_count: int Number of archived instances identified in the security finding. Link to this property
finding: Finding Basic finding type information. id: str The unique identifier of the finding. formatuuid Link to this property
category: FindingCategory
observation: Literal\["Issue", "Insight", "Activity"] The type of the observation. One of the following: "Issue" Link to this property "Insight" Link to this property "Activity" Link to this property
Link to this property
product: Literal\["SaaS", "Cloud"] The product category. One of the following: "SaaS" Link to this property "Cloud" Link to this property
Link to this property
type: Literal\["Content", "Posture"] The type of the finding category. One of the following: "Content" Link to this property "Posture" Link to this property
Link to this property
Link to this property name: str The name of the finding. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] Default severity used when no integration-specific severity override exists. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property vendor: str The SaaS/Cloud vendor of the platform with which the finding is associated. Link to this property description: Optional\[str] Detailed description of the finding. Link to this property
remediation: Optional\[FindingRemediation] Remediation guide information for a finding. id: str Remediation Id. formatuuid Link to this property frameworks: List\[str] Relevant Compliance Frameworks. Link to this property guide: str Remediation guide text. Link to this property impact: str Description of the potential impact. Link to this property locale: str I18N Locale. Link to this property threat: str Description of the threat. Link to this property
Link to this property
Link to this property ignored: bool Determines if finding is currently ignored. Link to this property instance\_count: int Number of total (Active or archived) problematic instances identified in the security finding. Link to this property
integration: Integration Summary information about an integration. created: datetime When entity was created. formatdate-time Link to this property last\_hydrated: datetime When were the integration credentials last updated. formatdate-time Link to this property name: str Name of the integration. maxLength256 Link to this property permissions: List\[str] The vendor-specific permissions associated with the integration. Link to this property
policy: IntegrationPolicy Policy configuration for an integration. id: Optional\[str] Policy identifier. formatuuid Link to this property client\_id: Optional\[str] OAuth client ID for the policy. Link to this property compliance\_level: Optional\[str] Compliance level for the policy. Link to this property dlp\_enabled: Optional\[bool] Whether DLP is enabled for this policy. Link to this property link: Optional\[str] Link to policy documentation. formaturi Link to this property name: Optional\[str] Policy name. Link to this property permissions: Optional\[List\[str]] List of permissions included in the policy. Link to this property
Link to this property status: str Current status of the integration. Link to this property updated: datetime Last entity was updated. formatdate-time Link to this property upgradable: bool Whether the integrations permissions can be updated. Link to this property
vendor: IntegrationVendor Information about a vendor/service provider. id: str The id of the vendor. Link to this property description: Optional\[str] Detailed information about what kinds of issues are detected for this vendor. Link to this property display\_name: str The display name of the vendor. Link to this property logo: str Logo URL for the vendor. formaturi Link to this property name: str The name of the vendor. Link to this property static\_logo: str Static logo URL for the vendor. formaturi Link to this property zt\_enrollments: List\[str] The vendor’s compatible Zero Trust products. Link to this property policies: Optional\[List\[Dict\[str, object]]] The policies related to the vendor. Link to this property
Link to this property
zt\_enrollments: List\[IntegrationZtEnrollment] Zero Trust products associated with this integration. id: Optional\[str] The internal identifier of the Zero Trust Product. Link to this property description: Optional\[str] Brief description of the Zero Trust Product. Link to this property display\_name: Optional\[str] The verbose name of the Zero Trust Product. Link to this property enabled: Optional\[bool] Flag to enable/disable access to the listed integration from the corresponding Cloudflare product. Link to this property
Link to this property id: Optional\[str] Integration ID. formatuuid Link to this property
credential\_health\_status: Optional\[Literal\["Initializing", "Healthy", "Unhealthy"]] Health status of integration credentials. One of the following: "Initializing" Link to this property "Healthy" Link to this property "Unhealthy" Link to this property
Link to this property credentials\_expiry: Optional\[datetime] The date and time when the integration credentials will expire. formatdate-time Link to this property is\_paused: Optional\[bool] Whether the given integration is paused by the user. Link to this property upgrade\_dismissed: Optional\[bool] UI State as to whether a potential permissions upgrade has been dismissed. Link to this property
Link to this property latest\_affliction\_date: datetime Timestamp of the latest affliction date of an active finding. formatdate-time Link to this property
severity\_override: Optional\[SeverityOverride] Override information for finding severity. created\_by: str User ID who created the override. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] The severity level of a finding. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings%20%3E%20(model)%20finding_reset_severity_response%20%3E%20(schema)>) #### CasbPostureFindingsInstances ##### [List instances of a finding](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/subresources/instances/methods/list) zero\_trust.casb.posture.findings.instances.list(strfinding\_id, InstanceListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[InstanceListResponse]()] GET/accounts/{account\_id}/data-security/posture/findings/{finding\_id}/instances ##### [Get a finding instance using an instance ID](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/subresources/instances/methods/get) zero\_trust.casb.posture.findings.instances.get(strinstance\_id, InstanceGetParams\*\*kwargs) -> [InstanceGetResponse]() GET/accounts/{account\_id}/data-security/posture/findings/{finding\_id}/instances/{instance\_id} ##### [Create a finding instances export](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/subresources/instances/methods/export) zero\_trust.casb.posture.findings.instances.export(strstorage\_namespace\_id, InstanceExportParams\*\*kwargs) -> [InstanceExportResponse]() POST/accounts/{account\_id}/data-security/posture/findings/{storage\_namespace\_id}/instances/export ##### [Archive a finding](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/subresources/instances/methods/archive) zero\_trust.casb.posture.findings.instances.archive(strfinding\_id, InstanceArchiveParams\*\*kwargs) -> [InstanceArchiveResponse]() POST/accounts/{account\_id}/data-security/posture/findings/{finding\_id}/instances/archive ##### [Remove the archive marking from a finding instance](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/findings/subresources/instances/methods/unarchive) zero\_trust.casb.posture.findings.instances.unarchive(strfinding\_id, InstanceUnarchiveParams\*\*kwargs) -> [InstanceUnarchiveResponse]() POST/accounts/{account\_id}/data-security/posture/findings/{finding\_id}/instances/unarchive ##### ModelsExpand Collapse
class InstanceListResponse: … A specific instance of a security finding. In the API interface, we refer to the ‘finding’ table in our DB as finding instances, optimized for the p99 use case. affliction\_date: datetime When this specific instance was identified. formatdate-time Link to this property
asset: Asset Asset information including metadata and categorization.
category: AssetCategory Category information for an asset. service: Optional\[str] The specific service within the vendor the asset is part of (often none). Example - AWS is the vendor, S3 is the service. Link to this property type: str The type of asset. Link to this property vendor: str The vendor the asset is part of. Link to this property id: Optional\[str] Unique identifier for the asset category. formatuuid Link to this property
Link to this property external\_id: str External identifier from the source system. maxLength512 Link to this property
fields: List\[AssetField] The fields associated with the asset. name: str The name of the field. Link to this property value: str The value of the field. Link to this property link: Optional\[str] Optional link associated with the field. formaturi Link to this property
Link to this property name: str Human-readable name of the asset. Link to this property id: Optional\[str] Unique identifier for the asset. formatuuid Link to this property link: Optional\[str] Direct link to the asset. formaturi maxLength2048 Link to this property updated: Optional\[datetime] Timestamp of the asset row version represented by this data. formatdate-time Link to this property
Link to this property
dlp\_contexts: List\[DLPContext] DLP context information if this is a content finding. created: datetime When the DLP context was created. formatdate-time Link to this property entry\_ids: List\[str] DLP Entry IDs. Link to this property profile\_id: str DLP Profile ID. formatuuid Link to this property updated: datetime When the DLP context was last updated. formatdate-time Link to this property id: Optional\[str] Unique identifier for the DLP context. formatuuid Link to this property deleted: Optional\[datetime] When the DLP context was deleted. formatdate-time Link to this property match\_context\_max\_extent: Optional\[int] DLP Right Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_min\_extent: Optional\[int] DLP Left Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_payload: Optional\[Dict\[str, object]] DLP Match context payload that matched the profile in question. Link to this property
Link to this property
remediations: List\[Remediation] A list of the 10 most recent remediation jobs for this finding instance, ordered by creation time (most recent first). The ‘stale’ field indicates whether the remediation job was created before the finding instance’s affliction\_date (true) or after it (false). If there has never been a remediation job for this finding instance, this field will be an empty array. id: str Unique identifier for the remediation job. formatuuid Link to this property created\_at: datetime When the remediation job was created. formatdate-time Link to this property stale: bool Whether this remediation job is stale (created before the finding instance’s affliction\_date). Link to this property
status: Literal\["pending", "processing", "completed", 2 more] Status of a remediation job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property "failed" Link to this property "validating" Link to this property
Link to this property
Link to this property
webhooks: List\[Webhook] The most recent webhook job invocation for each webhook configuration associated with this finding instance. Each entry represents the latest job (any status) per webhook config. The ‘stale’ field indicates whether the job was invoked before the finding instance’s current affliction\_date. If no webhook jobs have been created, this field will be an empty array.
latest\_job: WebhookLatestJob The most recent webhook job for this webhook configuration. id: str Unique identifier for the webhook job. formatuuid Link to this property created\_at: datetime When the webhook job was created. formatdate-time Link to this property stale: bool Whether this webhook job is stale (created before the finding instance’s current affliction\_date). Link to this property
status: Literal\["pending", "processing", "completed"] Current status of the webhook job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property
Link to this property
Link to this property webhook\_id: str Unique identifier for the webhook configuration. formatuuid Link to this property webhook\_label: str Account-specified display label for the webhook configuration. Link to this property
Link to this property id: Optional\[str] Unique identifier for the finding instance. formatuuid Link to this property is\_archived: Optional\[bool] Whether this finding instance has been archived. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings.instances%20%3E%20(model)%20instance_list_response%20%3E%20(schema)>)
class InstanceGetResponse: … A specific instance of a security finding. In the API interface, we refer to the ‘finding’ table in our DB as finding instances, optimized for the p99 use case. affliction\_date: datetime When this specific instance was identified. formatdate-time Link to this property
asset: Asset Asset information including metadata and categorization.
category: AssetCategory Category information for an asset. service: Optional\[str] The specific service within the vendor the asset is part of (often none). Example - AWS is the vendor, S3 is the service. Link to this property type: str The type of asset. Link to this property vendor: str The vendor the asset is part of. Link to this property id: Optional\[str] Unique identifier for the asset category. formatuuid Link to this property
Link to this property external\_id: str External identifier from the source system. maxLength512 Link to this property
fields: List\[AssetField] The fields associated with the asset. name: str The name of the field. Link to this property value: str The value of the field. Link to this property link: Optional\[str] Optional link associated with the field. formaturi Link to this property
Link to this property name: str Human-readable name of the asset. Link to this property id: Optional\[str] Unique identifier for the asset. formatuuid Link to this property link: Optional\[str] Direct link to the asset. formaturi maxLength2048 Link to this property updated: Optional\[datetime] Timestamp of the asset row version represented by this data. formatdate-time Link to this property
Link to this property
dlp\_contexts: List\[DLPContext] DLP context information if this is a content finding. created: datetime When the DLP context was created. formatdate-time Link to this property entry\_ids: List\[str] DLP Entry IDs. Link to this property profile\_id: str DLP Profile ID. formatuuid Link to this property updated: datetime When the DLP context was last updated. formatdate-time Link to this property id: Optional\[str] Unique identifier for the DLP context. formatuuid Link to this property deleted: Optional\[datetime] When the DLP context was deleted. formatdate-time Link to this property match\_context\_max\_extent: Optional\[int] DLP Right Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_min\_extent: Optional\[int] DLP Left Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_payload: Optional\[Dict\[str, object]] DLP Match context payload that matched the profile in question. Link to this property
Link to this property
remediations: List\[Remediation] A list of the 10 most recent remediation jobs for this finding instance, ordered by creation time (most recent first). The ‘stale’ field indicates whether the remediation job was created before the finding instance’s affliction\_date (true) or after it (false). If there has never been a remediation job for this finding instance, this field will be an empty array. id: str Unique identifier for the remediation job. formatuuid Link to this property created\_at: datetime When the remediation job was created. formatdate-time Link to this property stale: bool Whether this remediation job is stale (created before the finding instance’s affliction\_date). Link to this property
status: Literal\["pending", "processing", "completed", 2 more] Status of a remediation job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property "failed" Link to this property "validating" Link to this property
Link to this property
Link to this property
webhooks: List\[Webhook] The most recent webhook job invocation for each webhook configuration associated with this finding instance. Each entry represents the latest job (any status) per webhook config. The ‘stale’ field indicates whether the job was invoked before the finding instance’s current affliction\_date. If no webhook jobs have been created, this field will be an empty array.
latest\_job: WebhookLatestJob The most recent webhook job for this webhook configuration. id: str Unique identifier for the webhook job. formatuuid Link to this property created\_at: datetime When the webhook job was created. formatdate-time Link to this property stale: bool Whether this webhook job is stale (created before the finding instance’s current affliction\_date). Link to this property
status: Literal\["pending", "processing", "completed"] Current status of the webhook job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property
Link to this property
Link to this property webhook\_id: str Unique identifier for the webhook configuration. formatuuid Link to this property webhook\_label: str Account-specified display label for the webhook configuration. Link to this property
Link to this property id: Optional\[str] Unique identifier for the finding instance. formatuuid Link to this property is\_archived: Optional\[bool] Whether this finding instance has been archived. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings.instances%20%3E%20(model)%20instance_get_response%20%3E%20(schema)>)
class InstanceExportResponse: … Information about an export job. id: str Unique identifier for the export job. formatuuid Link to this property
status: Literal\["Pending", "Success", "Failure", 2 more] Status of an export job. One of the following: "Pending" Link to this property "Success" Link to this property "Failure" Link to this property "Rescheduled" Link to this property "In-Progress" Link to this property
Link to this property
type: Literal\["finding", "findingInstance", "content", "remediationJob"] Type of export job. One of the following: "finding" Link to this property "findingInstance" Link to this property "content" Link to this property "remediationJob" Link to this property
Link to this property user\_id: str ID of the export-requesting user. maxLength128 Link to this property download\_url: Optional\[str] The URL by which the successfully created export can be downloaded by the end users. formaturi maxLength1024 Link to this property errors: Optional\[str] Contains information on errors which may have occurred during export creation. Link to this property file\_name: Optional\[str] The base name of the file that is/was generated by the export job. maxLength256 Link to this property file\_path: Optional\[str] The full path of the file that is stored within external storage (currently R2). maxLength512 Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings.instances%20%3E%20(model)%20instance_export_response%20%3E%20(schema)>)
class InstanceArchiveResponse: … A specific instance of a security finding. In the API interface, we refer to the ‘finding’ table in our DB as finding instances, optimized for the p99 use case. affliction\_date: datetime When this specific instance was identified. formatdate-time Link to this property
asset: Asset Asset information including metadata and categorization.
category: AssetCategory Category information for an asset. service: Optional\[str] The specific service within the vendor the asset is part of (often none). Example - AWS is the vendor, S3 is the service. Link to this property type: str The type of asset. Link to this property vendor: str The vendor the asset is part of. Link to this property id: Optional\[str] Unique identifier for the asset category. formatuuid Link to this property
Link to this property external\_id: str External identifier from the source system. maxLength512 Link to this property
fields: List\[AssetField] The fields associated with the asset. name: str The name of the field. Link to this property value: str The value of the field. Link to this property link: Optional\[str] Optional link associated with the field. formaturi Link to this property
Link to this property name: str Human-readable name of the asset. Link to this property id: Optional\[str] Unique identifier for the asset. formatuuid Link to this property link: Optional\[str] Direct link to the asset. formaturi maxLength2048 Link to this property updated: Optional\[datetime] Timestamp of the asset row version represented by this data. formatdate-time Link to this property
Link to this property
dlp\_contexts: List\[DLPContext] DLP context information if this is a content finding. created: datetime When the DLP context was created. formatdate-time Link to this property entry\_ids: List\[str] DLP Entry IDs. Link to this property profile\_id: str DLP Profile ID. formatuuid Link to this property updated: datetime When the DLP context was last updated. formatdate-time Link to this property id: Optional\[str] Unique identifier for the DLP context. formatuuid Link to this property deleted: Optional\[datetime] When the DLP context was deleted. formatdate-time Link to this property match\_context\_max\_extent: Optional\[int] DLP Right Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_min\_extent: Optional\[int] DLP Left Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_payload: Optional\[Dict\[str, object]] DLP Match context payload that matched the profile in question. Link to this property
Link to this property
remediations: List\[Remediation] A list of the 10 most recent remediation jobs for this finding instance, ordered by creation time (most recent first). The ‘stale’ field indicates whether the remediation job was created before the finding instance’s affliction\_date (true) or after it (false). If there has never been a remediation job for this finding instance, this field will be an empty array. id: str Unique identifier for the remediation job. formatuuid Link to this property created\_at: datetime When the remediation job was created. formatdate-time Link to this property stale: bool Whether this remediation job is stale (created before the finding instance’s affliction\_date). Link to this property
status: Literal\["pending", "processing", "completed", 2 more] Status of a remediation job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property "failed" Link to this property "validating" Link to this property
Link to this property
Link to this property
webhooks: List\[Webhook] The most recent webhook job invocation for each webhook configuration associated with this finding instance. Each entry represents the latest job (any status) per webhook config. The ‘stale’ field indicates whether the job was invoked before the finding instance’s current affliction\_date. If no webhook jobs have been created, this field will be an empty array.
latest\_job: WebhookLatestJob The most recent webhook job for this webhook configuration. id: str Unique identifier for the webhook job. formatuuid Link to this property created\_at: datetime When the webhook job was created. formatdate-time Link to this property stale: bool Whether this webhook job is stale (created before the finding instance’s current affliction\_date). Link to this property
status: Literal\["pending", "processing", "completed"] Current status of the webhook job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property
Link to this property
Link to this property webhook\_id: str Unique identifier for the webhook configuration. formatuuid Link to this property webhook\_label: str Account-specified display label for the webhook configuration. Link to this property
Link to this property id: Optional\[str] Unique identifier for the finding instance. formatuuid Link to this property is\_archived: Optional\[bool] Whether this finding instance has been archived. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings.instances%20%3E%20(model)%20instance_archive_response%20%3E%20(schema)>)
class InstanceUnarchiveResponse: … A specific instance of a security finding. In the API interface, we refer to the ‘finding’ table in our DB as finding instances, optimized for the p99 use case. affliction\_date: datetime When this specific instance was identified. formatdate-time Link to this property
asset: Asset Asset information including metadata and categorization.
category: AssetCategory Category information for an asset. service: Optional\[str] The specific service within the vendor the asset is part of (often none). Example - AWS is the vendor, S3 is the service. Link to this property type: str The type of asset. Link to this property vendor: str The vendor the asset is part of. Link to this property id: Optional\[str] Unique identifier for the asset category. formatuuid Link to this property
Link to this property external\_id: str External identifier from the source system. maxLength512 Link to this property
fields: List\[AssetField] The fields associated with the asset. name: str The name of the field. Link to this property value: str The value of the field. Link to this property link: Optional\[str] Optional link associated with the field. formaturi Link to this property
Link to this property name: str Human-readable name of the asset. Link to this property id: Optional\[str] Unique identifier for the asset. formatuuid Link to this property link: Optional\[str] Direct link to the asset. formaturi maxLength2048 Link to this property updated: Optional\[datetime] Timestamp of the asset row version represented by this data. formatdate-time Link to this property
Link to this property
dlp\_contexts: List\[DLPContext] DLP context information if this is a content finding. created: datetime When the DLP context was created. formatdate-time Link to this property entry\_ids: List\[str] DLP Entry IDs. Link to this property profile\_id: str DLP Profile ID. formatuuid Link to this property updated: datetime When the DLP context was last updated. formatdate-time Link to this property id: Optional\[str] Unique identifier for the DLP context. formatuuid Link to this property deleted: Optional\[datetime] When the DLP context was deleted. formatdate-time Link to this property match\_context\_max\_extent: Optional\[int] DLP Right Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_min\_extent: Optional\[int] DLP Left Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_payload: Optional\[Dict\[str, object]] DLP Match context payload that matched the profile in question. Link to this property
Link to this property
remediations: List\[Remediation] A list of the 10 most recent remediation jobs for this finding instance, ordered by creation time (most recent first). The ‘stale’ field indicates whether the remediation job was created before the finding instance’s affliction\_date (true) or after it (false). If there has never been a remediation job for this finding instance, this field will be an empty array. id: str Unique identifier for the remediation job. formatuuid Link to this property created\_at: datetime When the remediation job was created. formatdate-time Link to this property stale: bool Whether this remediation job is stale (created before the finding instance’s affliction\_date). Link to this property
status: Literal\["pending", "processing", "completed", 2 more] Status of a remediation job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property "failed" Link to this property "validating" Link to this property
Link to this property
Link to this property
webhooks: List\[Webhook] The most recent webhook job invocation for each webhook configuration associated with this finding instance. Each entry represents the latest job (any status) per webhook config. The ‘stale’ field indicates whether the job was invoked before the finding instance’s current affliction\_date. If no webhook jobs have been created, this field will be an empty array.
latest\_job: WebhookLatestJob The most recent webhook job for this webhook configuration. id: str Unique identifier for the webhook job. formatuuid Link to this property created\_at: datetime When the webhook job was created. formatdate-time Link to this property stale: bool Whether this webhook job is stale (created before the finding instance’s current affliction\_date). Link to this property
status: Literal\["pending", "processing", "completed"] Current status of the webhook job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property
Link to this property
Link to this property webhook\_id: str Unique identifier for the webhook configuration. formatuuid Link to this property webhook\_label: str Account-specified display label for the webhook configuration. Link to this property
Link to this property id: Optional\[str] Unique identifier for the finding instance. formatuuid Link to this property is\_archived: Optional\[bool] Whether this finding instance has been archived. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.findings.instances%20%3E%20(model)%20instance_unarchive_response%20%3E%20(schema)>) #### CasbPostureExports ##### [List all export jobs](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/exports/methods/list) zero\_trust.casb.posture.exports.list(ExportListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[ExportListResponse]()] GET/accounts/{account\_id}/data-security/posture/exports ##### [Get a single export job](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/exports/methods/get) zero\_trust.casb.posture.exports.get(strid, ExportGetParams\*\*kwargs) -> [ExportGetResponse]() GET/accounts/{account\_id}/data-security/posture/exports/{id} ##### ModelsExpand Collapse
class ExportListResponse: … Information about an export job. id: str Unique identifier for the export job. formatuuid Link to this property
status: Literal\["Pending", "Success", "Failure", 2 more] Status of an export job. One of the following: "Pending" Link to this property "Success" Link to this property "Failure" Link to this property "Rescheduled" Link to this property "In-Progress" Link to this property
Link to this property
type: Literal\["finding", "findingInstance", "content", "remediationJob"] Type of export job. One of the following: "finding" Link to this property "findingInstance" Link to this property "content" Link to this property "remediationJob" Link to this property
Link to this property user\_id: str ID of the export-requesting user. maxLength128 Link to this property download\_url: Optional\[str] The URL by which the successfully created export can be downloaded by the end users. formaturi maxLength1024 Link to this property errors: Optional\[str] Contains information on errors which may have occurred during export creation. Link to this property file\_name: Optional\[str] The base name of the file that is/was generated by the export job. maxLength256 Link to this property file\_path: Optional\[str] The full path of the file that is stored within external storage (currently R2). maxLength512 Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.exports%20%3E%20(model)%20export_list_response%20%3E%20(schema)>)
class ExportGetResponse: … Information about an export job. id: str Unique identifier for the export job. formatuuid Link to this property
status: Literal\["Pending", "Success", "Failure", 2 more] Status of an export job. One of the following: "Pending" Link to this property "Success" Link to this property "Failure" Link to this property "Rescheduled" Link to this property "In-Progress" Link to this property
Link to this property
type: Literal\["finding", "findingInstance", "content", "remediationJob"] Type of export job. One of the following: "finding" Link to this property "findingInstance" Link to this property "content" Link to this property "remediationJob" Link to this property
Link to this property user\_id: str ID of the export-requesting user. maxLength128 Link to this property download\_url: Optional\[str] The URL by which the successfully created export can be downloaded by the end users. formaturi maxLength1024 Link to this property errors: Optional\[str] Contains information on errors which may have occurred during export creation. Link to this property file\_name: Optional\[str] The base name of the file that is/was generated by the export job. maxLength256 Link to this property file\_path: Optional\[str] The full path of the file that is stored within external storage (currently R2). maxLength512 Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.exports%20%3E%20(model)%20export_get_response%20%3E%20(schema)>) #### CasbPostureFinding Types ##### [List all finding types](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/finding_types/methods/list) zero\_trust.casb.posture.finding\_types.list(FindingTypeListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[FindingTypeListResponse]()] GET/accounts/{account\_id}/data-security/posture/finding\_types ##### [Get finding by ID](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/finding_types/methods/get) zero\_trust.casb.posture.finding\_types.get(strfinding\_type\_id, FindingTypeGetParams\*\*kwargs) -> [FindingTypeGetResponse]() GET/accounts/{account\_id}/data-security/posture/finding\_types/{finding\_type\_id} ##### ModelsExpand Collapse
class FindingTypeListResponse: … Basic finding type information. id: str The unique identifier of the finding. formatuuid Link to this property
category: Category Category information for a finding.
observation: Literal\["Issue", "Insight", "Activity"] The type of the observation. One of the following: "Issue" Link to this property "Insight" Link to this property "Activity" Link to this property
Link to this property
product: Literal\["SaaS", "Cloud"] The product category. One of the following: "SaaS" Link to this property "Cloud" Link to this property
Link to this property
type: Literal\["Content", "Posture"] The type of the finding category. One of the following: "Content" Link to this property "Posture" Link to this property
Link to this property
Link to this property name: str The name of the finding. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] Default severity used when no integration-specific severity override exists. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property vendor: str The SaaS/Cloud vendor of the platform with which the finding is associated. Link to this property description: Optional\[str] Detailed description of the finding. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.finding_types%20%3E%20(model)%20finding_type_list_response%20%3E%20(schema)>)
class FindingTypeGetResponse: … Basic finding type information. id: str The unique identifier of the finding. formatuuid Link to this property
category: Category Category information for a finding.
observation: Literal\["Issue", "Insight", "Activity"] The type of the observation. One of the following: "Issue" Link to this property "Insight" Link to this property "Activity" Link to this property
Link to this property
product: Literal\["SaaS", "Cloud"] The product category. One of the following: "SaaS" Link to this property "Cloud" Link to this property
Link to this property
type: Literal\["Content", "Posture"] The type of the finding category. One of the following: "Content" Link to this property "Posture" Link to this property
Link to this property
Link to this property name: str The name of the finding. Link to this property
severity: Literal\["Critical", "High", "Medium", "Low"] Default severity used when no integration-specific severity override exists. One of the following: "Critical" Link to this property "High" Link to this property "Medium" Link to this property "Low" Link to this property
Link to this property vendor: str The SaaS/Cloud vendor of the platform with which the finding is associated. Link to this property description: Optional\[str] Detailed description of the finding. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.finding_types%20%3E%20(model)%20finding_type_get_response%20%3E%20(schema)>) #### CasbPostureFinding TypesRemediation Types ##### [List remediation types for a finding type](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/finding_types/subresources/remediation_types/methods/list) zero\_trust.casb.posture.finding\_types.remediation\_types.list(strfinding\_type\_id, RemediationTypeListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[RemediationTypeListResponse]()] GET/accounts/{account\_id}/data-security/posture/finding\_types/{finding\_type\_id}/remediation\_types ##### ModelsExpand Collapse
class RemediationTypeListResponse: … Information about a remediation type. id: str The identifier for the remediation type. formatuuid Link to this property description: str A description of the action(s) taken by the remediation type. Link to this property display\_name: str The name of the remediation type as displayed in the cloudflare dashboard. Link to this property finding\_type\_id: str The identifier of the finding\_type which this remediation type should remediate. formatuuid Link to this property remediation\_type: str The name of the remediation type. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.finding_types.remediation_types%20%3E%20(model)%20remediation_type_list_response%20%3E%20(schema)>) #### CasbPostureContent ##### [List DLP content findings](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/content/methods/list) zero\_trust.casb.posture.content.list(ContentListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[ContentListResponse]()] GET/accounts/{account\_id}/data-security/posture/content ##### [Create a content export](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/content/methods/export) zero\_trust.casb.posture.content.export(ContentExportParams\*\*kwargs) -> [ContentExportResponse]() POST/accounts/{account\_id}/data-security/posture/content/export ##### ModelsExpand Collapse
class ContentListResponse: … Content asset with DLP information. asset\_id: str Unique identifier for the asset. formatuuid Link to this property asset\_name: str Name of the asset. Link to this property
dlp\_contexts: List\[DLPContext] DLP context information for this asset. created: datetime When the DLP context was created. formatdate-time Link to this property entry\_ids: List\[str] DLP Entry IDs. Link to this property profile\_id: str DLP Profile ID. formatuuid Link to this property updated: datetime When the DLP context was last updated. formatdate-time Link to this property id: Optional\[str] Unique identifier for the DLP context. formatuuid Link to this property deleted: Optional\[datetime] When the DLP context was deleted. formatdate-time Link to this property match\_context\_max\_extent: Optional\[int] DLP Right Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_min\_extent: Optional\[int] DLP Left Boundary of match context. maximum2147483647 minimum0 Link to this property match\_context\_payload: Optional\[Dict\[str, object]] DLP Match context payload that matched the profile in question. Link to this property
Link to this property dlp\_profile\_count: int Number of DLP profiles that flagged this asset. Link to this property dlp\_profile\_ids: List\[str] IDs of DLP profiles that flagged this asset. Link to this property
integration: Integration Summary information about an integration. created: datetime When entity was created. formatdate-time Link to this property last\_hydrated: datetime When were the integration credentials last updated. formatdate-time Link to this property name: str Name of the integration. maxLength256 Link to this property permissions: List\[str] The vendor-specific permissions associated with the integration. Link to this property
policy: IntegrationPolicy Policy configuration for an integration. id: Optional\[str] Policy identifier. formatuuid Link to this property client\_id: Optional\[str] OAuth client ID for the policy. Link to this property compliance\_level: Optional\[str] Compliance level for the policy. Link to this property dlp\_enabled: Optional\[bool] Whether DLP is enabled for this policy. Link to this property link: Optional\[str] Link to policy documentation. formaturi Link to this property name: Optional\[str] Policy name. Link to this property permissions: Optional\[List\[str]] List of permissions included in the policy. Link to this property
Link to this property status: str Current status of the integration. Link to this property updated: datetime Last entity was updated. formatdate-time Link to this property upgradable: bool Whether the integrations permissions can be updated. Link to this property
vendor: IntegrationVendor Information about a vendor/service provider. id: str The id of the vendor. Link to this property description: Optional\[str] Detailed information about what kinds of issues are detected for this vendor. Link to this property display\_name: str The display name of the vendor. Link to this property logo: str Logo URL for the vendor. formaturi Link to this property name: str The name of the vendor. Link to this property static\_logo: str Static logo URL for the vendor. formaturi Link to this property zt\_enrollments: List\[str] The vendor’s compatible Zero Trust products. Link to this property policies: Optional\[List\[Dict\[str, object]]] The policies related to the vendor. Link to this property
Link to this property
zt\_enrollments: List\[IntegrationZtEnrollment] Zero Trust products associated with this integration. id: Optional\[str] The internal identifier of the Zero Trust Product. Link to this property description: Optional\[str] Brief description of the Zero Trust Product. Link to this property display\_name: Optional\[str] The verbose name of the Zero Trust Product. Link to this property enabled: Optional\[bool] Flag to enable/disable access to the listed integration from the corresponding Cloudflare product. Link to this property
Link to this property id: Optional\[str] Integration ID. formatuuid Link to this property
credential\_health\_status: Optional\[Literal\["Initializing", "Healthy", "Unhealthy"]] Health status of integration credentials. One of the following: "Initializing" Link to this property "Healthy" Link to this property "Unhealthy" Link to this property
Link to this property credentials\_expiry: Optional\[datetime] The date and time when the integration credentials will expire. formatdate-time Link to this property is\_paused: Optional\[bool] Whether the given integration is paused by the user. Link to this property upgrade\_dismissed: Optional\[bool] UI State as to whether a potential permissions upgrade has been dismissed. Link to this property
Link to this property latest\_affliction\_date: datetime Most recent date this asset was flagged. formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.content%20%3E%20(model)%20content_list_response%20%3E%20(schema)>)
class ContentExportResponse: … Information about an export job. id: str Unique identifier for the export job. formatuuid Link to this property
status: Literal\["Pending", "Success", "Failure", 2 more] Status of an export job. One of the following: "Pending" Link to this property "Success" Link to this property "Failure" Link to this property "Rescheduled" Link to this property "In-Progress" Link to this property
Link to this property
type: Literal\["finding", "findingInstance", "content", "remediationJob"] Type of export job. One of the following: "finding" Link to this property "findingInstance" Link to this property "content" Link to this property "remediationJob" Link to this property
Link to this property user\_id: str ID of the export-requesting user. maxLength128 Link to this property download\_url: Optional\[str] The URL by which the successfully created export can be downloaded by the end users. formaturi maxLength1024 Link to this property errors: Optional\[str] Contains information on errors which may have occurred during export creation. Link to this property file\_name: Optional\[str] The base name of the file that is/was generated by the export job. maxLength256 Link to this property file\_path: Optional\[str] The full path of the file that is stored within external storage (currently R2). maxLength512 Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.content%20%3E%20(model)%20content_export_response%20%3E%20(schema)>) #### CasbPostureRemediations #### CasbPostureRemediationsJobs ##### [List remediation jobs](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/remediations/subresources/jobs/methods/list) zero\_trust.casb.posture.remediations.jobs.list(JobListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[JobListResponse]()] GET/accounts/{account\_id}/data-security/posture/remediations/jobs ##### [Creates remediation jobs](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/remediations/subresources/jobs/methods/create) zero\_trust.casb.posture.remediations.jobs.create(JobCreateParams\*\*kwargs) -> [JobCreateResponse]() POST/accounts/{account\_id}/data-security/posture/remediations/jobs ##### [Create a remediation jobs export](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/remediations/subresources/jobs/methods/export) zero\_trust.casb.posture.remediations.jobs.export(JobExportParams\*\*kwargs) -> [JobExportResponse]() POST/accounts/{account\_id}/data-security/posture/remediations/jobs/export ##### ModelsExpand Collapse
class JobListResponse: … Information about a remediation job. id: str Unique identifier for the remediation job. formatuuid Link to this property
asset: Asset Asset information for a remediation job. id: str Unique identifier for the asset. formatuuid Link to this property
category: AssetCategory Category information for a remediation job asset. service: str Specific service within the vendor. Link to this property type: str Asset type. Link to this property
vendor: Literal\["AWS", "Anthropic", "Bitbucket", 14 more] Display names for vendor types. One of the following: "AWS" Link to this property "Anthropic" Link to this property "Bitbucket" Link to this property "Box" Link to this property "Confluence" Link to this property "Dropbox" Link to this property "GitHub" Link to this property "Google Cloud Platform" Link to this property "Google Workspace" Link to this property "Jira" Link to this property "Microsoft" Link to this property "Microsoft Internal" Link to this property "OpenAI" Link to this property "Slack" Link to this property "Salesforce" Link to this property "ServiceNow" Link to this property "Zoom" Link to this property
Link to this property
Link to this property external\_id: str External identifier from the source system. Link to this property
fields: List\[AssetField] Additional fields associated with the asset. name: str Field name. Link to this property
value: Union\[str, float, bool] Field value (can be string, number, or boolean). One of the following: str Link to this property float Link to this property bool Link to this property
Link to this property link: Optional\[str] Optional link associated with the field. formaturi Link to this property
Link to this property name: str Human-readable name of the asset. Link to this property link: Optional\[str] Direct link to the asset. formaturi Link to this property
Link to this property created\_at: datetime When the remediation job was created. formatdate-time Link to this property finding\_id: str Encoded finding ID. Link to this property finding\_instance\_id: str ID of the finding instance being remediated. formatuuid Link to this property finding\_type\_id: str ID of the finding type. formatuuid Link to this property finding\_type\_name: str Name of the finding type. Link to this property integration\_name: str Name of the integration. Link to this property last\_updated: datetime When the remediation job was last updated. formatdate-time Link to this property remediation\_type: str Type of remediation being performed. Link to this property
status: Literal\["pending", "processing", "completed", 2 more] Status of a remediation job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property "failed" Link to this property "validating" Link to this property
Link to this property triggered\_by\_user: str Email of the user who triggered the remediation. For account-token actors this is the literal “Account API Token”; for policy actors this is empty. Link to this property
triggered\_by\_actor: Optional\[Literal\["user", "account\_token"]] Type of actor that triggered the remediation job. Null on legacy rows created before this column was populated. One of the following: "user" Link to this property "account\_token" Link to this property
Link to this property triggered\_by\_id: Optional\[str] ID of the actor that triggered the job. Meaning depends on triggered\_by\_actor. Null on legacy rows. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.remediations.jobs%20%3E%20(model)%20job_list_response%20%3E%20(schema)>)
class JobCreateResponse: …
created: List\[Created] Successfully created remediation jobs. id: str Unique identifier for the remediation job. formatuuid Link to this property
asset: CreatedAsset Asset information for a remediation job. id: str Unique identifier for the asset. formatuuid Link to this property
category: CreatedAssetCategory Category information for a remediation job asset. service: str Specific service within the vendor. Link to this property type: str Asset type. Link to this property
vendor: Literal\["AWS", "Anthropic", "Bitbucket", 14 more] Display names for vendor types. One of the following: "AWS" Link to this property "Anthropic" Link to this property "Bitbucket" Link to this property "Box" Link to this property "Confluence" Link to this property "Dropbox" Link to this property "GitHub" Link to this property "Google Cloud Platform" Link to this property "Google Workspace" Link to this property "Jira" Link to this property "Microsoft" Link to this property "Microsoft Internal" Link to this property "OpenAI" Link to this property "Slack" Link to this property "Salesforce" Link to this property "ServiceNow" Link to this property "Zoom" Link to this property
Link to this property
Link to this property external\_id: str External identifier from the source system. Link to this property
fields: List\[CreatedAssetField] Additional fields associated with the asset. name: str Field name. Link to this property
value: Union\[str, float, bool] Field value (can be string, number, or boolean). One of the following: str Link to this property float Link to this property bool Link to this property
Link to this property link: Optional\[str] Optional link associated with the field. formaturi Link to this property
Link to this property name: str Human-readable name of the asset. Link to this property link: Optional\[str] Direct link to the asset. formaturi Link to this property
Link to this property created\_at: datetime When the remediation job was created. formatdate-time Link to this property finding\_id: str Encoded finding ID. Link to this property finding\_instance\_id: str ID of the finding instance being remediated. formatuuid Link to this property finding\_type\_id: str ID of the finding type. formatuuid Link to this property finding\_type\_name: str Name of the finding type. Link to this property integration\_name: str Name of the integration. Link to this property last\_updated: datetime When the remediation job was last updated. formatdate-time Link to this property remediation\_type: str Type of remediation being performed. Link to this property
status: Literal\["pending", "processing", "completed", 2 more] Status of a remediation job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property "failed" Link to this property "validating" Link to this property
Link to this property triggered\_by\_user: str Email of the user who triggered the remediation. For account-token actors this is the literal “Account API Token”; for policy actors this is empty. Link to this property
triggered\_by\_actor: Optional\[Literal\["user", "account\_token"]] Type of actor that triggered the remediation job. Null on legacy rows created before this column was populated. One of the following: "user" Link to this property "account\_token" Link to this property
Link to this property triggered\_by\_id: Optional\[str] ID of the actor that triggered the job. Meaning depends on triggered\_by\_actor. Null on legacy rows. Link to this property
Link to this property
failed: List\[Failed] Failed remediation job creation attempts. error: str Error message describing the failure. Link to this property finding\_instance\_id: str ID of the finding instance that failed to create a remediation job. formatuuid Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.remediations.jobs%20%3E%20(model)%20job_create_response%20%3E%20(schema)>)
class JobExportResponse: … Information about an export job. id: str Unique identifier for the export job. formatuuid Link to this property
status: Literal\["Pending", "Success", "Failure", 2 more] Status of an export job. One of the following: "Pending" Link to this property "Success" Link to this property "Failure" Link to this property "Rescheduled" Link to this property "In-Progress" Link to this property
Link to this property
type: Literal\["finding", "findingInstance", "content", "remediationJob"] Type of export job. One of the following: "finding" Link to this property "findingInstance" Link to this property "content" Link to this property "remediationJob" Link to this property
Link to this property user\_id: str ID of the export-requesting user. maxLength128 Link to this property download\_url: Optional\[str] The URL by which the successfully created export can be downloaded by the end users. formaturi maxLength1024 Link to this property errors: Optional\[str] Contains information on errors which may have occurred during export creation. Link to this property file\_name: Optional\[str] The base name of the file that is/was generated by the export job. maxLength256 Link to this property file\_path: Optional\[str] The full path of the file that is stored within external storage (currently R2). maxLength512 Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.remediations.jobs%20%3E%20(model)%20job_export_response%20%3E%20(schema)>) #### CasbPosturePolicies ##### [List policy configurations](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/policies/methods/list) zero\_trust.casb.posture.policies.list(PolicyListParams\*\*kwargs) -> SyncCursorPaginationAfter\[[PolicyListResponse]()] GET/accounts/{account\_id}/data-security/posture/policies ##### [Create a new policy configuration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/policies/methods/create) zero\_trust.casb.posture.policies.create(PolicyCreateParams\*\*kwargs) -> [PolicyCreateResponse]() POST/accounts/{account\_id}/data-security/posture/policies ##### [Get a policy configuration by ID](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/policies/methods/get) zero\_trust.casb.posture.policies.get(strpolicy\_id, PolicyGetParams\*\*kwargs) -> [PolicyGetResponse]() GET/accounts/{account\_id}/data-security/posture/policies/{policy\_id} ##### [Update a policy configuration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/policies/methods/update) zero\_trust.casb.posture.policies.update(strpolicy\_id, PolicyUpdateParams\*\*kwargs) -> [PolicyUpdateResponse]() PUT/accounts/{account\_id}/data-security/posture/policies/{policy\_id} ##### [Delete a policy configuration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/policies/methods/delete) zero\_trust.casb.posture.policies.delete(strpolicy\_id, PolicyDeleteParams\*\*kwargs) -> [PolicyDeleteResponse]() DELETE/accounts/{account\_id}/data-security/posture/policies/{policy\_id} ##### ModelsExpand Collapse
class PolicyListResponse: … Response body for a policy configuration. id: str Unique identifier for the policy configuration. formatuuid Link to this property
actions: Actions The actions configured for this policy.
remediation\_types: List\[ActionsRemediationType] List of remediation types that will be executed. display\_name: str Display name/label of the remediation type. Link to this property remediation\_type: str The system name of the remediation type. Link to this property remediation\_type\_id: str Unique identifier for the remediation type. formatuuid Link to this property
Link to this property
webhook\_configs: List\[ActionsWebhookConfig] List of webhook configurations that will be triggered. display\_name: str Display name/label of the webhook configuration. Link to this property webhook\_config\_id: str Unique identifier for the webhook configuration. formatuuid Link to this property
Link to this property
Link to this property applies\_to\_all\_integrations: bool When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration\_ids. Link to this property created\_at: datetime Timestamp when the policy was created. formatdate-time Link to this property description: str User-set description of what this policy does. Limited to 1000 characters. Link to this property display\_name: str Display name for the policy configuration. Limited to 255 characters. Link to this property enabled: bool Whether the policy is enabled. Derived from disabled\_at (enabled when disabled\_at is unset). Link to this property finding\_type\_id: str The finding type this policy is associated with. Immutable after creation; changing it replaces the policy. formatuuid Link to this property integration\_ids: List\[str] The integrations this policy applies to. Link to this property updated\_at: datetime Timestamp when the policy was last updated. formatdate-time Link to this property disabled\_at: Optional\[datetime] Timestamp when the policy was disabled. Omitted from the response when the policy is enabled. formatdate-time Link to this property last\_triggered\_at: Optional\[datetime] Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints. formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.policies%20%3E%20(model)%20policy_list_response%20%3E%20(schema)>)
class PolicyCreateResponse: … Response body for a policy configuration. id: str Unique identifier for the policy configuration. formatuuid Link to this property
actions: Actions The actions configured for this policy.
remediation\_types: List\[ActionsRemediationType] List of remediation types that will be executed. display\_name: str Display name/label of the remediation type. Link to this property remediation\_type: str The system name of the remediation type. Link to this property remediation\_type\_id: str Unique identifier for the remediation type. formatuuid Link to this property
Link to this property
webhook\_configs: List\[ActionsWebhookConfig] List of webhook configurations that will be triggered. display\_name: str Display name/label of the webhook configuration. Link to this property webhook\_config\_id: str Unique identifier for the webhook configuration. formatuuid Link to this property
Link to this property
Link to this property applies\_to\_all\_integrations: bool When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration\_ids. Link to this property created\_at: datetime Timestamp when the policy was created. formatdate-time Link to this property description: str User-set description of what this policy does. Limited to 1000 characters. Link to this property display\_name: str Display name for the policy configuration. Limited to 255 characters. Link to this property enabled: bool Whether the policy is enabled. Derived from disabled\_at (enabled when disabled\_at is unset). Link to this property finding\_type\_id: str The finding type this policy is associated with. Immutable after creation; changing it replaces the policy. formatuuid Link to this property integration\_ids: List\[str] The integrations this policy applies to. Link to this property updated\_at: datetime Timestamp when the policy was last updated. formatdate-time Link to this property disabled\_at: Optional\[datetime] Timestamp when the policy was disabled. Omitted from the response when the policy is enabled. formatdate-time Link to this property last\_triggered\_at: Optional\[datetime] Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints. formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.policies%20%3E%20(model)%20policy_create_response%20%3E%20(schema)>)
class PolicyGetResponse: … Response body for a policy configuration. id: str Unique identifier for the policy configuration. formatuuid Link to this property
actions: Actions The actions configured for this policy.
remediation\_types: List\[ActionsRemediationType] List of remediation types that will be executed. display\_name: str Display name/label of the remediation type. Link to this property remediation\_type: str The system name of the remediation type. Link to this property remediation\_type\_id: str Unique identifier for the remediation type. formatuuid Link to this property
Link to this property
webhook\_configs: List\[ActionsWebhookConfig] List of webhook configurations that will be triggered. display\_name: str Display name/label of the webhook configuration. Link to this property webhook\_config\_id: str Unique identifier for the webhook configuration. formatuuid Link to this property
Link to this property
Link to this property applies\_to\_all\_integrations: bool When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration\_ids. Link to this property created\_at: datetime Timestamp when the policy was created. formatdate-time Link to this property description: str User-set description of what this policy does. Limited to 1000 characters. Link to this property display\_name: str Display name for the policy configuration. Limited to 255 characters. Link to this property enabled: bool Whether the policy is enabled. Derived from disabled\_at (enabled when disabled\_at is unset). Link to this property finding\_type\_id: str The finding type this policy is associated with. Immutable after creation; changing it replaces the policy. formatuuid Link to this property integration\_ids: List\[str] The integrations this policy applies to. Link to this property updated\_at: datetime Timestamp when the policy was last updated. formatdate-time Link to this property disabled\_at: Optional\[datetime] Timestamp when the policy was disabled. Omitted from the response when the policy is enabled. formatdate-time Link to this property last\_triggered\_at: Optional\[datetime] Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints. formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.policies%20%3E%20(model)%20policy_get_response%20%3E%20(schema)>)
class PolicyUpdateResponse: … Response body for a policy configuration. id: str Unique identifier for the policy configuration. formatuuid Link to this property
actions: Actions The actions configured for this policy.
remediation\_types: List\[ActionsRemediationType] List of remediation types that will be executed. display\_name: str Display name/label of the remediation type. Link to this property remediation\_type: str The system name of the remediation type. Link to this property remediation\_type\_id: str Unique identifier for the remediation type. formatuuid Link to this property
Link to this property
webhook\_configs: List\[ActionsWebhookConfig] List of webhook configurations that will be triggered. display\_name: str Display name/label of the webhook configuration. Link to this property webhook\_config\_id: str Unique identifier for the webhook configuration. formatuuid Link to this property
Link to this property
Link to this property applies\_to\_all\_integrations: bool When true, the policy applies to all integrations for the account. When false, it applies only to the specified integration\_ids. Link to this property created\_at: datetime Timestamp when the policy was created. formatdate-time Link to this property description: str User-set description of what this policy does. Limited to 1000 characters. Link to this property display\_name: str Display name for the policy configuration. Limited to 255 characters. Link to this property enabled: bool Whether the policy is enabled. Derived from disabled\_at (enabled when disabled\_at is unset). Link to this property finding\_type\_id: str The finding type this policy is associated with. Immutable after creation; changing it replaces the policy. formatuuid Link to this property integration\_ids: List\[str] The integrations this policy applies to. Link to this property updated\_at: datetime Timestamp when the policy was last updated. formatdate-time Link to this property disabled\_at: Optional\[datetime] Timestamp when the policy was disabled. Omitted from the response when the policy is enabled. formatdate-time Link to this property last\_triggered\_at: Optional\[datetime] Timestamp of the most recent successful policy invocation. Omitted from the response when the policy has never been successfully triggered. Only populated on GET responses; absent on responses from create/update endpoints. formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.policies%20%3E%20(model)%20policy_update_response%20%3E%20(schema)>)
class PolicyDeleteResponse: … Response from DeletePolicy operation. id: str ID of the policy deleted. formatuuid Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.policies%20%3E%20(model)%20policy_delete_response%20%3E%20(schema)>) #### CasbPostureWebhooks ##### [List webhook configurations](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/webhooks/methods/list) zero\_trust.casb.posture.webhooks.list(WebhookListParams\*\*kwargs) -> SyncSinglePage\[[WebhookListResponse]()] GET/accounts/{account\_id}/data-security/posture/webhooks ##### [Create a new webhook configuration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/webhooks/methods/create) zero\_trust.casb.posture.webhooks.create(WebhookCreateParams\*\*kwargs) -> [WebhookCreateResponse]() POST/accounts/{account\_id}/data-security/posture/webhooks ##### [Get webhook configuration by ID](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/webhooks/methods/get) zero\_trust.casb.posture.webhooks.get(strwebhook\_id, WebhookGetParams\*\*kwargs) -> [WebhookGetResponse]() GET/accounts/{account\_id}/data-security/posture/webhooks/{webhook\_id} ##### [Update an existing webhook configuration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/webhooks/methods/update) zero\_trust.casb.posture.webhooks.update(strwebhook\_id, WebhookUpdateParams\*\*kwargs) -> [WebhookUpdateResponse]() PUT/accounts/{account\_id}/data-security/posture/webhooks/{webhook\_id} ##### [Delete a webhook configuration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/webhooks/methods/delete) zero\_trust.casb.posture.webhooks.delete(strwebhook\_id, WebhookDeleteParams\*\*kwargs) -> [WebhookDeleteResponse]() DELETE/accounts/{account\_id}/data-security/posture/webhooks/{webhook\_id} ##### [Test a webhook configuration before creating it](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/webhooks/methods/evaluate) zero\_trust.casb.posture.webhooks.evaluate(WebhookEvaluateParams\*\*kwargs) -> [WebhookEvaluateResponse]() POST/accounts/{account\_id}/data-security/posture/webhooks/evaluate ##### [Test an existing webhook configuration](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/webhooks/methods/evaluate_existing) zero\_trust.casb.posture.webhooks.evaluate\_existing(strwebhook\_id, WebhookEvaluateExistingParams\*\*kwargs) -> [WebhookEvaluateExistingResponse]() POST/accounts/{account\_id}/data-security/posture/webhooks/{webhook\_id}/evaluate ##### ModelsExpand Collapse
class WebhookListResponse: … Webhook configuration for sending finding notifications. id: str Unique identifier for the specific webhook configuration. formatuuid Link to this property
authentication\_type: Literal\["Basic Auth", "None", "Bearer Auth", 2 more] Type of authentication used for the webhook. One of the following: "Basic Auth" Link to this property "None" Link to this property "Bearer Auth" Link to this property "Static Headers" Link to this property "HMAC-Signing" Link to this property
Link to this property created\_at: datetime Timestamp when the webhook configuration was created. formatdate-time Link to this property destination\_url: str Target URL for the webhook configuration. Where resulting data will be sent. formaturi Link to this property label: str Account-specified display label for the webhook configuration. Link to this property
status: Literal\["enabled", "disabled"] Current status of the webhook configuration. If disabled, data cannot be sent through this configuration. One of the following: "enabled" Link to this property "disabled" Link to this property
Link to this property updated\_at: datetime Timestamp when the webhook configuration was last updated. formatdate-time Link to this property version: int Version number of the configuration. formatuint32 Link to this property
headers: Optional\[List\[Header]] List of header keys configured for this webhook. Values are not included for security reasons. key: Optional\[str] Header key name (lowercase). Link to this property value: Optional\[str] Header value. This field is never returned in API responses for security reasons. Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.webhooks%20%3E%20(model)%20webhook_list_response%20%3E%20(schema)>)
class WebhookCreateResponse: … Webhook configuration for sending finding notifications. id: str Unique identifier for the specific webhook configuration. formatuuid Link to this property
authentication\_type: Literal\["Basic Auth", "None", "Bearer Auth", 2 more] Type of authentication used for the webhook. One of the following: "Basic Auth" Link to this property "None" Link to this property "Bearer Auth" Link to this property "Static Headers" Link to this property "HMAC-Signing" Link to this property
Link to this property created\_at: datetime Timestamp when the webhook configuration was created. formatdate-time Link to this property destination\_url: str Target URL for the webhook configuration. Where resulting data will be sent. formaturi Link to this property label: str Account-specified display label for the webhook configuration. Link to this property
status: Literal\["enabled", "disabled"] Current status of the webhook configuration. If disabled, data cannot be sent through this configuration. One of the following: "enabled" Link to this property "disabled" Link to this property
Link to this property updated\_at: datetime Timestamp when the webhook configuration was last updated. formatdate-time Link to this property version: int Version number of the configuration. formatuint32 Link to this property
headers: Optional\[List\[Header]] List of header keys configured for this webhook. Values are not included for security reasons. key: Optional\[str] Header key name (lowercase). Link to this property value: Optional\[str] Header value. This field is never returned in API responses for security reasons. Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.webhooks%20%3E%20(model)%20webhook_create_response%20%3E%20(schema)>)
class WebhookGetResponse: … Webhook configuration for sending finding notifications. id: str Unique identifier for the specific webhook configuration. formatuuid Link to this property
authentication\_type: Literal\["Basic Auth", "None", "Bearer Auth", 2 more] Type of authentication used for the webhook. One of the following: "Basic Auth" Link to this property "None" Link to this property "Bearer Auth" Link to this property "Static Headers" Link to this property "HMAC-Signing" Link to this property
Link to this property created\_at: datetime Timestamp when the webhook configuration was created. formatdate-time Link to this property destination\_url: str Target URL for the webhook configuration. Where resulting data will be sent. formaturi Link to this property label: str Account-specified display label for the webhook configuration. Link to this property
status: Literal\["enabled", "disabled"] Current status of the webhook configuration. If disabled, data cannot be sent through this configuration. One of the following: "enabled" Link to this property "disabled" Link to this property
Link to this property updated\_at: datetime Timestamp when the webhook configuration was last updated. formatdate-time Link to this property version: int Version number of the configuration. formatuint32 Link to this property
headers: Optional\[List\[Header]] List of header keys configured for this webhook. Values are not included for security reasons. key: Optional\[str] Header key name (lowercase). Link to this property value: Optional\[str] Header value. This field is never returned in API responses for security reasons. Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.webhooks%20%3E%20(model)%20webhook_get_response%20%3E%20(schema)>)
class WebhookUpdateResponse: … Webhook configuration for sending finding notifications. id: str Unique identifier for the specific webhook configuration. formatuuid Link to this property
authentication\_type: Literal\["Basic Auth", "None", "Bearer Auth", 2 more] Type of authentication used for the webhook. One of the following: "Basic Auth" Link to this property "None" Link to this property "Bearer Auth" Link to this property "Static Headers" Link to this property "HMAC-Signing" Link to this property
Link to this property created\_at: datetime Timestamp when the webhook configuration was created. formatdate-time Link to this property destination\_url: str Target URL for the webhook configuration. Where resulting data will be sent. formaturi Link to this property label: str Account-specified display label for the webhook configuration. Link to this property
status: Literal\["enabled", "disabled"] Current status of the webhook configuration. If disabled, data cannot be sent through this configuration. One of the following: "enabled" Link to this property "disabled" Link to this property
Link to this property updated\_at: datetime Timestamp when the webhook configuration was last updated. formatdate-time Link to this property version: int Version number of the configuration. formatuint32 Link to this property
headers: Optional\[List\[Header]] List of header keys configured for this webhook. Values are not included for security reasons. key: Optional\[str] Header key name (lowercase). Link to this property value: Optional\[str] Header value. This field is never returned in API responses for security reasons. Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.webhooks%20%3E%20(model)%20webhook_update_response%20%3E%20(schema)>)
class WebhookDeleteResponse: … Common response structure for all API endpoints.
errors: List\[Error] code: int Error or message code. minimum1000 Link to this property message: str Human-readable message. Link to this property documentation\_url: Optional\[str] Link to relevant documentation. formaturi Link to this property
source: Optional\[ErrorSource] pointer: Optional\[str] JSON pointer to the source of the error. Link to this property
Link to this property
Link to this property
messages: List\[Message] code: int Error or message code. minimum1000 Link to this property message: str Human-readable message. Link to this property documentation\_url: Optional\[str] Link to relevant documentation. formaturi Link to this property
source: Optional\[MessageSource] pointer: Optional\[str] JSON pointer to the source of the error. Link to this property
Link to this property
Link to this property success: bool Whether the API call was successful. Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.webhooks%20%3E%20(model)%20webhook_delete_response%20%3E%20(schema)>)
class WebhookEvaluateResponse: … Response body for webhook evaluation test results. message: str Human-readable message describing the test result. Link to this property status\_code: int HTTP status code returned by the webhook endpoint. 0 if connection failed. Link to this property success: bool Whether the webhook test was successful (received 2xx response). Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.webhooks%20%3E%20(model)%20webhook_evaluate_response%20%3E%20(schema)>)
class WebhookEvaluateExistingResponse: … Response body for webhook evaluation test results. message: str Human-readable message describing the test result. Link to this property status\_code: int HTTP status code returned by the webhook endpoint. 0 if connection failed. Link to this property success: bool Whether the webhook test was successful (received 2xx response). Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.webhooks%20%3E%20(model)%20webhook_evaluate_existing_response%20%3E%20(schema)>) #### CasbPostureWebhooksJobs ##### [Create webhook jobs](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/casb/subresources/posture/subresources/webhooks/subresources/jobs/methods/create) zero\_trust.casb.posture.webhooks.jobs.create(JobCreateParams\*\*kwargs) -> [JobCreateResponse]() POST/accounts/{account\_id}/data-security/posture/webhooks/jobs ##### ModelsExpand Collapse
class JobCreateResponse: …
created: List\[Created] Successfully created webhook jobs. id: str Unique identifier for the webhook job. formatuuid Link to this property asset\_data: Dict\[str, object] Asset data associated with this webhook job. Link to this property created\_at: datetime When the webhook job was created. formatdate-time Link to this property integration\_id: str ID of the integration. formatuuid Link to this property last\_updated\_at: datetime When the webhook job was last updated. formatdate-time Link to this property
parameters: CreatedParameters Parameters for a webhook job. finding\_instance\_id: str ID of the finding instance. formatuuid Link to this property
Link to this property
status: Literal\["pending", "processing", "completed", "failed"] Status of a webhook job. One of the following: "pending" Link to this property "processing" Link to this property "completed" Link to this property "failed" Link to this property
Link to this property
triggered\_by\_actor: Literal\["user", "account\_token"] Type of actor that triggered the webhook job. One of the following: "user" Link to this property "account\_token" Link to this property
Link to this property triggered\_by\_id: str ID of the actor that triggered the job. Link to this property webhook\_id: str ID of the webhook configuration. formatuuid Link to this property failure\_details: Optional\[Dict\[str, object]] Additional details about the failure. Link to this property
failure\_reason: Optional\[Literal\["Permission Denied", "Integration Unavailable", "Service Temporarily Unavailable", "System Error"]] Reason for webhook job failure. One of the following: "Permission Denied" Link to this property "Integration Unavailable" Link to this property "Service Temporarily Unavailable" Link to this property "System Error" Link to this property
Link to this property
Link to this property
failed: List\[Failed] Failed webhook job creation attempts. error: str Error message describing the failure. Link to this property finding\_instance\_id: str ID of the finding instance that failed to create a webhook job. formatuuid Link to this property webhook\_id: str ID of the webhook configuration. formatuuid Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.casb.posture.webhooks.jobs%20%3E%20(model)%20job_create_response%20%3E%20(schema)>)