---
title: Email Security
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api/terraform)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Email Security
#### Email SecuritySettingsAllow Policies
#### resource cloudflare\_email\_security\_allow\_policy
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
is\_acceptable\_sender: Bool
Exempts messages from this sender from Spam, Spoof and Bulk dispositions only; Malicious and Suspicious dispositions still apply.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_acceptable_sender>)
is\_exempt\_recipient: Bool
Bypasses all detections for messages to this recipient.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_exempt_recipient>)
is\_regex: Bool
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_regex>)
is\_trusted\_sender: Bool
Bypasses all detections and link following for messages from this sender.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_trusted_sender>)
pattern: String
The pattern value to match. The format depends on `pattern_type`: a valid email address for EMAIL (e.g. `user@example.com`), a valid domain name for DOMAIN (e.g. `example.com`), or a plain IPv4 or IPv6 address or CIDR block for IP (e.g. `1.2.3.4`, `1.2.3.0/24`, `2606:4700:4700::1111`, or `2606:4700:4700::/48`); the API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20pattern>)
pattern\_type: String
Type of pattern matching.
- EMAIL: matches a full email address (e.g. `user@example.com`)
- DOMAIN: matches a domain name (e.g. `example.com`)
- IP: matches a plain IPv4 or IPv6 address (e.g. `1.2.3.4` or `2606:4700:4700::1111`) or CIDR block (e.g. `1.2.3.0/24` or `2606:4700:4700::/48`). The API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
- UNKNOWN: deprecated; you cannot use this when creating or updating policies, but it may appear on existing entries.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20pattern_type>)
verify\_sender: Bool
Enforce DMARC, SPF or DKIM authentication. When on, Email Security only honors policies that pass authentication.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20verify_sender>)
##### optional Expand Collapse
comments?: String
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20comments>)
Deprecatedis\_recipient?: Bool
Use `is_exempt_recipient` instead.
Deprecated as of July 1, 2025. Use `is_exempt_recipient` instead. End of life: July 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_recipient>)
Deprecatedis\_sender?: Bool
Use `is_trusted_sender` instead.
Deprecated as of July 1, 2025. Use `is_trusted_sender` instead. End of life: July 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_sender>)
Deprecatedis\_spoof?: Bool
Use `is_acceptable_sender` instead.
Deprecated as of July 1, 2025. Use `is_acceptable_sender` instead. End of life: July 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_spoof>)
##### computed Expand Collapse
id: String
Allow policy identifier.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_at>)
### cloudflare\_email\_security\_allow\_policy
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_email_security_allow_policy" "example_email_security_allow_policy" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
is_acceptable_sender = false
is_exempt_recipient = false
is_regex = false
is_trusted_sender = true
pattern = "test@example.com"
pattern_type = "EMAIL"
verify_sender = true
comments = "Trust all messages send from test@example.com"
is_recipient = false
is_sender = true
is_spoof = false
}
```
#### data cloudflare\_email\_security\_allow\_policy
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
policy\_id?: String
Allow policy identifier.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20policy_id>)
filter?: Attributes
direction?: String
The sorting direction.
Link to this property
is\_acceptable\_sender?: Bool
Filter to show only policies where messages from the sender are exempted from Spam, Spoof, and Bulk dispositions (not Malicious or Suspicious).
Link to this property
is\_exempt\_recipient?: Bool
Filter to show only policies where messages to the recipient bypass all detections.
Link to this property
is\_trusted\_sender?: Bool
Filter to show only policies where messages from the sender bypass all detections and link following.
Link to this property
order?: String
Field to sort by.
Link to this property
pattern?: String
Filter by exact pattern value.
Link to this property
pattern\_type?: String
Filter by pattern type.
Link to this property
search?: String
Search term for filtering records. Behavior may change.
Link to this property
verify\_sender?: Bool
Filter to show only policies that enforce DMARC, SPF, or DKIM authentication.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>)
##### computed Expand Collapse
id: String
Allow policy identifier.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
comments: String
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20comments>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>)
is\_acceptable\_sender: Bool
Exempts messages from this sender from Spam, Spoof and Bulk dispositions only; Malicious and Suspicious dispositions still apply.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_acceptable_sender>)
is\_exempt\_recipient: Bool
Bypasses all detections for messages to this recipient.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_exempt_recipient>)
Deprecatedis\_recipient: Bool
Use `is_exempt_recipient` instead.
Deprecated as of July 1, 2025. Use `is_exempt_recipient` instead. End of life: July 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_recipient>)
is\_regex: Bool
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_regex>)
Deprecatedis\_sender: Bool
Use `is_trusted_sender` instead.
Deprecated as of July 1, 2025. Use `is_trusted_sender` instead. End of life: July 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_sender>)
Deprecatedis\_spoof: Bool
Use `is_acceptable_sender` instead.
Deprecated as of July 1, 2025. Use `is_acceptable_sender` instead. End of life: July 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_spoof>)
is\_trusted\_sender: Bool
Bypasses all detections and link following for messages from this sender.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_trusted_sender>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_at>)
pattern: String
The pattern value to match. The format depends on `pattern_type`: a valid email address for EMAIL (e.g. `user@example.com`), a valid domain name for DOMAIN (e.g. `example.com`), or a plain IPv4 or IPv6 address or CIDR block for IP (e.g. `1.2.3.4`, `1.2.3.0/24`, `2606:4700:4700::1111`, or `2606:4700:4700::/48`); the API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20pattern>)
pattern\_type: String
Type of pattern matching.
- EMAIL: matches a full email address (e.g. `user@example.com`)
- DOMAIN: matches a domain name (e.g. `example.com`)
- IP: matches a plain IPv4 or IPv6 address (e.g. `1.2.3.4` or `2606:4700:4700::1111`) or CIDR block (e.g. `1.2.3.0/24` or `2606:4700:4700::/48`). The API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
- UNKNOWN: deprecated; you cannot use this when creating or updating policies, but it may appear on existing entries.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20pattern_type>)
verify\_sender: Bool
Enforce DMARC, SPF or DKIM authentication. When on, Email Security only honors policies that pass authentication.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20verify_sender>)
### cloudflare\_email\_security\_allow\_policy
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_allow_policy" "example_email_security_allow_policy" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
policy_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
```
#### data cloudflare\_email\_security\_allow\_policies
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
direction?: String
The sorting direction.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>)
is\_acceptable\_sender?: Bool
Filter to show only policies where messages from the sender are exempted from Spam, Spoof, and Bulk dispositions (not Malicious or Suspicious).
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20is_acceptable_sender>)
is\_exempt\_recipient?: Bool
Filter to show only policies where messages to the recipient bypass all detections.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20is_exempt_recipient>)
is\_trusted\_sender?: Bool
Filter to show only policies where messages from the sender bypass all detections and link following.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20is_trusted_sender>)
order?: String
Field to sort by.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20order>)
pattern?: String
Filter by exact pattern value.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20pattern>)
pattern\_type?: String
Filter by pattern type.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20pattern_type>)
search?: String
Search term for filtering records. Behavior may change.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20search>)
verify\_sender?: Bool
Filter to show only policies that enforce DMARC, SPF, or DKIM authentication.
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20verify_sender>)
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Allow policy identifier.
Link to this property
created\_at: Time
Link to this property
Deprecatedlast\_modified: Time
Use modified_at instead.
Deprecated, use modified_at instead. End of life: November 1, 2026.
Link to this property
comments: String
Link to this property
is\_acceptable\_sender: Bool
Exempts messages from this sender from Spam, Spoof and Bulk dispositions only; Malicious and Suspicious dispositions still apply.
Link to this property
is\_exempt\_recipient: Bool
Bypasses all detections for messages to this recipient.
Link to this property
Deprecatedis\_recipient: Bool
Use is_exempt_recipient instead.
Deprecated as of July 1, 2025. Use is_exempt_recipient instead. End of life: July 1, 2026.
Link to this property
is\_regex: Bool
Link to this property
Deprecatedis\_sender: Bool
Use is_trusted_sender instead.
Deprecated as of July 1, 2025. Use is_trusted_sender instead. End of life: July 1, 2026.
Link to this property
Deprecatedis\_spoof: Bool
Use is_acceptable_sender instead.
Deprecated as of July 1, 2025. Use is_acceptable_sender instead. End of life: July 1, 2026.
Link to this property
is\_trusted\_sender: Bool
Bypasses all detections and link following for messages from this sender.
Link to this property
modified\_at: Time
Link to this property
pattern: String
The pattern value to match. The format depends on pattern_type: a valid email address for EMAIL (e.g. user@example.com), a valid domain name for DOMAIN (e.g. example.com), or a plain IPv4 or IPv6 address or CIDR block for IP (e.g. 1.2.3.4, 1.2.3.0/24, 2606:4700:4700::1111, or 2606:4700:4700::/48); the API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
Link to this property
pattern\_type: String
Type of pattern matching.
- EMAIL: matches a full email address (e.g. user@example.com)
- DOMAIN: matches a domain name (e.g. example.com)
- IP: matches a plain IPv4 or IPv6 address (e.g. 1.2.3.4 or 2606:4700:4700::1111) or CIDR block (e.g. 1.2.3.0/24 or 2606:4700:4700::/48). The API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
- UNKNOWN: deprecated; you cannot use this when creating or updating policies, but it may appear on existing entries.
Link to this property
verify\_sender: Bool
Enforce DMARC, SPF or DKIM authentication. When on, Email Security only honors policies that pass authentication.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.allow_policies%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_email\_security\_allow\_policies
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_allow_policies" "example_email_security_allow_policies" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
direction = "asc"
is_acceptable_sender = true
is_exempt_recipient = true
is_trusted_sender = true
order = "pattern"
pattern = "pattern"
pattern_type = "EMAIL"
search = "search"
verify_sender = true
}
```
#### Email SecuritySettingsBlock Senders
#### resource cloudflare\_email\_security\_block\_sender
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
is\_regex: Bool
Whether `pattern` is a regular expression instead of a literal value.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_regex>)
pattern: String
The pattern value to match. The format depends on `pattern_type`: a valid email address for EMAIL (e.g. `user@example.com`), a valid domain name for DOMAIN (e.g. `example.com`), or a plain IPv4 or IPv6 address or CIDR block for IP (e.g. `1.2.3.4`, `1.2.3.0/24`, `2606:4700:4700::1111`, or `2606:4700:4700::/48`); the API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20pattern>)
pattern\_type: String
Type of pattern matching.
- EMAIL: matches a full email address (e.g. `user@example.com`)
- DOMAIN: matches a domain name (e.g. `example.com`)
- IP: matches a plain IPv4 or IPv6 address (e.g. `1.2.3.4` or `2606:4700:4700::1111`) or CIDR block (e.g. `1.2.3.0/24` or `2606:4700:4700::/48`). The API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
- UNKNOWN: deprecated; you cannot use this when creating or updating policies, but it may appear on existing entries.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20pattern_type>)
##### optional Expand Collapse
comments?: String
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20comments>)
##### computed Expand Collapse
id: String
Blocked sender pattern identifier.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_at>)
### cloudflare\_email\_security\_block\_sender
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_email_security_block_sender" "example_email_security_block_sender" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
is_regex = false
pattern = "test@example.com"
pattern_type = "EMAIL"
comments = "Block sender with email test@example.com"
}
```
#### data cloudflare\_email\_security\_block\_sender
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
pattern\_id?: String
Blocked sender pattern identifier.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20pattern_id>)
filter?: Attributes
direction?: String
The sorting direction.
Link to this property
order?: String
Field to sort by.
Link to this property
pattern?: String
Filter by pattern value.
Link to this property
pattern\_type?: String
Filter by pattern type.
Link to this property
search?: String
Search term for filtering records. Behavior may change.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>)
##### computed Expand Collapse
id: String
Blocked sender pattern identifier.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
comments: String
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20comments>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>)
is\_regex: Bool
Whether `pattern` is a regular expression instead of a literal value.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_regex>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_at>)
pattern: String
The pattern value to match. The format depends on `pattern_type`: a valid email address for EMAIL (e.g. `user@example.com`), a valid domain name for DOMAIN (e.g. `example.com`), or a plain IPv4 or IPv6 address or CIDR block for IP (e.g. `1.2.3.4`, `1.2.3.0/24`, `2606:4700:4700::1111`, or `2606:4700:4700::/48`); the API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20pattern>)
pattern\_type: String
Type of pattern matching.
- EMAIL: matches a full email address (e.g. `user@example.com`)
- DOMAIN: matches a domain name (e.g. `example.com`)
- IP: matches a plain IPv4 or IPv6 address (e.g. `1.2.3.4` or `2606:4700:4700::1111`) or CIDR block (e.g. `1.2.3.0/24` or `2606:4700:4700::/48`). The API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
- UNKNOWN: deprecated; you cannot use this when creating or updating policies, but it may appear on existing entries.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20pattern_type>)
### cloudflare\_email\_security\_block\_sender
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_block_sender" "example_email_security_block_sender" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
pattern_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
```
#### data cloudflare\_email\_security\_block\_senders
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
direction?: String
The sorting direction.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>)
order?: String
Field to sort by.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20order>)
pattern?: String
Filter by pattern value.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20pattern>)
pattern\_type?: String
Filter by pattern type.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20pattern_type>)
search?: String
Search term for filtering records. Behavior may change.
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20search>)
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Blocked sender pattern identifier.
Link to this property
comments: String
Link to this property
created\_at: Time
Link to this property
is\_regex: Bool
Whether pattern is a regular expression instead of a literal value.
Link to this property
Deprecatedlast\_modified: Time
Use modified_at instead.
Deprecated, use modified_at instead. End of life: November 1, 2026.
Link to this property
modified\_at: Time
Link to this property
pattern: String
The pattern value to match. The format depends on pattern_type: a valid email address for EMAIL (e.g. user@example.com), a valid domain name for DOMAIN (e.g. example.com), or a plain IPv4 or IPv6 address or CIDR block for IP (e.g. 1.2.3.4, 1.2.3.0/24, 2606:4700:4700::1111, or 2606:4700:4700::/48); the API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
Link to this property
pattern\_type: String
Type of pattern matching.
- EMAIL: matches a full email address (e.g. user@example.com)
- DOMAIN: matches a domain name (e.g. example.com)
- IP: matches a plain IPv4 or IPv6 address (e.g. 1.2.3.4 or 2606:4700:4700::1111) or CIDR block (e.g. 1.2.3.0/24 or 2606:4700:4700::/48). The API rejects private or unique-local, loopback, link-local, unspecified, and IPv4 broadcast addresses, including their IPv4-mapped IPv6 equivalents.
- UNKNOWN: deprecated; you cannot use this when creating or updating policies, but it may appear on existing entries.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.block_senders%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_email\_security\_block\_senders
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_block_senders" "example_email_security_block_senders" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
direction = "asc"
order = "pattern"
pattern = "pattern"
pattern_type = "EMAIL"
search = "search"
}
```
#### Email SecuritySettingsDomains
#### resource cloudflare\_email\_security\_domain
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
domain: String
The email domain to protect.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20domain>)
allowed\_delivery\_modes: Set\[String]
Delivery modes to onboard the domain through.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20allowed_delivery_modes>)
drop\_dispositions: Set\[String]
Dispositions to drop instead of delivering, e.g. `["MALICIOUS", "SPAM"]`.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20drop_dispositions>)
ip\_restrictions: Set\[String]
Source IP ranges mail is accepted from. Any other source is rejected.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20ip_restrictions>)
regions: Set\[String]
Regions that process messages for this domain, e.g. `["GLOBAL"]` or `["US"]`.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20regions>)
##### optional Expand Collapse
integration\_id?: String
Identifier of the CASB integration that authorizes this domain. The integration also enables API scanning, post-delivery actions, and directory sync.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20integration_id>)
transport?: String
The mail transport hostname for MX/Inline delivery — the MX record Cloudflare delivers email to (e.g. `mx.example.com`).
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20transport>)
folder?: String
The mailbox folder to scan, for API-scanning domains.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20folder>)
lookback\_hops?: Int64
Number of hops to trace back through received headers when reconstructing the original message (1-20).
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20lookback_hops>)
require\_tls\_inbound?: Bool
Require TLS on inbound connections.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20require_tls_inbound>)
require\_tls\_outbound?: Bool
Require TLS on outbound connections.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20require_tls_outbound>)
##### computed Expand Collapse
id: String
Domain identifier.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>)
dmarc\_status: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20dmarc_status>)
inbox\_provider: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20inbox_provider>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_at>)
o365\_tenant\_id: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20o365_tenant_id>)
spf\_status: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20spf_status>)
status: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20status>)
authorization: Attributes
authorized: Bool
Link to this property
timestamp: Time
Link to this property
status\_message: String
Link to this property
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20authorization>)
emails\_processed: Attributes
timestamp: Time
Link to this property
total\_emails\_processed: Int64
Link to this property
total\_emails\_processed\_previous: Int64
Link to this property
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20emails_processed>)
### cloudflare\_email\_security\_domain
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_email_security_domain" "example_email_security_domain" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
allowed_delivery_modes = ["DIRECT"]
domain = "domain"
drop_dispositions = ["MALICIOUS"]
ip_restrictions = ["192.0.2.0/24", "2001:db8::/32"]
regions = ["GLOBAL"]
folder = "AllItems"
integration_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
lookback_hops = 1
require_tls_inbound = true
require_tls_outbound = true
transport = "transport"
}
```
#### data cloudflare\_email\_security\_domain
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
domain\_id?: String
Domain identifier.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20domain_id>)
filter?: Attributes
active\_delivery\_mode?: String
Currently active delivery mode to filter by.
Link to this property
allowed\_delivery\_mode?: String
Delivery mode to filter by.
Link to this property
direction?: String
The sorting direction.
Link to this property
domain?: List\[String]
Domain names to filter by.
Link to this property
integration\_id?: String
Integration ID to filter by.
Link to this property
order?: String
Field to sort by.
Link to this property
search?: String
Search term for filtering records. Behavior may change.
Link to this property
status?: String
Filters response to domains with the provided status.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>)
##### computed Expand Collapse
id: String
Domain identifier.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>)
dmarc\_status: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dmarc_status>)
domain: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20domain>)
folder: String
The mailbox folder to scan, for API-scanning domains.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20folder>)
inbox\_provider: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20inbox_provider>)
integration\_id: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20integration_id>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_modified>)
lookback\_hops: Int64
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20lookback_hops>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_at>)
o365\_tenant\_id: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20o365_tenant_id>)
require\_tls\_inbound: Bool
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20require_tls_inbound>)
require\_tls\_outbound: Bool
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20require_tls_outbound>)
spf\_status: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20spf_status>)
status: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20status>)
transport: String
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20transport>)
allowed\_delivery\_modes: Set\[String]
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20allowed_delivery_modes>)
drop\_dispositions: Set\[String]
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20drop_dispositions>)
ip\_restrictions: Set\[String]
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20ip_restrictions>)
regions: Set\[String]
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20regions>)
authorization: Attributes
authorized: Bool
Link to this property
timestamp: Time
Link to this property
status\_message: String
Link to this property
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20authorization>)
emails\_processed: Attributes
timestamp: Time
Link to this property
total\_emails\_processed: Int64
Link to this property
total\_emails\_processed\_previous: Int64
Link to this property
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20emails_processed>)
### cloudflare\_email\_security\_domain
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_domain" "example_email_security_domain" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
domain_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
```
#### data cloudflare\_email\_security\_domains
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
active\_delivery\_mode?: String
Currently active delivery mode to filter by.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20active_delivery_mode>)
allowed\_delivery\_mode?: String
Delivery mode to filter by.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20allowed_delivery_mode>)
direction?: String
The sorting direction.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>)
integration\_id?: String
Integration ID to filter by.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20integration_id>)
order?: String
Field to sort by.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20order>)
search?: String
Search term for filtering records. Behavior may change.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20search>)
status?: String
Filters response to domains with the provided status.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20status>)
domain?: List\[String]
Domain names to filter by.
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20domain>)
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Domain identifier.
Link to this property
allowed\_delivery\_modes: Set\[String]
Link to this property
authorization: Attributes
authorized: Bool
Link to this property
timestamp: Time
Link to this property
status\_message: String
Link to this property
Link to this property
created\_at: Time
Link to this property
dmarc\_status: String
Link to this property
domain: String
Link to this property
drop\_dispositions: Set\[String]
Link to this property
emails\_processed: Attributes
timestamp: Time
Link to this property
total\_emails\_processed: Int64
Link to this property
total\_emails\_processed\_previous: Int64
Link to this property
Link to this property
folder: String
The mailbox folder to scan, for API-scanning domains.
Link to this property
inbox\_provider: String
Link to this property
integration\_id: String
Link to this property
ip\_restrictions: Set\[String]
Link to this property
Deprecatedlast\_modified: Time
Use modified_at instead.
Deprecated, use modified_at instead. End of life: November 1, 2026.
Link to this property
lookback\_hops: Int64
Link to this property
modified\_at: Time
Link to this property
o365\_tenant\_id: String
Link to this property
regions: Set\[String]
Link to this property
require\_tls\_inbound: Bool
Link to this property
require\_tls\_outbound: Bool
Link to this property
spf\_status: String
Link to this property
status: String
Link to this property
transport: String
Link to this property
[Link to this property](<#(resource)%20email_security.settings.domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_email\_security\_domains
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_domains" "example_email_security_domains" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
active_delivery_mode = "DIRECT"
allowed_delivery_mode = "DIRECT"
direction = "asc"
domain = ["string"]
integration_id = "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e"
order = "domain"
search = "search"
status = "PENDING"
}
```
#### Email SecuritySettingsImpersonation Registry
#### resource cloudflare\_email\_security\_impersonation\_registry
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
email: String
Email address (or pattern) of the protected identity.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20email>)
is\_email\_regex: Bool
Whether `email` is a regular expression instead of a literal address.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_email_regex>)
name: String
Display name of the protected identity.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)
##### optional Expand Collapse
comments?: String
Optional note describing the entry.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20comments>)
directory\_id?: Int64
Identifier of the directory the entry was synced from, when directory-synced.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20directory_id>)
directory\_node\_id?: Int64
Identifier of the directory node the entry was synced from, when directory-synced.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20directory_node_id>)
Deprecatedexternal\_directory\_node\_id?: String
This field is deprecated.
Deprecated. External identifier of the directory node.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20external_directory_node_id>)
provenance?: String
Source the entry was created from.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20provenance>)
##### computed Expand Collapse
id: String
Impersonation registry entry identifier.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_at>)
### cloudflare\_email\_security\_impersonation\_registry
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_email_security_impersonation_registry" "example_email_security_impersonation_registry" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
email = "john.doe@example.com"
is_email_regex = false
name = "John Doe"
comments = "comments"
directory_id = 0
directory_node_id = 0
external_directory_node_id = "external_directory_node_id"
provenance = "A1S_INTERNAL"
}
```
#### data cloudflare\_email\_security\_impersonation\_registry
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
impersonation\_registry\_id?: String
Impersonation registry entry identifier.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20impersonation_registry_id>)
filter?: Attributes
direction?: String
The sorting direction.
Link to this property
order?: String
Field to sort by.
Link to this property
provenance?: String
Link to this property
search?: String
Search term for filtering records. Behavior may change.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>)
##### computed Expand Collapse
id: String
Impersonation registry entry identifier.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
comments: String
Optional note describing the entry.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20comments>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>)
directory\_id: Int64
Identifier of the directory the entry was synced from, when directory-synced.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20directory_id>)
directory\_node\_id: Int64
Identifier of the directory node the entry was synced from, when directory-synced.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20directory_node_id>)
email: String
Email address (or pattern) of the protected identity.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20email>)
Deprecatedexternal\_directory\_node\_id: String
This field is deprecated.
Deprecated. External identifier of the directory node.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20external_directory_node_id>)
is\_email\_regex: Bool
Whether `email` is a regular expression instead of a literal address.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_email_regex>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_at>)
name: String
Display name of the protected identity.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)
provenance: String
Source the entry was created from.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20provenance>)
### cloudflare\_email\_security\_impersonation\_registry
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_impersonation_registry" "example_email_security_impersonation_registry" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
impersonation_registry_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
```
#### data cloudflare\_email\_security\_impersonation\_registries
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
direction?: String
The sorting direction.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>)
order?: String
Field to sort by.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20order>)
provenance?: String
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20provenance>)
search?: String
Search term for filtering records. Behavior may change.
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20search>)
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Impersonation registry entry identifier.
Link to this property
comments: String
Optional note describing the entry.
Link to this property
created\_at: Time
Link to this property
directory\_id: Int64
Identifier of the directory the entry was synced from, when directory-synced.
Link to this property
directory\_node\_id: Int64
Identifier of the directory node the entry was synced from, when directory-synced.
Link to this property
email: String
Email address (or pattern) of the protected identity.
Link to this property
Deprecatedexternal\_directory\_node\_id: String
This field is deprecated.
Deprecated. External identifier of the directory node.
Link to this property
is\_email\_regex: Bool
Whether email is a regular expression instead of a literal address.
Link to this property
Deprecatedlast\_modified: Time
Use modified_at instead.
Deprecated, use modified_at instead. End of life: November 1, 2026.
Link to this property
modified\_at: Time
Link to this property
name: String
Display name of the protected identity.
Link to this property
provenance: String
Source the entry was created from.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.impersonation_registry%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_email\_security\_impersonation\_registries
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_impersonation_registries" "example_email_security_impersonation_registries" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
direction = "asc"
order = "name"
provenance = "A1S_INTERNAL"
search = "search"
}
```
#### Email SecuritySettingsTrusted Domains
#### resource cloudflare\_email\_security\_trusted\_domains
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
is\_recent: Bool
Select to prevent recently registered domains from triggering a Suspicious or Malicious disposition.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_recent>)
is\_regex: Bool
Whether `pattern` is a regular expression instead of a literal domain.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_regex>)
is\_similarity: Bool
Select for partner or other approved domains that have similar spelling to your connected domains. Prevents listed domains from triggering a Spoof disposition.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20is_similarity>)
pattern: String
The domain pattern to trust, e.g. `example.com`.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20pattern>)
##### optional Expand Collapse
comments?: String
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20comments>)
##### computed Expand Collapse
id: String
Trusted domain identifier.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_at>)
### cloudflare\_email\_security\_trusted\_domains
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_email_security_trusted_domains" "example_email_security_trusted_domains" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
is_recent = true
is_regex = false
is_similarity = false
pattern = "example.com"
comments = "Trusted partner domain"
}
```
#### data cloudflare\_email\_security\_trusted\_domains
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
trusted\_domain\_id?: String
Trusted domain identifier.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20trusted_domain_id>)
filter?: Attributes
direction?: String
The sorting direction.
Link to this property
is\_recent?: Bool
Filter to show only recently registered domains that are trusted to prevent triggering Suspicious or Malicious dispositions.
Link to this property
is\_similarity?: Bool
Filter to show only proximity domains (partner or approved domains with similar spelling to connected domains) that prevent Spoof dispositions.
Link to this property
order?: String
Field to sort by.
Link to this property
pattern?: String
Link to this property
search?: String
Search term for filtering records. Behavior may change.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>)
##### computed Expand Collapse
id: String
Trusted domain identifier.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
comments: String
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20comments>)
created\_at: Time
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>)
is\_recent: Bool
Select to prevent recently registered domains from triggering a Suspicious or Malicious disposition.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_recent>)
is\_regex: Bool
Whether `pattern` is a regular expression instead of a literal domain.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_regex>)
is\_similarity: Bool
Select for partner or other approved domains that have similar spelling to your connected domains. Prevents listed domains from triggering a Spoof disposition.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20is_similarity>)
Deprecatedlast\_modified: Time
Use `modified_at` instead.
Deprecated, use `modified_at` instead. End of life: November 1, 2026.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_modified>)
modified\_at: Time
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_at>)
pattern: String
The domain pattern to trust, e.g. `example.com`.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20pattern>)
### cloudflare\_email\_security\_trusted\_domains
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_trusted_domains" "example_email_security_trusted_domains" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
trusted_domain_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
```
#### data cloudflare\_email\_security\_trusted\_domains\_list
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
direction?: String
The sorting direction.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>)
is\_recent?: Bool
Filter to show only recently registered domains that are trusted to prevent triggering Suspicious or Malicious dispositions.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20is_recent>)
is\_similarity?: Bool
Filter to show only proximity domains (partner or approved domains with similar spelling to connected domains) that prevent Spoof dispositions.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20is_similarity>)
order?: String
Field to sort by.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20order>)
pattern?: String
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20pattern>)
search?: String
Search term for filtering records. Behavior may change.
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20search>)
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Trusted domain identifier.
Link to this property
comments: String
Link to this property
created\_at: Time
Link to this property
is\_recent: Bool
Select to prevent recently registered domains from triggering a Suspicious or Malicious disposition.
Link to this property
is\_regex: Bool
Whether pattern is a regular expression instead of a literal domain.
Link to this property
is\_similarity: Bool
Select for partner or other approved domains that have similar spelling to your connected domains. Prevents listed domains from triggering a Spoof disposition.
Link to this property
Deprecatedlast\_modified: Time
Use modified_at instead.
Deprecated, use modified_at instead. End of life: November 1, 2026.
Link to this property
modified\_at: Time
Link to this property
pattern: String
The domain pattern to trust, e.g. example.com.
Link to this property
[Link to this property](<#(resource)%20email_security.settings.trusted_domains%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_email\_security\_trusted\_domains\_list
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_email_security_trusted_domains_list" "example_email_security_trusted_domains_list" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
direction = "asc"
is_recent = true
is_similarity = true
order = "pattern"
pattern = "pattern"
search = "search"
}
```