--- title: Zero Trust --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/terraform) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Zero Trust #### Zero TrustDevicesDEX Tests #### resource cloudflare\_zero\_trust\_dex\_test ##### required Expand Collapse account\_id: String Unique identifier linked to an account. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) enabled: Bool Determines whether or not the test is active. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20enabled>) interval: String How often the test will run. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20interval>) name: String The name of the DEX test. Must be unique. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)

data: Attributes The configuration object which contains the details for the WARP client to conduct the test.

host: String The desired endpoint to test. Link to this property kind: String The type of test. Link to this property method?: String The HTTP request method type. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20data>) ##### optional Expand Collapse description?: String Additional details about the test. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20description>)

target\_policies?: List\[Attributes] DEX rules targeted by this test

id: String The id of the DEX rule. Link to this property default: Bool Whether the DEX rule is the account default. Link to this property name: String The name of the DEX rule. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20target_policies>) ##### computed Expand Collapse id: String The unique identifier for the test. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) test\_id: String The unique identifier for the test. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20test_id>) created: Time Date the test was created, in RFC 3339 format. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created>) targeted: Bool [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20targeted>) updated: Time Date the test was last updated, in RFC 3339 format. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20updated>) ### cloudflare\_zero\_trust\_dex\_test Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_zero_trust_dex_test" "example_zero_trust_dex_test" { account_id = "01a7362d577a6c3019a474fd6f485823" data = { host = "https://dash.cloudflare.com" kind = "http" method = "GET" } enabled = true interval = "30m" name = "HTTP dash health check" description = "Checks the dash endpoint every 30 minutes" target_policies = [{ id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" default = true name = "name" }] } ``` #### data cloudflare\_zero\_trust\_dex\_test ##### required Expand Collapse account\_id: String Unique identifier linked to an account. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse dex\_test\_id?: String The unique identifier for the test. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dex_test_id>)

filter?: Attributes

kind?: String Filter by test type. Link to this property test\_name?: String Filter by test name. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>) ##### computed Expand Collapse id: String The unique identifier for the test. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) created: Time Date the test was created, in RFC 3339 format. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created>) description: String Additional details about the test. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20description>) enabled: Bool Determines whether or not the test is active. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20enabled>) interval: String How often the test will run. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20interval>) name: String The name of the DEX test. Must be unique. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>) targeted: Bool [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20targeted>) test\_id: String The unique identifier for the test. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20test_id>) updated: Time Date the test was last updated, in RFC 3339 format. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20updated>)

data: Attributes The configuration object which contains the details for the WARP client to conduct the test.

host: String The desired endpoint to test. Link to this property kind: String The type of test. Link to this property method: String The HTTP request method type. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20data>)

target\_policies: List\[Attributes] DEX rules targeted by this test

id: String The id of the DEX rule. Link to this property default: Bool Whether the DEX rule is the account default. Link to this property name: String The name of the DEX rule. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20target_policies>) ### cloudflare\_zero\_trust\_dex\_test Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_dex_test" "example_zero_trust_dex_test" { account_id = "01a7362d577a6c3019a474fd6f485823" dex_test_id = "372e67954025e0ba6aaa6d586b9e0b59" } ``` #### data cloudflare\_zero\_trust\_dex\_tests ##### required Expand Collapse account\_id: String Unique identifier linked to an account. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse kind?: String Filter by test type. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20kind>) test\_name?: String Filter by test name. [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20test_name>) max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String The unique identifier for the test. Link to this property

data: Attributes The configuration object which contains the details for the WARP client to conduct the test.

host: String The desired endpoint to test. Link to this property kind: String The type of test. Link to this property method: String The HTTP request method type. Link to this property

Link to this property enabled: Bool Determines whether or not the test is active. Link to this property interval: String How often the test will run. Link to this property name: String The name of the DEX test. Must be unique. Link to this property created: Time Date the test was created, in RFC 3339 format. Link to this property description: String Additional details about the test. Link to this property

target\_policies: List\[Attributes] DEX rules targeted by this test

id: String The id of the DEX rule. Link to this property default: Bool Whether the DEX rule is the account default. Link to this property name: String The name of the DEX rule. Link to this property

Link to this property targeted: Bool Link to this property test\_id: String The unique identifier for the test. Link to this property updated: Time Date the test was last updated, in RFC 3339 format. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.dex_tests%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_zero\_trust\_dex\_tests Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_dex_tests" "example_zero_trust_dex_tests" { account_id = "01a7362d577a6c3019a474fd6f485823" kind = "http" test_name = "testName" } ``` #### Zero TrustDevicesIP Profiles #### resource cloudflare\_zero\_trust\_device\_ip\_profile ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) match: String The wirefilter expression to match registrations. Available values: “identity.name”, “identity.email”, “identity.groups.id”, “identity.groups.name”, “identity.groups.email”, “identity.saml\_attributes”. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20match>) name: String A user-friendly name for the Device IP profile. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>) precedence: Int64 The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20precedence>) subnet\_id: String The ID of the Subnet. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20subnet_id>) ##### optional Expand Collapse description?: String An optional description of the Device IP profile. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20description>) enabled?: Bool Whether the Device IP profile will be applied to matching devices. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20enabled>) ##### computed Expand Collapse id: String The ID of the Device IP profile. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) created\_at: String The RFC3339Nano timestamp when the Device IP profile was created. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>) updated\_at: String The RFC3339Nano timestamp when the Device IP profile was last updated. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20updated_at>) ### cloudflare\_zero\_trust\_device\_ip\_profile Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_zero_trust_device_ip_profile" "example_zero_trust_device_ip_profile" { account_id = "account_id" match = "identity.email == \"test@cloudflare.com\"" name = "IPv4 Cloudflare Source IPs" precedence = 100 subnet_id = "b70ff985-a4ef-4643-bbbc-4a0ed4fc8415" description = "example comment" enabled = true } ``` #### data cloudflare\_zero\_trust\_device\_ip\_profile ##### required Expand Collapse profile\_id: String [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20profile_id>) account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### computed Expand Collapse id: String [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) created\_at: String The RFC3339Nano timestamp when the Device IP profile was created. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>) description: String An optional description of the Device IP profile. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20description>) enabled: Bool Whether the Device IP profile is enabled. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20enabled>) match: String The wirefilter expression to match registrations. Available values: “identity.name”, “identity.email”, “identity.groups.id”, “identity.groups.name”, “identity.groups.email”, “identity.saml\_attributes”. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20match>) name: String A user-friendly name for the Device IP profile. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>) precedence: Int64 The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20precedence>) subnet\_id: String The ID of the Subnet. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20subnet_id>) updated\_at: String The RFC3339Nano timestamp when the Device IP profile was last updated. [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20updated_at>) ### cloudflare\_zero\_trust\_device\_ip\_profile Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_ip_profile" "example_zero_trust_device_ip_profile" { account_id = "account_id" profile_id = "profile_id" } ``` #### data cloudflare\_zero\_trust\_device\_ip\_profiles ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String The ID of the Device IP profile. Link to this property created\_at: String The RFC3339Nano timestamp when the Device IP profile was created. Link to this property description: String An optional description of the Device IP profile. Link to this property enabled: Bool Whether the Device IP profile is enabled. Link to this property match: String The wirefilter expression to match registrations. Available values: “identity.name”, “identity.email”, “identity.groups.id”, “identity.groups.name”, “identity.groups.email”, “identity.saml\_attributes”. Link to this property name: String A user-friendly name for the Device IP profile. Link to this property precedence: Int64 The precedence of the Device IP profile. Lower values indicate higher precedence. Device IP profile will be evaluated in ascending order of this field. Link to this property subnet\_id: String The ID of the Subnet. Link to this property updated\_at: String The RFC3339Nano timestamp when the Device IP profile was last updated. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.ip_profiles%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_zero\_trust\_device\_ip\_profiles Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_ip_profiles" "example_zero_trust_device_ip_profiles" { account_id = "account_id" } ``` #### Zero TrustDevicesDeployment Groups #### resource cloudflare\_zero\_trust\_device\_deployment\_groups ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) name: String A user-friendly name for the deployment group. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)

version\_config: List\[Attributes] Contains at least one version configuration.

target\_environment: String The target environment for the client version (e.g., windows, macos). Link to this property version: String The specific client version to deploy. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20version_config>) ##### optional Expand Collapse policy\_ids?: List\[String] Contains an optional list of policy IDs assigned to a group. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20policy_ids>) ##### computed Expand Collapse id: String The ID of the deployment group. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) created\_at: String The RFC3339Nano timestamp when the deployment group was created. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>) updated\_at: String The RFC3339Nano timestamp when the deployment group was last updated. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20updated_at>) ### cloudflare\_zero\_trust\_device\_deployment\_groups Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_zero_trust_device_deployment_groups" "example_zero_trust_device_deployment_groups" { account_id = "account_id" name = "Engineering Ring 0" version_config = [{ target_environment = "windows" version = "2026.6.234.0" }] policy_ids = ["string"] } ``` #### data cloudflare\_zero\_trust\_device\_deployment\_groups ##### required Expand Collapse group\_id: String [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20group_id>) account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### computed Expand Collapse id: String [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) created\_at: String The RFC3339Nano timestamp when the deployment group was created. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>) name: String A user-friendly name for the deployment group. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>) updated\_at: String The RFC3339Nano timestamp when the deployment group was last updated. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20updated_at>) policy\_ids: List\[String] Contains a list of policy IDs assigned to this deployment group. [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20policy_ids>)

version\_config: List\[Attributes] Contains version configurations for different target environments.

target\_environment: String The target environment for the client version (e.g., windows, macos). Link to this property version: String The specific client version to deploy. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20version_config>) ### cloudflare\_zero\_trust\_device\_deployment\_groups Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_deployment_groups" "example_zero_trust_device_deployment_groups" { account_id = "account_id" group_id = "group_id" } ``` #### data cloudflare\_zero\_trust\_device\_deployment\_groups\_list ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String The ID of the deployment group. Link to this property created\_at: String The RFC3339Nano timestamp when the deployment group was created. Link to this property name: String A user-friendly name for the deployment group. Link to this property updated\_at: String The RFC3339Nano timestamp when the deployment group was last updated. Link to this property

version\_config: List\[Attributes] Contains version configurations for different target environments.

target\_environment: String The target environment for the client version (e.g., windows, macos). Link to this property version: String The specific client version to deploy. Link to this property

Link to this property policy\_ids: List\[String] Contains a list of policy IDs assigned to this deployment group. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.deployment_groups%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_zero\_trust\_device\_deployment\_groups\_list Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_deployment_groups_list" "example_zero_trust_device_deployment_groups_list" { account_id = "account_id" } ``` #### Zero TrustDevicesNetworks #### resource cloudflare\_zero\_trust\_device\_managed\_networks ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) name: String The name of the device managed network. This name must be unique. [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>) type: String The type of device managed network. [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20type>)

config: Attributes The configuration object containing information for the WARP client to detect the managed network.

tls\_sockaddr: String A network address of the form “host:port” that the WARP client will use to detect the presence of a TLS host. Link to this property sha256?: String The SHA-256 hash of the TLS certificate presented by the host found at tls\_sockaddr. If absent, regular certificate verification (trusted roots, valid timestamp, etc) will be used to validate the certificate. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20config>) ##### computed Expand Collapse id: String API UUID. [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) network\_id: String API UUID. [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20network_id>) ### cloudflare\_zero\_trust\_device\_managed\_networks Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_zero_trust_device_managed_networks" "example_zero_trust_device_managed_networks" { account_id = "699d98642c564d2e855e9661899b7252" config = { tls_sockaddr = "foo.bar:1234" sha256 = "b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c" } name = "managed-network-1" type = "tls" } ``` #### data cloudflare\_zero\_trust\_device\_managed\_networks ##### required Expand Collapse network\_id: String API UUID. [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20network_id>) account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### computed Expand Collapse id: String API UUID. [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) name: String The name of the device managed network. This name must be unique. [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>) type: String The type of device managed network. [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20type>)

config: Attributes The configuration object containing information for the WARP client to detect the managed network.

tls\_sockaddr: String A network address of the form “host:port” that the WARP client will use to detect the presence of a TLS host. Link to this property sha256: String The SHA-256 hash of the TLS certificate presented by the host found at tls\_sockaddr. If absent, regular certificate verification (trusted roots, valid timestamp, etc) will be used to validate the certificate. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20config>) ### cloudflare\_zero\_trust\_device\_managed\_networks Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_managed_networks" "example_zero_trust_device_managed_networks" { account_id = "699d98642c564d2e855e9661899b7252" network_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" } ``` #### data cloudflare\_zero\_trust\_device\_managed\_networks\_list ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String API UUID. Link to this property

config: Attributes The configuration object containing information for the WARP client to detect the managed network.

Link to this property name: String The name of the device managed network. This name must be unique. Link to this property network\_id: String API UUID. Link to this property type: String The type of device managed network. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.networks%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>) ### cloudflare\_zero\_trust\_device\_managed\_networks\_list Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_managed_networks_list" "example_zero_trust_device_managed_networks_list" { account_id = "699d98642c564d2e855e9661899b7252" } ``` #### Zero TrustDevicesPoliciesDefault #### resource cloudflare\_zero\_trust\_device\_default\_profile ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse lan\_allow\_minutes?: Float64 The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20lan_allow_minutes>) lan\_allow\_subnet\_size?: Float64 The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20lan_allow_subnet_size>)

virtual\_networks?: Attributes Virtual network access settings for the device.

allowed: List\[String] List of virtual network IDs the device is allowed to access. When virtual\_networks is set, at least one entry is required. Link to this property default: String The default virtual network ID. Must be included in the allowed list. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20virtual_networks>) allow\_mode\_switch?: Bool Whether to allow the user to switch WARP between modes. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20allow_mode_switch>) allow\_updates?: Bool Whether to receive update notifications when a new version of the client is available. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20allow_updates>) allowed\_to\_leave?: Bool Whether to allow devices to leave the organization. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20allowed_to_leave>) auto\_connect?: Float64 The amount of time in seconds to reconnect after having been disabled. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20auto_connect>) captive\_portal?: Float64 Turn on the captive portal after the specified amount of time. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20captive_portal>) disable\_auto\_fallback?: Bool If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20disable_auto_fallback>) exclude\_office\_ips?: Bool Whether to add Microsoft IPs to Split Tunnel exclusions. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20exclude_office_ips>) register\_interface\_ip\_with\_dns?: Bool Determines if the operating system will register WARP’s local interface IP with your on-premises DNS server. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20register_interface_ip_with_dns>) sccm\_vpn\_boundary\_support?: Bool Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20sccm_vpn_boundary_support>) support\_url?: String The URL to launch when the Send Feedback button is clicked. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20support_url>) switch\_locked?: Bool Whether to allow the user to turn off the WARP switch and disconnect the client. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20switch_locked>) tunnel\_protocol?: String Determines which tunnel protocol to use. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20tunnel_protocol>) uninstall\_protection?: Bool Determines whether uninstalling the WARP client requires an override code. (Windows only). [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20uninstall_protection>)

dns\_search\_suffixes?: List\[Attributes] List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear.

suffix: String The DNS search suffix to append when resolving short hostnames. Link to this property description?: String A description of the DNS search suffix. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20dns_search_suffixes>)

exclude?: List\[Attributes] List of routes excluded in the WARP client’s tunnel. Both ‘exclude’ and ‘include’ cannot be set in the same request.

address?: String The address in CIDR format to exclude from the tunnel. If address is present, host must not be present. Link to this property description?: String A description of the Split Tunnel item, displayed in the client UI. Link to this property host?: String The domain name to exclude from the tunnel. If host is present, address must not be present. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20exclude>)

global\_acceleration?: Attributes Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/.

api\_endpoints: List\[String] IP:port entries for the API endpoints. Link to this property enabled: Bool Global acceleration settings are used only when “enabled”. Link to this property masque\_endpoints: List\[String] IP:port entries for the MASQUE tunnel endpoints. Either wireguard\_endpoints or masque\_endpoints must be provided. Link to this property wireguard\_endpoints: List\[String] IP:port entries for the WireGuard tunnel endpoints. Either wireguard\_endpoints or masque\_endpoints must be provided. Link to this property autoswitch?: Bool Automatically switch Global Acceleration regions based on device location. Defaults to false when not provided. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20global_acceleration>)

include?: List\[Attributes] List of routes included in the WARP client’s tunnel. Both ‘exclude’ and ‘include’ cannot be set in the same request.

address?: String The address in CIDR format to include in the tunnel. If address is present, host must not be present. Link to this property description?: String A description of the Split Tunnel item, displayed in the client UI. Link to this property host?: String The domain name to include in the tunnel. If host is present, address must not be present. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20include>)

service\_mode\_v2?: Attributes

mode?: String The mode to run the WARP client under. Link to this property port?: Float64 The port number when used with proxy mode. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20service_mode_v2>) ##### computed Expand Collapse id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) default: Bool Whether the policy will be applied to matching devices. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20default>) enabled: Bool Whether the policy will be applied to matching devices. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20enabled>) gateway\_unique\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20gateway_unique_id>) policy\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20policy_id>) profile\_type: String The client type to which the device settings profile applies. This field is set when the profile is created and cannot be changed. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20profile_type>)

fallback\_domains: List\[Attributes]

suffix: String The domain suffix to match when resolving locally. Link to this property description: String A description of the fallback domain, displayed in the client UI. Link to this property dns\_server: List\[String] A list of IP addresses to handle domain resolution. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20fallback_domains>) ### cloudflare\_zero\_trust\_device\_default\_profile Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_zero_trust_device_default_profile" "example_zero_trust_device_default_profile" { account_id = "699d98642c564d2e855e9661899b7252" allow_mode_switch = true allow_updates = true allowed_to_leave = true auto_connect = 0 captive_portal = 180 disable_auto_fallback = true dns_search_suffixes = [{ suffix = "internal.corp" description = "Example internal domains" }] exclude = [{ address = "192.0.2.0/24" description = "Exclude testing domains from the tunnel" }] exclude_office_ips = true global_acceleration = { api_endpoints = ["198.51.100.1:443"] enabled = true masque_endpoints = ["198.51.100.1:443"] wireguard_endpoints = ["198.51.100.1:2408"] autoswitch = true } include = [{ address = "192.0.2.0/24" description = "Include testing domains in the tunnel" }] lan_allow_minutes = 30 lan_allow_subnet_size = 24 register_interface_ip_with_dns = true sccm_vpn_boundary_support = false service_mode_v2 = { mode = "proxy" port = 3000 } support_url = "https://1.1.1.1/help" switch_locked = true tunnel_protocol = "wireguard" uninstall_protection = false virtual_networks = { allowed = ["f174e90a-fafe-4643-bbbc-4a0ed4fc8415"] default = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" } } ``` #### data cloudflare\_zero\_trust\_device\_default\_profile ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### computed Expand Collapse id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) allow\_mode\_switch: Bool Whether to allow the user to switch WARP between modes. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20allow_mode_switch>) allow\_updates: Bool Whether to receive update notifications when a new version of the client is available. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20allow_updates>) allowed\_to\_leave: Bool Whether to allow devices to leave the organization. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20allowed_to_leave>) auto\_connect: Float64 The amount of time in seconds to reconnect after having been disabled. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20auto_connect>) captive\_portal: Float64 Turn on the captive portal after the specified amount of time. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20captive_portal>) default: Bool Whether the policy will be applied to matching devices. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20default>) disable\_auto\_fallback: Bool If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20disable_auto_fallback>) enabled: Bool Whether the policy will be applied to matching devices. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20enabled>) exclude\_office\_ips: Bool Whether to add Microsoft IPs to Split Tunnel exclusions. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20exclude_office_ips>) gateway\_unique\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20gateway_unique_id>) policy\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20policy_id>) profile\_type: String The client type to which the device settings profile applies. This field is set when the profile is created and cannot be changed. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20profile_type>) register\_interface\_ip\_with\_dns: Bool Determines if the operating system will register WARP’s local interface IP with your on-premises DNS server. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20register_interface_ip_with_dns>) sccm\_vpn\_boundary\_support: Bool Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20sccm_vpn_boundary_support>) support\_url: String The URL to launch when the Send Feedback button is clicked. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20support_url>) switch\_locked: Bool Whether to allow the user to turn off the WARP switch and disconnect the client. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20switch_locked>) tunnel\_protocol: String Determines which tunnel protocol to use. [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tunnel_protocol>) uninstall\_protection: Bool Determines whether uninstalling the WARP client requires an override code. (Windows only). [Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20uninstall_protection>)

dns\_search\_suffixes: List\[Attributes] List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear.

suffix: String The DNS search suffix to append when resolving short hostnames. Link to this property description: String A description of the DNS search suffix. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dns_search_suffixes>)

address: String The address in CIDR format to exclude from the tunnel. If address is present, host must not be present. Link to this property description: String A description of the Split Tunnel item, displayed in the client UI. Link to this property host: String The domain name to exclude from the tunnel. If host is present, address must not be present. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20exclude>)

fallback\_domains: List\[Attributes]

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20fallback_domains>)

global\_acceleration: Attributes Global Acceleration settings for China. When configured, WARP clients connect to the Global Accelerator addresses instead of the default ones. Please contact your account representative to enable this feature on your account. See https://developers.cloudflare.com/china-network/concepts/global-acceleration/.

api\_endpoints: List\[String] IP:port entries for the API endpoints. Link to this property enabled: Bool Global acceleration settings are used only when “enabled”. Link to this property masque\_endpoints: List\[String] IP:port entries for the MASQUE tunnel endpoints. Either wireguard\_endpoints or masque\_endpoints must be provided. Link to this property wireguard\_endpoints: List\[String] IP:port entries for the WireGuard tunnel endpoints. Either wireguard\_endpoints or masque\_endpoints must be provided. Link to this property autoswitch: Bool Automatically switch Global Acceleration regions based on device location. Defaults to false when not provided. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20global_acceleration>)

include: List\[Attributes] List of routes included in the WARP client’s tunnel.

address: String The address in CIDR format to include in the tunnel. If address is present, host must not be present. Link to this property description: String A description of the Split Tunnel item, displayed in the client UI. Link to this property host: String The domain name to include in the tunnel. If host is present, address must not be present. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20include>)

service\_mode\_v2: Attributes

mode: String The mode to run the WARP client under. Link to this property port: Float64 The port number when used with proxy mode. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20service_mode_v2>)

virtual\_networks: Attributes Virtual network access settings for the device.

[Link to this property](<#(resource)%20zero_trust.devices.policies.default%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20virtual_networks>) ### cloudflare\_zero\_trust\_device\_default\_profile Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_default_profile" "example_zero_trust_device_default_profile" { account_id = "699d98642c564d2e855e9661899b7252" } ``` #### Zero TrustDevicesPoliciesDefaultFallback Domains #### resource cloudflare\_zero\_trust\_device\_default\_profile\_local\_domain\_fallback ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default.fallback_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)

domains: List\[Attributes]

suffix: String The domain suffix to match when resolving locally. Link to this property description?: String A description of the fallback domain, displayed in the client UI. Link to this property dns\_server?: List\[String] A list of IP addresses to handle domain resolution. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.default.fallback_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20domains>) ##### computed Expand Collapse id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default.fallback_domains%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) ### cloudflare\_zero\_trust\_device\_default\_profile\_local\_domain\_fallback Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_zero_trust_device_default_profile_local_domain_fallback" "example_zero_trust_device_default_profile_local_domain_fallback" { account_id = "699d98642c564d2e855e9661899b7252" domains = [{ suffix = "example.com" description = "Domain bypass for local development" dns_server = ["1.1.1.1"] }] } ``` #### data cloudflare\_zero\_trust\_device\_default\_profile\_local\_domain\_fallback ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default.fallback_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### computed Expand Collapse id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default.fallback_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) description: String A description of the fallback domain, displayed in the client UI. [Link to this property](<#(resource)%20zero_trust.devices.policies.default.fallback_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20description>) suffix: String The domain suffix to match when resolving locally. [Link to this property](<#(resource)%20zero_trust.devices.policies.default.fallback_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20suffix>) dns\_server: List\[String] A list of IP addresses to handle domain resolution. [Link to this property](<#(resource)%20zero_trust.devices.policies.default.fallback_domains%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dns_server>) ### cloudflare\_zero\_trust\_device\_default\_profile\_local\_domain\_fallback Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_default_profile_local_domain_fallback" "example_zero_trust_device_default_profile_local_domain_fallback" { account_id = "699d98642c564d2e855e9661899b7252" } ``` #### Zero TrustDevicesPoliciesDefaultCertificates #### resource cloudflare\_zero\_trust\_device\_default\_profile\_certificates ##### required Expand Collapse zone\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default.certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>) enabled: Bool The current status of the device policy certificate provisioning feature for WARP clients. [Link to this property](<#(resource)%20zero_trust.devices.policies.default.certificates%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20enabled>) ### cloudflare\_zero\_trust\_device\_default\_profile\_certificates Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_zero_trust_device_default_profile_certificates" "example_zero_trust_device_default_profile_certificates" { zone_id = "699d98642c564d2e855e9661899b7252" enabled = true } ``` #### data cloudflare\_zero\_trust\_device\_default\_profile\_certificates ##### required Expand Collapse zone\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.default.certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>) ##### computed Expand Collapse enabled: Bool The current status of the device policy certificate provisioning feature for WARP clients. [Link to this property](<#(resource)%20zero_trust.devices.policies.default.certificates%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20enabled>) ### cloudflare\_zero\_trust\_device\_default\_profile\_certificates Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_default_profile_certificates" "example_zero_trust_device_default_profile_certificates" { zone_id = "699d98642c564d2e855e9661899b7252" } ``` #### Zero TrustDevicesPoliciesCustom #### resource cloudflare\_zero\_trust\_device\_custom\_profile ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>) name: String The name of the device settings profile. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>) ##### optional Expand Collapse profile\_type?: String The client type to which the device settings profile applies. This field is set when the profile is created and cannot be changed. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20profile_type>) lan\_allow\_minutes?: Float64 The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20lan_allow_minutes>) lan\_allow\_subnet\_size?: Float64 The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20lan_allow_subnet_size>) match?: String The wirefilter expression to match devices. Available values: “identity.email”, “identity.groups.id”, “identity.groups.name”, “identity.groups.email”, “identity.service\_token\_uuid”, “identity.saml\_attributes”, “network”, “os.name”, “os.version”. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20match>) precedence?: Float64 The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20precedence>)

browser\_extension\_config?: Attributes Browser extension proxy settings. Required when profile\_type is browser\_extension and invalid for WARP profiles.

proxy\_control: String Whether the user may disable the browser extension proxy. Link to this property proxy\_enabled: Bool Whether the browser extension proxy is active. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20browser_extension_config>)

virtual\_networks?: Attributes Virtual network access settings for the device.

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20virtual_networks>) allow\_mode\_switch?: Bool Whether to allow the user to switch WARP between modes. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20allow_mode_switch>) allow\_updates?: Bool Whether to receive update notifications when a new version of the client is available. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20allow_updates>) allowed\_to\_leave?: Bool Whether to allow devices to leave the organization. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20allowed_to_leave>) auto\_connect?: Float64 The amount of time in seconds to reconnect after having been disabled. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20auto_connect>) captive\_portal?: Float64 Turn on the captive portal after the specified amount of time. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20captive_portal>) default?: Bool Whether the policy is the account default. WARP group profiles cannot set this field. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20default>) description?: String A description of the policy. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20description>) disable\_auto\_fallback?: Bool If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20disable_auto_fallback>) enabled?: Bool Whether the policy will be applied to matching devices. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20enabled>) exclude\_office\_ips?: Bool Whether to add Microsoft IPs to Split Tunnel exclusions. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20exclude_office_ips>) register\_interface\_ip\_with\_dns?: Bool Determines if the operating system will register WARP’s local interface IP with your on-premises DNS server. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20register_interface_ip_with_dns>) sccm\_vpn\_boundary\_support?: Bool Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20sccm_vpn_boundary_support>) support\_url?: String The URL to launch when the Send Feedback button is clicked. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20support_url>) switch\_locked?: Bool Whether to allow the user to turn off the WARP switch and disconnect the client. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20switch_locked>) tunnel\_protocol?: String Determines which tunnel protocol to use. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20tunnel_protocol>) uninstall\_protection?: Bool Determines whether uninstalling the WARP client requires an override code. (Windows only). [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20uninstall_protection>)

dns\_search\_suffixes?: List\[Attributes] List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear.

suffix: String The DNS search suffix to append when resolving short hostnames. Link to this property description?: String A description of the DNS search suffix. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20dns_search_suffixes>)

exclude?: List\[Attributes] List of routes excluded in the WARP client’s tunnel. Both ‘exclude’ and ‘include’ cannot be set in the same request.

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20exclude>)

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20global_acceleration>)

include?: List\[Attributes] List of routes included in the WARP client’s tunnel. Both ‘exclude’ and ‘include’ cannot be set in the same request.

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20include>)

service\_mode\_v2?: Attributes

mode?: String The mode to run the WARP client under. Link to this property port?: Float64 The port number when used with proxy mode. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20service_mode_v2>) ##### computed Expand Collapse id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>) policy\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20policy_id>) gateway\_unique\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20gateway_unique_id>)

fallback\_domains: List\[Attributes]

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20fallback_domains>)

Deprecatedtarget\_tests: List\[Attributes]

id: String The id of the DEX test targeting this policy. Link to this property name: String The name of the DEX test targeting this policy. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20target_tests>) ### cloudflare\_zero\_trust\_device\_custom\_profile Terraform HTTPTypeScriptPythonGoTerraform ``` resource "cloudflare_zero_trust_device_custom_profile" "example_zero_trust_device_custom_profile" { account_id = "699d98642c564d2e855e9661899b7252" name = "Allow Developers" allow_mode_switch = true allow_updates = true allowed_to_leave = true auto_connect = 0 browser_extension_config = { proxy_control = "unlocked" proxy_enabled = true } captive_portal = 180 default = false description = "Policy for test teams." disable_auto_fallback = true dns_search_suffixes = [{ suffix = "internal.corp" description = "Example internal domains" }] enabled = true exclude = [{ address = "192.0.2.0/24" description = "Exclude testing domains from the tunnel" }] exclude_office_ips = true global_acceleration = { api_endpoints = ["198.51.100.1:443"] enabled = true masque_endpoints = ["198.51.100.1:443"] wireguard_endpoints = ["198.51.100.1:2408"] autoswitch = true } include = [{ address = "192.0.2.0/24" description = "Include testing domains in the tunnel" }] lan_allow_minutes = 30 lan_allow_subnet_size = 24 match = "identity.email == \"test@cloudflare.com\"" precedence = 100 profile_type = "warp" register_interface_ip_with_dns = true sccm_vpn_boundary_support = false service_mode_v2 = { mode = "proxy" port = 3000 } support_url = "https://1.1.1.1/help" switch_locked = true tunnel_protocol = "wireguard" uninstall_protection = false virtual_networks = { allowed = ["f174e90a-fafe-4643-bbbc-4a0ed4fc8415"] default = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" } } ``` #### data cloudflare\_zero\_trust\_device\_custom\_profile ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse policy\_id?: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20policy_id>)

filter?: Attributes

profile\_type?: String Filter profiles by client type. When omitted, only WARP profiles are returned. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>) ##### computed Expand Collapse id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>) allow\_mode\_switch: Bool Whether to allow the user to switch WARP between modes. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20allow_mode_switch>) allow\_updates: Bool Whether to receive update notifications when a new version of the client is available. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20allow_updates>) allowed\_to\_leave: Bool Whether to allow devices to leave the organization. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20allowed_to_leave>) auto\_connect: Float64 The amount of time in seconds to reconnect after having been disabled. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20auto_connect>) captive\_portal: Float64 Turn on the captive portal after the specified amount of time. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20captive_portal>) default: Bool Whether the policy is the account default. WARP group profiles cannot set this field. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20default>) description: String A description of the policy. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20description>) disable\_auto\_fallback: Bool If the `dns_server` field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to `true`. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20disable_auto_fallback>) enabled: Bool Whether the policy will be applied to matching devices. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20enabled>) exclude\_office\_ips: Bool Whether to add Microsoft IPs to Split Tunnel exclusions. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20exclude_office_ips>) gateway\_unique\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20gateway_unique_id>) lan\_allow\_minutes: Float64 The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20lan_allow_minutes>) lan\_allow\_subnet\_size: Float64 The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20lan_allow_subnet_size>) match: String The wirefilter expression to match devices. Available values: “identity.email”, “identity.groups.id”, “identity.groups.name”, “identity.groups.email”, “identity.service\_token\_uuid”, “identity.saml\_attributes”, “network”, “os.name”, “os.version”. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20match>) name: String The name of the device settings profile. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>) precedence: Float64 The precedence of the policy. Lower values indicate higher precedence. Policies will be evaluated in ascending order of this field. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20precedence>) profile\_type: String The client type to which the device settings profile applies. This field is set when the profile is created and cannot be changed. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20profile_type>) register\_interface\_ip\_with\_dns: Bool Determines if the operating system will register WARP’s local interface IP with your on-premises DNS server. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20register_interface_ip_with_dns>) sccm\_vpn\_boundary\_support: Bool Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only). [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20sccm_vpn_boundary_support>) support\_url: String The URL to launch when the Send Feedback button is clicked. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20support_url>) switch\_locked: Bool Whether to allow the user to turn off the WARP switch and disconnect the client. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20switch_locked>) tunnel\_protocol: String Determines which tunnel protocol to use. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tunnel_protocol>) uninstall\_protection: Bool Determines whether uninstalling the WARP client requires an override code. (Windows only). [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20uninstall_protection>)

browser\_extension\_config: Attributes Browser extension proxy settings. Required when profile\_type is browser\_extension and invalid for WARP profiles.

proxy\_control: String Whether the user may disable the browser extension proxy. Link to this property proxy\_enabled: Bool Whether the browser extension proxy is active. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20browser_extension_config>)

dns\_search\_suffixes: List\[Attributes] List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear.

suffix: String The DNS search suffix to append when resolving short hostnames. Link to this property description: String A description of the DNS search suffix. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dns_search_suffixes>)

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20exclude>)

fallback\_domains: List\[Attributes]

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20fallback_domains>)

api\_endpoints: List\[String] IP:port entries for the API endpoints. Link to this property enabled: Bool Global acceleration settings are used only when “enabled”. Link to this property masque\_endpoints: List\[String] IP:port entries for the MASQUE tunnel endpoints. Either wireguard\_endpoints or masque\_endpoints must be provided. Link to this property wireguard\_endpoints: List\[String] IP:port entries for the WireGuard tunnel endpoints. Either wireguard\_endpoints or masque\_endpoints must be provided. Link to this property autoswitch: Bool Automatically switch Global Acceleration regions based on device location. Defaults to false when not provided. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20global_acceleration>)

include: List\[Attributes] List of routes included in the WARP client’s tunnel.

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20include>)

service\_mode\_v2: Attributes

mode: String The mode to run the WARP client under. Link to this property port: Float64 The port number when used with proxy mode. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20service_mode_v2>)

Deprecatedtarget\_tests: List\[Attributes]

id: String The id of the DEX test targeting this policy. Link to this property name: String The name of the DEX test targeting this policy. Link to this property

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20target_tests>)

virtual\_networks: Attributes Virtual network access settings for the device.

[Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20virtual_networks>) ### cloudflare\_zero\_trust\_device\_custom\_profile Terraform HTTPTypeScriptPythonGoTerraform ``` data "cloudflare_zero_trust_device_custom_profile" "example_zero_trust_device_custom_profile" { account_id = "699d98642c564d2e855e9661899b7252" policy_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" } ``` #### data cloudflare\_zero\_trust\_device\_custom\_profiles ##### required Expand Collapse account\_id: String [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>) ##### optional Expand Collapse profile\_type?: String Filter profiles by client type. When omitted, only WARP profiles are returned. [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20profile_type>) max\_items?: Int64 Max items to fetch, default: 1000 [Link to this property](<#(resource)%20zero_trust.devices.policies.custom%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>) ##### computed Expand Collapse

result: List\[Attributes] The items returned by the data source

id: String Link to this property allow\_mode\_switch: Bool Whether to allow the user to switch WARP between modes. Link to this property allow\_updates: Bool Whether to receive update notifications when a new version of the client is available. Link to this property allowed\_to\_leave: Bool Whether to allow devices to leave the organization. Link to this property auto\_connect: Float64 The amount of time in seconds to reconnect after having been disabled. Link to this property

browser\_extension\_config: Attributes Browser extension proxy settings. Required when profile\_type is browser\_extension and invalid for WARP profiles.

proxy\_control: String Whether the user may disable the browser extension proxy. Link to this property proxy\_enabled: Bool Whether the browser extension proxy is active. Link to this property

Link to this property captive\_portal: Float64 Turn on the captive portal after the specified amount of time. Link to this property default: Bool Whether the policy is the account default. WARP group profiles cannot set this field. Link to this property description: String A description of the policy. Link to this property disable\_auto\_fallback: Bool If the dns_server field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to true. Link to this property

dns\_search\_suffixes: List\[Attributes] List of DNS search suffixes to apply to clients. Suffixes are evaluated in order. Use an empty array to clear.

suffix: String The DNS search suffix to append when resolving short hostnames. Link to this property description: String A description of the DNS search suffix. Link to this property

Link to this property enabled: Bool Whether the policy will be applied to matching devices. Link to this property

Link to this property exclude\_office\_ips: Bool Whether to add Microsoft IPs to Split Tunnel exclusions. Link to this property

fallback\_domains: List\[Attributes]

Link to this property gateway\_unique\_id: String Link to this property

api\_endpoints: List\[String] IP:port entries for the API endpoints. Link to this property enabled: Bool Global acceleration settings are used only when “enabled”. Link to this property masque\_endpoints: List\[String] IP:port entries for the MASQUE tunnel endpoints. Either wireguard\_endpoints or masque\_endpoints must be provided. Link to this property wireguard\_endpoints: List\[String] IP:port entries for the WireGuard tunnel endpoints. Either wireguard\_endpoints or masque\_endpoints must be provided. Link to this property autoswitch: Bool Automatically switch Global Acceleration regions based on device location. Defaults to false when not provided. Link to this property

Access Denied