Access
Cloudflare Access can replace traditional SSH key models with short-lived certificates issued to your users based on the token generated by their Access login.
It's required that an
account_idorzone_idis provided and in most cases using either is fine. However, if you're using a scoped access token, you must provide the argument that matches the token's scope. For example, an access token that is scoped to the "example.com" zone needs to use thezone_idargument.
Example Usage
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.AccessCaCertificate;
import com.pulumi.cloudflare.AccessCaCertificateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new AccessCaCertificate("example", AccessCaCertificateArgs.builder()
.accountId("f037e56e89293a057740de681ac9abbe")
.applicationId("6cd6cea3-3ef2-4542-9aea-85a0bbcd5414")
.build());
var anotherExample = new AccessCaCertificate("anotherExample", AccessCaCertificateArgs.builder()
.applicationId("fe2be0ff-7f13-4350-8c8e-a9b9795fe3c2")
.zoneId("0da42c8d2132a9ddaf714f9e7c920711")
.build());
}
}Content copied to clipboard
Import
Account level CA certificate import.
$ pulumi import cloudflare:index/accessCaCertificate:AccessCaCertificate example account/<account_id>/<certificate_id>Content copied to clipboard
Zone level CA certificate import.
$ pulumi import cloudflare:index/accessCaCertificate:AccessCaCertificate example account/<zone_id>/<certificate_id>Content copied to clipboard