pulumi-cloudflare-kotlin/com.pulumi.cloudflare.kotlin/AccessApplication

AccessApplication

class AccessApplication : KotlinCustomResource

Provides a Cloudflare Access Application resource. Access Applications are used to restrict access to a whole application using an authorisation gateway managed by Cloudflare.

It's required that an account_id or zone_id is provided and in most cases using either is fine. However, if you're using a scoped access token, you must provide the argument that matches the token's scope. For example, an access token that is scoped to the "example.com" zone needs to use the zone_id argument.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.AccessApplication;
import com.pulumi.cloudflare.AccessApplicationArgs;
import com.pulumi.cloudflare.inputs.AccessApplicationCorsHeaderArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var stagingApp = new AccessApplication("stagingApp", AccessApplicationArgs.builder()
            .corsHeaders(AccessApplicationCorsHeaderArgs.builder()
                .allowCredentials(true)
                .allowedMethods(
                    "GET",
                    "POST",
                    "OPTIONS")
                .allowedOrigins("https://example.com")
                .maxAge(10)
                .build())
            .domain("staging.example.com")
            .name("staging application")
            .sessionDuration("24h")
            .type("self_hosted")
            .zoneId("0da42c8d2132a9ddaf714f9e7c920711")
            .build());
    }
}

Import

$ pulumi import cloudflare:index/accessApplication:AccessApplication example <account_id>/<application_id>

Properties

accountId

val accountId: Output<String>

The account identifier to target for the resource. Conflicts with zone_id.

allowedIdps

val allowedIdps: Output<List<String>>?

The identity providers selected for the application.

appLauncherVisible

val appLauncherVisible: Output<Boolean>?

Option to show/hide applications in App Launcher. Defaults to true.

aud

val aud: Output<String>

Application Audience (AUD) Tag of the application.

autoRedirectToIdentity

val autoRedirectToIdentity: Output<Boolean>?

Option to skip identity provider selection if only one is configured in allowed_idps. Defaults to false.

corsHeaders

val corsHeaders: Output<List<AccessApplicationCorsHeader>>?

CORS configuration for the Access Application. See below for reference structure.

customDenyMessage

val customDenyMessage: Output<String>?

Option that returns a custom error message when a user is denied access to the application.

customDenyUrl

val customDenyUrl: Output<String>?

Option that redirects to a custom URL when a user is denied access to the application via identity based rules.

customNonIdentityDenyUrl

val customNonIdentityDenyUrl: Output<String>?

Option that redirects to a custom URL when a user is denied access to the application via non identity rules.

customPages

val customPages: Output<List<String>>?

The custom pages selected for the application.

domain

val domain: Output<String>

The primary hostname and path that Access will secure. If the app is visible in the App Launcher dashboard, this is the domain that will be displayed.

enableBindingCookie

val enableBindingCookie: Output<Boolean>?

Option to provide increased security against compromised authorization tokens and CSRF attacks by requiring an additional "binding" cookie on requests. Defaults to false.

httpOnlyCookieAttribute