Cloudflare/data Security
@swamp/cloudflare/data-securityv2026.10.23.1
01README
Cloudflare data-security infrastructure models
02Release Notes
- Updated: finding_types
- Updated: policies
- Updated: webhooks
03Behaviors
@swamp/cloudflare/data-security/finding-typesv2026.10.23.1finding_types.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| account_id | string | Cloudflare account ID |
| applies_to_all_integrations? | boolean | When true, this finding type applies to every current and future integration of the vendor. |
| description? | string | Human-readable description of the finding type. Cannot be empty. Maximum 4096 characters. |
| integration_ids? | array | Required and non-empty when applies_to_all_integrations is false; omit when it is true. |
| name? | string | Human-readable name for the finding type. Maximum 256 characters. |
| severity? | string | Default severity used when no integration-specific severity override exists. |
| asset_class? | string | Asset class this finding type applies to (PascalCase, e.g. GoogleWorkspaceFile) |
| asset_vendor? | string | Canonical vendor enum for the platform whose assets this finding type evaluates. |
| expression? | string | Rego expression body for the policy. `package cloudflare.casb.custom` and `import rego.v1` are added automatically. Do not include package or import declarations. This field cannot be changed after creation. Maximum 4096 characters. |
| apiToken? | string | Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| apiKey? | string | Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email. |
| email? | string | Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey. |
fn create()
Create a Finding Types
fn get(id: string)
Get a Finding Types
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Finding Types |
fn lookup(allowMissing?: boolean)
Look up an existing Finding Types by matching global argument values and import it into state
| Argument | Type | Description |
|---|---|---|
| allowMissing? | boolean | Succeed and record found: false in lookupResult when nothing matches, instead of failing |
fn adopt(id: string)
Import an existing Finding Types by ID into state for management
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Finding Types to import |
fn update(identifier?: string)
Update Finding Types attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific Finding Types by id (e.g. one discovered by list) |
fn delete(id: string)
Delete the Finding Types
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Finding Types |
fn sync(identifier?: string)
Sync Finding Types state from Cloudflare
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific Finding Types by id (e.g. one discovered by list) |
Resources
state(infinite)— Finding Types resource state
lookupResult(infinite)— Outcome of the most recent lookup
@swamp/cloudflare/data-security/policiesv2026.10.23.1policies.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| account_id | string | Cloudflare account ID |
| actions? | object | Actions to execute when this policy is triggered, grouped by action type.\nA policy must contain at least one action across all groups and may include\nat most one remediation. |
| applies_to_all_integrations? | boolean | When true, the policy applies to all integrations for the account. When false, integration_ids must be provided. |
| description? | string | Optional description of what this policy does. |
| display_name? | string | Display name for the policy configuration. |
| enabled? | boolean | Boolean specifying if the policy is enabled or disabled. |
| integration_ids? | array | The integrations this policy applies to. Required when applies_to_all_integrations is false. |
| finding_type_id? | string | The finding type this policy is associated with. All remediation actions must match this finding type. |
| apiToken? | string | Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| apiKey? | string | Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email. |
| email? | string | Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey. |
fn create()
Create a Policies
fn get(id: string)
Get a Policies
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Policies |
fn lookup(allowMissing?: boolean)
Look up an existing Policies by matching global argument values and import it into state
| Argument | Type | Description |
|---|---|---|
| allowMissing? | boolean | Succeed and record found: false in lookupResult when nothing matches, instead of failing |
fn adopt(id: string)
Import an existing Policies by ID into state for management
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Policies to import |
fn update(identifier?: string)
Update Policies attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific Policies by id (e.g. one discovered by list) |
fn delete(id: string)
Delete the Policies
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Policies |
fn sync(identifier?: string)
Sync Policies state from Cloudflare
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific Policies by id (e.g. one discovered by list) |
Resources
state(infinite)— Policies resource state
lookupResult(infinite)— Outcome of the most recent lookup
@swamp/cloudflare/data-security/webhooksv2026.10.23.1webhooks.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| account_id | string | Cloudflare account ID |
| authentication_type? | enum | Type of authentication used for the webhook. |
| destination_url? | string | Target URL for the webhook configuration. Where resulting data will be sent. |
| headers? | array | List of custom headers to include in webhook requests. |
| label? | string | Account-specified display label for the webhook configuration. |
| signing_secret? | string | Secret key used for HMAC signing when authentication_type is "HMAC-Signing". |
| status? | enum | Status of the webhook configuration. Defaults to enabled when omitted. |
| apiToken? | string | Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| apiKey? | string | Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email. |
| email? | string | Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey. |
fn create()
Create a Webhooks
fn get(id: string)
Get a Webhooks
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Webhooks |
fn lookup(allowMissing?: boolean)
Look up an existing Webhooks by matching global argument values and import it into state
| Argument | Type | Description |
|---|---|---|
| allowMissing? | boolean | Succeed and record found: false in lookupResult when nothing matches, instead of failing |
fn adopt(id: string)
Import an existing Webhooks by ID into state for management
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Webhooks to import |
fn update(identifier?: string)
Update Webhooks attributes
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific Webhooks by id (e.g. one discovered by list) |
fn delete(id: string)
Delete the Webhooks
| Argument | Type | Description |
|---|---|---|
| id | string | The ID of the Webhooks |
fn sync(identifier?: string)
Sync Webhooks state from Cloudflare
| Argument | Type | Description |
|---|---|---|
| identifier? | string | Target a specific Webhooks by id (e.g. one discovered by list) |
Resources
state(infinite)— Webhooks resource state
lookupResult(infinite)— Outcome of the most recent lookup
04Previous Versions
2026.10.20.1AGPL-3.0-or-later
- Updated: finding_types
- Updated: policies
- Updated: webhooks
Modified 3 behaviors
2026.10.16.2AGPL-3.0-or-later
2026.10.16.1AGPL-3.0-or-later(was none)
- Added: finding_types
Added 1 behaviors
2026.10.13.1
- Updated: policies
- Updated: webhooks
2026.09.29.2
- Updated: policies
- Updated: webhooks
2026.09.29.1
- Updated: policies
- Updated: webhooks
2026.09.19.1
- Updated: webhooks
2026.08.28.1
- Added: policies
Added 1 behaviors
2026.07.21.1
- Updated: webhooks
2026.07.18.2
Modified 1 behaviors
2026.07.15.1
Removed 1 behaviors
2026.07.14.1
- Added: webhooks
- Added: workflows
05Stats
A
100 / 100
Downloads
25
Archive size
17.5 KB
Verified by Swamp
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Docs keep secrets in a vault1/1earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License2/2earned
- Verified public repository2/2earned
06Platforms
07Labels