GradientEdge CDK Utils
    Preparing search index...

    Interface ZeroTrustAccessApplicationProps

    interface ZeroTrustAccessApplicationProps {
        accountId?: Input<string>;
        allowAuthenticateViaWarp?: Input<boolean>;
        allowedIdps?: Input<Input<string>[]>;
        allowIframe?: Input<boolean>;
        appLauncherLogoUrl?: Input<string>;
        appLauncherVisible?: Input<boolean>;
        autoRedirectToIdentity?: Input<boolean>;
        bgColor?: Input<string>;
        corsHeaders?: Input<ZeroTrustAccessApplicationCorsHeaders>;
        customDenyMessage?: Input<string>;
        customDenyUrl?: Input<string>;
        customNonIdentityDenyUrl?: Input<string>;
        customPages?: Input<Input<string>[]>;
        destinations?: Input<Input<ZeroTrustAccessApplicationDestination>[]>;
        domain?: Input<string>;
        enableBindingCookie?: Input<boolean>;
        footerLinks?: Input<Input<ZeroTrustAccessApplicationFooterLink>[]>;
        headerBgColor?: Input<string>;
        httpOnlyCookieAttribute?: Input<boolean>;
        landingPageDesign?: Input<ZeroTrustAccessApplicationLandingPageDesign>;
        logoUrl?: Input<string>;
        name?: Input<string>;
        optionsPreflightBypass?: Input<boolean>;
        pathCookieAttribute?: Input<boolean>;
        policies?: Input<Input<ZeroTrustAccessApplicationPolicy>[]>;
        readServiceTokensFromHeader?: Input<string>;
        saasApp?: Input<ZeroTrustAccessApplicationSaasApp>;
        sameSiteCookieAttribute?: Input<string>;
        scimConfig?: Input<ZeroTrustAccessApplicationScimConfig>;
        selfHostedDomains?: Input<Input<string>[]>;
        serviceAuth401Redirect?: Input<boolean>;
        sessionDuration?: Input<string>;
        skipAppLauncherLoginPage?: Input<boolean>;
        skipInterstitial?: Input<boolean>;
        tags?: Input<Input<string>[]>;
        targetCriterias?: Input<Input<ZeroTrustAccessApplicationTargetCriteria>[]>;
        type?: Input<string>;
        zoneId?: Input<string>;
    }

    Hierarchy

    • ZeroTrustAccessApplicationArgs
      • ZeroTrustAccessApplicationProps
    Index

    Properties

    accountId? allowAuthenticateViaWarp? allowedIdps? allowIframe? appLauncherLogoUrl? appLauncherVisible? autoRedirectToIdentity? bgColor? corsHeaders? customDenyMessage? customDenyUrl? customNonIdentityDenyUrl? customPages? destinations? domain? enableBindingCookie? footerLinks? headerBgColor? httpOnlyCookieAttribute? landingPageDesign? logoUrl? name? optionsPreflightBypass? pathCookieAttribute? policies? readServiceTokensFromHeader? saasApp? sameSiteCookieAttribute? scimConfig? selfHostedDomains? serviceAuth401Redirect? sessionDuration? skipAppLauncherLoginPage? skipInterstitial? tags? targetCriterias? type? zoneId?

    Properties

    accountId?: Input<string>

    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.

    allowAuthenticateViaWarp?: Input<boolean>

    When set to true, users can authenticate to this application using their WARP session. When set to false this application will always require direct IdP authentication. This setting always overrides the organization setting for WARP authentication.

    allowedIdps?: Input<Input<string>[]>

    The identity providers your users can select when connecting to this application. Defaults to all IdPs configured in your account.

    allowIframe?: Input<boolean>

    Enables loading application content in an iFrame.

    appLauncherLogoUrl?: Input<string>

    The image URL of the logo shown in the App Launcher header.

    appLauncherVisible?: Input<boolean>

    Displays the application in the App Launcher.

    autoRedirectToIdentity?: Input<boolean>

    When set to true, users skip the identity provider selection step during login. You must specify only one identity provider in allowed_idps.

    bgColor?: Input<string>

    The background color of the App Launcher page.

    corsHeaders?: Input<ZeroTrustAccessApplicationCorsHeaders>
    customDenyMessage?: Input<string>

    The custom error message shown to a user when they are denied access to the application.

    customDenyUrl?: Input<string>

    The custom URL a user is redirected to when they are denied access to the application when failing identity-based rules.

    customNonIdentityDenyUrl?: Input<string>

    The custom URL a user is redirected to when they are denied access to the application when failing non-identity rules.

    customPages?: Input<Input<string>[]>

    The custom pages that will be displayed when applicable for this application

    destinations?: Input<Input<ZeroTrustAccessApplicationDestination>[]>

    List of destinations secured by Access. This supersedes selfHostedDomains to allow for more flexibility in defining different types of domains. If destinations are provided, then selfHostedDomains will be ignored.

    domain?: Input<string>

    The primary hostname and path secured by Access. This domain will be displayed if the app is visible in the App Launcher.

    enableBindingCookie?: Input<boolean>

    Enables the binding cookie, which increases security against compromised authorization tokens and CSRF attacks.

    footerLinks?: Input<Input<ZeroTrustAccessApplicationFooterLink>[]>

    The links in the App Launcher footer.

    headerBgColor?: Input<string>

    The background color of the App Launcher header.

    httpOnlyCookieAttribute?: Input<boolean>

    Enables the HttpOnly cookie attribute, which increases security against XSS attacks.

    landingPageDesign?: Input<ZeroTrustAccessApplicationLandingPageDesign>

    The design of the App Launcher landing page shown to users when they log in.

    logoUrl?: Input<string>

    The image URL for the logo shown in the App Launcher dashboard.

    name?: Input<string>

    The name of the application.

    optionsPreflightBypass?: Input<boolean>

    Allows options preflight requests to bypass Access authentication and go directly to the origin. Cannot turn on if corsHeaders is set.

    pathCookieAttribute?: Input<boolean>

    Enables cookie paths to scope an application's JWT to the application path. If disabled, the JWT will scope to the hostname by default

    policies?: Input<Input<ZeroTrustAccessApplicationPolicy>[]>

    The policies that Access applies to the application, in ascending order of precedence. Items can reference existing policies or create new policies exclusive to the application.

    readServiceTokensFromHeader?: Input<string>

    Allows matching Access Service Tokens passed HTTP in a single header with this name. This works as an alternative to the (CF-Access-Client-Id, CF-Access-Client-Secret) pair of headers. The header value will be interpreted as a json object similar to: { "cf-access-client-id": "88bf3b6d86161464f6509f7219099e57.access.example.com", "cf-access-client-secret": "bdd31cbc4dec990953e39163fbbb194c93313ca9f0a6e420346af9d326b1d2a5" }

    saasApp?: Input<ZeroTrustAccessApplicationSaasApp>
    sameSiteCookieAttribute?: Input<string>

    Sets the SameSite cookie setting, which provides increased security against CSRF attacks.

    scimConfig?: Input<ZeroTrustAccessApplicationScimConfig>

    Configuration for provisioning to this application via SCIM. This is currently in closed beta.

    selfHostedDomains?: Input<Input<string>[]>

    List of public domains that Access will secure. This field is deprecated in favor of destinations and will be supported until November 21, 2025. If destinations are provided, then selfHostedDomains will be ignored.

    This attribute is deprecated.

    serviceAuth401Redirect?: Input<boolean>

    Returns a 401 status code when the request is blocked by a Service Auth policy.

    sessionDuration?: Input<string>

    The amount of time that tokens issued for this application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications.

    skipAppLauncherLoginPage?: Input<boolean>

    Determines when to skip the App Launcher landing page.

    skipInterstitial?: Input<boolean>

    Enables automatic authentication through cloudflared.

    tags?: Input<Input<string>[]>

    The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard.

    targetCriterias?: Input<Input<ZeroTrustAccessApplicationTargetCriteria>[]>
    type?: Input<string>

    The application type. Available values: "selfhosted", "saas", "ssh", "vnc", "applauncher", "warp", "biso", "bookmark", "dashsso", "infrastructure", "rdp", "mcp", "mcpportal", "proxyEndpoint".

    zoneId?: Input<string>

    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

    Settings

    Member Visibility

    On This Page

    Properties