Cloudflare Tables
The Cloudflare integration uses the following tables
CloudflareAccountMembers
Stores records of users who are members of a Cloudflare account, including their association to the account for access control and administration.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The ID of the configuration within Compyl. |
| ID | string | Membership identifier tag. |
| Status | string | A member's status in the account. |
| string | The contact email address of the user. | |
| FirstName | string | User's first name |
| LastName | string | User's last name |
| UserID | string | Identifier for the user. |
| TwoFactorAuthenticationEnabled | boolean | Indicates whether two-factor authentication is enabled for the user account. Does not apply to API authentication. |
| AccountID | string | Identifier for the account. |
| BatchDate | datetime | The sync date. |
CloudflareAccountPermissionGroups
Defines permission groups that bundle specific capabilities or actions, used to control what account members are allowed to do within Cloudflare.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The ID of the configuration within Compyl. |
| ID | string | Identifier of the group. |
| Name | string | Name of the group. |
| Description | string | Description of the group. |
| Editable | string | Whether the group is editable or not. |
| Label | string | Label of the group. |
| Scopes | string | Scopes assigned to the group. |
| BatchDate | datetime | The sync date. |
CloudflareAccountResourceGroups
Represents collections of Cloudflare resources grouped together to scope access, allowing permissions to be applied to specific subsets of account resources.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The ID of the configuration within Compyl. |
| ID | string | Identifier of the group. |
| Scopes | string | Name of the group. |
| Editable | string | Description of the group. |
| Name | string | Whether the group is editable or not. |
| BatchDate | datetime | Label of the group. |
CloudflareAccountRoles
Contains role definitions that combine permission groups and resource scopes, forming the basis of Cloudflare’s role-based access control (RBAC) system.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The ID of the configuration within Compyl. |
| ID | string | Role identifier tag. |
| Description | string | Description of role's permissions. |
| Name | string | Role name. |
| Permissions | string | List of read and edit permissions for the role. |
| BatchDate | datetime | The sync date. |
CloudflareAccounts
Holds metadata for Cloudflare accounts, including ownership, identifiers, and high-level account configuration details.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The ID of the configuration within Compyl. |
| ID | string | Identifier for the account. |
| Name | string | Name of the account. |
| CreatedOn | datetime | Timestamp for the creation of the accounts. |
| AbuseContactEmail | string | Sets an abuse contact email to notify for abuse reports. |
| DefaultNameServers | string | Specifies the default nameservers to be used for new zones added to this account. (i.g. cloudflare.standard for Cloudflare-branded nameservers, custom.account for account custom nameservers, custom.tenant for tenant custom nameservers) |
| EnforceTwoFactor | boolean | Indicates whether membership in this account requires that Two-Factor Authentication is enabled |
| UseAccountCustomNSByDefault | boolean | Indicates whether new zones should use the account-level custom nameservers by default. |
| BatchDate | datetime | The sync date. |
CloudflareAuditLogs
Records security and administrative events across the Cloudflare account, providing an audit trail for changes, access, and user actions.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The ID of the configuration within Compyl. |
| ID | string | A string that uniquely identifies the audit log. |
| Result | boolean | A boolean that indicates if the action attempted was successful. |
| Type | string | A string that uniquely identifies the action type. |
| AccountID | string | A short string that describes the action that was performed. |
| Interface | string | The source of the event. |
| When | datetime | A UTC RFC3339 timestamp that specifies when the action being logged occured. |
| Metadata | string | An object which can lend more context to the action being logged. This is a flexible value and varies between different actions. |
| OwnerID | string | Identifier for the owner of the audit log entry. |
| ActorEmail | string | The email of the user that performed the action. |
| ActorID | string | The ID of the actor that performed the action. If a user performed the action, this will be their User ID. |
| ActorIP | string | The IP address of the request that performed the action. |
| ActorType | string | The type of actor, whether a User, Cloudflare Admin, or an Automated System. |
| ResourceID | string | An identifier for the resource that was affected by the action. |
| ResourceType | string | A short string that describes the resource that was affected by the action. |
| BatchDate | datetime | The sync date. |
CloudflareDNSRecords
Stores DNS record data managed in Cloudflare, representing hostname mappings, record types, and routing information within DNS zones.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The ID of the configuration within Compyl. |
| ID | string | The identifier for the record. |
| Name | string | DNS record name (or @ for the zone apex) in Punycode. |
| Content | string | Formatted DS content |
| Proxied | boolean | Whether the record is receiving the performance and security benefits of Cloudflare. |
| Type | string | Record type. |
| Comment | string | Comments or notes about the DNS record. |
| CommentModifiedOn | datetime | The datetime from when the record comments were last modified. |
| CreatedOn | datetime | The datetime from when the record was first created. |
| Metadata | string | Components of a DNS record. |
| ModifiedOn | datetime | The datetime from when the records was last modified. |
| Proxiable | boolean | Whether the record can be proxied or not. |
| Tags | string | Custom tags for the DNS record. |
| TagsModifiedOn | datetime | The datetime from when the record tags were last modified. |
| BatchDate | datetime | The sync date. |
| ZoneID | string | Unique identifier of the Cloudflare DNS zone that the DNS record belongs to. |
CloudflareZeroTrustUsers
Contains user identities associated with Cloudflare Zero Trust, used for enforcing identity-based access policies and Zero Trust controls.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The ID of the configuration within Compyl. |
| ID | string | UUID for the user. |
| CreatedAt | datetime | The datetime when the user account was created. |
| LastSuccessfulLogin | datetime | The time at which the user last successfully logged in. |
| UpdatedAt | datetime | The datetime when the user account was last updated. |
| string | The email of the user. | |
| Name | string | The name of the user. |
| SeatUID | string | The email of the user. |
| UID | string | The unique API identifier for the user. |
| AccessSeat | boolean | True if the user has authenticated with Cloudflare Access. |
| GatewaySeat | boolean | True if the user has logged into the WARP client. |
| ActiveDeviceCount | integer | The number of active devices registered to the user. |
| BatchDate | datetime | The sync date. |
| AccountID | string | Unique identifier for the Cloudflare Zero Trust account that the user belongs to. |
CloudflareZones
Represents DNS zones managed by Cloudflare, typically corresponding to domains, and serves as the container for DNS records, settings, and security features.
| Name | Type | Description |
|---|---|---|
| ID | string | Identifier of the zone. |
| AccountID | string | The identifier for the account that the zone belongs to. |
| AccountName | string | The name of the account that the zone belongs to. |
| ActivatedOn | datetime | The last time proof of ownership was detected and the zone was made active. |
| CreatedOn | datetime | When the zone was created. |
| DevelopmentMode | integer | The interval (in seconds) from when development mode expires (positive integer) or last expired (negative integer) for the domain. If development mode has never been enabled, this value is 0. |
| ModifiedOn | datetime | When the zone was last modified. |
| Name | string | The domain name. |
| NameServers | string | The name servers Cloudflare assigns to a zone. |
| OriginalDNSHost | string | DNS host at the time of switching to Cloudflare. |
| OriginalNameServers | string | Original name servers before moving to Cloudflare. |
| OriginalRegistrar | string | Registrar for the domain at the time of switching to Cloudflare. |
CloudflareMagicTransitRoutes
Stores routing rules for Cloudflare Magic Transit, defining how network traffic is forwarded, prioritized, and scoped across Cloudflare’s global infrastructure.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Identifier linking this Magic Transit route record to its configuration or ingestion context. |
| ID | string | Unique identifier for the Magic Transit route. |
| NextHop | string | IP address or target to which traffic matching the route prefix is forwarded. |
| Prefix | string | IP prefix (CIDR range) that defines which traffic is matched by this route. |
| Priority | integer | Priority value used to determine route preference when multiple routes match. |
| CreatedOn | datetime | Timestamp indicating when the route was created in Cloudflare. |
| Description | string | Optional descriptive text explaining the purpose of the route. |
| ModifiedOn | datetime | Timestamp of the most recent update to the route. |
| ScopeColoNames | string | List of Cloudflare data center names where the route is applied. |
| ScopeColoRegions | string | List of Cloudflare regions where the route is active. |
| Weight | integer | Weight value used for traffic distribution between routes with the same prefix. |
| AccountID | string | Unique identifier of the Cloudflare account that owns the route. |
| BatchDate | datetime | Timestamp indicating when this route record was last ingested or updated. |
CloudflareWorkerRoutes
Defines URL routing rules that map incoming requests to Cloudflare Worker scripts within a specific DNS zone.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Identifier linking this Worker route record to its configuration or ingestion context. |
| ID | string | Unique identifier for the Worker route. |
| Pattern | string | URL pattern that determines which requests are routed to the Worker script. |
| Script | string | Name of the Cloudflare Worker script executed when the route pattern matches. |
| ZoneID | string | Unique identifier of the Cloudflare DNS zone where the Worker route is applied. |
| BatchDate | datetime | Timestamp indicating when this Worker route record was last ingested or updated. |
CloudflareZeroTrustTunnelRoutes
Stores network routes associated with Cloudflare Zero Trust tunnels, defining which networks are reachable through each tunnel and virtual network.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Identifier linking this tunnel route record to its configuration or ingestion context. |
| ID | string | Unique identifier for the Zero Trust tunnel route. |
| Comment | string | Optional comment or note describing the purpose of the route. |
| CreatedAt | datetime | Timestamp when the tunnel route was created. |
| DeletedAt | datetime | Timestamp when the tunnel route was deleted, if applicable. |
| Network | string | Network CIDR range that is routed through the Zero Trust tunnel. |
| TunType | string | Type of tunnel routing configuration used (e.g., ip, vnet). |
| TunnelID | string | Unique identifier of the Cloudflare Zero Trust tunnel. |
| TunnelName | string | Human-readable name of the tunnel associated with the route. |
| VirtualNetworkID | string | Identifier of the virtual network linked to the tunnel route. |
| VirtualNetworkName | string | Name of the virtual network associated with the route. |
| AccountID | string | Unique identifier of the Cloudflare account that owns the tunnel route. |
| BatchDate | datetime | Timestamp indicating when this tunnel route record was last ingested or updated. |
CloudflareFirewallAccessRules
Stores access control rules and related origin configuration metadata used by Cloudflare to allow, block, or challenge traffic based on IPs, networks, and request context.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Identifier linking this firewall access rule record to its configuration or ingestion context. |
| ID | string | Unique identifier for the firewall access rule. |
| AllowedModes | string | List of enforcement modes that can be applied to the rule (e.g., block, challenge, allow). |
| ConfigurationTarget | string | Type of target the rule evaluates, such as an IP address, IP range, ASN, or country. |
| ConfigurationValue | string | Specific value matched by the rule, corresponding to the target type. |
| Mode | string | Action Cloudflare takes when traffic matches the rule (e.g., block, challenge, whitelist). |
| CreatedOn | datetime | Timestamp indicating when the firewall access rule was created. |
| ModifiedOn | datetime | Timestamp indicating when the firewall access rule was last updated. |
| Notes | string | Optional notes describing the purpose or context of the rule. |
| ScopeID | string | Identifier of the scope (account or zone) where the rule is applied. |
| ScopeEmail | string | Email address associated with the rule’s scope, if applicable. |
| ScopeType | string | Scope level where the rule applies (e.g., account, zone). |
| AccountID | string | Unique identifier of the Cloudflare account that owns the access rule. |
| BatchDate | datetime | Timestamp indicating when this access rule record was last ingested or updated. |
CloudflareHyperdriveDatabases
Stores configuration details for Cloudflare Hyperdrive databases, defining how Cloudflare securely connects to, authenticates with, and optimizes access to origin database backends.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Identifier linking this Hyperdrive database record to its configuration or ingestion context. |
| ID | string | Unique identifier for the Hyperdrive database configuration. |
| Name | string | Human-readable name assigned to the Hyperdrive database. |
| OriginDatabase | string | Name of the underlying origin database that Hyperdrive connects to. |
| OriginHost | string | Hostname or IP address of the origin database server. |
| OriginPort | integer | Network port used to connect to the origin database. |
| OriginScheme | string | Connection scheme or protocol used to access the origin database (e.g., postgres, mysql). |
| OriginUser | string | Username used by Hyperdrive when authenticating to the origin database. |
| CachingDisabled | boolean | Indicates whether query caching is disabled for this Hyperdrive database. |
| CreatedOn | datetime | Timestamp indicating when the Hyperdrive database configuration was created. |
| ModifiedOn | datetime | Timestamp indicating when the configuration was last updated. |
| MtlsCaCertificateId | string | Identifier of the CA certificate used for mutual TLS authentication. |
| MtlsCertificateId | string | Identifier of the client certificate used for mutual TLS connections. |
| MtlsSslMode | string | SSL/TLS mode applied when connecting to the origin database using mutual TLS. |
| OriginConnectionLimit | integer | Maximum number of concurrent connections allowed to the origin database. |
| AccountID | string | Unique identifier of the Cloudflare account that owns the Hyperdrive database. |
| BatchDate | datetime | Timestamp indicating when this Hyperdrive database record was last ingested or updated. |
CloudflareD1Databases
Represents Cloudflare D1 databases, storing metadata about serverless SQLite databases managed and accessed through Cloudflare’s platform.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Identifier linking this D1 database record to its configuration or ingestion context. |
| UUID | string | Unique identifier assigned to the D1 database. |
| Name | string | Human-readable name of the D1 database. |
| CreatedAt | datetime | Timestamp indicating when the D1 database was created. |
| Version | string | Current version or schema version of the D1 database. |
| AccountID | string | Unique identifier of the Cloudflare account that owns the D1 database. |
| BatchDate | datetime | Timestamp indicating when this D1 database record was last ingested or updated. |
Bridge Tables
CloudflareAccountMembers_CloudflareAccountPermissionGroups
Represents the association between Cloudflare account members and their assigned permission groups, defining what actions and resources each member can access within an account.
| Name | Type | Description |
|---|---|---|
| MembershipID | string | Unique identifier for the account membership that links a user to a Cloudflare account. |
| PermissionGroupID | string | Unique identifier of the permission group assigned to the account member. |
| ConfigID | integer | The ID of the configuration within Compyl. |
CloudflareAccountMembers_CloudflareAccountResourceGroups
Represents the relationship between Cloudflare account members and resource groups, defining which specific account resources each member is permitted to access.
| Name | Type | Description |
|---|---|---|
| MembershipID | string | Unique identifier for the account membership that links a user to a Cloudflare account. |
| ResourceGroupID | string | Unique identifier of the resource group assigned to the account member. |
| ConfigID | integer | The ID of the configuration within Compyl. |
CloudflareAccountMembers_CloudflareAccountRoles
Represents role assignments for Cloudflare account members, defining each member’s permissions and access level within the account.
| Name | Type | Description |
|---|---|---|
| MembershipID | string | Unique identifier for the account membership that links a user to a Cloudflare account. |
| RoleID | string | Unique identifier of the role assigned to the account member. |
| ConfigID | integer | The ID of the configuration within Compyl. |
Updated 10 months ago