IaC Bazaar
Browse modules
Menu
CloudflareStatic-verified

Cloudflare Notifications that Reach Somebody

An origin marked unreachable, a certificate that failed to renew, a DDoS mitigation on your zone: each is an event the account can notify about and none does until a policy exists, and a policy whose mechanisms block is empty is accepted and notifies nobody. Origin health, certificate and DDoS policies by default, more by alert type, and at least one email or webhook required for all of them.

terraformEdge & DNScloudflare
cloudflare-notification-policyvizier v1.2.0

Verification

Static-verified

Passed: validated and lint-clean (provider-schema-validated for AWS/Azure/GCP; Terraform-language lint elsewhere).

Conformance

  • Static validation (fmt · validate · tflint)
  • No applicable security policies for this provider
  • Plan tests (mocked: validation rules · outputs)

Provenance

  • SHA-256 checksum
  • Signature (pending)

Functional

  • Live test pending (no cloud run yet)

Last verified 2026-09-14 · how we verify

Use it from the registry

terraform · opentofu
module "notification_policy" {
  source  = "www.iac-bazaar.com/iac-bazaar/cloudflare-notification-policy/cloudflare"
  version = "1.0.0"
}

Needs a registry token from /account/tokens. The module itself is free; the account is what identifies you. Full setup: registry docs.

Inputs & outputs

Create a free account to read this module's contract

The declared contract - every input name, type, default and description, plus every output - is shown to signed-in accounts, not to anonymous visitors.

A free account sees the contract of every module in the catalogue. There is no subscription and nothing to buy - the modules are free to download, and they run under Vizier.

Create a free account →Sign in

Documentation

cloudflare-notification-policy

Cloudflare notifications that reach somebody: the events that matter on a zone, each with a recipient. Works with Terraform and OpenTofu (>= 1.6), cloudflare provider >= 5.0, < 6.0.

Cloudflare tells nobody by default. Origin unreachable, certificate events, DDoS mitigations: silent until a policy exists.

A policy needs a mechanism, and the API accepts one with none. At least one email or webhook is required here.

The default set: origin health, universal and advanced certificate events, L7 and L3/4 DDoS. Add load_balancing_health_alert, expiring_service_token_alert, tunnel_health_event and others by name.

Verification

Static validation runs tofu fmt, init, validate, tflint and checkov. This module has not yet had a live test, so it is published as statically validated with its live test pending and does not carry the live-tested mark.

Usage code & full reference need an account

The complete copy-paste usage, the full input/output reference, and operational notes are free with an account - shown here and bundled in the download. Sign in and this section fills in.

  • Usage
Create a free accountSign in