Known Zone Entitlements

abuse

EntitlementType
ts.manual_processbool

always_online

EntitlementType
always_online.crawl_frequencymax_count

api_discovery

EntitlementType
api_discovery.allowedbool

api_routing

EntitlementType
api_routing.allowedbool

argo

EntitlementType
argo.allow_smart_routingbool
argo.allow_tiered_cachingbool

bot_management

EntitlementType
bot_management.enabledbool
bot_management.session_scorebool
bot_management.workers_enabledbool

cache

EntitlementType
cache.allow_varybool

central_endpoint_list

EntitlementType
central_endpoint_list.allowedbool
central_endpoint_list.api_gateway_phases_max_ruleset_sizemax_count
central_endpoint_list.max_endpoints_per_zonemax_count
central_endpoint_list.max_learned_schemas_per_zonemax_count
central_endpoint_list.max_schemas_per_zonemax_count
central_endpoint_list.max_translated_schema_bytes_per_zonemax_count
central_endpoint_list.max_validated_schemas_per_zonemax_count
central_endpoint_list.schema_validation_allowedbool

custom_pages

EntitlementType
custom_pages.enabledbool

dns

EntitlementType
authoritative_dns.max_record_allowedmax_count
authoritative_dns.max_record_comment_lengthmax_count
authoritative_dns.max_record_tag_value_lengthmax_count
authoritative_dns.max_record_tagsmax_count
authoritative_dns.min_record_ttl_allowedmax_count
authoritative_dns.proxy_record_allowedbool
dns_records_api.bypass_anti_abuse_logicbool

endpoint_abuse_detection

EntitlementType
endpoint_abuse_detection.parameter_learning_allowedbool
endpoint_abuse_detection.sequential_allowedbool
endpoint_abuse_detection.sequential_max_rulesmax_count
endpoint_abuse_detection.volumetric_allowedbool

endpoint_matching

EntitlementType
endpoint_matching.allowedbool

filters

EntitlementType
filters.adv_threat_intel_allowedbool
filters.advanced_geoip_enabledbool
filters.bot_management_enabledbool
filters.hmac_function_enabledbool
filters.managed_lists_open_proxies_allowedbool
filters.operator_regexbool
filters.request_body_inspection_enabledbool
filters.wafml_enabledbool

firewall

EntitlementType
fw.rule_testing.enabledbool

firewalluablock

EntitlementType
firewalluablock.max_rulesmax_count

fwrules

EntitlementType
fwrules.action_bypass_paidbool
fwrules.actions_logbool
fwrules.max_rulesmax_count

graphql_api

EntitlementType
graphql_api.enabled_betabool
graphql_api.enabled_bot_managementbool
graphql_api.enabled_dosbool
graphql_api.enabled_za_bizbool
graphql_api.enabled_za_entbool
graphql_api.enabled_za_freebool
graphql_api.enabled_za_probool
graphql_api.maximum_duration_firewallEventsmax_count
graphql_api.maximum_duration_firewallEventsGroupsmax_count

graphql_query_analytics

EntitlementType
graphql_query_analytics.allowedbool

graphqlv2

EntitlementType
graphql_api_v2.enabled_bot_managementbool
graphql_api_v2.enabled_page_shield_reportsbool

health_checks

EntitlementType
health_checks.countmax_count
health_checks.enabledbool
health_checks.minimum_intervalmax_count
health_checks.region_countmax_count

image_resizing

EntitlementType
image_resizing.enabledbool

intel

EntitlementType
intel.api_domain_limitmax_count
intel.api_phishing_url_scanner_limitmax_count
intel.brand_protection.brand_limitmax_count
intel.brand_protection.pattern_limitmax_count

ip_certificates

EntitlementType
ip_certificatesmax_count

ip_firewall

EntitlementType
ip_firewall.country_block_enabledbool
ip_firewall.country_challenge_enabledbool
ip_firewall.country_jschl_enabledbool
ip_firewall.max_rulesmax_count

logpush

EntitlementType
logpush.bot_management.enabledbool
logpush.dns_logs.max_jobs_allowedmax_count
logpush.firewall_events.max_jobs_allowedmax_count
logpush.http_requests.max_jobs_allowedmax_count
logpush.max_instant_logs_jobs_allowedmax_count
logpush.nel_reports.max_jobs_allowedmax_count
logpush.page_shield_events.max_jobs_allowedmax_count
logpush.spectrum_events.max_jobs_allowedmax_count

logshare

EntitlementType
logshare.bot_management.enabledbool
logshare.enabledbool

managed_client_cert

EntitlementType
managed_client_cert.certsmax_count

managed_hostname

EntitlementType
managed_hostname.certificatesmax_count
managed_hostname.metadata_accessbool

page_rules

EntitlementType
page_rulesmax_count

page_shield

EntitlementType
page_shield.connection_monitor_allowedbool
page_shield.resource_inventory_export_allowedbool

proxy_anything

EntitlementType
proxy_anything.argo_smart_routingbool

rate_limiting

EntitlementType
rate_limiting.allow_body_controlbool
rate_limiting.allow_bypassbool
rate_limiting.allow_edge_trafficbool
rate_limiting.allow_method_controlbool
rate_limiting.allow_sampling_period_wildcardbool
rate_limiting.allow_simulatebool
rate_limiting.allow_status_controlbool
rate_limiting.allow_timeout_wildcardbool
rate_limiting.challenge_enabledbool
rate_limiting.jsch_enabledbool
rate_limiting.managed_challenge_enabledbool
rate_limiting.max_rulesmax_count
rate_limiting.resp_headersmax_count
rate_limiting.sampling_period_boundsrange
rate_limiting.sampling_period_secsenum_number
rate_limiting.timeout_boundsrange
rate_limiting.timeout_secsenum_number

registrar

EntitlementType
cf_registrar.enabledbool

rulesets

EntitlementType
rulesets.adv_geoip_allowedbool
rulesets.adv_threat_intel_allowedbool
rulesets.api_shield_graphql_query_analytics_allowedbool
rulesets.block_customized_response_allowedbool
rulesets.body_inspection_allowedbool
rulesets.bots_management_allowedbool
rulesets.cache_settings_rule_custom_cache_key_allowedbool
rulesets.cache_settings_rule_maxmax_count
rulesets.config_rule_disable_railgun_allowedbool
rulesets.config_rule_disable_waitroom_allowedbool
rulesets.config_rule_maxmax_count
rulesets.config_rule_mirage_allowedbool
rulesets.config_rule_polish_allowedbool
rulesets.config_rule_security_level_off_allowedbool
rulesets.config_rule_ssl_origin_pull_allowedbool
rulesets.config_rule_sxg_allowedbool
rulesets.custom_errors_max_rulesmax_count
rulesets.ddos_l7_sensitivity_limitmax_count
rulesets.dynamic_redirect_rule_maxmax_count
rulesets.firewall_custom_max_rules_per_rulesetmax_count
rulesets.firewall_custom_phase_allowedbool
rulesets.fw_global_rulesets_execute_ddos_l7_allowedbool
rulesets.fw_global_rulesets_execute_firewall_managed_bot_management_definite_botsbool
rulesets.fw_global_rulesets_execute_firewall_managed_bot_management_likely_botsbool
rulesets.fw_global_rulesets_execute_firewall_managed_ceccr_allowedbool
rulesets.fw_global_rulesets_execute_firewall_managed_cmr_allowedbool
rulesets.fw_global_rulesets_execute_firewall_managed_cor_allowedbool
rulesets.fw_global_rulesets_execute_firewall_managed_cramr_allowedbool
rulesets.fw_global_rulesets_execute_request_late_transform_managed_headers_allowedbool
rulesets.fw_global_rulesets_execute_response_managed_headers_allowedbool
rulesets.fw_global_rulesets_execute_sanitization_allowedbool
rulesets.hmac_function_allowedbool
rulesets.labelled_releases_allowedbool
rulesets.log_action_allowedbool
rulesets.managed_lists_open_proxies_allowedbool
rulesets.managed_rules_allowedbool
rulesets.matched_data_logging_allowedbool
rulesets.max_api_shieldsmax_count
rulesets.max_ddos_l7_rulesmax_count
rulesets.max_endpoints_per_shieldmax_count
rulesets.max_page_shield_rules_per_rulesetmax_count
rulesets.max_ratelimit_rules_per_rulesetmax_count
rulesets.migration_firewall_custom_phase_allowedbool
rulesets.origin_rule_host_header_allowedbool
rulesets.origin_rule_maxmax_count
rulesets.origin_rule_origin_host_allowedbool
rulesets.origin_rule_origin_port_allowedbool
rulesets.origin_rule_sni_override_allowedbool
rulesets.owning_root_rulesets_allowedbool
rulesets.ratelimit_levelmax_count
rulesets.ratelimit_sampling_periodenum_number
rulesets.regex_operator_allowedbool
rulesets.response_compression_max_rulesmax_count
rulesets.response_phase_allowedbool
rulesets.snippets_rule_maxmax_count
rulesets.transform_max_rulesmax_count
rulesets.transform_phase_regex_allowedbool
rulesets.true_client_ip_allowedbool
rulesets.waf_migration_validation_allowedbool
rulesets.wafml_score_allowedbool
rulesets.waiting_rooms_custom_rules_allowedbool

rum

EntitlementType
rum.max_rulesmax_count

script_monitor

EntitlementType
script_monitor.allowedbool
script_monitor.configure_dedicated_domain_reporting_allowedbool
script_monitor.malicious_domain_checks_allowedbool
script_monitor.malicious_script_checks_allowedbool
script_monitor.page_attribution_allowedbool

sni_custom_certificates

EntitlementType
sni_custom_certificatesmax_count

snippets

EntitlementType
snippets.max_snippets_allowedmax_count

token_validation

EntitlementType
token_validation.allowedbool
token_validation.max_configs_per_zonemax_count

waf_overrides

EntitlementType
waf_overrides.max_rulesmax_count

wafml

EntitlementType
wafml.score_allowedbool

waiting_rooms

EntitlementType
waiting_rooms.allowedbool
waiting_rooms.change_queueing_method_allowedbool
waiting_rooms.countmax_count
waiting_rooms.custom_page_allowedbool
waiting_rooms.disable_session_renewal_allowedbool
waiting_rooms.event_countmax_count
waiting_rooms.json_response_allowedbool
waiting_rooms.schedule_event_allowedbool

zone

EntitlementType
zone.advanced_certificate_managerbool
zone.automatic_platform_optimizationbool
zone.increase_http_timeoutbool
zone.long_lived_grpcbool
zone.miragebool
zone.partial_setup_allowedbool

zone_analytics

EntitlementType
zone_analytics.minimum_duration_colosmax_count
zone_analytics.minimum_duration_zonemax_count

zone_custom_ns

EntitlementType
zone_custom_ns.allowedbool

zonelockdown

EntitlementType
zonelockdown.max_rulesmax_count

Have an entitlement not covered on the list? Reach out to @CherryJimbo on Twitter or CherryJimbo#0001 on Discord.