--- title: Cloud Workload Security --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Zero Trust](https://developers.cloudflare.com/api/go/resources/zero_trust) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Cloud Workload Security #### Cloud Workload SecurityBasic Auth Credentials ##### [List basic-auth credentials for an account](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/basic_auth_credentials/methods/list) client.ZeroTrust.CWS.BasicAuthCredentials.List(ctx, params) (\*CursorPagination\[[BasicAuthCredential]()], error) GET/accounts/{account\_id}/cws/basic-auth-credentials ##### [Get a basic-auth credential by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/basic_auth_credentials/methods/get) client.ZeroTrust.CWS.BasicAuthCredentials.Get(ctx, credentialID, query) (\*[BasicAuthCredential](), error) GET/accounts/{account\_id}/cws/basic-auth-credentials/{credential\_id} ##### [Create a basic-auth credential](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/basic_auth_credentials/methods/create) client.ZeroTrust.CWS.BasicAuthCredentials.New(ctx, params) (\*[BasicAuthCredential](), error) POST/accounts/{account\_id}/cws/basic-auth-credentials ##### [Delete a basic-auth credential](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/basic_auth_credentials/methods/delete) client.ZeroTrust.CWS.BasicAuthCredentials.Delete(ctx, credentialID, body) (\*[CWSBasicAuthCredentialDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/basic-auth-credentials/{credential\_id} ##### ModelsExpand Collapse
type BasicAuthCredential struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property UpdatedAt Time formatdate-time Link to this property Username string Login presented by the client. Printable ASCII only, excluding space and colon (RFC 7617 forbids a colon in the user-id). maxLength100 minLength1 Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.basic_auth_credentials%20%3E%20(model)%20basic_auth_credential%20%3E%20(schema)>) #### Cloud Workload SecurityBasic Auth CredentialsSecrets ##### [List secrets for a basic-auth credential](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/basic_auth_credentials/subresources/secrets/methods/list) client.ZeroTrust.CWS.BasicAuthCredentials.Secrets.List(ctx, credentialID, params) (\*CursorPagination\[[BasicAuthSecret]()], error) GET/accounts/{account\_id}/cws/basic-auth-credentials/{credential\_id}/secrets ##### [Get a basic-auth secret by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/basic_auth_credentials/subresources/secrets/methods/get) client.ZeroTrust.CWS.BasicAuthCredentials.Secrets.Get(ctx, credentialID, secretID, query) (\*[BasicAuthSecret](), error) GET/accounts/{account\_id}/cws/basic-auth-credentials/{credential\_id}/secrets/{secret\_id} ##### [Add a secret to a basic-auth credential](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/basic_auth_credentials/subresources/secrets/methods/create) client.ZeroTrust.CWS.BasicAuthCredentials.Secrets.New(ctx, credentialID, params) (\*[BasicAuthSecret](), error) POST/accounts/{account\_id}/cws/basic-auth-credentials/{credential\_id}/secrets ##### [Delete a basic-auth secret](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/basic_auth_credentials/subresources/secrets/methods/delete) client.ZeroTrust.CWS.BasicAuthCredentials.Secrets.Delete(ctx, credentialID, secretID, body) (\*[CWSBasicAuthCredentialSecretDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/basic-auth-credentials/{credential\_id}/secrets/{secret\_id} ##### ModelsExpand Collapse
type BasicAuthSecret struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property ExpiresAt TimeOptional Optional RFC 3339 expiration time. Omit for no expiration. formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.basic_auth_credentials.secrets%20%3E%20(model)%20basic_auth_secret%20%3E%20(schema)>) #### Cloud Workload SecurityDeployments ##### [List deployments](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/deployments/methods/list) client.ZeroTrust.CWS.Deployments.List(ctx, params) (\*CursorPagination\[[Deployment]()], error) GET/accounts/{account\_id}/cws/deployments ##### [Get a deployment by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/deployments/methods/get) client.ZeroTrust.CWS.Deployments.Get(ctx, deploymentID, query) (\*[Deployment](), error) GET/accounts/{account\_id}/cws/deployments/{deployment\_id} ##### [Create a new deployment](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/deployments/methods/create) client.ZeroTrust.CWS.Deployments.New(ctx, params) (\*[Deployment](), error) POST/accounts/{account\_id}/cws/deployments ##### [Update a deployment](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/deployments/methods/update) client.ZeroTrust.CWS.Deployments.Update(ctx, deploymentID, params) (\*[Deployment](), error) PUT/accounts/{account\_id}/cws/deployments/{deployment\_id} ##### [Delete a deployment](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/deployments/methods/delete) client.ZeroTrust.CWS.Deployments.Delete(ctx, deploymentID, body) (\*[CWSDeploymentDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/deployments/{deployment\_id} ##### ModelsExpand Collapse
type Deployment struct{…} ID string Server-assigned UUID formatuuid Link to this property BasicAuthCredentialIDs \[]string IDs of basic-auth credentials attached to this deployment Link to this property CreatedAt Time formatdate-time Link to this property
DefaultMode DeploymentDefaultMode Default traffic decision when no policy set matches One of the following: const DeploymentDefaultModeAllow DeploymentDefaultMode = "ALLOW" Link to this property const DeploymentDefaultModeBlock DeploymentDefaultMode = "BLOCK" Link to this property
Link to this property Name string Human-readable name; unique per account maxLength100 minLength1 Link to this property
OnErrorAction DeploymentOnErrorAction Action applied when an enforcing policy has a runtime Rego error One of the following: const DeploymentOnErrorActionBlock DeploymentOnErrorAction = "BLOCK" Link to this property const DeploymentOnErrorActionSkip DeploymentOnErrorAction = "SKIP" Link to this property
Link to this property PolicySetIDs \[]string IDs of policy sets attached to this deployment Link to this property RegoRaiseError bool Whether OPA builtin failures are raised as runtime evaluation errors Link to this property Tags map\[string, string] Tags attached to this deployment Link to this property UpdatedAt Time formatdate-time Link to this property Description stringOptional Optional free-form description. maxLength1024 Link to this property DomainACLID stringOptional ID of the attached domain ACL. Omitted when none. formatuuid Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.deployments%20%3E%20(model)%20deployment%20%3E%20(schema)>) #### Cloud Workload SecurityDomain ACLs ##### [List domain ACLs](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/domain_acls/methods/list) client.ZeroTrust.CWS.DomainACLs.List(ctx, params) (\*CursorPagination\[[DomainACL]()], error) GET/accounts/{account\_id}/cws/domain-acls ##### [Get a domain ACL by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/domain_acls/methods/get) client.ZeroTrust.CWS.DomainACLs.Get(ctx, domainACLID, query) (\*[DomainACL](), error) GET/accounts/{account\_id}/cws/domain-acls/{domain\_acl\_id} ##### [Create a new domain ACL](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/domain_acls/methods/create) client.ZeroTrust.CWS.DomainACLs.New(ctx, params) (\*[DomainACL](), error) POST/accounts/{account\_id}/cws/domain-acls ##### [Update a domain ACL and replace its entries](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/domain_acls/methods/update) client.ZeroTrust.CWS.DomainACLs.Update(ctx, domainACLID, params) (\*[DomainACL](), error) PUT/accounts/{account\_id}/cws/domain-acls/{domain\_acl\_id} ##### [Delete a domain ACL](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/domain_acls/methods/delete) client.ZeroTrust.CWS.DomainACLs.Delete(ctx, domainACLID, body) (\*[CWSDomainACLDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/domain-acls/{domain\_acl\_id} ##### ModelsExpand Collapse
type DomainACL struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property
DefaultAction DomainACLDefaultAction Action applied when no entry matches the request domain One of the following: const DomainACLDefaultActionAllow DomainACLDefaultAction = "ALLOW" Link to this property const DomainACLDefaultActionBlock DomainACLDefaultAction = "BLOCK" Link to this property
Link to this property
Entries \[]DomainACLEntry Per-domain action overrides. Each domain appears at most once.
Action DomainACLEntriesAction Per-domain decision overriding the parent ACL’s default\_action One of the following: const DomainACLEntriesActionAllow DomainACLEntriesAction = "ALLOW" Link to this property const DomainACLEntriesActionBlock DomainACLEntriesAction = "BLOCK" Link to this property
Link to this property Domain string Hostname or domain pattern, capped at 255 UTF-8 bytes maxLength255 minLength1 Link to this property
Link to this property Name string Human-readable name; unique per account maxLength100 minLength1 Link to this property UpdatedAt Time formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.domain_acls%20%3E%20(model)%20domain_acl%20%3E%20(schema)>) #### Cloud Workload SecurityPolicies ##### [List policies](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policies/methods/list) client.ZeroTrust.CWS.Policies.List(ctx, params) (\*CursorPagination\[[Policy]()], error) GET/accounts/{account\_id}/cws/policies ##### [Get a policy by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policies/methods/get) client.ZeroTrust.CWS.Policies.Get(ctx, policyID, query) (\*[Policy](), error) GET/accounts/{account\_id}/cws/policies/{policy\_id} ##### [Create a new policy](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policies/methods/create) client.ZeroTrust.CWS.Policies.New(ctx, params) (\*[Policy](), error) POST/accounts/{account\_id}/cws/policies ##### [Update a policy](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policies/methods/update) client.ZeroTrust.CWS.Policies.Update(ctx, policyID, params) (\*[Policy](), error) PUT/accounts/{account\_id}/cws/policies/{policy\_id} ##### [Delete a policy](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policies/methods/delete) client.ZeroTrust.CWS.Policies.Delete(ctx, policyID, body) (\*[CWSPolicyDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/policies/{policy\_id} ##### ModelsExpand Collapse
type Policy struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property Entrypoint string Non-function rule declared in rego\_source. Evaluation uses data.<package\_path>.. maxLength255 Link to this property Filter string Filter expression that determines whether this policy applies. Maximum 4096 UTF-8 bytes. maxLength4096 minLength1 Link to this property Name string Human-readable name; unique per account maxLength100 minLength1 Link to this property PackagePath string Dotted path derived from rego\_source. Begins with policy. and is unique per account. maxLength1024 Link to this property RegoSource string Inline Rego source with a package beginning with “policy.” Maximum 16384 UTF-8 bytes. maxLength16384 minLength1 Link to this property Tags map\[string, string] Tags attached to this policy Link to this property UpdatedAt Time formatdate-time Link to this property Description stringOptional Optional free-form description. maxLength1024 Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.policies%20%3E%20(model)%20policy%20%3E%20(schema)>) #### Cloud Workload SecurityPolicy Sets ##### [List policy sets](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policy_sets/methods/list) client.ZeroTrust.CWS.PolicySets.List(ctx, params) (\*CursorPagination\[[PolicySet]()], error) GET/accounts/{account\_id}/cws/policy-sets ##### [Get a policy set by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policy_sets/methods/get) client.ZeroTrust.CWS.PolicySets.Get(ctx, policySetID, query) (\*[PolicySet](), error) GET/accounts/{account\_id}/cws/policy-sets/{policy\_set\_id} ##### [Create a new policy set](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policy_sets/methods/create) client.ZeroTrust.CWS.PolicySets.New(ctx, params) (\*[PolicySet](), error) POST/accounts/{account\_id}/cws/policy-sets ##### [Update a policy set](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policy_sets/methods/update) client.ZeroTrust.CWS.PolicySets.Update(ctx, policySetID, params) (\*[PolicySet](), error) PUT/accounts/{account\_id}/cws/policy-sets/{policy\_set\_id} ##### [Delete a policy set](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/policy_sets/methods/delete) client.ZeroTrust.CWS.PolicySets.Delete(ctx, policySetID, body) (\*[CWSPolicySetDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/policy-sets/{policy\_set\_id} ##### ModelsExpand Collapse
type PolicySet struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property ExcludeWorkloadIDs \[]string IDs of workloads that exclude matching requests. Exclusions take precedence. Link to this property IncludeWorkloadIDs \[]string IDs of workloads that include matching requests. Empty includes all requests before exclusions. Link to this property Name string Human-readable name; unique per account maxLength100 minLength1 Link to this property
Policies \[]PolicySetPolicy Member policies and their per-membership enforcement mode Enforce bool Whether this policy should enforce when it matches. False keeps the policy attached for non-enforcing evaluation. Link to this property PolicyID string ID of the member policy formatuuid Link to this property
Link to this property Tags map\[string, string] Tags attached to this policy set Link to this property UpdatedAt Time formatdate-time Link to this property Description stringOptional Optional free-form description. maxLength1024 Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.policy_sets%20%3E%20(model)%20policy_set%20%3E%20(schema)>) #### Cloud Workload SecurityRego Metadata ##### [List Rego metadata documents](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_metadata/methods/list) client.ZeroTrust.CWS.RegoMetadata.List(ctx, params) (\*CursorPagination\[[RegoMetadata]()], error) GET/accounts/{account\_id}/cws/rego-metadata ##### [Get a rego metadata document by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_metadata/methods/get) client.ZeroTrust.CWS.RegoMetadata.Get(ctx, regoMetadataID, query) (\*[RegoMetadata](), error) GET/accounts/{account\_id}/cws/rego-metadata/{rego\_metadata\_id} ##### [Create a new rego metadata document](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_metadata/methods/create) client.ZeroTrust.CWS.RegoMetadata.New(ctx, params) (\*[RegoMetadata](), error) POST/accounts/{account\_id}/cws/rego-metadata ##### [Update a rego metadata document](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_metadata/methods/update) client.ZeroTrust.CWS.RegoMetadata.Update(ctx, regoMetadataID, params) (\*[RegoMetadata](), error) PUT/accounts/{account\_id}/cws/rego-metadata/{rego\_metadata\_id} ##### [Delete a rego metadata document](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_metadata/methods/delete) client.ZeroTrust.CWS.RegoMetadata.Delete(ctx, regoMetadataID, body) (\*[CWSRegoMetadataDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/rego-metadata/{rego\_metadata\_id} ##### ModelsExpand Collapse
type RegoMetadata struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property Data unknown Link to this property ImportPath string Unique Rego import path in the form metadata., with one alphanumeric or underscore segment. Reference it as data.<import\_path>. maxLength255 minLength1 Link to this property Name string Human-readable name; unique per account maxLength100 minLength1 Link to this property UpdatedAt Time formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.rego_metadata%20%3E%20(model)%20rego_metadata%20%3E%20(schema)>) #### Cloud Workload SecurityRego Modules ##### [List Rego modules](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_modules/methods/list) client.ZeroTrust.CWS.RegoModules.List(ctx, params) (\*CursorPagination\[[RegoModule]()], error) GET/accounts/{account\_id}/cws/rego-modules ##### [Get a Rego module by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_modules/methods/get) client.ZeroTrust.CWS.RegoModules.Get(ctx, regoModuleID, query) (\*[RegoModule](), error) GET/accounts/{account\_id}/cws/rego-modules/{rego\_module\_id} ##### [Create a new Rego module](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_modules/methods/create) client.ZeroTrust.CWS.RegoModules.New(ctx, params) (\*[RegoModule](), error) POST/accounts/{account\_id}/cws/rego-modules ##### [Update a Rego module](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_modules/methods/update) client.ZeroTrust.CWS.RegoModules.Update(ctx, regoModuleID, params) (\*[RegoModule](), error) PUT/accounts/{account\_id}/cws/rego-modules/{rego\_module\_id} ##### [Delete a Rego module](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/rego_modules/methods/delete) client.ZeroTrust.CWS.RegoModules.Delete(ctx, regoModuleID, body) (\*[CWSRegoModuleDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/rego-modules/{rego\_module\_id} ##### ModelsExpand Collapse
type RegoModule struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property Name string Human-readable name; unique per account maxLength100 minLength1 Link to this property PackagePath string Dotted path derived from rego\_source. Begins with lib. and is unique per account. maxLength1024 Link to this property RegoSource string Library Rego source with a package beginning with “lib.” Maximum 16384 UTF-8 bytes. maxLength16384 minLength1 Link to this property UpdatedAt Time formatdate-time Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.rego_modules%20%3E%20(model)%20rego_module%20%3E%20(schema)>) #### Cloud Workload SecurityTenant Structures ##### [List tenant structures for an account](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/methods/list) client.ZeroTrust.CWS.TenantStructures.List(ctx, params) (\*CursorPagination\[[TenantStructure]()], error) GET/accounts/{account\_id}/cws/tenant-structures ##### [Get a tenant structure by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/methods/get) client.ZeroTrust.CWS.TenantStructures.Get(ctx, structureID, query) (\*[TenantStructure](), error) GET/accounts/{account\_id}/cws/tenant-structures/{structure\_id} ##### [Create a tenant structure](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/methods/create) client.ZeroTrust.CWS.TenantStructures.New(ctx, params) (\*[TenantStructure](), error) POST/accounts/{account\_id}/cws/tenant-structures ##### [Update a tenant structure](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/methods/update) client.ZeroTrust.CWS.TenantStructures.Update(ctx, structureID, params) (\*[TenantStructure](), error) PUT/accounts/{account\_id}/cws/tenant-structures/{structure\_id} ##### [Delete a tenant structure](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/methods/delete) client.ZeroTrust.CWS.TenantStructures.Delete(ctx, structureID, body) (\*[CWSTenantStructureDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/tenant-structures/{structure\_id} ##### ModelsExpand Collapse
type TenantStructure struct{…} ID string Server-assigned UUID formatuuid Link to this property
Application TenantStructureApplication Platform this structure models. Immutable after creation; determines valid node kinds and identifier formats. One of the following: const TenantStructureApplicationAws TenantStructureApplication = "aws" Link to this property const TenantStructureApplicationCloudflare TenantStructureApplication = "cloudflare" Link to this property
Link to this property CreatedAt Time formatdate-time Link to this property Name string Human-readable name; unique per account maxLength100 minLength1 Link to this property UpdatedAt Time formatdate-time Link to this property ImportPath stringOptional Optional unique Rego mount path in the form tenant... The application segment must match application; omitted when unmounted. maxLength255 minLength1 Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.tenant_structures%20%3E%20(model)%20tenant_structure%20%3E%20(schema)>) #### Cloud Workload SecurityTenant StructuresNodes ##### [List nodes for a tenant structure](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/subresources/nodes/methods/list) client.ZeroTrust.CWS.TenantStructures.Nodes.List(ctx, structureID, params) (\*CursorPagination\[[TenantStructureNode]()], error) GET/accounts/{account\_id}/cws/tenant-structures/{structure\_id}/nodes ##### [Get a tenant node by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/subresources/nodes/methods/get) client.ZeroTrust.CWS.TenantStructures.Nodes.Get(ctx, structureID, nodeID, query) (\*[TenantStructureNode](), error) GET/accounts/{account\_id}/cws/tenant-structures/{structure\_id}/nodes/{node\_id} ##### [Add a node to a tenant structure](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/subresources/nodes/methods/create) client.ZeroTrust.CWS.TenantStructures.Nodes.New(ctx, structureID, params) (\*[TenantStructureNode](), error) POST/accounts/{account\_id}/cws/tenant-structures/{structure\_id}/nodes ##### [Update a tenant node](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/subresources/nodes/methods/update) client.ZeroTrust.CWS.TenantStructures.Nodes.Update(ctx, structureID, nodeID, params) (\*[TenantStructureNode](), error) PUT/accounts/{account\_id}/cws/tenant-structures/{structure\_id}/nodes/{node\_id} ##### [Delete a tenant node](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/subresources/nodes/methods/delete) client.ZeroTrust.CWS.TenantStructures.Nodes.Delete(ctx, structureID, nodeID, body) (\*[CWSTenantStructureNodeDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/tenant-structures/{structure\_id}/nodes/{node\_id} ##### [Apply a batch of tenant node mutations](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/tenant_structures/subresources/nodes/methods/batch) client.ZeroTrust.CWS.TenantStructures.Nodes.Batch(ctx, structureID, params) (\*[CWSTenantStructureNodeBatchResponse](), error) POST/accounts/{account\_id}/cws/tenant-structures/{structure\_id}/nodes/batch ##### ModelsExpand Collapse
type TenantStructureNode struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property NativeID string Cloud-native identifier of this node, unique within the structure; the parent-reference target. Shape depends on the structure’s application. Immutable after create. maxLength255 minLength1 Link to this property NodeKind string Position in the tree. Legal values depend on the structure’s application (aws: root/ou/account; cloudflare: org/account/zone). At most one root per structure. Immutable after create. maxLength64 minLength1 Link to this property UpdatedAt Time formatdate-time Link to this property Name stringOptional Display name (e.g. an OU or account name), mutable. Optional; empty by default. maxLength100 Link to this property Parent stringOptional Native ID of this node’s parent. Required for non-root nodes and omitted for the root. The parent must be in the same structure and able to contain this node kind. maxLength255 Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.tenant_structures.nodes%20%3E%20(model)%20tenant_structure_node%20%3E%20(schema)>) #### Cloud Workload SecurityWorkloads ##### [List workloads](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/workloads/methods/list) client.ZeroTrust.CWS.Workloads.List(ctx, params) (\*CursorPagination\[[Workload]()], error) GET/accounts/{account\_id}/cws/workloads ##### [Get a workload by ID](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/workloads/methods/get) client.ZeroTrust.CWS.Workloads.Get(ctx, workloadID, query) (\*[Workload](), error) GET/accounts/{account\_id}/cws/workloads/{workload\_id} ##### [Create a new workload](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/workloads/methods/create) client.ZeroTrust.CWS.Workloads.New(ctx, params) (\*[Workload](), error) POST/accounts/{account\_id}/cws/workloads ##### [Update a workload](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/workloads/methods/update) client.ZeroTrust.CWS.Workloads.Update(ctx, workloadID, params) (\*[Workload](), error) PUT/accounts/{account\_id}/cws/workloads/{workload\_id} ##### [Delete a workload](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/cws/subresources/workloads/methods/delete) client.ZeroTrust.CWS.Workloads.Delete(ctx, workloadID, body) (\*[CWSWorkloadDeleteResponse](), error) DELETE/accounts/{account\_id}/cws/workloads/{workload\_id} ##### ModelsExpand Collapse
type Workload struct{…} ID string Server-assigned UUID formatuuid Link to this property CreatedAt Time formatdate-time Link to this property Filter string Filter expression selecting the requests this workload matches. Maximum 4096 UTF-8 bytes. maxLength4096 minLength1 Link to this property Name string Human-readable handle; unique per account. maxLength100 minLength1 Link to this property Tags map\[string, string] Tags attached to this workload Link to this property UpdatedAt Time formatdate-time Link to this property Description stringOptional Optional free-form description. maxLength1024 Link to this property
[Link to this property](<#(resource)%20zero_trust.cws.workloads%20%3E%20(model)%20workload%20%3E%20(schema)>)