diff --git a/access_groups.tf b/access_groups.tf index d619e33..bad29bf 100644 --- a/access_groups.tf +++ b/access_groups.tf @@ -6,10 +6,10 @@ locals { # SAML groups from Okta saml_groups = { contractors = "Contractors" - infrastructure_admin = "GL_U_Infrastructure Admin" - sales_engineering = "GL_U_Sales Engineering" - sales = "GL_U_Sales" - it_admin = "GL_U_IT Admin" + infrastructure_admin = "GL_Users_Infrastructure Admin" + sales_engineering = "GL_Users_Sales Engineering" + sales = "GL_Users_Sales" + it_admin = "GL_Users_IT Admin" } # Allowed countries @@ -42,7 +42,7 @@ resource "cloudflare_zero_trust_access_group" "saml_groups" { # Geographic Rule Groups resource "cloudflare_zero_trust_access_group" "country_requirements_rule_group" { account_id = local.cloudflare_account_id - name = "GL_M_Country Requirements" + name = "GL_Localisation_Country Requirements" include = [ for country in local.allowed_countries : { @@ -63,7 +63,7 @@ resource "cloudflare_zero_trust_access_group" "country_requirements_rule_group" # Device Posture Rule Groups resource "cloudflare_zero_trust_access_group" "latest_os_version_requirements_rule_group" { account_id = local.cloudflare_account_id - name = "GL_M_Latest OS Version Requirements" + name = "GL_OS Version Requirements" include = [ for posture_id in local.os_posture_checks : { @@ -77,7 +77,7 @@ resource "cloudflare_zero_trust_access_group" "latest_os_version_requirements_ru # Composite Rule Groups resource "cloudflare_zero_trust_access_group" "employees_rule_group" { account_id = local.cloudflare_account_id - name = "GL_U_Employees" + name = "GL_Users_Employees" include = [ for group_key in ["it_admin", "sales", "sales_engineering", "infrastructure_admin"] : { @@ -90,7 +90,7 @@ resource "cloudflare_zero_trust_access_group" "employees_rule_group" { resource "cloudflare_zero_trust_access_group" "sales_team_rule_group" { account_id = local.cloudflare_account_id - name = "GL_U_Sales Team" + name = "GL_Users_Sales Team" include = [ for group_key in ["sales", "sales_engineering"] : { @@ -103,7 +103,7 @@ resource "cloudflare_zero_trust_access_group" "sales_team_rule_group" { resource "cloudflare_zero_trust_access_group" "admins_rule_group" { account_id = local.cloudflare_account_id - name = "GL_U_Administrators" + name = "GL_Users_Administrators" include = [ for group_key in ["it_admin", "infrastructure_admin"] : { @@ -116,7 +116,7 @@ resource "cloudflare_zero_trust_access_group" "admins_rule_group" { resource "cloudflare_zero_trust_access_group" "contractors_rule_group" { account_id = local.cloudflare_account_id - name = "GL_U_Contractors Extended" + name = "GL_Users_Contractors Extended" include = [ {