diff --git a/Access_Controls-Policies-Rule_Groups.tf b/Access_Controls-Policies-Rule_Groups.tf index 7ad8e65..04dd73b 100644 --- a/Access_Controls-Policies-Rule_Groups.tf +++ b/Access_Controls-Policies-Rule_Groups.tf @@ -506,67 +506,6 @@ resource "cloudflare_zero_trust_access_group" "latest_os_version_requirements_ru ] } -# Composite Rule Groups -resource "cloudflare_zero_trust_access_group" "employees_rule_group" { - account_id = local.cloudflare_account_id - name = "GL_Users_Employees" - - include = [ - for group_key in ["it_admin", "sales", "sales_engineering", "infrastructure_admin"] : { - group = { - id = cloudflare_zero_trust_access_group.saml_groups[group_key].id - } - } - ] -} - -# -resource "cloudflare_zero_trust_access_group" "sales_team_rule_group" { - account_id = local.cloudflare_account_id - name = "GL_Users_Sales Team" - - include = [ - for group_key in ["sales", "sales_engineering"] : { - group = { - id = cloudflare_zero_trust_access_group.saml_groups[group_key].id - } - } - ] -} - -# -resource "cloudflare_zero_trust_access_group" "admins_rule_group" { - account_id = local.cloudflare_account_id - name = "GL_Users_Administrators" - - include = [ - for group_key in ["it_admin", "infrastructure_admin"] : { - group = { - id = cloudflare_zero_trust_access_group.saml_groups[group_key].id - } - } - ] -} - -# -resource "cloudflare_zero_trust_access_group" "contractors_rule_group" { - account_id = local.cloudflare_account_id - name = "GL_Users_Contractors Extended" - - include = [ - { - group = { - id = cloudflare_zero_trust_access_group.saml_groups["contractors"].id - } - }, - { - email_domain = { - domain = var.cloudflare_email_domain - } - } - ] -} - #========================================================== # Access Policies #==========================================================