Add TTL option to cloudflare_api_token

[abulfat-m]

Current Terraform and Cloudflare provider version

v1.0.10, 3.8.0

Description

API tokens have TTL option available via Dash and API. Please make this option available via Terraform as well.

Use cases

Security generally requires TTL on API tokens to be defined as part of rotation policy.

Potential Terraform configuration

resource "cloudflare_api_token" "api_token_create" {
  name = "api_token_create"

  policy {
    permission_groups = [
      data.cloudflare_api_token_permission_groups.all.permissions["API Tokens Write"],
    ]
    resources = {
      "com.cloudflare.api.user.${var.user_id}" = "*"
    }
  }

  condition {
    request_ip {
      in     = ["192.0.2.1/32"]
      not_in = ["198.51.100.1/32"]
    }
    ttl { 
      not_before = "2018-07-01T05:20:00Z"
      expires_on = "2019-07-01T05:20:00Z"
    }
  }
}

References

No response

[ekostjuk]

Would be great to have short lived narrow scoped tokens auto-generated to hide away complexity of generating these via UI/API from users/system.

[github-actions]

This functionality has been released in v3.20.0 of the Terraform Cloudflare Provider.

Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!