undefined | Better HN

0 pointsteruakohatu7mo ago0 comments

This has blown my mind. Its been a constant source of frustration since Cloudflare stubbornly refuses to allow non-enterprise accounts to have a seperate key per zone. The thread requesting it is a masterclass in passive aggressiveness:

https://community.cloudflare.com/t/restrict-scope-api-tokens...

0 comments

Jnr7mo ago

When setting up the API key, use the "Select zones to include or exclude." section. Works fine on the free account.

teruakohatuOP7mo ago

I should have clarified, you can’t for subdomains on a non-enterprise account.

Kovah7mo ago

Could you elaborate on the separate key per zone issue? It's possible to create different API keys which have only access to a specific zone, and I'm a non-enterprise user.

johnmaguire7mo ago

This allows you to restrict it to a domain (e.g. example.com) but not a sub-domain of that domain.

Kovah7mo ago

Ah I see, thanks for the clarification!

j / k navigate · click thread line to collapse

0 pointsteruakohatu7mo ago0 comments

https://community.cloudflare.com/t/restrict-scope-api-tokens...

0 comments

Jnr7mo ago

When setting up the API key, use the "Select zones to include or exclude." section. Works fine on the free account.

teruakohatuOP7mo ago

I should have clarified, you can’t for subdomains on a non-enterprise account.

Kovah7mo ago

Could you elaborate on the separate key per zone issue? It's possible to create different API keys which have only access to a specific zone, and I'm a non-enterprise user.

johnmaguire7mo ago

This allows you to restrict it to a domain (e.g. example.com) but not a sub-domain of that domain.

Kovah7mo ago

Ah I see, thanks for the clarification!

j / k navigate · click thread line to collapse