Cloudflare Connection

Configure API Token and Account ID for Hanzo KMS

Navigate to your Cloudflare dashboard and go to Profile.

Click API Tokens > Create Token to generate a new API token.

Configure your API token with the necessary permissions for your Cloudflare services.

Depending on your use case, add one or more of the following permission sets to your API token:

Use the following permissions to grant Hanzo KMS access to sync secrets to Cloudflare Pages:

Required Permissions:

• Account - Cloudflare Pages - Edit
• Account - Account Settings - Read

Add these permissions to your API token and click Continue to summary, then Create Token to generate your API token.

Use the following permissions to grant Hanzo KMS access to sync secrets to Cloudflare Workers:

Required Permissions:

• Account - Workers Scripts - Edit
• Account - Account Settings - Read

Add these permissions to your API token and click Continue to summary, then Create Token to generate your API token.

Use the following permissions to grant Hanzo KMS access to verify certificates using DNS TXT records with ACME:

Required Permissions:

• Account - Account Settings - Read
• Zone - DNS - Edit

Add these permissions to your API token and click Continue to summary, then Create Token to generate your API token.

Use the following permissions to grant Hanzo KMS access to sync certificates to Cloudflare as Custom SSL certificates:

Required Permissions:

• Account - Account Settings - Read
• Zone - SSL and Certificates - Edit

These permissions allow Hanzo KMS to upload, update, and delete custom SSL certificates in your Cloudflare zones.

Add these permissions to your API token and click Continue to summary, then Create Token to generate your API token.

After creation, copy and securely store your API token as it will not be shown again.

Keep your API token secure and do not share it. Anyone with access to this token can manage your Cloudflare resources based on the permissions granted.

From your Cloudflare Account Home page, click on the account information dropdown and select Copy account ID.

Save your Account ID for use in the next step.

Setup Cloudflare Connection in Hanzo KMS

Navigate to the Integrations tab in the desired project, then select App Connections.

Select the Cloudflare Connection option from the connection options modal.

Enter your Cloudflare API token and Account ID in the provided fields and click Connect to Cloudflare to establish the connection.

Your Cloudflare Connection is now available for use in your Hanzo KMS projects.

API token connections require manual token rotation when your Cloudflare API token expires or is regenerated. Monitor your connection status and update the token as needed.