Driftwatch

Cloudflare / Cloudflare API /

Breakingdirection flip: their tools call this safe

audit_ssh is no longer accepted

What changed

Usually ignored rather than rejected, so the call succeeds and does something subtly different.

Affects audit_ssh on zero-trust-gateway_rule-settings reachable from 8 operations. Grep for it: nothing else will tell you.

Who is affected

Code that sends Cloudflare's zero-trust-gateway_rule-settings objects, used by 8 Cloudflare operations.

Before and after

WhereBeforeAfter
zero-trust-gateway_rule-settings.audit_sshpresentabsent

Code that breaks

await client.post("/…", {
  // audit_ssh is now ignored, not rejected
  audit_ssh: value,
});

Based on Cloudflare’s published API specification. How severity is decided.