LogsCmbConfig

Source: src/Cloudflare/LogsControl/CmbConfig.ts

The account-level Customer Metadata Boundary (CMB) configuration for Cloudflare Logs (/accounts/{account_id}/logs/control/cmb/config).

The CMB config is a true account singleton with PUT/DELETE semantics: the POST endpoint is a full upsert, and DELETE removes the configuration entirely (an account with no CMB config reads back as empty). Identity is the account itself.

CMB is part of Cloudflare’s Data Localization Suite and requires an Enterprise plan — on unentitled accounts every operation fails with the typed LogsControlNotAuthorized error.

Changing the CMB region changes where ALL logs for the account are stored and processed, and deleting the config lifts the boundary. Handle with care in production accounts.

Restricting logs to a region

Keep all account logs in the EU

const cmb = yield* Cloudflare.LogsCmbConfig("EuLogs", {
  regions: "eu",
});

Allow out-of-region access

const cmb = yield* Cloudflare.LogsCmbConfig("EuLogs", {
  regions: "eu",
  allowOutOfRegionAccess: true,
});