SchemaValidationSettings

Source: src/Cloudflare/SchemaValidation/Settings.ts

Zone-level schema validation settings (/zones/{zone_id}/schema_validation/settings) — the default mitigation action applied to requests that do not conform to an enabled schema, plus an optional zone-wide kill switch.

The settings are a zone singleton: they always exist (Cloudflare default is none), so this resource never creates or deletes anything physical. Reconcile PUTs the desired state when the observed state differs; destroy restores the values the zone had before Alchemy first managed them.

The log action is plan-gated (API Shield entitlement) on some zones — setting it there fails with the typed UnentitledMitigationAction error.

Managing the zone default

yield* Cloudflare.SchemaValidationSettings("Validation", {
  zoneId: zone.zoneId,
  validationDefaultMitigationAction: "block",
});

Kill switch

yield* Cloudflare.SchemaValidationSettings("Validation", {
  zoneId: zone.zoneId,
  validationDefaultMitigationAction: "block",
  // overrides every schema and per-operation setting:
  validationOverrideMitigationAction: "none",
});