Skip to content
Notis

Review Cloudflare firewall rules on a schedule

Get the rules for a specified zone in a regular report so review does not depend on remembering to log in.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

List Firewall Rules

Tool to list firewall rules for a specific zone. use after confirming the zone id to retrieve and audit current firewall rules.

Why this helps

Firewall rules can go unreviewed when there is no simple reminder to inspect them.

  • Receive a recurring view of firewall rules for a specified zone.
  • Make it easier to notice rules that need human review.
  • Keep the review prompt in a report channel you already use.

Setup

Build it in a few focused steps.

  • 1Connect Cloudflare once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis what outcome you want from any channel.
  • 3In one instruction, ask Notis to list firewall rules for the Cloudflare zone you specify and summarize the results for review.
  • 4Pick a recurring schedule as the trigger and choose where run reports go.
  • 5Test with one real run and confirm the intended zone is being checked.

Questions about this workflow

Does this workflow create or change firewall rules?

No. It lists existing rules and reports them for review.

What should I do if I have multiple zones?

Specify the zone to review in your instruction. The available action lists rules for a specific zone.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Google Drive to Cloudflare. A trigger fires from one place; an action lands in another.

Google Drive triggers

Cloudflare actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS record

Tool to create a new dns record within a specific zone. use after obtaining the zone id to programmatically add dns entries.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create WAF List

Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")

ActionInstant

Comment Added (Docs/Sheets/Slides)

Triggers when a new comment is added to Google Docs, Sheets, or Slides.

TriggerPolling

Create Zone

Tool to create a new zone. use after confirming account id when adding a domain to cloudflare.

ActionInstant

File Created

Triggers when a new file is created in Google Drive.

TriggerPolling

Delete DNS Record

Tool to delete a dns record within a specific zone. use after confirming zone and record ids. example: "delete dns record 372e6795... from zone 023e105f4ecef..."

ActionInstant

File Deleted or Trashed

Triggers when a file is moved to trash or permanently deleted in Drive.

TriggerPolling

Delete WAF List

Tool to delete a waf list. use when you need to remove a list after verifying no filters reference it. example: delete list(account id="<account id>", list id="<list id>")

ActionInstant

File Shared (Permissions Added)

Triggers when new sharing permissions are granted to a file or folder. Uses Drive's `changes.list` endpoint with inline `permissions` in the `fields` mask so each change carries the file's current permission set provider-atomically. We diff that against `seen_permission_keys` to identify newly added grants. Drive page tokens are the primary cursor; if Drive rejects a stored token, the trigger raises `PollingTriggerError` without clearing state rather than silently re-baselining and dropping events. Limitation: truly ephemeral permissions (added and revoked between two polls without any other file modification in between) are not detected. Drive Activity API would catch those but requires an additional OAuth scope and a different payload contract.

TriggerPolling

Delete Zone

Tool to delete a zone. use after confirming the zone identifier to permanently remove a dns zone from your cloudflare account. example: delete zone(zone identifier="023e105f4ecef8ad9ca31a8372d0c353")

ActionInstant

File Updated

Triggers when a file's metadata or content changes in Google Drive.

TriggerPolling

List WAF Lists

Tool to fetch all waf lists (no items) for an account. use after confirming account id.

ActionInstant

Google Drive Changes

Triggers when changes are detected in a Google Drive.

TriggerPolling

List Account Members

Tool to list members of a given cloudflare account. use after confirming the account id.

ActionInstant

Connect any two apps with Notis in the middle.

Google Drive and Cloudflare, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.