Cloudflare lets you tag Access service tokens for authorization
Service tokens can now carry up to five key-value tags, and Service Auth policies can authorize by tag instead of listing every token by name.
Cloudflare added key-value tags to Access service tokens on 2 November, the company said in its changelog. You can attach tags when creating or editing a token, either in the dashboard or through the service token API, and then search or filter the Service Tokens page by tag.
Each token supports up to five tags, such as environment: production or team: payments. The useful part is a new Service Token Tag selector in Service Auth policies: a policy can now authorize any token carrying a given key-value pair, instead of naming each token individually.
Why it matters: if you run more than a handful of service tokens, for CI jobs, internal services or other machine-to-machine auth, you’ve probably maintained a Service Auth policy that lists every token by name and needs editing each time you issue a new one. Tag the token once instead, and any policy keyed to that tag picks it up automatically. Worth a look if you’re managing Access for more than a couple of automated clients.