Unable to Use "Challenges for Account Takeover Detections" Rule in WAF Custom Rules

[pavel-lipcean]

Existing documentation URL(s)

When attempting to implement the rule from the "Challenges for account takeover detections" example in the Cloudflare documentation (https://developers.cloudflare.com/bots/concepts/detection-ids/#challenges-for-account-takeover-detections), the following error occurs:

"The current expression is not supported by the expression builder and will be discarded"

This happens when trying to use the expression:
(any(cf.bot_management.detection_ids[*] eq 201326593))

Additionally, in the WAF Custom Rules section, there is no available option for "Bot Detection IDs", preventing the creation of rules based on detection ID 201326593.

What changes are you suggesting?

Is there an alternative method to implement this rule?

Additional information

FYI Cloudy provides a lot of rules are not supported by the expression builder too.

No response

[patriciasantaana]

Hi @pavel-lipcean! Thank you for raising this to our attention. It looks like you are not using Enterprise Bot Management. To use this feature, you will need to be on that plan.

[pavel-lipcean]

Hey @patriciasantaana

• Could you update the documentation to clarify that this feature is available only for Enterprise clients?

• Also, Cloudy in Free, Pro, or Business subscriptions still provides rules that aren't supported by the expression builder. Can you take another look? This happens with every prompt on our end—please check the attached video for reference.

sn66553.mp4

[patriciasantaana]

Hi @pavel-lipcean, we're working on updating the docs to clarify that the feature is Enterprise only.

As for Cloudy, thank you for the feedback! I'll pass it along to the team who handles it.