New ways to troubleshoot Cloudflare Access 'blocked' messages

What this post added

This post introduces enhanced troubleshooting capabilities for Cloudflare Access, allowing administrators to investigate block decisions based on connection context (e.g., location, IP address, Secure Web Gateway presence) in addition to identity. It details a new GraphQL API for querying specific blocked requests by RayID, User, or Application, and improvements to the user-facing block page. The system leverages the existing analytics pipeline with intelligent sampling to manage the scale of log data generated by non-identity block events.