diff --git a/providers/cloudflare/resources/cloudflare.lr b/providers/cloudflare/resources/cloudflare.lr
index 58e688ba1d..5cdb9720e6 100644
--- a/providers/cloudflare/resources/cloudflare.lr
+++ b/providers/cloudflare/resources/cloudflare.lr
@@ -4,7 +4,7 @@ option go_package = "go.mondoo.com/cnquery/v11/providers/cloudflare/resources"
 // Cloudflare provider
 cloudflare {
 	// List all zones
-	zones() []cloudflare.zone 
+	zones() []cloudflare.zone
 
 	// List available accounts
 	accounts() []cloudflare.account
@@ -13,33 +13,33 @@ cloudflare {
 // Cloudflare DNS zone
 private cloudflare.zone @defaults("name account.name") {
 	// Zone identifier
-	id string 
+	id string
 	// Zone name
-	name string 
+	name string
 	// Nameservers for this zone
-	nameServers []string 
+	nameServers []string
 	// Original name servers
-	originalNameServers []string 
+	originalNameServers []string
 
-	// The current status of the zone (initializing, pending, active, or moved)  
-  status string  
-  // Whether the zone is paused  
-  paused bool  
-  // DNS zone type (full or partial)  
-  type string  
+	// The current status of the zone (initializing, pending, active, or moved)
+  status string
+  // Whether the zone is paused
+  paused bool
+  // DNS zone type (full or partial)
+  type string
 
 	// Time the zone was created
-	createdOn time 
+	createdOn time
 	// Time the zone was last modified
-	modifiedOn time 
+	modifiedOn time
 
 	// Zone owner account
-  account cloudflare.zone.account 
+  account cloudflare.zone.account
 
 	// DNS records associated with the zone
 	dns() cloudflare.dns
 
-	// Live inputs 
+	// Live inputs
 	liveInputs() []cloudflare.streams.liveInput
 
 	// Videos
@@ -57,11 +57,11 @@ private cloudflare.zone @defaults("name account.name") {
 // Cloudflare account
 private cloudflare.zone.account @defaults("name") {
 	// Account identifier
-	id string 
+	id string
 	// Account name
-	name string 
+	name string
 	// Account type
-	type string 
+	type string
 	// Account email
 	email string
 }
@@ -69,13 +69,13 @@ private cloudflare.zone.account @defaults("name") {
 // Cloudflare DNS
 private cloudflare.dns {
 	// List all DNS records
-	records() []cloudflare.dns.record 
+	records() []cloudflare.dns.record
 }
 
 // DNS record
 private cloudflare.dns.record @defaults("type content name") {
 	// Cloudflare internal ID
-	id string 
+	id string
 
   // Record name
 	name string
@@ -89,11 +89,11 @@ private cloudflare.dns.record @defaults("type content name") {
 	proxiable bool
 
 	// Type of record (e.g., A, AAAA, or CNAME)
-	type string 
+	type string
 	// Content of the record (e.g., hostname or IP Address)
-	content string 
+	content string
 	// Time to live (in seconds)
-	ttl int 
+	ttl int
 
 	// Time the record was created
 	createdOn time
@@ -115,7 +115,7 @@ private cloudflare.account @defaults("name") {
 	// Time the account was created
 	createdOn time
 
-	// Live inputs 
+	// Live inputs
 	liveInputs() []cloudflare.streams.liveInput
 
 	// Videos
@@ -203,18 +203,18 @@ private cloudflare.streams.video @defaults("name id") {
 }
 
 // Cloudflare R2
-private cloudflare.r2 {
+private cloudflare.r2 @defaults("name location") {
 	buckets() []cloudflare.r2.bucket
 }
 
 // Cloudflare R2 bucket
 private cloudflare.r2.bucket {
- 	// Bucket name  
-  name string  
-  // Bucket location  
-  location string  
-  // Time the bucket was created  
-  createdOn time  
+ 	// Bucket name
+  name string
+  // Bucket location
+  location string
+  // Time the bucket was created
+  createdOn time
 }
 
 // Cloudflare workers
@@ -226,36 +226,36 @@ private cloudflare.workers {
 	pages() []cloudflare.workers.page
 }
 
-// Cloudflare worker  
+// Cloudflare worker
 private cloudflare.workers.worker @defaults("id") {
-	// Worker ID  
-  id string  
-  // Worker etag  
-  etag string  
-  // Worker size  
-  size int  
-  // Deployment for the worker  
-  deploymentId string  
-  // CI/CD pipeline for the worker  
-  pipelineHash string  
-  // Placement mode for the worker (e.g., smart)  
-  placementMode string  
-
-  // Worker was last deployed from  
-  lastDeployedFrom string  
-  // Whether LogPush is enabled for the worker  
-  logPush bool  
+	// Worker ID
+  id string
+  // Worker etag
+  etag string
+  // Worker size
+  size int
+  // Deployment for the worker
+  deploymentId string
+  // CI/CD pipeline for the worker
+  pipelineHash string
+  // Placement mode for the worker (e.g., smart)
+  placementMode string
+
+  // Worker was last deployed from
+  lastDeployedFrom string
+  // Whether LogPush is enabled for the worker
+  logPush bool
   // Time the worker was created
-  createdOn time  
+  createdOn time
   // Time the worker was last modified
-  modifiedOn time  
+  modifiedOn time
 }
 
 // Cloudflare Pages page
 private cloudflare.workers.page @defaults("shortId") {
-	// Worker ID  
+	// Worker ID
 	id string
-	// Worker short ID  
+	// Worker short ID
 	shortId string
 	projectId string
 	projectName string
@@ -274,29 +274,29 @@ private cloudflare.workers.page @defaults("shortId") {
 
 // Cloudflare One
 private cloudflare.one {
-	// Cloudflare Zero Trust applications  
+	// Cloudflare Zero Trust applications
 	apps() []cloudflare.one.app
 	// Identity providers
 	identityProviders() []cloudflare.one.idp
 }
 
-// Cloudflare One application 
+// Cloudflare One application
 private cloudflare.one.app @defaults("name id") {
 	id string // UUID
 	aud string // Audience tag
 
-	name string // Name of the application  
-	domain string // Domain of the application  
+	name string // Name of the application
+	domain string // Domain of the application
 
 	allowedIdentityProviders []string // Allowed identity providers
-	appLauncherVisible bool // Whether the application displays in the App Launcher  
-	autoRedirectToIdentity bool // Whether users skip the identity provider selection step during login  
+	appLauncherVisible bool // Whether the application displays in the App Launcher
+	autoRedirectToIdentity bool // Whether users skip the identity provider selection step during login
 
 	corsHeaders cloudflare.corsHeaders // CORS headers
-	optionsPreflightBypass bool // Whether preflight requests are allowed to bypass Access authentication and go directly to the origin (can't be true if corsHeaders is set)  
+	optionsPreflightBypass bool // Whether preflight requests are allowed to bypass Access authentication and go directly to the origin (can't be true if corsHeaders is set)
 
 	customDenyMessage string // Custom error message shown to a user when they are denied access to the application
-	customDenyUrl string // Custom URL to redirect a user to when they are denied access to the application  
+	customDenyUrl string // Custom URL to redirect a user to when they are denied access to the application
 	serviceAuth401Redirect bool // Whether to return a 401 status code when the request is blocked by a Service Auth policy
 
 	enableBindingCookie bool // Whether to allow the binding cookie, which increases security against compromised authorization tokens and CSRF attacks
@@ -305,13 +305,13 @@ private cloudflare.one.app @defaults("name id") {
 
 	logoUrl string // URL of the application's logo
 
-	sessionDuration string // Amount of time that tokens issued for this application will be valid (Format is 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, and h.)  
+	sessionDuration string // Amount of time that tokens issued for this application will be valid (Format is 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, and h.)
 
 	skipInterstitial bool // Whether automatic authentication through cloudflared is enabled
 
 	type string // Application type
 
-	// Time the application was created  
+	// Time the application was created
 	createdAt time
 	// Time the application was last updated
 	updatedAt time
@@ -336,4 +336,4 @@ private cloudflare.one.idp @defaults("name") {
 	id string // UUID
 	name string // The name of the identity provider, shown to users on the login page.
 	type string // The type of the identity provider.
-}
\ No newline at end of file
+}