1020: Access denied

Do you know which Cloudflare firewall/WAF rule blocked this, or is it unclear?

I can see which rule blocked it

A Cloudflare firewall/WAF rule you've identified is intentionally blocking this request.

Check

Open that specific rule in Security > WAF and confirm it's matching more broadly than intended (e.g. blocking legitimate traffic alongside the traffic it was meant to stop).

Fix

Narrow the rule's match conditions, or add an explicit allow rule (with higher priority) for the legitimate traffic.

Verify

Retry the request and confirm it's no longer blocked, then confirm the rule still blocks the traffic it was meant to.

Unclear / can't tell

Some Cloudflare firewall/WAF rule is blocking this request, but which one isn't clear yet.

Check

Go to Security > Events in the Cloudflare dashboard and filter by this request's timestamp/IP to see which rule fired and why.

Fix

Once identified, narrow that rule's match conditions or add an allow rule for the legitimate traffic (same fix as above).

Verify

Retry the request and confirm it's no longer blocked.

Want to narrow it down interactively instead? Use the error lookup tool.