diff --git a/.changelog/4649.txt b/.changelog/4649.txt
new file mode 100644
index 0000000000..ca3f4f6e58
--- /dev/null
+++ b/.changelog/4649.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/cloudflare_authenticated_origin_pulls: Fix issue where resources are disabled instead of being destroyed on `tf destroy`
+```
diff --git a/internal/sdkv2provider/resource_cloudflare_authenticated_origin_pulls.go b/internal/sdkv2provider/resource_cloudflare_authenticated_origin_pulls.go
index 5adc00ed8e..b969ec9dbc 100644
--- a/internal/sdkv2provider/resource_cloudflare_authenticated_origin_pulls.go
+++ b/internal/sdkv2provider/resource_cloudflare_authenticated_origin_pulls.go
@@ -123,7 +123,7 @@ func resourceCloudflareAuthenticatedOriginPullsDelete(ctx context.Context, d *sc
 		conf := []cloudflare.PerHostnameAuthenticatedOriginPullsConfig{{
 			CertID:   aopCert,
 			Hostname: hostname,
-			Enabled:  false,
+			Enabled:  nil,
 		}}
 		_, err := client.EditPerHostnameAuthenticatedOriginPullsConfig(ctx, zoneID, conf)
 		if err != nil {