Firewall Args
PaloAltoNetworks Firewall Uses Azure REST API version 2025-02-06-preview. In version 2.x of the Azure Native provider, it used API version 2023-09-01. Other available API versions: 2023-09-01, 2023-10-10-preview, 2024-01-19-preview, 2024-02-07-preview. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native cloudngfw [ApiVersion]
. See the ../../../version-guide/#accessing-any-api-version-via-local-packages for details.
Example Usage
Firewalls_CreateOrUpdate_MaximumSet_Gen
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var firewall = new AzureNative.Cloudngfw.Firewall("firewall", new()
{
AssociatedRulestack = new AzureNative.Cloudngfw.Inputs.RulestackDetailsArgs
{
Location = "eastus",
ResourceId = "lrs1",
RulestackId = "PANRSID",
},
DnsSettings = new AzureNative.Cloudngfw.Inputs.DNSSettingsArgs
{
DnsServers = new[]
{
new AzureNative.Cloudngfw.Inputs.IPAddressArgs
{
Address = "20.22.92.111",
ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1",
},
},
EnableDnsProxy = AzureNative.Cloudngfw.DNSProxy.DISABLED,
EnabledDnsType = AzureNative.Cloudngfw.EnabledDNSType.CUSTOM,
},
FirewallName = "firewall1",
FrontEndSettings = new[]
{
new AzureNative.Cloudngfw.Inputs.FrontendSettingArgs
{
BackendConfiguration = new AzureNative.Cloudngfw.Inputs.EndpointConfigurationArgs
{
Address = new AzureNative.Cloudngfw.Inputs.IPAddressArgs
{
Address = "20.22.32.136",
ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp2",
},
Port = "80",
},
FrontendConfiguration = new AzureNative.Cloudngfw.Inputs.EndpointConfigurationArgs
{
Address = new AzureNative.Cloudngfw.Inputs.IPAddressArgs
{
Address = "20.22.91.251",
ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp1",
},
Port = "80",
},
Name = "frontendsetting11",
Protocol = AzureNative.Cloudngfw.ProtocolType.TCP,
},
},
Identity = new AzureNative.Cloudngfw.Inputs.AzureResourceManagerManagedIdentityPropertiesArgs
{
Type = AzureNative.Cloudngfw.ManagedIdentityType.None,
UserAssignedIdentities =
{
{ "key16", new AzureNative.Cloudngfw.Inputs.AzureResourceManagerUserAssignedIdentityArgs
{
ClientId = "aaaa",
PrincipalId = "aaaaaaaaaaaaaaa",
} },
},
},
IsPanoramaManaged = AzureNative.Cloudngfw.BooleanEnum.TRUE,
Location = "eastus",
MarketplaceDetails = new AzureNative.Cloudngfw.Inputs.MarketplaceDetailsArgs
{
MarketplaceSubscriptionStatus = AzureNative.Cloudngfw.MarketplaceSubscriptionStatus.PendingFulfillmentStart,
OfferId = "liftr-pan-ame-test",
PublisherId = "isvtestuklegacy",
},
NetworkProfile = new AzureNative.Cloudngfw.Inputs.NetworkProfileArgs
{
EgressNatIp = new[]
{
new AzureNative.Cloudngfw.Inputs.IPAddressArgs
{
Address = "20.22.92.111",
ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1",
},
},
EnableEgressNat = AzureNative.Cloudngfw.EgressNat.ENABLED,
NetworkType = AzureNative.Cloudngfw.NetworkType.VNET,
PrivateSourceNatRulesDestination = new[]
{
"20.22.92.11",
},
PublicIps = new[]
{
new AzureNative.Cloudngfw.Inputs.IPAddressArgs
{
Address = "20.22.92.11",
ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1",
},
},
TrustedRanges = new[]
{
"20.22.92.11",
},
VnetConfiguration = new AzureNative.Cloudngfw.Inputs.VnetConfigurationArgs
{
IpOfTrustSubnetForUdr = new AzureNative.Cloudngfw.Inputs.IPAddressArgs
{
Address = "10.1.1.0/24",
ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
},
TrustSubnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
{
AddressSpace = "10.1.1.0/24",
ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet",
},
UnTrustSubnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
{
AddressSpace = "10.1.1.0/24",
ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
},
Vnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
{
AddressSpace = "10.1.0.0/16",
ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet",
},
},
VwanConfiguration = new AzureNative.Cloudngfw.Inputs.VwanConfigurationArgs
{
IpOfTrustSubnetForUdr = new AzureNative.Cloudngfw.Inputs.IPAddressArgs
{
Address = "10.1.1.0/24",
ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
},
NetworkVirtualApplianceId = "2bf4a339-294d-4c25-b0b2-ef649e9f5c12",
TrustSubnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
{
AddressSpace = "10.1.1.0/24",
ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet",
},
UnTrustSubnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
{
AddressSpace = "10.1.1.0/24",
ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
},
VHub = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
{
AddressSpace = "10.1.1.0/24",
ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
},
},
},
PanEtag = "2bf4a339-294d-4c25-b0b2-ef649e9f5c12",
PanoramaConfig = new AzureNative.Cloudngfw.Inputs.PanoramaConfigArgs
{
ConfigString = "bas64EncodedString",
},
PlanData = new AzureNative.Cloudngfw.Inputs.PlanDataArgs
{
BillingCycle = AzureNative.Cloudngfw.BillingCycle.MONTHLY,
PlanId = "liftrpantestplan",
UsageType = AzureNative.Cloudngfw.UsageType.PAYG,
},
ResourceGroupName = "firewall-rg",
Tags =
{
{ "tagName", "value" },
},
});
});
package main
import (
cloudngfw "github.com/pulumi/pulumi-azure-native-sdk/cloudngfw/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudngfw.NewFirewall(ctx, "firewall", &cloudngfw.FirewallArgs{
AssociatedRulestack: &cloudngfw.RulestackDetailsArgs{
Location: pulumi.String("eastus"),
ResourceId: pulumi.String("lrs1"),
RulestackId: pulumi.String("PANRSID"),
},
DnsSettings: &cloudngfw.DNSSettingsArgs{
DnsServers: cloudngfw.IPAddressArray{
&cloudngfw.IPAddressArgs{
Address: pulumi.String("20.22.92.111"),
ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1"),
},
},
EnableDnsProxy: pulumi.String(cloudngfw.DNSProxyDISABLED),
EnabledDnsType: pulumi.String(cloudngfw.EnabledDNSTypeCUSTOM),
},
FirewallName: pulumi.String("firewall1"),
FrontEndSettings: cloudngfw.FrontendSettingArray{
&cloudngfw.FrontendSettingArgs{
BackendConfiguration: &cloudngfw.EndpointConfigurationArgs{
Address: &cloudngfw.IPAddressArgs{
Address: pulumi.String("20.22.32.136"),
ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp2"),
},
Port: pulumi.String("80"),
},
FrontendConfiguration: &cloudngfw.EndpointConfigurationArgs{
Address: &cloudngfw.IPAddressArgs{
Address: pulumi.String("20.22.91.251"),
ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp1"),
},
Port: pulumi.String("80"),
},
Name: pulumi.String("frontendsetting11"),
Protocol: pulumi.String(cloudngfw.ProtocolTypeTCP),
},
},
Identity: &cloudngfw.AzureResourceManagerManagedIdentityPropertiesArgs{
Type: pulumi.String(cloudngfw.ManagedIdentityTypeNone),
UserAssignedIdentities: cloudngfw.AzureResourceManagerUserAssignedIdentityMap{
"key16": &cloudngfw.AzureResourceManagerUserAssignedIdentityArgs{
ClientId: pulumi.String("aaaa"),
PrincipalId: pulumi.String("aaaaaaaaaaaaaaa"),
},
},
},
IsPanoramaManaged: pulumi.String(cloudngfw.BooleanEnumTRUE),
Location: pulumi.String("eastus"),
MarketplaceDetails: &cloudngfw.MarketplaceDetailsArgs{
MarketplaceSubscriptionStatus: pulumi.String(cloudngfw.MarketplaceSubscriptionStatusPendingFulfillmentStart),
OfferId: pulumi.String("liftr-pan-ame-test"),
PublisherId: pulumi.String("isvtestuklegacy"),
},
NetworkProfile: &cloudngfw.NetworkProfileArgs{
EgressNatIp: cloudngfw.IPAddressArray{
&cloudngfw.IPAddressArgs{
Address: pulumi.String("20.22.92.111"),
ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1"),
},
},
EnableEgressNat: pulumi.String(cloudngfw.EgressNatENABLED),
NetworkType: pulumi.String(cloudngfw.NetworkTypeVNET),
PrivateSourceNatRulesDestination: pulumi.StringArray{
pulumi.String("20.22.92.11"),
},
PublicIps: cloudngfw.IPAddressArray{
&cloudngfw.IPAddressArgs{
Address: pulumi.String("20.22.92.11"),
ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1"),
},
},
TrustedRanges: pulumi.StringArray{
pulumi.String("20.22.92.11"),
},
VnetConfiguration: &cloudngfw.VnetConfigurationArgs{
IpOfTrustSubnetForUdr: &cloudngfw.IPAddressArgs{
Address: pulumi.String("10.1.1.0/24"),
ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
},
TrustSubnet: &cloudngfw.IPAddressSpaceArgs{
AddressSpace: pulumi.String("10.1.1.0/24"),
ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet"),
},
UnTrustSubnet: &cloudngfw.IPAddressSpaceArgs{
AddressSpace: pulumi.String("10.1.1.0/24"),
ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
},
Vnet: &cloudngfw.IPAddressSpaceArgs{
AddressSpace: pulumi.String("10.1.0.0/16"),
ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet"),
},
},
VwanConfiguration: &cloudngfw.VwanConfigurationArgs{
IpOfTrustSubnetForUdr: &cloudngfw.IPAddressArgs{
Address: pulumi.String("10.1.1.0/24"),
ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
},
NetworkVirtualApplianceId: pulumi.String("2bf4a339-294d-4c25-b0b2-ef649e9f5c12"),
TrustSubnet: &cloudngfw.IPAddressSpaceArgs{
AddressSpace: pulumi.String("10.1.1.0/24"),
ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet"),
},
UnTrustSubnet: &cloudngfw.IPAddressSpaceArgs{
AddressSpace: pulumi.String("10.1.1.0/24"),
ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
},
VHub: &cloudngfw.IPAddressSpaceArgs{
AddressSpace: pulumi.String("10.1.1.0/24"),
ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
},
},
},
PanEtag: pulumi.String("2bf4a339-294d-4c25-b0b2-ef649e9f5c12"),
PanoramaConfig: &cloudngfw.PanoramaConfigArgs{
ConfigString: pulumi.String("bas64EncodedString"),
},
PlanData: &cloudngfw.PlanDataArgs{
BillingCycle: pulumi.String(cloudngfw.BillingCycleMONTHLY),
PlanId: pulumi.String("liftrpantestplan"),
UsageType: pulumi.String(cloudngfw.UsageTypePAYG),
},
ResourceGroupName: pulumi.String("firewall-rg"),
Tags: pulumi.StringMap{
"tagName": pulumi.String("value"),
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cloudngfw.Firewall;
import com.pulumi.azurenative.cloudngfw.FirewallArgs;
import com.pulumi.azurenative.cloudngfw.inputs.RulestackDetailsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.DNSSettingsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.FrontendSettingArgs;
import com.pulumi.azurenative.cloudngfw.inputs.EndpointConfigurationArgs;
import com.pulumi.azurenative.cloudngfw.inputs.IPAddressArgs;
import com.pulumi.azurenative.cloudngfw.inputs.AzureResourceManagerManagedIdentityPropertiesArgs;
import com.pulumi.azurenative.cloudngfw.inputs.MarketplaceDetailsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.NetworkProfileArgs;
import com.pulumi.azurenative.cloudngfw.inputs.VnetConfigurationArgs;
import com.pulumi.azurenative.cloudngfw.inputs.IPAddressSpaceArgs;
import com.pulumi.azurenative.cloudngfw.inputs.VwanConfigurationArgs;
import com.pulumi.azurenative.cloudngfw.inputs.PanoramaConfigArgs;
import com.pulumi.azurenative.cloudngfw.inputs.PlanDataArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var firewall = new Firewall("firewall", FirewallArgs.builder()
.associatedRulestack(RulestackDetailsArgs.builder()
.location("eastus")
.resourceId("lrs1")
.rulestackId("PANRSID")
.build())
.dnsSettings(DNSSettingsArgs.builder()
.dnsServers(IPAddressArgs.builder()
.address("20.22.92.111")
.resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1")
.build())
.enableDnsProxy("DISABLED")
.enabledDnsType("CUSTOM")
.build())
.firewallName("firewall1")
.frontEndSettings(FrontendSettingArgs.builder()
.backendConfiguration(EndpointConfigurationArgs.builder()
.address(IPAddressArgs.builder()
.address("20.22.32.136")
.resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp2")
.build())
.port("80")
.build())
.frontendConfiguration(EndpointConfigurationArgs.builder()
.address(IPAddressArgs.builder()
.address("20.22.91.251")
.resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp1")
.build())
.port("80")
.build())
.name("frontendsetting11")
.protocol("TCP")
.build())
.identity(AzureResourceManagerManagedIdentityPropertiesArgs.builder()
.type("None")
.userAssignedIdentities(Map.of("key16", Map.ofEntries(
Map.entry("clientId", "aaaa"),
Map.entry("principalId", "aaaaaaaaaaaaaaa")
)))
.build())
.isPanoramaManaged("TRUE")
.location("eastus")
.marketplaceDetails(MarketplaceDetailsArgs.builder()
.marketplaceSubscriptionStatus("PendingFulfillmentStart")
.offerId("liftr-pan-ame-test")
.publisherId("isvtestuklegacy")
.build())
.networkProfile(NetworkProfileArgs.builder()
.egressNatIp(IPAddressArgs.builder()
.address("20.22.92.111")
.resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1")
.build())
.enableEgressNat("ENABLED")
.networkType("VNET")
.privateSourceNatRulesDestination("20.22.92.11")
.publicIps(IPAddressArgs.builder()
.address("20.22.92.11")
.resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1")
.build())
.trustedRanges("20.22.92.11")
.vnetConfiguration(VnetConfigurationArgs.builder()
.ipOfTrustSubnetForUdr(IPAddressArgs.builder()
.address("10.1.1.0/24")
.resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
.build())
.trustSubnet(IPAddressSpaceArgs.builder()
.addressSpace("10.1.1.0/24")
.resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet")
.build())
.unTrustSubnet(IPAddressSpaceArgs.builder()
.addressSpace("10.1.1.0/24")
.resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
.build())
.vnet(IPAddressSpaceArgs.builder()
.addressSpace("10.1.0.0/16")
.resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet")
.build())
.build())
.vwanConfiguration(VwanConfigurationArgs.builder()
.ipOfTrustSubnetForUdr(IPAddressArgs.builder()
.address("10.1.1.0/24")
.resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
.build())
.networkVirtualApplianceId("2bf4a339-294d-4c25-b0b2-ef649e9f5c12")
.trustSubnet(IPAddressSpaceArgs.builder()
.addressSpace("10.1.1.0/24")
.resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet")
.build())
.unTrustSubnet(IPAddressSpaceArgs.builder()
.addressSpace("10.1.1.0/24")
.resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
.build())
.vHub(IPAddressSpaceArgs.builder()
.addressSpace("10.1.1.0/24")
.resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
.build())
.build())
.build())
.panEtag("2bf4a339-294d-4c25-b0b2-ef649e9f5c12")
.panoramaConfig(PanoramaConfigArgs.builder()
.configString("bas64EncodedString")
.build())
.planData(PlanDataArgs.builder()
.billingCycle("MONTHLY")
.planId("liftrpantestplan")
.usageType("PAYG")
.build())
.resourceGroupName("firewall-rg")
.tags(Map.of("tagName", "value"))
.build());
}
}
Firewalls_CreateOrUpdate_MinimumSet_Gen
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var firewall = new AzureNative.Cloudngfw.Firewall("firewall", new()
{
DnsSettings = null,
FirewallName = "firewall1",
Location = "eastus",
MarketplaceDetails = new AzureNative.Cloudngfw.Inputs.MarketplaceDetailsArgs
{
OfferId = "liftr-pan-ame-test",
PublisherId = "isvtestuklegacy",
},
NetworkProfile = new AzureNative.Cloudngfw.Inputs.NetworkProfileArgs
{
EnableEgressNat = AzureNative.Cloudngfw.EgressNat.ENABLED,
NetworkType = AzureNative.Cloudngfw.NetworkType.VNET,
PublicIps = new[]
{
new AzureNative.Cloudngfw.Inputs.IPAddressArgs
{
Address = "20.22.92.11",
ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1",
},
},
},
PlanData = new AzureNative.Cloudngfw.Inputs.PlanDataArgs
{
BillingCycle = AzureNative.Cloudngfw.BillingCycle.MONTHLY,
PlanId = "liftrpantestplan",
},
ResourceGroupName = "firewall-rg",
});
});
package main
import (
cloudngfw "github.com/pulumi/pulumi-azure-native-sdk/cloudngfw/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudngfw.NewFirewall(ctx, "firewall", &cloudngfw.FirewallArgs{
DnsSettings: &cloudngfw.DNSSettingsArgs{},
FirewallName: pulumi.String("firewall1"),
Location: pulumi.String("eastus"),
MarketplaceDetails: &cloudngfw.MarketplaceDetailsArgs{
OfferId: pulumi.String("liftr-pan-ame-test"),
PublisherId: pulumi.String("isvtestuklegacy"),
},
NetworkProfile: &cloudngfw.NetworkProfileArgs{
EnableEgressNat: pulumi.String(cloudngfw.EgressNatENABLED),
NetworkType: pulumi.String(cloudngfw.NetworkTypeVNET),
PublicIps: cloudngfw.IPAddressArray{
&cloudngfw.IPAddressArgs{
Address: pulumi.String("20.22.92.11"),
ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1"),
},
},
},
PlanData: &cloudngfw.PlanDataArgs{
BillingCycle: pulumi.String(cloudngfw.BillingCycleMONTHLY),
PlanId: pulumi.String("liftrpantestplan"),
},
ResourceGroupName: pulumi.String("firewall-rg"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cloudngfw.Firewall;
import com.pulumi.azurenative.cloudngfw.FirewallArgs;
import com.pulumi.azurenative.cloudngfw.inputs.DNSSettingsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.MarketplaceDetailsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.NetworkProfileArgs;
import com.pulumi.azurenative.cloudngfw.inputs.PlanDataArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var firewall = new Firewall("firewall", FirewallArgs.builder()
.dnsSettings()
.firewallName("firewall1")
.location("eastus")
.marketplaceDetails(MarketplaceDetailsArgs.builder()
.offerId("liftr-pan-ame-test")
.publisherId("isvtestuklegacy")
.build())
.networkProfile(NetworkProfileArgs.builder()
.enableEgressNat("ENABLED")
.networkType("VNET")
.publicIps(IPAddressArgs.builder()
.address("20.22.92.11")
.resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1")
.build())
.build())
.planData(PlanDataArgs.builder()
.billingCycle("MONTHLY")
.planId("liftrpantestplan")
.build())
.resourceGroupName("firewall-rg")
.build());
}
}
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:cloudngfw:Firewall armid1 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/PaloAltoNetworks.Cloudngfw/firewalls/{firewallName}
Constructors
Properties
Associated Rulestack
DNS settings for Firewall
Firewall resource name
Frontend settings for Firewall
The managed service identities assigned to this resource.
Panorama Managed: Default is False. Default will be CloudSec managed
Strata Cloud Managed: Default is False. Default will be CloudSec managed
Marketplace details
Network settings
Panorama Configuration
Billing plan information.
The name of the resource group. The name is case insensitive.
Strata Cloud Manager Configuration, only applicable if Strata Cloud Manager is selected.