pulumi-azure-native-kotlin/com.pulumi.azurenative.cloudngfw.kotlin/Firewall

Firewall

class Firewall : KotlinCustomResource

PaloAltoNetworks Firewall Uses Azure REST API version 2025-02-06-preview. In version 2.x of the Azure Native provider, it used API version 2023-09-01. Other available API versions: 2023-09-01, 2023-10-10-preview, 2024-01-19-preview, 2024-02-07-preview. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native cloudngfw [ApiVersion]. See the ../../../version-guide/#accessing-any-api-version-via-local-packages for details.

Example Usage

Firewalls_CreateOrUpdate_MaximumSet_Gen

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
    var firewall = new AzureNative.Cloudngfw.Firewall("firewall", new()
    {
        AssociatedRulestack = new AzureNative.Cloudngfw.Inputs.RulestackDetailsArgs
        {
            Location = "eastus",
            ResourceId = "lrs1",
            RulestackId = "PANRSID",
        },
        DnsSettings = new AzureNative.Cloudngfw.Inputs.DNSSettingsArgs
        {
            DnsServers = new[]
            {
                new AzureNative.Cloudngfw.Inputs.IPAddressArgs
                {
                    Address = "20.22.92.111",
                    ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1",
                },
            },
            EnableDnsProxy = AzureNative.Cloudngfw.DNSProxy.DISABLED,
            EnabledDnsType = AzureNative.Cloudngfw.EnabledDNSType.CUSTOM,
        },
        FirewallName = "firewall1",
        FrontEndSettings = new[]
        {
            new AzureNative.Cloudngfw.Inputs.FrontendSettingArgs
            {
                BackendConfiguration = new AzureNative.Cloudngfw.Inputs.EndpointConfigurationArgs
                {
                    Address = new AzureNative.Cloudngfw.Inputs.IPAddressArgs
                    {
                        Address = "20.22.32.136",
                        ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp2",
                    },
                    Port = "80",
                },
                FrontendConfiguration = new AzureNative.Cloudngfw.Inputs.EndpointConfigurationArgs
                {
                    Address = new AzureNative.Cloudngfw.Inputs.IPAddressArgs
                    {
                        Address = "20.22.91.251",
                        ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp1",
                    },
                    Port = "80",
                },
                Name = "frontendsetting11",
                Protocol = AzureNative.Cloudngfw.ProtocolType.TCP,
            },
        },
        Identity = new AzureNative.Cloudngfw.Inputs.AzureResourceManagerManagedIdentityPropertiesArgs
        {
            Type = AzureNative.Cloudngfw.ManagedIdentityType.None,
            UserAssignedIdentities =
            {
                { "key16", new AzureNative.Cloudngfw.Inputs.AzureResourceManagerUserAssignedIdentityArgs
                {
                    ClientId = "aaaa",
                    PrincipalId = "aaaaaaaaaaaaaaa",
                } },
            },
        },
        IsPanoramaManaged = AzureNative.Cloudngfw.BooleanEnum.TRUE,
        Location = "eastus",
        MarketplaceDetails = new AzureNative.Cloudngfw.Inputs.MarketplaceDetailsArgs
        {
            MarketplaceSubscriptionStatus = AzureNative.Cloudngfw.MarketplaceSubscriptionStatus.PendingFulfillmentStart,
            OfferId = "liftr-pan-ame-test",
            PublisherId = "isvtestuklegacy",
        },
        NetworkProfile = new AzureNative.Cloudngfw.Inputs.NetworkProfileArgs
        {
            EgressNatIp = new[]
            {
                new AzureNative.Cloudngfw.Inputs.IPAddressArgs
                {
                    Address = "20.22.92.111",
                    ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1",
                },
            },
            EnableEgressNat = AzureNative.Cloudngfw.EgressNat.ENABLED,
            NetworkType = AzureNative.Cloudngfw.NetworkType.VNET,
            PrivateSourceNatRulesDestination = new[]
            {
                "20.22.92.11",
            },
            PublicIps = new[]
            {
                new AzureNative.Cloudngfw.Inputs.IPAddressArgs
                {
                    Address = "20.22.92.11",
                    ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1",
                },
            },
            TrustedRanges = new[]
            {
                "20.22.92.11",
            },
            VnetConfiguration = new AzureNative.Cloudngfw.Inputs.VnetConfigurationArgs
            {
                IpOfTrustSubnetForUdr = new AzureNative.Cloudngfw.Inputs.IPAddressArgs
                {
                    Address = "10.1.1.0/24",
                    ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
                },
                TrustSubnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
                {
                    AddressSpace = "10.1.1.0/24",
                    ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet",
                },
                UnTrustSubnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
                {
                    AddressSpace = "10.1.1.0/24",
                    ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
                },
                Vnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
                {
                    AddressSpace = "10.1.0.0/16",
                    ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet",
                },
            },
            VwanConfiguration = new AzureNative.Cloudngfw.Inputs.VwanConfigurationArgs
            {
                IpOfTrustSubnetForUdr = new AzureNative.Cloudngfw.Inputs.IPAddressArgs
                {
                    Address = "10.1.1.0/24",
                    ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
                },
                NetworkVirtualApplianceId = "2bf4a339-294d-4c25-b0b2-ef649e9f5c12",
                TrustSubnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
                {
                    AddressSpace = "10.1.1.0/24",
                    ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet",
                },
                UnTrustSubnet = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
                {
                    AddressSpace = "10.1.1.0/24",
                    ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
                },
                VHub = new AzureNative.Cloudngfw.Inputs.IPAddressSpaceArgs
                {
                    AddressSpace = "10.1.1.0/24",
                    ResourceId = "/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet",
                },
            },
        },
        PanEtag = "2bf4a339-294d-4c25-b0b2-ef649e9f5c12",
        PanoramaConfig = new AzureNative.Cloudngfw.Inputs.PanoramaConfigArgs
        {
            ConfigString = "bas64EncodedString",
        },
        PlanData = new AzureNative.Cloudngfw.Inputs.PlanDataArgs
        {
            BillingCycle = AzureNative.Cloudngfw.BillingCycle.MONTHLY,
            PlanId = "liftrpantestplan",
            UsageType = AzureNative.Cloudngfw.UsageType.PAYG,
        },
        ResourceGroupName = "firewall-rg",
        Tags =
        {
            { "tagName", "value" },
        },
    });
});
Content copied to clipboard
package main
import (
	cloudngfw "github.com/pulumi/pulumi-azure-native-sdk/cloudngfw/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudngfw.NewFirewall(ctx, "firewall", &cloudngfw.FirewallArgs{
			AssociatedRulestack: &cloudngfw.RulestackDetailsArgs{
				Location:    pulumi.String("eastus"),
				ResourceId:  pulumi.String("lrs1"),
				RulestackId: pulumi.String("PANRSID"),
			},
			DnsSettings: &cloudngfw.DNSSettingsArgs{
				DnsServers: cloudngfw.IPAddressArray{
					&cloudngfw.IPAddressArgs{
						Address:    pulumi.String("20.22.92.111"),
						ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1"),
					},
				},
				EnableDnsProxy: pulumi.String(cloudngfw.DNSProxyDISABLED),
				EnabledDnsType: pulumi.String(cloudngfw.EnabledDNSTypeCUSTOM),
			},
			FirewallName: pulumi.String("firewall1"),
			FrontEndSettings: cloudngfw.FrontendSettingArray{
				&cloudngfw.FrontendSettingArgs{
					BackendConfiguration: &cloudngfw.EndpointConfigurationArgs{
						Address: &cloudngfw.IPAddressArgs{
							Address:    pulumi.String("20.22.32.136"),
							ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp2"),
						},
						Port: pulumi.String("80"),
					},
					FrontendConfiguration: &cloudngfw.EndpointConfigurationArgs{
						Address: &cloudngfw.IPAddressArgs{
							Address:    pulumi.String("20.22.91.251"),
							ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp1"),
						},
						Port: pulumi.String("80"),
					},
					Name:     pulumi.String("frontendsetting11"),
					Protocol: pulumi.String(cloudngfw.ProtocolTypeTCP),
				},
			},
			Identity: &cloudngfw.AzureResourceManagerManagedIdentityPropertiesArgs{
				Type: pulumi.String(cloudngfw.ManagedIdentityTypeNone),
				UserAssignedIdentities: cloudngfw.AzureResourceManagerUserAssignedIdentityMap{
					"key16": &cloudngfw.AzureResourceManagerUserAssignedIdentityArgs{
						ClientId:    pulumi.String("aaaa"),
						PrincipalId: pulumi.String("aaaaaaaaaaaaaaa"),
					},
				},
			},
			IsPanoramaManaged: pulumi.String(cloudngfw.BooleanEnumTRUE),
			Location:          pulumi.String("eastus"),
			MarketplaceDetails: &cloudngfw.MarketplaceDetailsArgs{
				MarketplaceSubscriptionStatus: pulumi.String(cloudngfw.MarketplaceSubscriptionStatusPendingFulfillmentStart),
				OfferId:                       pulumi.String("liftr-pan-ame-test"),
				PublisherId:                   pulumi.String("isvtestuklegacy"),
			},
			NetworkProfile: &cloudngfw.NetworkProfileArgs{
				EgressNatIp: cloudngfw.IPAddressArray{
					&cloudngfw.IPAddressArgs{
						Address:    pulumi.String("20.22.92.111"),
						ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1"),
					},
				},
				EnableEgressNat: pulumi.String(cloudngfw.EgressNatENABLED),
				NetworkType:     pulumi.String(cloudngfw.NetworkTypeVNET),
				PrivateSourceNatRulesDestination: pulumi.StringArray{
					pulumi.String("20.22.92.11"),
				},
				PublicIps: cloudngfw.IPAddressArray{
					&cloudngfw.IPAddressArgs{
						Address:    pulumi.String("20.22.92.11"),
						ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1"),
					},
				},
				TrustedRanges: pulumi.StringArray{
					pulumi.String("20.22.92.11"),
				},
				VnetConfiguration: &cloudngfw.VnetConfigurationArgs{
					IpOfTrustSubnetForUdr: &cloudngfw.IPAddressArgs{
						Address:    pulumi.String("10.1.1.0/24"),
						ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
					},
					TrustSubnet: &cloudngfw.IPAddressSpaceArgs{
						AddressSpace: pulumi.String("10.1.1.0/24"),
						ResourceId:   pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet"),
					},
					UnTrustSubnet: &cloudngfw.IPAddressSpaceArgs{
						AddressSpace: pulumi.String("10.1.1.0/24"),
						ResourceId:   pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
					},
					Vnet: &cloudngfw.IPAddressSpaceArgs{
						AddressSpace: pulumi.String("10.1.0.0/16"),
						ResourceId:   pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet"),
					},
				},
				VwanConfiguration: &cloudngfw.VwanConfigurationArgs{
					IpOfTrustSubnetForUdr: &cloudngfw.IPAddressArgs{
						Address:    pulumi.String("10.1.1.0/24"),
						ResourceId: pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
					},
					NetworkVirtualApplianceId: pulumi.String("2bf4a339-294d-4c25-b0b2-ef649e9f5c12"),
					TrustSubnet: &cloudngfw.IPAddressSpaceArgs{
						AddressSpace: pulumi.String("10.1.1.0/24"),
						ResourceId:   pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet"),
					},
					UnTrustSubnet: &cloudngfw.IPAddressSpaceArgs{
						AddressSpace: pulumi.String("10.1.1.0/24"),
						ResourceId:   pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
					},
					VHub: &cloudngfw.IPAddressSpaceArgs{
						AddressSpace: pulumi.String("10.1.1.0/24"),
						ResourceId:   pulumi.String("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet"),
					},
				},
			},
			PanEtag: pulumi.String("2bf4a339-294d-4c25-b0b2-ef649e9f5c12"),
			PanoramaConfig: &cloudngfw.PanoramaConfigArgs{
				ConfigString: pulumi.String("bas64EncodedString"),
			},
			PlanData: &cloudngfw.PlanDataArgs{
				BillingCycle: pulumi.String(cloudngfw.BillingCycleMONTHLY),
				PlanId:       pulumi.String("liftrpantestplan"),
				UsageType:    pulumi.String(cloudngfw.UsageTypePAYG),
			},
			ResourceGroupName: pulumi.String("firewall-rg"),
			Tags: pulumi.StringMap{
				"tagName": pulumi.String("value"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cloudngfw.Firewall;
import com.pulumi.azurenative.cloudngfw.FirewallArgs;
import com.pulumi.azurenative.cloudngfw.inputs.RulestackDetailsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.DNSSettingsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.FrontendSettingArgs;
import com.pulumi.azurenative.cloudngfw.inputs.EndpointConfigurationArgs;
import com.pulumi.azurenative.cloudngfw.inputs.IPAddressArgs;
import com.pulumi.azurenative.cloudngfw.inputs.AzureResourceManagerManagedIdentityPropertiesArgs;
import com.pulumi.azurenative.cloudngfw.inputs.MarketplaceDetailsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.NetworkProfileArgs;
import com.pulumi.azurenative.cloudngfw.inputs.VnetConfigurationArgs;
import com.pulumi.azurenative.cloudngfw.inputs.IPAddressSpaceArgs;
import com.pulumi.azurenative.cloudngfw.inputs.VwanConfigurationArgs;
import com.pulumi.azurenative.cloudngfw.inputs.PanoramaConfigArgs;
import com.pulumi.azurenative.cloudngfw.inputs.PlanDataArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var firewall = new Firewall("firewall", FirewallArgs.builder()
            .associatedRulestack(RulestackDetailsArgs.builder()
                .location("eastus")
                .resourceId("lrs1")
                .rulestackId("PANRSID")
                .build())
            .dnsSettings(DNSSettingsArgs.builder()
                .dnsServers(IPAddressArgs.builder()
                    .address("20.22.92.111")
                    .resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1")
                    .build())
                .enableDnsProxy("DISABLED")
                .enabledDnsType("CUSTOM")
                .build())
            .firewallName("firewall1")
            .frontEndSettings(FrontendSettingArgs.builder()
                .backendConfiguration(EndpointConfigurationArgs.builder()
                    .address(IPAddressArgs.builder()
                        .address("20.22.32.136")
                        .resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp2")
                        .build())
                    .port("80")
                    .build())
                .frontendConfiguration(EndpointConfigurationArgs.builder()
                    .address(IPAddressArgs.builder()
                        .address("20.22.91.251")
                        .resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-frontendSettingIp1")
                        .build())
                    .port("80")
                    .build())
                .name("frontendsetting11")
                .protocol("TCP")
                .build())
            .identity(AzureResourceManagerManagedIdentityPropertiesArgs.builder()
                .type("None")
                .userAssignedIdentities(Map.of("key16", Map.ofEntries(
                    Map.entry("clientId", "aaaa"),
                    Map.entry("principalId", "aaaaaaaaaaaaaaa")
                )))
                .build())
            .isPanoramaManaged("TRUE")
            .location("eastus")
            .marketplaceDetails(MarketplaceDetailsArgs.builder()
                .marketplaceSubscriptionStatus("PendingFulfillmentStart")
                .offerId("liftr-pan-ame-test")
                .publisherId("isvtestuklegacy")
                .build())
            .networkProfile(NetworkProfileArgs.builder()
                .egressNatIp(IPAddressArgs.builder()
                    .address("20.22.92.111")
                    .resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-egressNatIp1")
                    .build())
                .enableEgressNat("ENABLED")
                .networkType("VNET")
                .privateSourceNatRulesDestination("20.22.92.11")
                .publicIps(IPAddressArgs.builder()
                    .address("20.22.92.11")
                    .resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1")
                    .build())
                .trustedRanges("20.22.92.11")
                .vnetConfiguration(VnetConfigurationArgs.builder()
                    .ipOfTrustSubnetForUdr(IPAddressArgs.builder()
                        .address("10.1.1.0/24")
                        .resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
                        .build())
                    .trustSubnet(IPAddressSpaceArgs.builder()
                        .addressSpace("10.1.1.0/24")
                        .resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet")
                        .build())
                    .unTrustSubnet(IPAddressSpaceArgs.builder()
                        .addressSpace("10.1.1.0/24")
                        .resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
                        .build())
                    .vnet(IPAddressSpaceArgs.builder()
                        .addressSpace("10.1.0.0/16")
                        .resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet")
                        .build())
                    .build())
                .vwanConfiguration(VwanConfigurationArgs.builder()
                    .ipOfTrustSubnetForUdr(IPAddressArgs.builder()
                        .address("10.1.1.0/24")
                        .resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
                        .build())
                    .networkVirtualApplianceId("2bf4a339-294d-4c25-b0b2-ef649e9f5c12")
                    .trustSubnet(IPAddressSpaceArgs.builder()
                        .addressSpace("10.1.1.0/24")
                        .resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-trust-subnet")
                        .build())
                    .unTrustSubnet(IPAddressSpaceArgs.builder()
                        .addressSpace("10.1.1.0/24")
                        .resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
                        .build())
                    .vHub(IPAddressSpaceArgs.builder()
                        .addressSpace("10.1.1.0/24")
                        .resourceId("/subscriptions/2bf4a339-294d-4c25-b0b2-ef649e9f5c27/resourceGroups/os-liftr-integration/providers/Microsoft.Network/virtualNetworks/os-liftr-integration-vnet/subnets/os-liftr-integration-untrust-subnet")
                        .build())
                    .build())
                .build())
            .panEtag("2bf4a339-294d-4c25-b0b2-ef649e9f5c12")
            .panoramaConfig(PanoramaConfigArgs.builder()
                .configString("bas64EncodedString")
                .build())
            .planData(PlanDataArgs.builder()
                .billingCycle("MONTHLY")
                .planId("liftrpantestplan")
                .usageType("PAYG")
                .build())
            .resourceGroupName("firewall-rg")
            .tags(Map.of("tagName", "value"))
            .build());
    }
}
Content copied to clipboard

Firewalls_CreateOrUpdate_MinimumSet_Gen

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
    var firewall = new AzureNative.Cloudngfw.Firewall("firewall", new()
    {
        DnsSettings = null,
        FirewallName = "firewall1",
        Location = "eastus",
        MarketplaceDetails = new AzureNative.Cloudngfw.Inputs.MarketplaceDetailsArgs
        {
            OfferId = "liftr-pan-ame-test",
            PublisherId = "isvtestuklegacy",
        },
        NetworkProfile = new AzureNative.Cloudngfw.Inputs.NetworkProfileArgs
        {
            EnableEgressNat = AzureNative.Cloudngfw.EgressNat.ENABLED,
            NetworkType = AzureNative.Cloudngfw.NetworkType.VNET,
            PublicIps = new[]
            {
                new AzureNative.Cloudngfw.Inputs.IPAddressArgs
                {
                    Address = "20.22.92.11",
                    ResourceId = "/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1",
                },
            },
        },
        PlanData = new AzureNative.Cloudngfw.Inputs.PlanDataArgs
        {
            BillingCycle = AzureNative.Cloudngfw.BillingCycle.MONTHLY,
            PlanId = "liftrpantestplan",
        },
        ResourceGroupName = "firewall-rg",
    });
});
Content copied to clipboard
package main
import (
	cloudngfw "github.com/pulumi/pulumi-azure-native-sdk/cloudngfw/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudngfw.NewFirewall(ctx, "firewall", &cloudngfw.FirewallArgs{
			DnsSettings:  &cloudngfw.DNSSettingsArgs{},
			FirewallName: pulumi.String("firewall1"),
			Location:     pulumi.String("eastus"),
			MarketplaceDetails: &cloudngfw.MarketplaceDetailsArgs{
				OfferId:     pulumi.String("liftr-pan-ame-test"),
				PublisherId: pulumi.String("isvtestuklegacy"),
			},
			NetworkProfile: &cloudngfw.NetworkProfileArgs{
				EnableEgressNat: pulumi.String(cloudngfw.EgressNatENABLED),
				NetworkType:     pulumi.String(cloudngfw.NetworkTypeVNET),
				PublicIps: cloudngfw.IPAddressArray{
					&cloudngfw.IPAddressArgs{
						Address:    pulumi.String("20.22.92.11"),
						ResourceId: pulumi.String("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1"),
					},
				},
			},
			PlanData: &cloudngfw.PlanDataArgs{
				BillingCycle: pulumi.String(cloudngfw.BillingCycleMONTHLY),
				PlanId:       pulumi.String("liftrpantestplan"),
			},
			ResourceGroupName: pulumi.String("firewall-rg"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cloudngfw.Firewall;
import com.pulumi.azurenative.cloudngfw.FirewallArgs;
import com.pulumi.azurenative.cloudngfw.inputs.DNSSettingsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.MarketplaceDetailsArgs;
import com.pulumi.azurenative.cloudngfw.inputs.NetworkProfileArgs;
import com.pulumi.azurenative.cloudngfw.inputs.PlanDataArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var firewall = new Firewall("firewall", FirewallArgs.builder()
            .dnsSettings()
            .firewallName("firewall1")
            .location("eastus")
            .marketplaceDetails(MarketplaceDetailsArgs.builder()
                .offerId("liftr-pan-ame-test")
                .publisherId("isvtestuklegacy")
                .build())
            .networkProfile(NetworkProfileArgs.builder()
                .enableEgressNat("ENABLED")
                .networkType("VNET")
                .publicIps(IPAddressArgs.builder()
                    .address("20.22.92.11")
                    .resourceId("/subscriptions/01c7d41f-afaf-464e-8a8b-5c6f9f98cee8/resourceGroups/mj-liftr-integration/providers/Microsoft.Network/publicIPAddresses/mj-liftr-integration-PublicIp1")
                    .build())
                .build())
            .planData(PlanDataArgs.builder()
                .billingCycle("MONTHLY")
                .planId("liftrpantestplan")
                .build())
            .resourceGroupName("firewall-rg")
            .build());
    }
}
Content copied to clipboard

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:cloudngfw:Firewall armid1 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/PaloAltoNetworks.Cloudngfw/firewalls/{firewallName}
Content copied to clipboard

Properties

Link copied to clipboard
val associatedRulestack: Output<RulestackDetailsResponse>?

Associated Rulestack

Link copied to clipboard
val azureApiVersion: Output<String>

The Azure API version of the resource.

Link copied to clipboard
val dnsSettings: Output<DNSSettingsResponse>

DNS settings for Firewall

Link copied to clipboard
val frontEndSettings: Output<List<FrontendSettingResponse>>?

Frontend settings for Firewall

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val identity: Output<AzureResourceManagerManagedIdentityPropertiesResponse>?

The managed service identities assigned to this resource.

Link copied to clipboard
val isPanoramaManaged: Output<String>?

Panorama Managed: Default is False. Default will be CloudSec managed

Link copied to clipboard
val isStrataCloudManaged: Output<String>?

Strata Cloud Managed: Default is False. Default will be CloudSec managed

Link copied to clipboard
val location: Output<String>

The geo-location where the resource lives

Link copied to clipboard
val marketplaceDetails: Output<MarketplaceDetailsResponse>

Marketplace details

Link copied to clipboard
val name: Output<String>

The name of the resource

Link copied to clipboard
val networkProfile: Output<NetworkProfileResponse>

Network settings

Link copied to clipboard
val panEtag: Output<String>?

panEtag info

Link copied to clipboard
val panoramaConfig: Output<PanoramaConfigResponse>?

Panorama Configuration

Link copied to clipboard
val planData: Output<PlanDataResponse>

Billing plan information.

Link copied to clipboard
val provisioningState: Output<String>

Provisioning state of the resource.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val strataCloudManagerConfig: Output<StrataCloudManagerConfigResponse>?

Strata Cloud Manager Configuration, only applicable if Strata Cloud Manager is selected.

Link copied to clipboard
val systemData: Output<SystemDataResponse>

Azure Resource Manager metadata containing createdBy and modifiedBy information.

Link copied to clipboard
val tags: Output<Map<String, String>>?

Resource tags.

Link copied to clipboard
val type: Output<String>

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Link copied to clipboard
val urn: Output<String>