Local Rulestack
PaloAltoNetworks LocalRulestack Uses Azure REST API version 2025-02-06-preview. In version 2.x of the Azure Native provider, it used API version 2023-09-01. Other available API versions: 2023-09-01, 2023-10-10-preview, 2024-01-19-preview, 2024-02-07-preview. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native cloudngfw [ApiVersion]
. See the ../../../version-guide/#accessing-any-api-version-via-local-packages for details.
Example Usage
LocalRulestacks_CreateOrUpdate_MaximumSet_Gen
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var localRulestack = new AzureNative.Cloudngfw.LocalRulestack("localRulestack", new()
{
AssociatedSubscriptions = new[]
{
"2bf4a339-294d-4c25-b0b2-ef649e9f5c27",
},
DefaultMode = AzureNative.Cloudngfw.DefaultMode.IPS,
Description = "local rulestacks",
Identity = new AzureNative.Cloudngfw.Inputs.AzureResourceManagerManagedIdentityPropertiesArgs
{
Type = AzureNative.Cloudngfw.ManagedIdentityType.None,
UserAssignedIdentities =
{
{ "key16", new AzureNative.Cloudngfw.Inputs.AzureResourceManagerUserAssignedIdentityArgs
{
ClientId = "aaaa",
PrincipalId = "aaaaaaaaaaaaaaa",
} },
},
},
LocalRulestackName = "lrs1",
Location = "eastus",
MinAppIdVersion = "8.5.3",
PanEtag = "2bf4a339-294d-4c25-b0b2-ef649e9f5c12",
PanLocation = "eastus",
ResourceGroupName = "rgopenapi",
Scope = AzureNative.Cloudngfw.ScopeType.LOCAL,
SecurityServices = new AzureNative.Cloudngfw.Inputs.SecurityServicesArgs
{
AntiSpywareProfile = "default",
AntiVirusProfile = "default",
DnsSubscription = "default",
FileBlockingProfile = "default",
OutboundTrustCertificate = "default",
OutboundUnTrustCertificate = "default",
UrlFilteringProfile = "default",
VulnerabilityProfile = "default",
},
Tags =
{
{ "tagName", "value" },
},
});
});
package main
import (
cloudngfw "github.com/pulumi/pulumi-azure-native-sdk/cloudngfw/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudngfw.NewLocalRulestack(ctx, "localRulestack", &cloudngfw.LocalRulestackArgs{
AssociatedSubscriptions: pulumi.StringArray{
pulumi.String("2bf4a339-294d-4c25-b0b2-ef649e9f5c27"),
},
DefaultMode: pulumi.String(cloudngfw.DefaultModeIPS),
Description: pulumi.String("local rulestacks"),
Identity: &cloudngfw.AzureResourceManagerManagedIdentityPropertiesArgs{
Type: pulumi.String(cloudngfw.ManagedIdentityTypeNone),
UserAssignedIdentities: cloudngfw.AzureResourceManagerUserAssignedIdentityMap{
"key16": &cloudngfw.AzureResourceManagerUserAssignedIdentityArgs{
ClientId: pulumi.String("aaaa"),
PrincipalId: pulumi.String("aaaaaaaaaaaaaaa"),
},
},
},
LocalRulestackName: pulumi.String("lrs1"),
Location: pulumi.String("eastus"),
MinAppIdVersion: pulumi.String("8.5.3"),
PanEtag: pulumi.String("2bf4a339-294d-4c25-b0b2-ef649e9f5c12"),
PanLocation: pulumi.String("eastus"),
ResourceGroupName: pulumi.String("rgopenapi"),
Scope: pulumi.String(cloudngfw.ScopeTypeLOCAL),
SecurityServices: &cloudngfw.SecurityServicesArgs{
AntiSpywareProfile: pulumi.String("default"),
AntiVirusProfile: pulumi.String("default"),
DnsSubscription: pulumi.String("default"),
FileBlockingProfile: pulumi.String("default"),
OutboundTrustCertificate: pulumi.String("default"),
OutboundUnTrustCertificate: pulumi.String("default"),
UrlFilteringProfile: pulumi.String("default"),
VulnerabilityProfile: pulumi.String("default"),
},
Tags: pulumi.StringMap{
"tagName": pulumi.String("value"),
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cloudngfw.LocalRulestack;
import com.pulumi.azurenative.cloudngfw.LocalRulestackArgs;
import com.pulumi.azurenative.cloudngfw.inputs.AzureResourceManagerManagedIdentityPropertiesArgs;
import com.pulumi.azurenative.cloudngfw.inputs.SecurityServicesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var localRulestack = new LocalRulestack("localRulestack", LocalRulestackArgs.builder()
.associatedSubscriptions("2bf4a339-294d-4c25-b0b2-ef649e9f5c27")
.defaultMode("IPS")
.description("local rulestacks")
.identity(AzureResourceManagerManagedIdentityPropertiesArgs.builder()
.type("None")
.userAssignedIdentities(Map.of("key16", Map.ofEntries(
Map.entry("clientId", "aaaa"),
Map.entry("principalId", "aaaaaaaaaaaaaaa")
)))
.build())
.localRulestackName("lrs1")
.location("eastus")
.minAppIdVersion("8.5.3")
.panEtag("2bf4a339-294d-4c25-b0b2-ef649e9f5c12")
.panLocation("eastus")
.resourceGroupName("rgopenapi")
.scope("LOCAL")
.securityServices(SecurityServicesArgs.builder()
.antiSpywareProfile("default")
.antiVirusProfile("default")
.dnsSubscription("default")
.fileBlockingProfile("default")
.outboundTrustCertificate("default")
.outboundUnTrustCertificate("default")
.urlFilteringProfile("default")
.vulnerabilityProfile("default")
.build())
.tags(Map.of("tagName", "value"))
.build());
}
}
LocalRulestacks_CreateOrUpdate_MinimumSet_Gen
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var localRulestack = new AzureNative.Cloudngfw.LocalRulestack("localRulestack", new()
{
LocalRulestackName = "lrs1",
Location = "eastus",
ResourceGroupName = "rgopenapi",
});
});
package main
import (
cloudngfw "github.com/pulumi/pulumi-azure-native-sdk/cloudngfw/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudngfw.NewLocalRulestack(ctx, "localRulestack", &cloudngfw.LocalRulestackArgs{
LocalRulestackName: pulumi.String("lrs1"),
Location: pulumi.String("eastus"),
ResourceGroupName: pulumi.String("rgopenapi"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cloudngfw.LocalRulestack;
import com.pulumi.azurenative.cloudngfw.LocalRulestackArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var localRulestack = new LocalRulestack("localRulestack", LocalRulestackArgs.builder()
.localRulestackName("lrs1")
.location("eastus")
.resourceGroupName("rgopenapi")
.build());
}
}
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:cloudngfw:LocalRulestack armid1 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/PaloAltoNetworks.Cloudngfw/localRulestacks/{localRulestackName}
Properties
subscription scope of global rulestack
The Azure API version of the resource.
Mode for default rules creation
rulestack description
The managed service identities assigned to this resource.
minimum version
Rulestack Location, Required for GlobalRulestacks, Not for LocalRulestacks
Provisioning state of the resource.
Security Profile
Azure Resource Manager metadata containing createdBy and modifiedBy information.