Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Palo Alto Networks Cloud NGFW for AWS Provider
  3. API Docs
  4. Ngfw
Palo Alto Networks Cloud NGFW for AWS v0.1.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-cloudngfwaws

cloudngfwaws.Ngfw

Explore with Pulumi AI

cloudngfwaws logo
Palo Alto Networks Cloud NGFW for AWS v0.1.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-cloudngfwaws

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as cloudngfwaws from "@pulumi/cloudngfwaws";

const rs = new cloudngfwaws.CommitRulestack("rs", {rulestack: "my-rulestack"});
const exampleVpc = new aws.index.Vpc("example", {
    cidrBlock: "172.16.0.0/16",
    tags: {
        name: "tf-example",
    },
});
const subnet1 = new aws.index.Subnet("subnet1", {
    vpcId: myVpc.id,
    cidrBlock: "172.16.10.0/24",
    availabilityZone: "us-west-2a",
    tags: {
        name: "tf-example",
    },
});
const subnet2 = new aws.index.Subnet("subnet2", {
    vpcId: myVpc.id,
    cidrBlock: "172.16.20.0/24",
    availabilityZone: "us-west-2b",
    tags: {
        name: "tf-example",
    },
});
const example = new cloudngfwaws.Ngfw("example", {
    name: "example-instance",
    vpcId: exampleVpc.id,
    accountId: "12345678",
    description: "Example description",
    linkId: "Link-81e80ccc-357a-4e4e-8325-1ed1d830cba5",
    endpointMode: "ServiceManaged",
    subnetMappings: [
        {
            subnetId: subnet1.id,
        },
        {
            subnetId: subnet2.id,
        },
    ],
    rulestack: rs.rulestack,
    tags: {
        Foo: "bar",
    },
});

    import pulumi
import pulumi_aws as aws
import pulumi_cloudngfwaws as cloudngfwaws

rs = cloudngfwaws.CommitRulestack("rs", rulestack="my-rulestack")
example_vpc = aws.index.Vpc("example",
    cidr_block=172.16.0.0/16,
    tags={
        name: tf-example,
    })
subnet1 = aws.index.Subnet("subnet1",
    vpc_id=my_vpc.id,
    cidr_block=172.16.10.0/24,
    availability_zone=us-west-2a,
    tags={
        name: tf-example,
    })
subnet2 = aws.index.Subnet("subnet2",
    vpc_id=my_vpc.id,
    cidr_block=172.16.20.0/24,
    availability_zone=us-west-2b,
    tags={
        name: tf-example,
    })
example = cloudngfwaws.Ngfw("example",
    name="example-instance",
    vpc_id=example_vpc["id"],
    account_id="12345678",
    description="Example description",
    link_id="Link-81e80ccc-357a-4e4e-8325-1ed1d830cba5",
    endpoint_mode="ServiceManaged",
    subnet_mappings=[
        {
            "subnet_id": subnet1["id"],
        },
        {
            "subnet_id": subnet2["id"],
        },
    ],
    rulestack=rs.rulestack,
    tags={
        "Foo": "bar",
    })

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/go/aws"
	"github.com/pulumi/pulumi-cloudngfwaws/sdk/go/cloudngfwaws"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		rs, err := cloudngfwaws.NewCommitRulestack(ctx, "rs", &cloudngfwaws.CommitRulestackArgs{
			Rulestack: pulumi.String("my-rulestack"),
		})
		if err != nil {
			return err
		}
		exampleVpc, err := aws.NewVpc(ctx, "example", &aws.VpcArgs{
			CidrBlock: "172.16.0.0/16",
			Tags: map[string]interface{}{
				"name": "tf-example",
			},
		})
		if err != nil {
			return err
		}
		subnet1, err := aws.NewSubnet(ctx, "subnet1", &aws.SubnetArgs{
			VpcId:            myVpc.Id,
			CidrBlock:        "172.16.10.0/24",
			AvailabilityZone: "us-west-2a",
			Tags: map[string]interface{}{
				"name": "tf-example",
			},
		})
		if err != nil {
			return err
		}
		subnet2, err := aws.NewSubnet(ctx, "subnet2", &aws.SubnetArgs{
			VpcId:            myVpc.Id,
			CidrBlock:        "172.16.20.0/24",
			AvailabilityZone: "us-west-2b",
			Tags: map[string]interface{}{
				"name": "tf-example",
			},
		})
		if err != nil {
			return err
		}
		_, err = cloudngfwaws.NewNgfw(ctx, "example", &cloudngfwaws.NgfwArgs{
			Name:         pulumi.String("example-instance"),
			VpcId:        exampleVpc.Id,
			AccountId:    pulumi.String("12345678"),
			Description:  pulumi.String("Example description"),
			LinkId:       pulumi.String("Link-81e80ccc-357a-4e4e-8325-1ed1d830cba5"),
			EndpointMode: pulumi.String("ServiceManaged"),
			SubnetMappings: cloudngfwaws.NgfwSubnetMappingArray{
				&cloudngfwaws.NgfwSubnetMappingArgs{
					SubnetId: subnet1.Id,
				},
				&cloudngfwaws.NgfwSubnetMappingArgs{
					SubnetId: subnet2.Id,
				},
			},
			Rulestack: rs.Rulestack,
			Tags: pulumi.StringMap{
				"Foo": pulumi.String("bar"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
using CloudNgfwAws = Pulumi.CloudNgfwAws;

return await Deployment.RunAsync(() => 
{
    var rs = new CloudNgfwAws.CommitRulestack("rs", new()
    {
        Rulestack = "my-rulestack",
    });

    var exampleVpc = new Aws.Index.Vpc("example", new()
    {
        CidrBlock = "172.16.0.0/16",
        Tags = 
        {
            { "name", "tf-example" },
        },
    });

    var subnet1 = new Aws.Index.Subnet("subnet1", new()
    {
        VpcId = myVpc.Id,
        CidrBlock = "172.16.10.0/24",
        AvailabilityZone = "us-west-2a",
        Tags = 
        {
            { "name", "tf-example" },
        },
    });

    var subnet2 = new Aws.Index.Subnet("subnet2", new()
    {
        VpcId = myVpc.Id,
        CidrBlock = "172.16.20.0/24",
        AvailabilityZone = "us-west-2b",
        Tags = 
        {
            { "name", "tf-example" },
        },
    });

    var example = new CloudNgfwAws.Ngfw("example", new()
    {
        Name = "example-instance",
        VpcId = exampleVpc.Id,
        AccountId = "12345678",
        Description = "Example description",
        LinkId = "Link-81e80ccc-357a-4e4e-8325-1ed1d830cba5",
        EndpointMode = "ServiceManaged",
        SubnetMappings = new[]
        {
            new CloudNgfwAws.Inputs.NgfwSubnetMappingArgs
            {
                SubnetId = subnet1.Id,
            },
            new CloudNgfwAws.Inputs.NgfwSubnetMappingArgs
            {
                SubnetId = subnet2.Id,
            },
        },
        Rulestack = rs.Rulestack,
        Tags = 
        {
            { "Foo", "bar" },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudngfwaws.CommitRulestack;
import com.pulumi.cloudngfwaws.CommitRulestackArgs;
import com.pulumi.aws.vpc;
import com.pulumi.aws.VpcArgs;
import com.pulumi.aws.subnet;
import com.pulumi.aws.SubnetArgs;
import com.pulumi.cloudngfwaws.Ngfw;
import com.pulumi.cloudngfwaws.NgfwArgs;
import com.pulumi.cloudngfwaws.inputs.NgfwSubnetMappingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var rs = new CommitRulestack("rs", CommitRulestackArgs.builder()
            .rulestack("my-rulestack")
            .build());

        var exampleVpc = new Vpc("exampleVpc", VpcArgs.builder()
            .cidrBlock("172.16.0.0/16")
            .tags(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
            .build());

        var subnet1 = new Subnet("subnet1", SubnetArgs.builder()
            .vpcId(myVpc.id())
            .cidrBlock("172.16.10.0/24")
            .availabilityZone("us-west-2a")
            .tags(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
            .build());

        var subnet2 = new Subnet("subnet2", SubnetArgs.builder()
            .vpcId(myVpc.id())
            .cidrBlock("172.16.20.0/24")
            .availabilityZone("us-west-2b")
            .tags(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
            .build());

        var example = new Ngfw("example", NgfwArgs.builder()
            .name("example-instance")
            .vpcId(exampleVpc.id())
            .accountId("12345678")
            .description("Example description")
            .linkId("Link-81e80ccc-357a-4e4e-8325-1ed1d830cba5")
            .endpointMode("ServiceManaged")
            .subnetMappings(            
                NgfwSubnetMappingArgs.builder()
                    .subnetId(subnet1.id())
                    .build(),
                NgfwSubnetMappingArgs.builder()
                    .subnetId(subnet2.id())
                    .build())
            .rulestack(rs.rulestack())
            .tags(Map.of("Foo", "bar"))
            .build());

    }
}

    resources:
  example:
    type: cloudngfwaws:Ngfw
    properties:
      name: example-instance
      vpcId: ${exampleVpc.id}
      accountId: '12345678'
      description: Example description
      linkId: Link-81e80ccc-357a-4e4e-8325-1ed1d830cba5
      endpointMode: ServiceManaged
      subnetMappings:
        - subnetId: ${subnet1.id}
        - subnetId: ${subnet2.id}
      rulestack: ${rs.rulestack}
      tags:
        Foo: bar
  rs:
    type: cloudngfwaws:CommitRulestack
    properties:
      rulestack: my-rulestack
  exampleVpc:
    type: aws:vpc
    name: example
    properties:
      cidrBlock: 172.16.0.0/16
      tags:
        name: tf-example
  subnet1:
    type: aws:subnet
    properties:
      vpcId: ${myVpc.id}
      cidrBlock: 172.16.10.0/24
      availabilityZone: us-west-2a
      tags:
        name: tf-example
  subnet2:
    type: aws:subnet
    properties:
      vpcId: ${myVpc.id}
      cidrBlock: 172.16.20.0/24
      availabilityZone: us-west-2b
      tags:
        name: tf-example

    Create Ngfw Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Ngfw(name: string, args: NgfwArgs, opts?: CustomResourceOptions);
    @overload
def Ngfw(resource_name: str,
         args: NgfwArgs,
         opts: Optional[ResourceOptions] = None)

@overload
def Ngfw(resource_name: str,
         opts: Optional[ResourceOptions] = None,
         endpoint_mode: Optional[str] = None,
         vpc_id: Optional[str] = None,
         subnet_mappings: Optional[Sequence[NgfwSubnetMappingArgs]] = None,
         link_id: Optional[str] = None,
         description: Optional[str] = None,
         global_rulestack: Optional[str] = None,
         account_id: Optional[str] = None,
         multi_vpc: Optional[bool] = None,
         name: Optional[str] = None,
         rulestack: Optional[str] = None,
         automatic_upgrade_app_id_version: Optional[bool] = None,
         tags: Optional[Mapping[str, str]] = None,
         app_id_version: Optional[str] = None)
    func NewNgfw(ctx *Context, name string, args NgfwArgs, opts ...ResourceOption) (*Ngfw, error)
    public Ngfw(string name, NgfwArgs args, CustomResourceOptions? opts = null)
    public Ngfw(String name, NgfwArgs args)
public Ngfw(String name, NgfwArgs args, CustomResourceOptions options)

    type: cloudngfwaws:Ngfw
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args NgfwArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NgfwArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NgfwArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NgfwArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NgfwArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var ngfwResource = new CloudNgfwAws.Ngfw("ngfwResource", new()
{
    EndpointMode = "string",
    VpcId = "string",
    SubnetMappings = new[]
    {
        new CloudNgfwAws.Inputs.NgfwSubnetMappingArgs
        {
            AvailabilityZone = "string",
            AvailabilityZoneId = "string",
            SubnetId = "string",
        },
    },
    LinkId = "string",
    Description = "string",
    GlobalRulestack = "string",
    AccountId = "string",
    MultiVpc = false,
    Name = "string",
    Rulestack = "string",
    AutomaticUpgradeAppIdVersion = false,
    Tags = 
    {
        { "string", "string" },
    },
    AppIdVersion = "string",
});

    example, err := cloudngfwaws.NewNgfw(ctx, "ngfwResource", &cloudngfwaws.NgfwArgs{
	EndpointMode: pulumi.String("string"),
	VpcId:        pulumi.String("string"),
	SubnetMappings: cloudngfwaws.NgfwSubnetMappingArray{
		&cloudngfwaws.NgfwSubnetMappingArgs{
			AvailabilityZone:   pulumi.String("string"),
			AvailabilityZoneId: pulumi.String("string"),
			SubnetId:           pulumi.String("string"),
		},
	},
	LinkId:                       pulumi.String("string"),
	Description:                  pulumi.String("string"),
	GlobalRulestack:              pulumi.String("string"),
	AccountId:                    pulumi.String("string"),
	MultiVpc:                     pulumi.Bool(false),
	Name:                         pulumi.String("string"),
	Rulestack:                    pulumi.String("string"),
	AutomaticUpgradeAppIdVersion: pulumi.Bool(false),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	AppIdVersion: pulumi.String("string"),
})

    var ngfwResource = new Ngfw("ngfwResource", NgfwArgs.builder()
    .endpointMode("string")
    .vpcId("string")
    .subnetMappings(NgfwSubnetMappingArgs.builder()
        .availabilityZone("string")
        .availabilityZoneId("string")
        .subnetId("string")
        .build())
    .linkId("string")
    .description("string")
    .globalRulestack("string")
    .accountId("string")
    .multiVpc(false)
    .name("string")
    .rulestack("string")
    .automaticUpgradeAppIdVersion(false)
    .tags(Map.of("string", "string"))
    .appIdVersion("string")
    .build());

    ngfw_resource = cloudngfwaws.Ngfw("ngfwResource",
    endpoint_mode="string",
    vpc_id="string",
    subnet_mappings=[{
        "availability_zone": "string",
        "availability_zone_id": "string",
        "subnet_id": "string",
    }],
    link_id="string",
    description="string",
    global_rulestack="string",
    account_id="string",
    multi_vpc=False,
    name="string",
    rulestack="string",
    automatic_upgrade_app_id_version=False,
    tags={
        "string": "string",
    },
    app_id_version="string")

    const ngfwResource = new cloudngfwaws.Ngfw("ngfwResource", {
    endpointMode: "string",
    vpcId: "string",
    subnetMappings: [{
        availabilityZone: "string",
        availabilityZoneId: "string",
        subnetId: "string",
    }],
    linkId: "string",
    description: "string",
    globalRulestack: "string",
    accountId: "string",
    multiVpc: false,
    name: "string",
    rulestack: "string",
    automaticUpgradeAppIdVersion: false,
    tags: {
        string: "string",
    },
    appIdVersion: "string",
});

    type: cloudngfwaws:Ngfw
properties:
    accountId: string
    appIdVersion: string
    automaticUpgradeAppIdVersion: false
    description: string
    endpointMode: string
    globalRulestack: string
    linkId: string
    multiVpc: false
    name: string
    rulestack: string
    subnetMappings:
        - availabilityZone: string
          availabilityZoneId: string
          subnetId: string
    tags:
        string: string
    vpcId: string

    Ngfw Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Ngfw resource accepts the following input properties:

    EndpointMode string
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    SubnetMappings List<Pulumi.CloudNgfwAws.Inputs.NgfwSubnetMapping>
    Subnet mappings.
    VpcId string
    The vpc id.
    AccountId string
    The account ID. This field is mandatory if using multiple accounts.
    AppIdVersion string
    App-ID version number.
    AutomaticUpgradeAppIdVersion bool
    Automatic App-ID upgrade version number. Defaults to true.
    Description string
    The description.
    GlobalRulestack string
    The global rulestack for this NGFW.
    LinkId string
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    MultiVpc bool
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    Name string
    The NGFW name.
    Rulestack string
    The rulestack for this NGFW.
    Tags Dictionary<string, string>
    The tags.
    EndpointMode string
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    SubnetMappings []NgfwSubnetMappingArgs
    Subnet mappings.
    VpcId string
    The vpc id.
    AccountId string
    The account ID. This field is mandatory if using multiple accounts.
    AppIdVersion string
    App-ID version number.
    AutomaticUpgradeAppIdVersion bool
    Automatic App-ID upgrade version number. Defaults to true.
    Description string
    The description.
    GlobalRulestack string
    The global rulestack for this NGFW.
    LinkId string
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    MultiVpc bool
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    Name string
    The NGFW name.
    Rulestack string
    The rulestack for this NGFW.
    Tags map[string]string
    The tags.
    endpointMode String
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    subnetMappings List<NgfwSubnetMapping>
    Subnet mappings.
    vpcId String
    The vpc id.
    accountId String
    The account ID. This field is mandatory if using multiple accounts.
    appIdVersion String
    App-ID version number.
    automaticUpgradeAppIdVersion Boolean
    Automatic App-ID upgrade version number. Defaults to true.
    description String
    The description.
    globalRulestack String
    The global rulestack for this NGFW.
    linkId String
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    multiVpc Boolean
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    name String
    The NGFW name.
    rulestack String
    The rulestack for this NGFW.
    tags Map<String,String>
    The tags.
    endpointMode string
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    subnetMappings NgfwSubnetMapping[]
    Subnet mappings.
    vpcId string
    The vpc id.
    accountId string
    The account ID. This field is mandatory if using multiple accounts.
    appIdVersion string
    App-ID version number.
    automaticUpgradeAppIdVersion boolean
    Automatic App-ID upgrade version number. Defaults to true.
    description string
    The description.
    globalRulestack string
    The global rulestack for this NGFW.
    linkId string
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    multiVpc boolean
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    name string
    The NGFW name.
    rulestack string
    The rulestack for this NGFW.
    tags {[key: string]: string}
    The tags.
    endpoint_mode str
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    subnet_mappings Sequence[NgfwSubnetMappingArgs]
    Subnet mappings.
    vpc_id str
    The vpc id.
    account_id str
    The account ID. This field is mandatory if using multiple accounts.
    app_id_version str
    App-ID version number.
    automatic_upgrade_app_id_version bool
    Automatic App-ID upgrade version number. Defaults to true.
    description str
    The description.
    global_rulestack str
    The global rulestack for this NGFW.
    link_id str
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    multi_vpc bool
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    name str
    The NGFW name.
    rulestack str
    The rulestack for this NGFW.
    tags Mapping[str, str]
    The tags.
    endpointMode String
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    subnetMappings List<Property Map>
    Subnet mappings.
    vpcId String
    The vpc id.
    accountId String
    The account ID. This field is mandatory if using multiple accounts.
    appIdVersion String
    App-ID version number.
    automaticUpgradeAppIdVersion Boolean
    Automatic App-ID upgrade version number. Defaults to true.
    description String
    The description.
    globalRulestack String
    The global rulestack for this NGFW.
    linkId String
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    multiVpc Boolean
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    name String
    The NGFW name.
    rulestack String
    The rulestack for this NGFW.
    tags Map<String>
    The tags.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Ngfw resource produces the following output properties:

    EndpointServiceName string
    The endpoint service name.
    FirewallId string
    The Id of the NGFW.
    Id string
    The provider-assigned unique ID for this managed resource.
    LinkStatus string
    The link status.
    Statuses List<Pulumi.CloudNgfwAws.Outputs.NgfwStatus>
    UpdateToken string
    The update token.
    EndpointServiceName string
    The endpoint service name.
    FirewallId string
    The Id of the NGFW.
    Id string
    The provider-assigned unique ID for this managed resource.
    LinkStatus string
    The link status.
    Statuses []NgfwStatus
    UpdateToken string
    The update token.
    endpointServiceName String
    The endpoint service name.
    firewallId String
    The Id of the NGFW.
    id String
    The provider-assigned unique ID for this managed resource.
    linkStatus String
    The link status.
    statuses List<NgfwStatus>
    updateToken String
    The update token.
    endpointServiceName string
    The endpoint service name.
    firewallId string
    The Id of the NGFW.
    id string
    The provider-assigned unique ID for this managed resource.
    linkStatus string
    The link status.
    statuses NgfwStatus[]
    updateToken string
    The update token.
    endpoint_service_name str
    The endpoint service name.
    firewall_id str
    The Id of the NGFW.
    id str
    The provider-assigned unique ID for this managed resource.
    link_status str
    The link status.
    statuses Sequence[NgfwStatus]
    update_token str
    The update token.
    endpointServiceName String
    The endpoint service name.
    firewallId String
    The Id of the NGFW.
    id String
    The provider-assigned unique ID for this managed resource.
    linkStatus String
    The link status.
    statuses List<Property Map>
    updateToken String
    The update token.

    Look up Existing Ngfw Resource

    Get an existing Ngfw resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NgfwState, opts?: CustomResourceOptions): Ngfw
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        app_id_version: Optional[str] = None,
        automatic_upgrade_app_id_version: Optional[bool] = None,
        description: Optional[str] = None,
        endpoint_mode: Optional[str] = None,
        endpoint_service_name: Optional[str] = None,
        firewall_id: Optional[str] = None,
        global_rulestack: Optional[str] = None,
        link_id: Optional[str] = None,
        link_status: Optional[str] = None,
        multi_vpc: Optional[bool] = None,
        name: Optional[str] = None,
        rulestack: Optional[str] = None,
        statuses: Optional[Sequence[NgfwStatusArgs]] = None,
        subnet_mappings: Optional[Sequence[NgfwSubnetMappingArgs]] = None,
        tags: Optional[Mapping[str, str]] = None,
        update_token: Optional[str] = None,
        vpc_id: Optional[str] = None) -> Ngfw
    func GetNgfw(ctx *Context, name string, id IDInput, state *NgfwState, opts ...ResourceOption) (*Ngfw, error)
    public static Ngfw Get(string name, Input<string> id, NgfwState? state, CustomResourceOptions? opts = null)
    public static Ngfw get(String name, Output<String> id, NgfwState state, CustomResourceOptions options)
    resources:  _:    type: cloudngfwaws:Ngfw    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The account ID. This field is mandatory if using multiple accounts.
    AppIdVersion string
    App-ID version number.
    AutomaticUpgradeAppIdVersion bool
    Automatic App-ID upgrade version number. Defaults to true.
    Description string
    The description.
    EndpointMode string
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    EndpointServiceName string
    The endpoint service name.
    FirewallId string
    The Id of the NGFW.
    GlobalRulestack string
    The global rulestack for this NGFW.
    LinkId string
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    LinkStatus string
    The link status.
    MultiVpc bool
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    Name string
    The NGFW name.
    Rulestack string
    The rulestack for this NGFW.
    Statuses List<Pulumi.CloudNgfwAws.Inputs.NgfwStatus>
    SubnetMappings List<Pulumi.CloudNgfwAws.Inputs.NgfwSubnetMapping>
    Subnet mappings.
    Tags Dictionary<string, string>
    The tags.
    UpdateToken string
    The update token.
    VpcId string
    The vpc id.
    AccountId string
    The account ID. This field is mandatory if using multiple accounts.
    AppIdVersion string
    App-ID version number.
    AutomaticUpgradeAppIdVersion bool
    Automatic App-ID upgrade version number. Defaults to true.
    Description string
    The description.
    EndpointMode string
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    EndpointServiceName string
    The endpoint service name.
    FirewallId string
    The Id of the NGFW.
    GlobalRulestack string
    The global rulestack for this NGFW.
    LinkId string
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    LinkStatus string
    The link status.
    MultiVpc bool
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    Name string
    The NGFW name.
    Rulestack string
    The rulestack for this NGFW.
    Statuses []NgfwStatusArgs
    SubnetMappings []NgfwSubnetMappingArgs
    Subnet mappings.
    Tags map[string]string
    The tags.
    UpdateToken string
    The update token.
    VpcId string
    The vpc id.
    accountId String
    The account ID. This field is mandatory if using multiple accounts.
    appIdVersion String
    App-ID version number.
    automaticUpgradeAppIdVersion Boolean
    Automatic App-ID upgrade version number. Defaults to true.
    description String
    The description.
    endpointMode String
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    endpointServiceName String
    The endpoint service name.
    firewallId String
    The Id of the NGFW.
    globalRulestack String
    The global rulestack for this NGFW.
    linkId String
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    linkStatus String
    The link status.
    multiVpc Boolean
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    name String
    The NGFW name.
    rulestack String
    The rulestack for this NGFW.
    statuses List<NgfwStatus>
    subnetMappings List<NgfwSubnetMapping>
    Subnet mappings.
    tags Map<String,String>
    The tags.
    updateToken String
    The update token.
    vpcId String
    The vpc id.
    accountId string
    The account ID. This field is mandatory if using multiple accounts.
    appIdVersion string
    App-ID version number.
    automaticUpgradeAppIdVersion boolean
    Automatic App-ID upgrade version number. Defaults to true.
    description string
    The description.
    endpointMode string
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    endpointServiceName string
    The endpoint service name.
    firewallId string
    The Id of the NGFW.
    globalRulestack string
    The global rulestack for this NGFW.
    linkId string
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    linkStatus string
    The link status.
    multiVpc boolean
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    name string
    The NGFW name.
    rulestack string
    The rulestack for this NGFW.
    statuses NgfwStatus[]
    subnetMappings NgfwSubnetMapping[]
    Subnet mappings.
    tags {[key: string]: string}
    The tags.
    updateToken string
    The update token.
    vpcId string
    The vpc id.
    account_id str
    The account ID. This field is mandatory if using multiple accounts.
    app_id_version str
    App-ID version number.
    automatic_upgrade_app_id_version bool
    Automatic App-ID upgrade version number. Defaults to true.
    description str
    The description.
    endpoint_mode str
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    endpoint_service_name str
    The endpoint service name.
    firewall_id str
    The Id of the NGFW.
    global_rulestack str
    The global rulestack for this NGFW.
    link_id str
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    link_status str
    The link status.
    multi_vpc bool
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    name str
    The NGFW name.
    rulestack str
    The rulestack for this NGFW.
    statuses Sequence[NgfwStatusArgs]
    subnet_mappings Sequence[NgfwSubnetMappingArgs]
    Subnet mappings.
    tags Mapping[str, str]
    The tags.
    update_token str
    The update token.
    vpc_id str
    The vpc id.
    accountId String
    The account ID. This field is mandatory if using multiple accounts.
    appIdVersion String
    App-ID version number.
    automaticUpgradeAppIdVersion Boolean
    Automatic App-ID upgrade version number. Defaults to true.
    description String
    The description.
    endpointMode String
    Set endpoint mode from the following options. Valid values are ServiceManaged or CustomerManaged.
    endpointServiceName String
    The endpoint service name.
    firewallId String
    The Id of the NGFW.
    globalRulestack String
    The global rulestack for this NGFW.
    linkId String
    A unique identifier for establishing and managing the link between the Cloud NGFW and other AWS resources.
    linkStatus String
    The link status.
    multiVpc Boolean
    Share NGFW with Multiple VPCs. This feature can be enabled only if the endpoint_mode is CustomerManaged.
    name String
    The NGFW name.
    rulestack String
    The rulestack for this NGFW.
    statuses List<Property Map>
    subnetMappings List<Property Map>
    Subnet mappings.
    tags Map<String>
    The tags.
    updateToken String
    The update token.
    vpcId String
    The vpc id.

    Supporting Types

    NgfwStatus, NgfwStatusArgs

    Attachments List<Pulumi.CloudNgfwAws.Inputs.NgfwStatusAttachment>
    The firewall attachments.
    FailureReason string
    The firewall failure reason.
    FirewallStatus string
    The firewall status.
    RulestackStatus string
    The rulestack status.
    Attachments []NgfwStatusAttachment
    The firewall attachments.
    FailureReason string
    The firewall failure reason.
    FirewallStatus string
    The firewall status.
    RulestackStatus string
    The rulestack status.
    attachments List<NgfwStatusAttachment>
    The firewall attachments.
    failureReason String
    The firewall failure reason.
    firewallStatus String
    The firewall status.
    rulestackStatus String
    The rulestack status.
    attachments NgfwStatusAttachment[]
    The firewall attachments.
    failureReason string
    The firewall failure reason.
    firewallStatus string
    The firewall status.
    rulestackStatus string
    The rulestack status.
    attachments Sequence[NgfwStatusAttachment]
    The firewall attachments.
    failure_reason str
    The firewall failure reason.
    firewall_status str
    The firewall status.
    rulestack_status str
    The rulestack status.
    attachments List<Property Map>
    The firewall attachments.
    failureReason String
    The firewall failure reason.
    firewallStatus String
    The firewall status.
    rulestackStatus String
    The rulestack status.

    NgfwStatusAttachment, NgfwStatusAttachmentArgs

    EndpointId string
    The endpoint id.
    RejectedReason string
    The reject reason.
    Status string
    The attachment status.
    SubnetId string
    The subnet id.
    EndpointId string
    The endpoint id.
    RejectedReason string
    The reject reason.
    Status string
    The attachment status.
    SubnetId string
    The subnet id.
    endpointId String
    The endpoint id.
    rejectedReason String
    The reject reason.
    status String
    The attachment status.
    subnetId String
    The subnet id.
    endpointId string
    The endpoint id.
    rejectedReason string
    The reject reason.
    status string
    The attachment status.
    subnetId string
    The subnet id.
    endpoint_id str
    The endpoint id.
    rejected_reason str
    The reject reason.
    status str
    The attachment status.
    subnet_id str
    The subnet id.
    endpointId String
    The endpoint id.
    rejectedReason String
    The reject reason.
    status String
    The attachment status.
    subnetId String
    The subnet id.

    NgfwSubnetMapping, NgfwSubnetMappingArgs

    AvailabilityZone string
    The availability zone, for when the endpoint mode is customer managed.
    AvailabilityZoneId string
    The availability zone ID, for when the endpoint mode is customer managed.
    SubnetId string
    The subnet id, for when the endpoint mode is service managed.
    AvailabilityZone string
    The availability zone, for when the endpoint mode is customer managed.
    AvailabilityZoneId string
    The availability zone ID, for when the endpoint mode is customer managed.
    SubnetId string
    The subnet id, for when the endpoint mode is service managed.
    availabilityZone String
    The availability zone, for when the endpoint mode is customer managed.
    availabilityZoneId String
    The availability zone ID, for when the endpoint mode is customer managed.
    subnetId String
    The subnet id, for when the endpoint mode is service managed.
    availabilityZone string
    The availability zone, for when the endpoint mode is customer managed.
    availabilityZoneId string
    The availability zone ID, for when the endpoint mode is customer managed.
    subnetId string
    The subnet id, for when the endpoint mode is service managed.
    availability_zone str
    The availability zone, for when the endpoint mode is customer managed.
    availability_zone_id str
    The availability zone ID, for when the endpoint mode is customer managed.
    subnet_id str
    The subnet id, for when the endpoint mode is service managed.
    availabilityZone String
    The availability zone, for when the endpoint mode is customer managed.
    availabilityZoneId String
    The availability zone ID, for when the endpoint mode is customer managed.
    subnetId String
    The subnet id, for when the endpoint mode is service managed.

    Import

    import name is <account_id>:

    $ pulumi import cloudngfwaws:index/ngfw:Ngfw example 12345678:example-instance

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    cloudngfwaws pulumi/pulumi-cloudngfwaws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudngfwaws Terraform Provider.
    cloudngfwaws logo
    Palo Alto Networks Cloud NGFW for AWS v0.1.1 published on Saturday, Mar 15, 2025 by Pulumi
    pulumi/pulumi-cloudngfwaws