com.pulumi.azure.paloalto.kotlin.NextGenerationFirewallVirtualNetworkLocalRulestack.kt Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of pulumi-azure-kotlin Show documentation
Show all versions of pulumi-azure-kotlin Show documentation
Build cloud applications and infrastructure by combining the safety and reliability of infrastructure as code with the power of the Kotlin programming language.
@file:Suppress("NAME_SHADOWING", "DEPRECATION")
package com.pulumi.azure.paloalto.kotlin
import com.pulumi.azure.paloalto.kotlin.outputs.NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNat
import com.pulumi.azure.paloalto.kotlin.outputs.NextGenerationFirewallVirtualNetworkLocalRulestackDnsSettings
import com.pulumi.azure.paloalto.kotlin.outputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfile
import com.pulumi.core.Output
import com.pulumi.kotlin.KotlinCustomResource
import com.pulumi.kotlin.PulumiTagMarker
import com.pulumi.kotlin.ResourceMapper
import com.pulumi.kotlin.options.CustomResourceOptions
import com.pulumi.kotlin.options.CustomResourceOptionsBuilder
import com.pulumi.resources.Resource
import kotlin.Boolean
import kotlin.String
import kotlin.Suppress
import kotlin.Unit
import kotlin.collections.List
import kotlin.collections.Map
import com.pulumi.azure.paloalto.kotlin.outputs.NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNat.Companion.toKotlin as nextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatToKotlin
import com.pulumi.azure.paloalto.kotlin.outputs.NextGenerationFirewallVirtualNetworkLocalRulestackDnsSettings.Companion.toKotlin as nextGenerationFirewallVirtualNetworkLocalRulestackDnsSettingsToKotlin
import com.pulumi.azure.paloalto.kotlin.outputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfile.Companion.toKotlin as nextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileToKotlin
/**
* Builder for [NextGenerationFirewallVirtualNetworkLocalRulestack].
*/
@PulumiTagMarker
public class NextGenerationFirewallVirtualNetworkLocalRulestackResourceBuilder internal constructor() {
public var name: String? = null
public var args: NextGenerationFirewallVirtualNetworkLocalRulestackArgs =
NextGenerationFirewallVirtualNetworkLocalRulestackArgs()
public var opts: CustomResourceOptions = CustomResourceOptions()
/**
* @param name The _unique_ name of the resulting resource.
*/
public fun name(`value`: String) {
this.name = value
}
/**
* @param block The arguments to use to populate this resource's properties.
*/
public suspend fun args(block: suspend NextGenerationFirewallVirtualNetworkLocalRulestackArgsBuilder.() -> Unit) {
val builder = NextGenerationFirewallVirtualNetworkLocalRulestackArgsBuilder()
block(builder)
this.args = builder.build()
}
/**
* @param block A bag of options that control this resource's behavior.
*/
public suspend fun opts(block: suspend CustomResourceOptionsBuilder.() -> Unit) {
this.opts = com.pulumi.kotlin.options.CustomResourceOptions.opts(block)
}
internal fun build(): NextGenerationFirewallVirtualNetworkLocalRulestack {
val builtJavaResource =
com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack(
this.name,
this.args.toJava(),
this.opts.toJava(),
)
return NextGenerationFirewallVirtualNetworkLocalRulestack(builtJavaResource)
}
}
/**
* Manages a Palo Alto Next Generation Firewall Deployed in a Virtual Network and configured via a Local Rulestack.
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as azure from "@pulumi/azure";
* const example = new azure.core.ResourceGroup("example", {
* name: "example-resource-group",
* location: "westeurope",
* });
* const examplePublicIp = new azure.network.PublicIp("example", {
* name: "example-public-ip",
* location: example.location,
* resourceGroupName: example.name,
* allocationMethod: "Static",
* sku: "Standard",
* });
* const exampleNetworkSecurityGroup = new azure.network.NetworkSecurityGroup("example", {
* name: "example-nsg",
* location: test.location,
* resourceGroupName: test.name,
* });
* const exampleVirtualNetwork = new azure.network.VirtualNetwork("example", {
* name: "example-vnet",
* addressSpaces: ["10.0.0.0/16"],
* location: example.location,
* resourceGroupName: example.name,
* tags: {
* environment: "Production",
* },
* });
* const trust = new azure.network.Subnet("trust", {
* name: "example-trust-subnet",
* resourceGroupName: example.name,
* virtualNetworkName: exampleVirtualNetwork.name,
* addressPrefixes: ["10.0.1.0/24"],
* delegations: [{
* name: "trusted",
* serviceDelegation: {
* name: "PaloAltoNetworks.Cloudngfw/firewalls",
* actions: ["Microsoft.Network/virtualNetworks/subnets/join/action"],
* },
* }],
* });
* const trustSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("trust", {
* subnetId: trust.id,
* networkSecurityGroupId: exampleNetworkSecurityGroup.id,
* });
* const untrust = new azure.network.Subnet("untrust", {
* name: "example-untrust-subnet",
* resourceGroupName: example.name,
* virtualNetworkName: exampleVirtualNetwork.name,
* addressPrefixes: ["10.0.2.0/24"],
* delegations: [{
* name: "untrusted",
* serviceDelegation: {
* name: "PaloAltoNetworks.Cloudngfw/firewalls",
* actions: ["Microsoft.Network/virtualNetworks/subnets/join/action"],
* },
* }],
* });
* const untrustSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("untrust", {
* subnetId: untrust.id,
* networkSecurityGroupId: exampleNetworkSecurityGroup.id,
* });
* const exampleLocalRulestack = new azure.paloalto.LocalRulestack("example", {
* name: "example-rulestack",
* resourceGroupName: example.name,
* location: example.locatio,
* });
* const exampleLocalRulestackRule = new azure.paloalto.LocalRulestackRule("example", {
* name: "example-rulestack-rule",
* rulestackId: exampleLocalRulestack.id,
* priority: 1001,
* action: "Allow",
* applications: ["any"],
* destination: {
* cidrs: ["any"],
* },
* source: {
* cidrs: ["any"],
* },
* });
* const exampleNextGenerationFirewallVirtualNetworkLocalRulestack = new azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack("example", {
* name: "example-ngfwvn",
* resourceGroupName: example.name,
* rulestackId: exampleLocalRulestack.id,
* networkProfile: {
* publicIpAddressIds: [examplePublicIp.id],
* vnetConfiguration: {
* virtualNetworkId: exampleVirtualNetwork.id,
* trustedSubnetId: trust.id,
* untrustedSubnetId: untrust.id,
* },
* },
* });
* ```
* ```python
* import pulumi
* import pulumi_azure as azure
* example = azure.core.ResourceGroup("example",
* name="example-resource-group",
* location="westeurope")
* example_public_ip = azure.network.PublicIp("example",
* name="example-public-ip",
* location=example.location,
* resource_group_name=example.name,
* allocation_method="Static",
* sku="Standard")
* example_network_security_group = azure.network.NetworkSecurityGroup("example",
* name="example-nsg",
* location=test["location"],
* resource_group_name=test["name"])
* example_virtual_network = azure.network.VirtualNetwork("example",
* name="example-vnet",
* address_spaces=["10.0.0.0/16"],
* location=example.location,
* resource_group_name=example.name,
* tags={
* "environment": "Production",
* })
* trust = azure.network.Subnet("trust",
* name="example-trust-subnet",
* resource_group_name=example.name,
* virtual_network_name=example_virtual_network.name,
* address_prefixes=["10.0.1.0/24"],
* delegations=[{
* "name": "trusted",
* "service_delegation": {
* "name": "PaloAltoNetworks.Cloudngfw/firewalls",
* "actions": ["Microsoft.Network/virtualNetworks/subnets/join/action"],
* },
* }])
* trust_subnet_network_security_group_association = azure.network.SubnetNetworkSecurityGroupAssociation("trust",
* subnet_id=trust.id,
* network_security_group_id=example_network_security_group.id)
* untrust = azure.network.Subnet("untrust",
* name="example-untrust-subnet",
* resource_group_name=example.name,
* virtual_network_name=example_virtual_network.name,
* address_prefixes=["10.0.2.0/24"],
* delegations=[{
* "name": "untrusted",
* "service_delegation": {
* "name": "PaloAltoNetworks.Cloudngfw/firewalls",
* "actions": ["Microsoft.Network/virtualNetworks/subnets/join/action"],
* },
* }])
* untrust_subnet_network_security_group_association = azure.network.SubnetNetworkSecurityGroupAssociation("untrust",
* subnet_id=untrust.id,
* network_security_group_id=example_network_security_group.id)
* example_local_rulestack = azure.paloalto.LocalRulestack("example",
* name="example-rulestack",
* resource_group_name=example.name,
* location=example.locatio)
* example_local_rulestack_rule = azure.paloalto.LocalRulestackRule("example",
* name="example-rulestack-rule",
* rulestack_id=example_local_rulestack.id,
* priority=1001,
* action="Allow",
* applications=["any"],
* destination={
* "cidrs": ["any"],
* },
* source={
* "cidrs": ["any"],
* })
* example_next_generation_firewall_virtual_network_local_rulestack = azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack("example",
* name="example-ngfwvn",
* resource_group_name=example.name,
* rulestack_id=example_local_rulestack.id,
* network_profile={
* "public_ip_address_ids": [example_public_ip.id],
* "vnet_configuration": {
* "virtual_network_id": example_virtual_network.id,
* "trusted_subnet_id": trust.id,
* "untrusted_subnet_id": untrust.id,
* },
* })
* ```
* ```csharp
* using System.Collections.Generic;
* using System.Linq;
* using Pulumi;
* using Azure = Pulumi.Azure;
* return await Deployment.RunAsync(() =>
* {
* var example = new Azure.Core.ResourceGroup("example", new()
* {
* Name = "example-resource-group",
* Location = "westeurope",
* });
* var examplePublicIp = new Azure.Network.PublicIp("example", new()
* {
* Name = "example-public-ip",
* Location = example.Location,
* ResourceGroupName = example.Name,
* AllocationMethod = "Static",
* Sku = "Standard",
* });
* var exampleNetworkSecurityGroup = new Azure.Network.NetworkSecurityGroup("example", new()
* {
* Name = "example-nsg",
* Location = test.Location,
* ResourceGroupName = test.Name,
* });
* var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("example", new()
* {
* Name = "example-vnet",
* AddressSpaces = new[]
* {
* "10.0.0.0/16",
* },
* Location = example.Location,
* ResourceGroupName = example.Name,
* Tags =
* {
* { "environment", "Production" },
* },
* });
* var trust = new Azure.Network.Subnet("trust", new()
* {
* Name = "example-trust-subnet",
* ResourceGroupName = example.Name,
* VirtualNetworkName = exampleVirtualNetwork.Name,
* AddressPrefixes = new[]
* {
* "10.0.1.0/24",
* },
* Delegations = new[]
* {
* new Azure.Network.Inputs.SubnetDelegationArgs
* {
* Name = "trusted",
* ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
* {
* Name = "PaloAltoNetworks.Cloudngfw/firewalls",
* Actions = new[]
* {
* "Microsoft.Network/virtualNetworks/subnets/join/action",
* },
* },
* },
* },
* });
* var trustSubnetNetworkSecurityGroupAssociation = new Azure.Network.SubnetNetworkSecurityGroupAssociation("trust", new()
* {
* SubnetId = trust.Id,
* NetworkSecurityGroupId = exampleNetworkSecurityGroup.Id,
* });
* var untrust = new Azure.Network.Subnet("untrust", new()
* {
* Name = "example-untrust-subnet",
* ResourceGroupName = example.Name,
* VirtualNetworkName = exampleVirtualNetwork.Name,
* AddressPrefixes = new[]
* {
* "10.0.2.0/24",
* },
* Delegations = new[]
* {
* new Azure.Network.Inputs.SubnetDelegationArgs
* {
* Name = "untrusted",
* ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
* {
* Name = "PaloAltoNetworks.Cloudngfw/firewalls",
* Actions = new[]
* {
* "Microsoft.Network/virtualNetworks/subnets/join/action",
* },
* },
* },
* },
* });
* var untrustSubnetNetworkSecurityGroupAssociation = new Azure.Network.SubnetNetworkSecurityGroupAssociation("untrust", new()
* {
* SubnetId = untrust.Id,
* NetworkSecurityGroupId = exampleNetworkSecurityGroup.Id,
* });
* var exampleLocalRulestack = new Azure.PaloAlto.LocalRulestack("example", new()
* {
* Name = "example-rulestack",
* ResourceGroupName = example.Name,
* Location = example.Locatio,
* });
* var exampleLocalRulestackRule = new Azure.PaloAlto.LocalRulestackRule("example", new()
* {
* Name = "example-rulestack-rule",
* RulestackId = exampleLocalRulestack.Id,
* Priority = 1001,
* Action = "Allow",
* Applications = new[]
* {
* "any",
* },
* Destination = new Azure.PaloAlto.Inputs.LocalRulestackRuleDestinationArgs
* {
* Cidrs = new[]
* {
* "any",
* },
* },
* Source = new Azure.PaloAlto.Inputs.LocalRulestackRuleSourceArgs
* {
* Cidrs = new[]
* {
* "any",
* },
* },
* });
* var exampleNextGenerationFirewallVirtualNetworkLocalRulestack = new Azure.PaloAlto.NextGenerationFirewallVirtualNetworkLocalRulestack("example", new()
* {
* Name = "example-ngfwvn",
* ResourceGroupName = example.Name,
* RulestackId = exampleLocalRulestack.Id,
* NetworkProfile = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs
* {
* PublicIpAddressIds = new[]
* {
* examplePublicIp.Id,
* },
* VnetConfiguration = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfigurationArgs
* {
* VirtualNetworkId = exampleVirtualNetwork.Id,
* TrustedSubnetId = trust.Id,
* UntrustedSubnetId = untrust.Id,
* },
* },
* });
* });
* ```
* ```go
* package main
* import (
* "github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
* "github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
* "github.com/pulumi/pulumi-azure/sdk/v5/go/azure/paloalto"
* "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
* )
* func main() {
* pulumi.Run(func(ctx *pulumi.Context) error {
* example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
* Name: pulumi.String("example-resource-group"),
* Location: pulumi.String("westeurope"),
* })
* if err != nil {
* return err
* }
* examplePublicIp, err := network.NewPublicIp(ctx, "example", &network.PublicIpArgs{
* Name: pulumi.String("example-public-ip"),
* Location: example.Location,
* ResourceGroupName: example.Name,
* AllocationMethod: pulumi.String("Static"),
* Sku: pulumi.String("Standard"),
* })
* if err != nil {
* return err
* }
* exampleNetworkSecurityGroup, err := network.NewNetworkSecurityGroup(ctx, "example", &network.NetworkSecurityGroupArgs{
* Name: pulumi.String("example-nsg"),
* Location: pulumi.Any(test.Location),
* ResourceGroupName: pulumi.Any(test.Name),
* })
* if err != nil {
* return err
* }
* exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "example", &network.VirtualNetworkArgs{
* Name: pulumi.String("example-vnet"),
* AddressSpaces: pulumi.StringArray{
* pulumi.String("10.0.0.0/16"),
* },
* Location: example.Location,
* ResourceGroupName: example.Name,
* Tags: pulumi.StringMap{
* "environment": pulumi.String("Production"),
* },
* })
* if err != nil {
* return err
* }
* trust, err := network.NewSubnet(ctx, "trust", &network.SubnetArgs{
* Name: pulumi.String("example-trust-subnet"),
* ResourceGroupName: example.Name,
* VirtualNetworkName: exampleVirtualNetwork.Name,
* AddressPrefixes: pulumi.StringArray{
* pulumi.String("10.0.1.0/24"),
* },
* Delegations: network.SubnetDelegationArray{
* &network.SubnetDelegationArgs{
* Name: pulumi.String("trusted"),
* ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
* Name: pulumi.String("PaloAltoNetworks.Cloudngfw/firewalls"),
* Actions: pulumi.StringArray{
* pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
* },
* },
* },
* },
* })
* if err != nil {
* return err
* }
* _, err = network.NewSubnetNetworkSecurityGroupAssociation(ctx, "trust", &network.SubnetNetworkSecurityGroupAssociationArgs{
* SubnetId: trust.ID(),
* NetworkSecurityGroupId: exampleNetworkSecurityGroup.ID(),
* })
* if err != nil {
* return err
* }
* untrust, err := network.NewSubnet(ctx, "untrust", &network.SubnetArgs{
* Name: pulumi.String("example-untrust-subnet"),
* ResourceGroupName: example.Name,
* VirtualNetworkName: exampleVirtualNetwork.Name,
* AddressPrefixes: pulumi.StringArray{
* pulumi.String("10.0.2.0/24"),
* },
* Delegations: network.SubnetDelegationArray{
* &network.SubnetDelegationArgs{
* Name: pulumi.String("untrusted"),
* ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
* Name: pulumi.String("PaloAltoNetworks.Cloudngfw/firewalls"),
* Actions: pulumi.StringArray{
* pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
* },
* },
* },
* },
* })
* if err != nil {
* return err
* }
* _, err = network.NewSubnetNetworkSecurityGroupAssociation(ctx, "untrust", &network.SubnetNetworkSecurityGroupAssociationArgs{
* SubnetId: untrust.ID(),
* NetworkSecurityGroupId: exampleNetworkSecurityGroup.ID(),
* })
* if err != nil {
* return err
* }
* exampleLocalRulestack, err := paloalto.NewLocalRulestack(ctx, "example", &paloalto.LocalRulestackArgs{
* Name: pulumi.String("example-rulestack"),
* ResourceGroupName: example.Name,
* Location: example.Locatio,
* })
* if err != nil {
* return err
* }
* _, err = paloalto.NewLocalRulestackRule(ctx, "example", &paloalto.LocalRulestackRuleArgs{
* Name: pulumi.String("example-rulestack-rule"),
* RulestackId: exampleLocalRulestack.ID(),
* Priority: pulumi.Int(1001),
* Action: pulumi.String("Allow"),
* Applications: pulumi.StringArray{
* pulumi.String("any"),
* },
* Destination: &paloalto.LocalRulestackRuleDestinationArgs{
* Cidrs: pulumi.StringArray{
* pulumi.String("any"),
* },
* },
* Source: &paloalto.LocalRulestackRuleSourceArgs{
* Cidrs: pulumi.StringArray{
* pulumi.String("any"),
* },
* },
* })
* if err != nil {
* return err
* }
* _, err = paloalto.NewNextGenerationFirewallVirtualNetworkLocalRulestack(ctx, "example", &paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackArgs{
* Name: pulumi.String("example-ngfwvn"),
* ResourceGroupName: example.Name,
* RulestackId: exampleLocalRulestack.ID(),
* NetworkProfile: &paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs{
* PublicIpAddressIds: pulumi.StringArray{
* examplePublicIp.ID(),
* },
* VnetConfiguration: &paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfigurationArgs{
* VirtualNetworkId: exampleVirtualNetwork.ID(),
* TrustedSubnetId: trust.ID(),
* UntrustedSubnetId: untrust.ID(),
* },
* },
* })
* if err != nil {
* return err
* }
* return nil
* })
* }
* ```
* ```java
* package generated_program;
* import com.pulumi.Context;
* import com.pulumi.Pulumi;
* import com.pulumi.core.Output;
* import com.pulumi.azure.core.ResourceGroup;
* import com.pulumi.azure.core.ResourceGroupArgs;
* import com.pulumi.azure.network.PublicIp;
* import com.pulumi.azure.network.PublicIpArgs;
* import com.pulumi.azure.network.NetworkSecurityGroup;
* import com.pulumi.azure.network.NetworkSecurityGroupArgs;
* import com.pulumi.azure.network.VirtualNetwork;
* import com.pulumi.azure.network.VirtualNetworkArgs;
* import com.pulumi.azure.network.Subnet;
* import com.pulumi.azure.network.SubnetArgs;
* import com.pulumi.azure.network.inputs.SubnetDelegationArgs;
* import com.pulumi.azure.network.inputs.SubnetDelegationServiceDelegationArgs;
* import com.pulumi.azure.network.SubnetNetworkSecurityGroupAssociation;
* import com.pulumi.azure.network.SubnetNetworkSecurityGroupAssociationArgs;
* import com.pulumi.azure.paloalto.LocalRulestack;
* import com.pulumi.azure.paloalto.LocalRulestackArgs;
* import com.pulumi.azure.paloalto.LocalRulestackRule;
* import com.pulumi.azure.paloalto.LocalRulestackRuleArgs;
* import com.pulumi.azure.paloalto.inputs.LocalRulestackRuleDestinationArgs;
* import com.pulumi.azure.paloalto.inputs.LocalRulestackRuleSourceArgs;
* import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack;
* import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackArgs;
* import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs;
* import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfigurationArgs;
* import java.util.List;
* import java.util.ArrayList;
* import java.util.Map;
* import java.io.File;
* import java.nio.file.Files;
* import java.nio.file.Paths;
* public class App {
* public static void main(String[] args) {
* Pulumi.run(App::stack);
* }
* public static void stack(Context ctx) {
* var example = new ResourceGroup("example", ResourceGroupArgs.builder()
* .name("example-resource-group")
* .location("westeurope")
* .build());
* var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()
* .name("example-public-ip")
* .location(example.location())
* .resourceGroupName(example.name())
* .allocationMethod("Static")
* .sku("Standard")
* .build());
* var exampleNetworkSecurityGroup = new NetworkSecurityGroup("exampleNetworkSecurityGroup", NetworkSecurityGroupArgs.builder()
* .name("example-nsg")
* .location(test.location())
* .resourceGroupName(test.name())
* .build());
* var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()
* .name("example-vnet")
* .addressSpaces("10.0.0.0/16")
* .location(example.location())
* .resourceGroupName(example.name())
* .tags(Map.of("environment", "Production"))
* .build());
* var trust = new Subnet("trust", SubnetArgs.builder()
* .name("example-trust-subnet")
* .resourceGroupName(example.name())
* .virtualNetworkName(exampleVirtualNetwork.name())
* .addressPrefixes("10.0.1.0/24")
* .delegations(SubnetDelegationArgs.builder()
* .name("trusted")
* .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
* .name("PaloAltoNetworks.Cloudngfw/firewalls")
* .actions("Microsoft.Network/virtualNetworks/subnets/join/action")
* .build())
* .build())
* .build());
* var trustSubnetNetworkSecurityGroupAssociation = new SubnetNetworkSecurityGroupAssociation("trustSubnetNetworkSecurityGroupAssociation", SubnetNetworkSecurityGroupAssociationArgs.builder()
* .subnetId(trust.id())
* .networkSecurityGroupId(exampleNetworkSecurityGroup.id())
* .build());
* var untrust = new Subnet("untrust", SubnetArgs.builder()
* .name("example-untrust-subnet")
* .resourceGroupName(example.name())
* .virtualNetworkName(exampleVirtualNetwork.name())
* .addressPrefixes("10.0.2.0/24")
* .delegations(SubnetDelegationArgs.builder()
* .name("untrusted")
* .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
* .name("PaloAltoNetworks.Cloudngfw/firewalls")
* .actions("Microsoft.Network/virtualNetworks/subnets/join/action")
* .build())
* .build())
* .build());
* var untrustSubnetNetworkSecurityGroupAssociation = new SubnetNetworkSecurityGroupAssociation("untrustSubnetNetworkSecurityGroupAssociation", SubnetNetworkSecurityGroupAssociationArgs.builder()
* .subnetId(untrust.id())
* .networkSecurityGroupId(exampleNetworkSecurityGroup.id())
* .build());
* var exampleLocalRulestack = new LocalRulestack("exampleLocalRulestack", LocalRulestackArgs.builder()
* .name("example-rulestack")
* .resourceGroupName(example.name())
* .location(example.locatio())
* .build());
* var exampleLocalRulestackRule = new LocalRulestackRule("exampleLocalRulestackRule", LocalRulestackRuleArgs.builder()
* .name("example-rulestack-rule")
* .rulestackId(exampleLocalRulestack.id())
* .priority(1001)
* .action("Allow")
* .applications("any")
* .destination(LocalRulestackRuleDestinationArgs.builder()
* .cidrs("any")
* .build())
* .source(LocalRulestackRuleSourceArgs.builder()
* .cidrs("any")
* .build())
* .build());
* var exampleNextGenerationFirewallVirtualNetworkLocalRulestack = new NextGenerationFirewallVirtualNetworkLocalRulestack("exampleNextGenerationFirewallVirtualNetworkLocalRulestack", NextGenerationFirewallVirtualNetworkLocalRulestackArgs.builder()
* .name("example-ngfwvn")
* .resourceGroupName(example.name())
* .rulestackId(exampleLocalRulestack.id())
* .networkProfile(NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs.builder()
* .publicIpAddressIds(examplePublicIp.id())
* .vnetConfiguration(NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfigurationArgs.builder()
* .virtualNetworkId(exampleVirtualNetwork.id())
* .trustedSubnetId(trust.id())
* .untrustedSubnetId(untrust.id())
* .build())
* .build())
* .build());
* }
* }
* ```
* ```yaml
* resources:
* example:
* type: azure:core:ResourceGroup
* properties:
* name: example-resource-group
* location: westeurope
* examplePublicIp:
* type: azure:network:PublicIp
* name: example
* properties:
* name: example-public-ip
* location: ${example.location}
* resourceGroupName: ${example.name}
* allocationMethod: Static
* sku: Standard
* exampleNetworkSecurityGroup:
* type: azure:network:NetworkSecurityGroup
* name: example
* properties:
* name: example-nsg
* location: ${test.location}
* resourceGroupName: ${test.name}
* exampleVirtualNetwork:
* type: azure:network:VirtualNetwork
* name: example
* properties:
* name: example-vnet
* addressSpaces:
* - 10.0.0.0/16
* location: ${example.location}
* resourceGroupName: ${example.name}
* tags:
* environment: Production
* trust:
* type: azure:network:Subnet
* properties:
* name: example-trust-subnet
* resourceGroupName: ${example.name}
* virtualNetworkName: ${exampleVirtualNetwork.name}
* addressPrefixes:
* - 10.0.1.0/24
* delegations:
* - name: trusted
* serviceDelegation:
* name: PaloAltoNetworks.Cloudngfw/firewalls
* actions:
* - Microsoft.Network/virtualNetworks/subnets/join/action
* trustSubnetNetworkSecurityGroupAssociation:
* type: azure:network:SubnetNetworkSecurityGroupAssociation
* name: trust
* properties:
* subnetId: ${trust.id}
* networkSecurityGroupId: ${exampleNetworkSecurityGroup.id}
* untrust:
* type: azure:network:Subnet
* properties:
* name: example-untrust-subnet
* resourceGroupName: ${example.name}
* virtualNetworkName: ${exampleVirtualNetwork.name}
* addressPrefixes:
* - 10.0.2.0/24
* delegations:
* - name: untrusted
* serviceDelegation:
* name: PaloAltoNetworks.Cloudngfw/firewalls
* actions:
* - Microsoft.Network/virtualNetworks/subnets/join/action
* untrustSubnetNetworkSecurityGroupAssociation:
* type: azure:network:SubnetNetworkSecurityGroupAssociation
* name: untrust
* properties:
* subnetId: ${untrust.id}
* networkSecurityGroupId: ${exampleNetworkSecurityGroup.id}
* exampleLocalRulestack:
* type: azure:paloalto:LocalRulestack
* name: example
* properties:
* name: example-rulestack
* resourceGroupName: ${example.name}
* location: ${example.locatio}
* exampleLocalRulestackRule:
* type: azure:paloalto:LocalRulestackRule
* name: example
* properties:
* name: example-rulestack-rule
* rulestackId: ${exampleLocalRulestack.id}
* priority: 1001
* action: Allow
* applications:
* - any
* destination:
* cidrs:
* - any
* source:
* cidrs:
* - any
* exampleNextGenerationFirewallVirtualNetworkLocalRulestack:
* type: azure:paloalto:NextGenerationFirewallVirtualNetworkLocalRulestack
* name: example
* properties:
* name: example-ngfwvn
* resourceGroupName: ${example.name}
* rulestackId: ${exampleLocalRulestack.id}
* networkProfile:
* publicIpAddressIds:
* - ${examplePublicIp.id}
* vnetConfiguration:
* virtualNetworkId: ${exampleVirtualNetwork.id}
* trustedSubnetId: ${trust.id}
* untrustedSubnetId: ${untrust.id}
* ```
*
* ## Import
* Palo Alto Next Generation Firewall Virtual Network Local Rulestacks can be imported using the `resource id`, e.g.
* ```sh
* $ pulumi import azure:paloalto/nextGenerationFirewallVirtualNetworkLocalRulestack:NextGenerationFirewallVirtualNetworkLocalRulestack example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/PaloAltoNetworks.Cloudngfw/firewalls/myVNetRulestackFW
* ```
*/
public class NextGenerationFirewallVirtualNetworkLocalRulestack internal constructor(
override val javaResource: com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack,
) : KotlinCustomResource(javaResource, NextGenerationFirewallVirtualNetworkLocalRulestackMapper) {
/**
* One or more `destination_nat` blocks as defined below.
*/
public val destinationNats:
Output>?
get() = javaResource.destinationNats().applyValue({ args0 ->
args0.map({ args0 ->
args0.map({ args0 ->
args0.let({ args0 ->
nextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatToKotlin(args0)
})
})
}).orElse(null)
})
/**
* A `dns_settings` block as defined below.
*/
public val dnsSettings: Output?
get() = javaResource.dnsSettings().applyValue({ args0 ->
args0.map({ args0 ->
args0.let({ args0 ->
nextGenerationFirewallVirtualNetworkLocalRulestackDnsSettingsToKotlin(args0)
})
}).orElse(null)
})
/**
* The name which should be used for this Palo Alto Next Generation Firewall Virtual Network Local Rulestack. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Local Rulestack to be created.
*/
public val name: Output
get() = javaResource.name().applyValue({ args0 -> args0 })
/**
* A `network_profile` block as defined below.
*/
public val networkProfile:
Output
get() = javaResource.networkProfile().applyValue({ args0 ->
args0.let({ args0 ->
nextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileToKotlin(args0)
})
})
/**
* The name of the Resource Group where the Palo Alto Next Generation Firewall Virtual Network Local Rulestack should exist. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Local Rulestack to be created.
*/
public val resourceGroupName: Output
get() = javaResource.resourceGroupName().applyValue({ args0 -> args0 })
/**
* The ID of the Local Rulestack which will be used to configure this Firewall Resource.
*/
public val rulestackId: Output
get() = javaResource.rulestackId().applyValue({ args0 -> args0 })
/**
* A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall Virtual Network Local Rulestack.
*/
public val tags: Output>?
get() = javaResource.tags().applyValue({ args0 ->
args0.map({ args0 ->
args0.map({ args0 ->
args0.key.to(args0.value)
}).toMap()
}).orElse(null)
})
}
public object NextGenerationFirewallVirtualNetworkLocalRulestackMapper :
ResourceMapper {
override fun supportsMappingOfType(javaResource: Resource): Boolean =
com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack::class == javaResource::class
override fun map(javaResource: Resource): NextGenerationFirewallVirtualNetworkLocalRulestack =
NextGenerationFirewallVirtualNetworkLocalRulestack(
javaResource as
com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack,
)
}
/**
* @see [NextGenerationFirewallVirtualNetworkLocalRulestack].
* @param name The _unique_ name of the resulting resource.
* @param block Builder for [NextGenerationFirewallVirtualNetworkLocalRulestack].
*/
public suspend fun nextGenerationFirewallVirtualNetworkLocalRulestack(
name: String,
block: suspend NextGenerationFirewallVirtualNetworkLocalRulestackResourceBuilder.() -> Unit,
): NextGenerationFirewallVirtualNetworkLocalRulestack {
val builder = NextGenerationFirewallVirtualNetworkLocalRulestackResourceBuilder()
builder.name(name)
block(builder)
return builder.build()
}
/**
* @see [NextGenerationFirewallVirtualNetworkLocalRulestack].
* @param name The _unique_ name of the resulting resource.
*/
public fun nextGenerationFirewallVirtualNetworkLocalRulestack(name: String): NextGenerationFirewallVirtualNetworkLocalRulestack {
val builder = NextGenerationFirewallVirtualNetworkLocalRulestackResourceBuilder()
builder.name(name)
return builder.build()
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy