com.pulumi.azure.paloalto.kotlin.NextGenerationFirewallVirtualNetworkLocalRulestackArgs.kt Maven / Gradle / Ivy
@file:Suppress("NAME_SHADOWING", "DEPRECATION")
package com.pulumi.azure.paloalto.kotlin
import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackArgs.builder
import com.pulumi.azure.paloalto.kotlin.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatArgs
import com.pulumi.azure.paloalto.kotlin.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatArgsBuilder
import com.pulumi.azure.paloalto.kotlin.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackDnsSettingsArgs
import com.pulumi.azure.paloalto.kotlin.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackDnsSettingsArgsBuilder
import com.pulumi.azure.paloalto.kotlin.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs
import com.pulumi.azure.paloalto.kotlin.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgsBuilder
import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiTagMarker
import com.pulumi.kotlin.applySuspend
import kotlin.Pair
import kotlin.String
import kotlin.Suppress
import kotlin.Unit
import kotlin.collections.List
import kotlin.collections.Map
import kotlin.jvm.JvmName
/**
* Manages a Palo Alto Next Generation Firewall Deployed in a Virtual Network and configured via a Local Rulestack.
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as azure from "@pulumi/azure";
* const example = new azure.core.ResourceGroup("example", {
* name: "example-resource-group",
* location: "westeurope",
* });
* const examplePublicIp = new azure.network.PublicIp("example", {
* name: "example-public-ip",
* location: example.location,
* resourceGroupName: example.name,
* allocationMethod: "Static",
* sku: "Standard",
* });
* const exampleNetworkSecurityGroup = new azure.network.NetworkSecurityGroup("example", {
* name: "example-nsg",
* location: test.location,
* resourceGroupName: test.name,
* });
* const exampleVirtualNetwork = new azure.network.VirtualNetwork("example", {
* name: "example-vnet",
* addressSpaces: ["10.0.0.0/16"],
* location: example.location,
* resourceGroupName: example.name,
* tags: {
* environment: "Production",
* },
* });
* const trust = new azure.network.Subnet("trust", {
* name: "example-trust-subnet",
* resourceGroupName: example.name,
* virtualNetworkName: exampleVirtualNetwork.name,
* addressPrefixes: ["10.0.1.0/24"],
* delegations: [{
* name: "trusted",
* serviceDelegation: {
* name: "PaloAltoNetworks.Cloudngfw/firewalls",
* actions: ["Microsoft.Network/virtualNetworks/subnets/join/action"],
* },
* }],
* });
* const trustSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("trust", {
* subnetId: trust.id,
* networkSecurityGroupId: exampleNetworkSecurityGroup.id,
* });
* const untrust = new azure.network.Subnet("untrust", {
* name: "example-untrust-subnet",
* resourceGroupName: example.name,
* virtualNetworkName: exampleVirtualNetwork.name,
* addressPrefixes: ["10.0.2.0/24"],
* delegations: [{
* name: "untrusted",
* serviceDelegation: {
* name: "PaloAltoNetworks.Cloudngfw/firewalls",
* actions: ["Microsoft.Network/virtualNetworks/subnets/join/action"],
* },
* }],
* });
* const untrustSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("untrust", {
* subnetId: untrust.id,
* networkSecurityGroupId: exampleNetworkSecurityGroup.id,
* });
* const exampleLocalRulestack = new azure.paloalto.LocalRulestack("example", {
* name: "example-rulestack",
* resourceGroupName: example.name,
* location: example.locatio,
* });
* const exampleLocalRulestackRule = new azure.paloalto.LocalRulestackRule("example", {
* name: "example-rulestack-rule",
* rulestackId: exampleLocalRulestack.id,
* priority: 1001,
* action: "Allow",
* applications: ["any"],
* destination: {
* cidrs: ["any"],
* },
* source: {
* cidrs: ["any"],
* },
* });
* const exampleNextGenerationFirewallVirtualNetworkLocalRulestack = new azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack("example", {
* name: "example-ngfwvn",
* resourceGroupName: example.name,
* rulestackId: exampleLocalRulestack.id,
* networkProfile: {
* publicIpAddressIds: [examplePublicIp.id],
* vnetConfiguration: {
* virtualNetworkId: exampleVirtualNetwork.id,
* trustedSubnetId: trust.id,
* untrustedSubnetId: untrust.id,
* },
* },
* });
* ```
* ```python
* import pulumi
* import pulumi_azure as azure
* example = azure.core.ResourceGroup("example",
* name="example-resource-group",
* location="westeurope")
* example_public_ip = azure.network.PublicIp("example",
* name="example-public-ip",
* location=example.location,
* resource_group_name=example.name,
* allocation_method="Static",
* sku="Standard")
* example_network_security_group = azure.network.NetworkSecurityGroup("example",
* name="example-nsg",
* location=test["location"],
* resource_group_name=test["name"])
* example_virtual_network = azure.network.VirtualNetwork("example",
* name="example-vnet",
* address_spaces=["10.0.0.0/16"],
* location=example.location,
* resource_group_name=example.name,
* tags={
* "environment": "Production",
* })
* trust = azure.network.Subnet("trust",
* name="example-trust-subnet",
* resource_group_name=example.name,
* virtual_network_name=example_virtual_network.name,
* address_prefixes=["10.0.1.0/24"],
* delegations=[{
* "name": "trusted",
* "service_delegation": {
* "name": "PaloAltoNetworks.Cloudngfw/firewalls",
* "actions": ["Microsoft.Network/virtualNetworks/subnets/join/action"],
* },
* }])
* trust_subnet_network_security_group_association = azure.network.SubnetNetworkSecurityGroupAssociation("trust",
* subnet_id=trust.id,
* network_security_group_id=example_network_security_group.id)
* untrust = azure.network.Subnet("untrust",
* name="example-untrust-subnet",
* resource_group_name=example.name,
* virtual_network_name=example_virtual_network.name,
* address_prefixes=["10.0.2.0/24"],
* delegations=[{
* "name": "untrusted",
* "service_delegation": {
* "name": "PaloAltoNetworks.Cloudngfw/firewalls",
* "actions": ["Microsoft.Network/virtualNetworks/subnets/join/action"],
* },
* }])
* untrust_subnet_network_security_group_association = azure.network.SubnetNetworkSecurityGroupAssociation("untrust",
* subnet_id=untrust.id,
* network_security_group_id=example_network_security_group.id)
* example_local_rulestack = azure.paloalto.LocalRulestack("example",
* name="example-rulestack",
* resource_group_name=example.name,
* location=example.locatio)
* example_local_rulestack_rule = azure.paloalto.LocalRulestackRule("example",
* name="example-rulestack-rule",
* rulestack_id=example_local_rulestack.id,
* priority=1001,
* action="Allow",
* applications=["any"],
* destination={
* "cidrs": ["any"],
* },
* source={
* "cidrs": ["any"],
* })
* example_next_generation_firewall_virtual_network_local_rulestack = azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack("example",
* name="example-ngfwvn",
* resource_group_name=example.name,
* rulestack_id=example_local_rulestack.id,
* network_profile={
* "public_ip_address_ids": [example_public_ip.id],
* "vnet_configuration": {
* "virtual_network_id": example_virtual_network.id,
* "trusted_subnet_id": trust.id,
* "untrusted_subnet_id": untrust.id,
* },
* })
* ```
* ```csharp
* using System.Collections.Generic;
* using System.Linq;
* using Pulumi;
* using Azure = Pulumi.Azure;
* return await Deployment.RunAsync(() =>
* {
* var example = new Azure.Core.ResourceGroup("example", new()
* {
* Name = "example-resource-group",
* Location = "westeurope",
* });
* var examplePublicIp = new Azure.Network.PublicIp("example", new()
* {
* Name = "example-public-ip",
* Location = example.Location,
* ResourceGroupName = example.Name,
* AllocationMethod = "Static",
* Sku = "Standard",
* });
* var exampleNetworkSecurityGroup = new Azure.Network.NetworkSecurityGroup("example", new()
* {
* Name = "example-nsg",
* Location = test.Location,
* ResourceGroupName = test.Name,
* });
* var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("example", new()
* {
* Name = "example-vnet",
* AddressSpaces = new[]
* {
* "10.0.0.0/16",
* },
* Location = example.Location,
* ResourceGroupName = example.Name,
* Tags =
* {
* { "environment", "Production" },
* },
* });
* var trust = new Azure.Network.Subnet("trust", new()
* {
* Name = "example-trust-subnet",
* ResourceGroupName = example.Name,
* VirtualNetworkName = exampleVirtualNetwork.Name,
* AddressPrefixes = new[]
* {
* "10.0.1.0/24",
* },
* Delegations = new[]
* {
* new Azure.Network.Inputs.SubnetDelegationArgs
* {
* Name = "trusted",
* ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
* {
* Name = "PaloAltoNetworks.Cloudngfw/firewalls",
* Actions = new[]
* {
* "Microsoft.Network/virtualNetworks/subnets/join/action",
* },
* },
* },
* },
* });
* var trustSubnetNetworkSecurityGroupAssociation = new Azure.Network.SubnetNetworkSecurityGroupAssociation("trust", new()
* {
* SubnetId = trust.Id,
* NetworkSecurityGroupId = exampleNetworkSecurityGroup.Id,
* });
* var untrust = new Azure.Network.Subnet("untrust", new()
* {
* Name = "example-untrust-subnet",
* ResourceGroupName = example.Name,
* VirtualNetworkName = exampleVirtualNetwork.Name,
* AddressPrefixes = new[]
* {
* "10.0.2.0/24",
* },
* Delegations = new[]
* {
* new Azure.Network.Inputs.SubnetDelegationArgs
* {
* Name = "untrusted",
* ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
* {
* Name = "PaloAltoNetworks.Cloudngfw/firewalls",
* Actions = new[]
* {
* "Microsoft.Network/virtualNetworks/subnets/join/action",
* },
* },
* },
* },
* });
* var untrustSubnetNetworkSecurityGroupAssociation = new Azure.Network.SubnetNetworkSecurityGroupAssociation("untrust", new()
* {
* SubnetId = untrust.Id,
* NetworkSecurityGroupId = exampleNetworkSecurityGroup.Id,
* });
* var exampleLocalRulestack = new Azure.PaloAlto.LocalRulestack("example", new()
* {
* Name = "example-rulestack",
* ResourceGroupName = example.Name,
* Location = example.Locatio,
* });
* var exampleLocalRulestackRule = new Azure.PaloAlto.LocalRulestackRule("example", new()
* {
* Name = "example-rulestack-rule",
* RulestackId = exampleLocalRulestack.Id,
* Priority = 1001,
* Action = "Allow",
* Applications = new[]
* {
* "any",
* },
* Destination = new Azure.PaloAlto.Inputs.LocalRulestackRuleDestinationArgs
* {
* Cidrs = new[]
* {
* "any",
* },
* },
* Source = new Azure.PaloAlto.Inputs.LocalRulestackRuleSourceArgs
* {
* Cidrs = new[]
* {
* "any",
* },
* },
* });
* var exampleNextGenerationFirewallVirtualNetworkLocalRulestack = new Azure.PaloAlto.NextGenerationFirewallVirtualNetworkLocalRulestack("example", new()
* {
* Name = "example-ngfwvn",
* ResourceGroupName = example.Name,
* RulestackId = exampleLocalRulestack.Id,
* NetworkProfile = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs
* {
* PublicIpAddressIds = new[]
* {
* examplePublicIp.Id,
* },
* VnetConfiguration = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfigurationArgs
* {
* VirtualNetworkId = exampleVirtualNetwork.Id,
* TrustedSubnetId = trust.Id,
* UntrustedSubnetId = untrust.Id,
* },
* },
* });
* });
* ```
* ```go
* package main
* import (
* "github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
* "github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
* "github.com/pulumi/pulumi-azure/sdk/v5/go/azure/paloalto"
* "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
* )
* func main() {
* pulumi.Run(func(ctx *pulumi.Context) error {
* example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
* Name: pulumi.String("example-resource-group"),
* Location: pulumi.String("westeurope"),
* })
* if err != nil {
* return err
* }
* examplePublicIp, err := network.NewPublicIp(ctx, "example", &network.PublicIpArgs{
* Name: pulumi.String("example-public-ip"),
* Location: example.Location,
* ResourceGroupName: example.Name,
* AllocationMethod: pulumi.String("Static"),
* Sku: pulumi.String("Standard"),
* })
* if err != nil {
* return err
* }
* exampleNetworkSecurityGroup, err := network.NewNetworkSecurityGroup(ctx, "example", &network.NetworkSecurityGroupArgs{
* Name: pulumi.String("example-nsg"),
* Location: pulumi.Any(test.Location),
* ResourceGroupName: pulumi.Any(test.Name),
* })
* if err != nil {
* return err
* }
* exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "example", &network.VirtualNetworkArgs{
* Name: pulumi.String("example-vnet"),
* AddressSpaces: pulumi.StringArray{
* pulumi.String("10.0.0.0/16"),
* },
* Location: example.Location,
* ResourceGroupName: example.Name,
* Tags: pulumi.StringMap{
* "environment": pulumi.String("Production"),
* },
* })
* if err != nil {
* return err
* }
* trust, err := network.NewSubnet(ctx, "trust", &network.SubnetArgs{
* Name: pulumi.String("example-trust-subnet"),
* ResourceGroupName: example.Name,
* VirtualNetworkName: exampleVirtualNetwork.Name,
* AddressPrefixes: pulumi.StringArray{
* pulumi.String("10.0.1.0/24"),
* },
* Delegations: network.SubnetDelegationArray{
* &network.SubnetDelegationArgs{
* Name: pulumi.String("trusted"),
* ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
* Name: pulumi.String("PaloAltoNetworks.Cloudngfw/firewalls"),
* Actions: pulumi.StringArray{
* pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
* },
* },
* },
* },
* })
* if err != nil {
* return err
* }
* _, err = network.NewSubnetNetworkSecurityGroupAssociation(ctx, "trust", &network.SubnetNetworkSecurityGroupAssociationArgs{
* SubnetId: trust.ID(),
* NetworkSecurityGroupId: exampleNetworkSecurityGroup.ID(),
* })
* if err != nil {
* return err
* }
* untrust, err := network.NewSubnet(ctx, "untrust", &network.SubnetArgs{
* Name: pulumi.String("example-untrust-subnet"),
* ResourceGroupName: example.Name,
* VirtualNetworkName: exampleVirtualNetwork.Name,
* AddressPrefixes: pulumi.StringArray{
* pulumi.String("10.0.2.0/24"),
* },
* Delegations: network.SubnetDelegationArray{
* &network.SubnetDelegationArgs{
* Name: pulumi.String("untrusted"),
* ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
* Name: pulumi.String("PaloAltoNetworks.Cloudngfw/firewalls"),
* Actions: pulumi.StringArray{
* pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
* },
* },
* },
* },
* })
* if err != nil {
* return err
* }
* _, err = network.NewSubnetNetworkSecurityGroupAssociation(ctx, "untrust", &network.SubnetNetworkSecurityGroupAssociationArgs{
* SubnetId: untrust.ID(),
* NetworkSecurityGroupId: exampleNetworkSecurityGroup.ID(),
* })
* if err != nil {
* return err
* }
* exampleLocalRulestack, err := paloalto.NewLocalRulestack(ctx, "example", &paloalto.LocalRulestackArgs{
* Name: pulumi.String("example-rulestack"),
* ResourceGroupName: example.Name,
* Location: example.Locatio,
* })
* if err != nil {
* return err
* }
* _, err = paloalto.NewLocalRulestackRule(ctx, "example", &paloalto.LocalRulestackRuleArgs{
* Name: pulumi.String("example-rulestack-rule"),
* RulestackId: exampleLocalRulestack.ID(),
* Priority: pulumi.Int(1001),
* Action: pulumi.String("Allow"),
* Applications: pulumi.StringArray{
* pulumi.String("any"),
* },
* Destination: &paloalto.LocalRulestackRuleDestinationArgs{
* Cidrs: pulumi.StringArray{
* pulumi.String("any"),
* },
* },
* Source: &paloalto.LocalRulestackRuleSourceArgs{
* Cidrs: pulumi.StringArray{
* pulumi.String("any"),
* },
* },
* })
* if err != nil {
* return err
* }
* _, err = paloalto.NewNextGenerationFirewallVirtualNetworkLocalRulestack(ctx, "example", &paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackArgs{
* Name: pulumi.String("example-ngfwvn"),
* ResourceGroupName: example.Name,
* RulestackId: exampleLocalRulestack.ID(),
* NetworkProfile: &paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs{
* PublicIpAddressIds: pulumi.StringArray{
* examplePublicIp.ID(),
* },
* VnetConfiguration: &paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfigurationArgs{
* VirtualNetworkId: exampleVirtualNetwork.ID(),
* TrustedSubnetId: trust.ID(),
* UntrustedSubnetId: untrust.ID(),
* },
* },
* })
* if err != nil {
* return err
* }
* return nil
* })
* }
* ```
* ```java
* package generated_program;
* import com.pulumi.Context;
* import com.pulumi.Pulumi;
* import com.pulumi.core.Output;
* import com.pulumi.azure.core.ResourceGroup;
* import com.pulumi.azure.core.ResourceGroupArgs;
* import com.pulumi.azure.network.PublicIp;
* import com.pulumi.azure.network.PublicIpArgs;
* import com.pulumi.azure.network.NetworkSecurityGroup;
* import com.pulumi.azure.network.NetworkSecurityGroupArgs;
* import com.pulumi.azure.network.VirtualNetwork;
* import com.pulumi.azure.network.VirtualNetworkArgs;
* import com.pulumi.azure.network.Subnet;
* import com.pulumi.azure.network.SubnetArgs;
* import com.pulumi.azure.network.inputs.SubnetDelegationArgs;
* import com.pulumi.azure.network.inputs.SubnetDelegationServiceDelegationArgs;
* import com.pulumi.azure.network.SubnetNetworkSecurityGroupAssociation;
* import com.pulumi.azure.network.SubnetNetworkSecurityGroupAssociationArgs;
* import com.pulumi.azure.paloalto.LocalRulestack;
* import com.pulumi.azure.paloalto.LocalRulestackArgs;
* import com.pulumi.azure.paloalto.LocalRulestackRule;
* import com.pulumi.azure.paloalto.LocalRulestackRuleArgs;
* import com.pulumi.azure.paloalto.inputs.LocalRulestackRuleDestinationArgs;
* import com.pulumi.azure.paloalto.inputs.LocalRulestackRuleSourceArgs;
* import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestack;
* import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackArgs;
* import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs;
* import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfigurationArgs;
* import java.util.List;
* import java.util.ArrayList;
* import java.util.Map;
* import java.io.File;
* import java.nio.file.Files;
* import java.nio.file.Paths;
* public class App {
* public static void main(String[] args) {
* Pulumi.run(App::stack);
* }
* public static void stack(Context ctx) {
* var example = new ResourceGroup("example", ResourceGroupArgs.builder()
* .name("example-resource-group")
* .location("westeurope")
* .build());
* var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()
* .name("example-public-ip")
* .location(example.location())
* .resourceGroupName(example.name())
* .allocationMethod("Static")
* .sku("Standard")
* .build());
* var exampleNetworkSecurityGroup = new NetworkSecurityGroup("exampleNetworkSecurityGroup", NetworkSecurityGroupArgs.builder()
* .name("example-nsg")
* .location(test.location())
* .resourceGroupName(test.name())
* .build());
* var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()
* .name("example-vnet")
* .addressSpaces("10.0.0.0/16")
* .location(example.location())
* .resourceGroupName(example.name())
* .tags(Map.of("environment", "Production"))
* .build());
* var trust = new Subnet("trust", SubnetArgs.builder()
* .name("example-trust-subnet")
* .resourceGroupName(example.name())
* .virtualNetworkName(exampleVirtualNetwork.name())
* .addressPrefixes("10.0.1.0/24")
* .delegations(SubnetDelegationArgs.builder()
* .name("trusted")
* .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
* .name("PaloAltoNetworks.Cloudngfw/firewalls")
* .actions("Microsoft.Network/virtualNetworks/subnets/join/action")
* .build())
* .build())
* .build());
* var trustSubnetNetworkSecurityGroupAssociation = new SubnetNetworkSecurityGroupAssociation("trustSubnetNetworkSecurityGroupAssociation", SubnetNetworkSecurityGroupAssociationArgs.builder()
* .subnetId(trust.id())
* .networkSecurityGroupId(exampleNetworkSecurityGroup.id())
* .build());
* var untrust = new Subnet("untrust", SubnetArgs.builder()
* .name("example-untrust-subnet")
* .resourceGroupName(example.name())
* .virtualNetworkName(exampleVirtualNetwork.name())
* .addressPrefixes("10.0.2.0/24")
* .delegations(SubnetDelegationArgs.builder()
* .name("untrusted")
* .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
* .name("PaloAltoNetworks.Cloudngfw/firewalls")
* .actions("Microsoft.Network/virtualNetworks/subnets/join/action")
* .build())
* .build())
* .build());
* var untrustSubnetNetworkSecurityGroupAssociation = new SubnetNetworkSecurityGroupAssociation("untrustSubnetNetworkSecurityGroupAssociation", SubnetNetworkSecurityGroupAssociationArgs.builder()
* .subnetId(untrust.id())
* .networkSecurityGroupId(exampleNetworkSecurityGroup.id())
* .build());
* var exampleLocalRulestack = new LocalRulestack("exampleLocalRulestack", LocalRulestackArgs.builder()
* .name("example-rulestack")
* .resourceGroupName(example.name())
* .location(example.locatio())
* .build());
* var exampleLocalRulestackRule = new LocalRulestackRule("exampleLocalRulestackRule", LocalRulestackRuleArgs.builder()
* .name("example-rulestack-rule")
* .rulestackId(exampleLocalRulestack.id())
* .priority(1001)
* .action("Allow")
* .applications("any")
* .destination(LocalRulestackRuleDestinationArgs.builder()
* .cidrs("any")
* .build())
* .source(LocalRulestackRuleSourceArgs.builder()
* .cidrs("any")
* .build())
* .build());
* var exampleNextGenerationFirewallVirtualNetworkLocalRulestack = new NextGenerationFirewallVirtualNetworkLocalRulestack("exampleNextGenerationFirewallVirtualNetworkLocalRulestack", NextGenerationFirewallVirtualNetworkLocalRulestackArgs.builder()
* .name("example-ngfwvn")
* .resourceGroupName(example.name())
* .rulestackId(exampleLocalRulestack.id())
* .networkProfile(NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs.builder()
* .publicIpAddressIds(examplePublicIp.id())
* .vnetConfiguration(NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfigurationArgs.builder()
* .virtualNetworkId(exampleVirtualNetwork.id())
* .trustedSubnetId(trust.id())
* .untrustedSubnetId(untrust.id())
* .build())
* .build())
* .build());
* }
* }
* ```
* ```yaml
* resources:
* example:
* type: azure:core:ResourceGroup
* properties:
* name: example-resource-group
* location: westeurope
* examplePublicIp:
* type: azure:network:PublicIp
* name: example
* properties:
* name: example-public-ip
* location: ${example.location}
* resourceGroupName: ${example.name}
* allocationMethod: Static
* sku: Standard
* exampleNetworkSecurityGroup:
* type: azure:network:NetworkSecurityGroup
* name: example
* properties:
* name: example-nsg
* location: ${test.location}
* resourceGroupName: ${test.name}
* exampleVirtualNetwork:
* type: azure:network:VirtualNetwork
* name: example
* properties:
* name: example-vnet
* addressSpaces:
* - 10.0.0.0/16
* location: ${example.location}
* resourceGroupName: ${example.name}
* tags:
* environment: Production
* trust:
* type: azure:network:Subnet
* properties:
* name: example-trust-subnet
* resourceGroupName: ${example.name}
* virtualNetworkName: ${exampleVirtualNetwork.name}
* addressPrefixes:
* - 10.0.1.0/24
* delegations:
* - name: trusted
* serviceDelegation:
* name: PaloAltoNetworks.Cloudngfw/firewalls
* actions:
* - Microsoft.Network/virtualNetworks/subnets/join/action
* trustSubnetNetworkSecurityGroupAssociation:
* type: azure:network:SubnetNetworkSecurityGroupAssociation
* name: trust
* properties:
* subnetId: ${trust.id}
* networkSecurityGroupId: ${exampleNetworkSecurityGroup.id}
* untrust:
* type: azure:network:Subnet
* properties:
* name: example-untrust-subnet
* resourceGroupName: ${example.name}
* virtualNetworkName: ${exampleVirtualNetwork.name}
* addressPrefixes:
* - 10.0.2.0/24
* delegations:
* - name: untrusted
* serviceDelegation:
* name: PaloAltoNetworks.Cloudngfw/firewalls
* actions:
* - Microsoft.Network/virtualNetworks/subnets/join/action
* untrustSubnetNetworkSecurityGroupAssociation:
* type: azure:network:SubnetNetworkSecurityGroupAssociation
* name: untrust
* properties:
* subnetId: ${untrust.id}
* networkSecurityGroupId: ${exampleNetworkSecurityGroup.id}
* exampleLocalRulestack:
* type: azure:paloalto:LocalRulestack
* name: example
* properties:
* name: example-rulestack
* resourceGroupName: ${example.name}
* location: ${example.locatio}
* exampleLocalRulestackRule:
* type: azure:paloalto:LocalRulestackRule
* name: example
* properties:
* name: example-rulestack-rule
* rulestackId: ${exampleLocalRulestack.id}
* priority: 1001
* action: Allow
* applications:
* - any
* destination:
* cidrs:
* - any
* source:
* cidrs:
* - any
* exampleNextGenerationFirewallVirtualNetworkLocalRulestack:
* type: azure:paloalto:NextGenerationFirewallVirtualNetworkLocalRulestack
* name: example
* properties:
* name: example-ngfwvn
* resourceGroupName: ${example.name}
* rulestackId: ${exampleLocalRulestack.id}
* networkProfile:
* publicIpAddressIds:
* - ${examplePublicIp.id}
* vnetConfiguration:
* virtualNetworkId: ${exampleVirtualNetwork.id}
* trustedSubnetId: ${trust.id}
* untrustedSubnetId: ${untrust.id}
* ```
*
* ## Import
* Palo Alto Next Generation Firewall Virtual Network Local Rulestacks can be imported using the `resource id`, e.g.
* ```sh
* $ pulumi import azure:paloalto/nextGenerationFirewallVirtualNetworkLocalRulestack:NextGenerationFirewallVirtualNetworkLocalRulestack example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/PaloAltoNetworks.Cloudngfw/firewalls/myVNetRulestackFW
* ```
* @property destinationNats One or more `destination_nat` blocks as defined below.
* @property dnsSettings A `dns_settings` block as defined below.
* @property name The name which should be used for this Palo Alto Next Generation Firewall Virtual Network Local Rulestack. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Local Rulestack to be created.
* @property networkProfile A `network_profile` block as defined below.
* @property resourceGroupName The name of the Resource Group where the Palo Alto Next Generation Firewall Virtual Network Local Rulestack should exist. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Local Rulestack to be created.
* @property rulestackId The ID of the Local Rulestack which will be used to configure this Firewall Resource.
* @property tags A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall Virtual Network Local Rulestack.
*/
public data class NextGenerationFirewallVirtualNetworkLocalRulestackArgs(
public val destinationNats: Output>? = null,
public val dnsSettings: Output? =
null,
public val name: Output? = null,
public val networkProfile: Output? = null,
public val resourceGroupName: Output? = null,
public val rulestackId: Output? = null,
public val tags: Output>? = null,
) :
ConvertibleToJava {
override fun toJava(): com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackArgs =
com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackArgs.builder()
.destinationNats(
destinationNats?.applyValue({ args0 ->
args0.map({ args0 ->
args0.let({ args0 ->
args0.toJava()
})
})
}),
)
.dnsSettings(dnsSettings?.applyValue({ args0 -> args0.let({ args0 -> args0.toJava() }) }))
.name(name?.applyValue({ args0 -> args0 }))
.networkProfile(networkProfile?.applyValue({ args0 -> args0.let({ args0 -> args0.toJava() }) }))
.resourceGroupName(resourceGroupName?.applyValue({ args0 -> args0 }))
.rulestackId(rulestackId?.applyValue({ args0 -> args0 }))
.tags(
tags?.applyValue({ args0 ->
args0.map({ args0 ->
args0.key.to(args0.value)
}).toMap()
}),
).build()
}
/**
* Builder for [NextGenerationFirewallVirtualNetworkLocalRulestackArgs].
*/
@PulumiTagMarker
public class NextGenerationFirewallVirtualNetworkLocalRulestackArgsBuilder internal constructor() {
private var destinationNats:
Output>? = null
private var dnsSettings:
Output? = null
private var name: Output? = null
private var networkProfile:
Output? = null
private var resourceGroupName: Output? = null
private var rulestackId: Output? = null
private var tags: Output>? = null
/**
* @param value One or more `destination_nat` blocks as defined below.
*/
@JvmName("rlbdfqtrfspqepxu")
public suspend fun destinationNats(`value`: Output>) {
this.destinationNats = value
}
@JvmName("xehcqlspjipatwjo")
public suspend fun destinationNats(vararg values: Output) {
this.destinationNats = Output.all(values.asList())
}
/**
* @param values One or more `destination_nat` blocks as defined below.
*/
@JvmName("hbfmrgmkddsrggmp")
public suspend fun destinationNats(values: List>) {
this.destinationNats = Output.all(values)
}
/**
* @param value A `dns_settings` block as defined below.
*/
@JvmName("algxvmachdadcyqc")
public suspend fun dnsSettings(`value`: Output) {
this.dnsSettings = value
}
/**
* @param value The name which should be used for this Palo Alto Next Generation Firewall Virtual Network Local Rulestack. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Local Rulestack to be created.
*/
@JvmName("tpcgrejosbhvslav")
public suspend fun name(`value`: Output) {
this.name = value
}
/**
* @param value A `network_profile` block as defined below.
*/
@JvmName("ibcsxyakisjdumrp")
public suspend fun networkProfile(`value`: Output) {
this.networkProfile = value
}
/**
* @param value The name of the Resource Group where the Palo Alto Next Generation Firewall Virtual Network Local Rulestack should exist. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Local Rulestack to be created.
*/
@JvmName("cvxugroylcftjqft")
public suspend fun resourceGroupName(`value`: Output) {
this.resourceGroupName = value
}
/**
* @param value The ID of the Local Rulestack which will be used to configure this Firewall Resource.
*/
@JvmName("ooaaebvwedqdplqd")
public suspend fun rulestackId(`value`: Output) {
this.rulestackId = value
}
/**
* @param value A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall Virtual Network Local Rulestack.
*/
@JvmName("cxuhdgkoutuprxpb")
public suspend fun tags(`value`: Output>) {
this.tags = value
}
/**
* @param value One or more `destination_nat` blocks as defined below.
*/
@JvmName("qtivoadcvepkdlih")
public suspend fun destinationNats(`value`: List?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.destinationNats = mapped
}
/**
* @param argument One or more `destination_nat` blocks as defined below.
*/
@JvmName("vvjqhmuvkojtrvmq")
public suspend fun destinationNats(argument: List Unit>) {
val toBeMapped = argument.toList().map {
NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatArgsBuilder().applySuspend {
it()
}.build()
}
val mapped = of(toBeMapped)
this.destinationNats = mapped
}
/**
* @param argument One or more `destination_nat` blocks as defined below.
*/
@JvmName("gggocoteaskxgqph")
public suspend fun destinationNats(vararg argument: suspend NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatArgsBuilder.() -> Unit) {
val toBeMapped = argument.toList().map {
NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatArgsBuilder().applySuspend {
it()
}.build()
}
val mapped = of(toBeMapped)
this.destinationNats = mapped
}
/**
* @param argument One or more `destination_nat` blocks as defined below.
*/
@JvmName("qwqavkcaqfiuayyy")
public suspend fun destinationNats(argument: suspend NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatArgsBuilder.() -> Unit) {
val toBeMapped =
listOf(
NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatArgsBuilder().applySuspend
{ argument() }.build(),
)
val mapped = of(toBeMapped)
this.destinationNats = mapped
}
/**
* @param values One or more `destination_nat` blocks as defined below.
*/
@JvmName("rmpilmkhgsujwoty")
public suspend fun destinationNats(vararg values: NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatArgs) {
val toBeMapped = values.toList()
val mapped = toBeMapped.let({ args0 -> of(args0) })
this.destinationNats = mapped
}
/**
* @param value A `dns_settings` block as defined below.
*/
@JvmName("jddoadfyvqqgcgnm")
public suspend fun dnsSettings(`value`: NextGenerationFirewallVirtualNetworkLocalRulestackDnsSettingsArgs?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.dnsSettings = mapped
}
/**
* @param argument A `dns_settings` block as defined below.
*/
@JvmName("tykmluogutbxakhd")
public suspend fun dnsSettings(argument: suspend NextGenerationFirewallVirtualNetworkLocalRulestackDnsSettingsArgsBuilder.() -> Unit) {
val toBeMapped =
NextGenerationFirewallVirtualNetworkLocalRulestackDnsSettingsArgsBuilder().applySuspend {
argument()
}.build()
val mapped = of(toBeMapped)
this.dnsSettings = mapped
}
/**
* @param value The name which should be used for this Palo Alto Next Generation Firewall Virtual Network Local Rulestack. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Local Rulestack to be created.
*/
@JvmName("xsdjtksgatfgvwqe")
public suspend fun name(`value`: String?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.name = mapped
}
/**
* @param value A `network_profile` block as defined below.
*/
@JvmName("wihvafjfpannpxlp")
public suspend fun networkProfile(`value`: NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgs?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.networkProfile = mapped
}
/**
* @param argument A `network_profile` block as defined below.
*/
@JvmName("dluxxfmgornccnav")
public suspend fun networkProfile(argument: suspend NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgsBuilder.() -> Unit) {
val toBeMapped =
NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileArgsBuilder().applySuspend {
argument()
}.build()
val mapped = of(toBeMapped)
this.networkProfile = mapped
}
/**
* @param value The name of the Resource Group where the Palo Alto Next Generation Firewall Virtual Network Local Rulestack should exist. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Local Rulestack to be created.
*/
@JvmName("oyspjkupkixbsxnd")
public suspend fun resourceGroupName(`value`: String?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.resourceGroupName = mapped
}
/**
* @param value The ID of the Local Rulestack which will be used to configure this Firewall Resource.
*/
@JvmName("ahxtckrykkpgdgpb")
public suspend fun rulestackId(`value`: String?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.rulestackId = mapped
}
/**
* @param value A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall Virtual Network Local Rulestack.
*/
@JvmName("lwijyhljmdktogrl")
public suspend fun tags(`value`: Map?) {
val toBeMapped = value
val mapped = toBeMapped?.let({ args0 -> of(args0) })
this.tags = mapped
}
/**
* @param values A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall Virtual Network Local Rulestack.
*/
@JvmName("sffdslnceeqxwxri")
public fun tags(vararg values: Pair) {
val toBeMapped = values.toMap()
val mapped = toBeMapped.let({ args0 -> of(args0) })
this.tags = mapped
}
internal fun build(): NextGenerationFirewallVirtualNetworkLocalRulestackArgs =
NextGenerationFirewallVirtualNetworkLocalRulestackArgs(
destinationNats = destinationNats,
dnsSettings = dnsSettings,
name = name,
networkProfile = networkProfile,
resourceGroupName = resourceGroupName,
rulestackId = rulestackId,
tags = tags,
)
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy