1. Packages
  2. Azure Classic
  3. API Docs
  4. network
  5. Firewall

We recommend using Azure Native.

Azure Classic v5.81.0 published on Monday, Jun 24, 2024 by Pulumi

azure.network.Firewall

Explore with Pulumi AI

azure logo

We recommend using Azure Native.

Azure Classic v5.81.0 published on Monday, Jun 24, 2024 by Pulumi

    Manages an Azure Firewall.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as azure from "@pulumi/azure";
    
    const example = new azure.core.ResourceGroup("example", {
        name: "example-resources",
        location: "West Europe",
    });
    const exampleVirtualNetwork = new azure.network.VirtualNetwork("example", {
        name: "testvnet",
        addressSpaces: ["10.0.0.0/16"],
        location: example.location,
        resourceGroupName: example.name,
    });
    const exampleSubnet = new azure.network.Subnet("example", {
        name: "AzureFirewallSubnet",
        resourceGroupName: example.name,
        virtualNetworkName: exampleVirtualNetwork.name,
        addressPrefixes: ["10.0.1.0/24"],
    });
    const examplePublicIp = new azure.network.PublicIp("example", {
        name: "testpip",
        location: example.location,
        resourceGroupName: example.name,
        allocationMethod: "Static",
        sku: "Standard",
    });
    const exampleFirewall = new azure.network.Firewall("example", {
        name: "testfirewall",
        location: example.location,
        resourceGroupName: example.name,
        skuName: "AZFW_VNet",
        skuTier: "Standard",
        ipConfigurations: [{
            name: "configuration",
            subnetId: exampleSubnet.id,
            publicIpAddressId: examplePublicIp.id,
        }],
    });
    
    import pulumi
    import pulumi_azure as azure
    
    example = azure.core.ResourceGroup("example",
        name="example-resources",
        location="West Europe")
    example_virtual_network = azure.network.VirtualNetwork("example",
        name="testvnet",
        address_spaces=["10.0.0.0/16"],
        location=example.location,
        resource_group_name=example.name)
    example_subnet = azure.network.Subnet("example",
        name="AzureFirewallSubnet",
        resource_group_name=example.name,
        virtual_network_name=example_virtual_network.name,
        address_prefixes=["10.0.1.0/24"])
    example_public_ip = azure.network.PublicIp("example",
        name="testpip",
        location=example.location,
        resource_group_name=example.name,
        allocation_method="Static",
        sku="Standard")
    example_firewall = azure.network.Firewall("example",
        name="testfirewall",
        location=example.location,
        resource_group_name=example.name,
        sku_name="AZFW_VNet",
        sku_tier="Standard",
        ip_configurations=[azure.network.FirewallIpConfigurationArgs(
            name="configuration",
            subnet_id=example_subnet.id,
            public_ip_address_id=example_public_ip.id,
        )])
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
    	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
    			Name:     pulumi.String("example-resources"),
    			Location: pulumi.String("West Europe"),
    		})
    		if err != nil {
    			return err
    		}
    		exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "example", &network.VirtualNetworkArgs{
    			Name: pulumi.String("testvnet"),
    			AddressSpaces: pulumi.StringArray{
    				pulumi.String("10.0.0.0/16"),
    			},
    			Location:          example.Location,
    			ResourceGroupName: example.Name,
    		})
    		if err != nil {
    			return err
    		}
    		exampleSubnet, err := network.NewSubnet(ctx, "example", &network.SubnetArgs{
    			Name:               pulumi.String("AzureFirewallSubnet"),
    			ResourceGroupName:  example.Name,
    			VirtualNetworkName: exampleVirtualNetwork.Name,
    			AddressPrefixes: pulumi.StringArray{
    				pulumi.String("10.0.1.0/24"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		examplePublicIp, err := network.NewPublicIp(ctx, "example", &network.PublicIpArgs{
    			Name:              pulumi.String("testpip"),
    			Location:          example.Location,
    			ResourceGroupName: example.Name,
    			AllocationMethod:  pulumi.String("Static"),
    			Sku:               pulumi.String("Standard"),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = network.NewFirewall(ctx, "example", &network.FirewallArgs{
    			Name:              pulumi.String("testfirewall"),
    			Location:          example.Location,
    			ResourceGroupName: example.Name,
    			SkuName:           pulumi.String("AZFW_VNet"),
    			SkuTier:           pulumi.String("Standard"),
    			IpConfigurations: network.FirewallIpConfigurationArray{
    				&network.FirewallIpConfigurationArgs{
    					Name:              pulumi.String("configuration"),
    					SubnetId:          exampleSubnet.ID(),
    					PublicIpAddressId: examplePublicIp.ID(),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Azure = Pulumi.Azure;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Azure.Core.ResourceGroup("example", new()
        {
            Name = "example-resources",
            Location = "West Europe",
        });
    
        var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("example", new()
        {
            Name = "testvnet",
            AddressSpaces = new[]
            {
                "10.0.0.0/16",
            },
            Location = example.Location,
            ResourceGroupName = example.Name,
        });
    
        var exampleSubnet = new Azure.Network.Subnet("example", new()
        {
            Name = "AzureFirewallSubnet",
            ResourceGroupName = example.Name,
            VirtualNetworkName = exampleVirtualNetwork.Name,
            AddressPrefixes = new[]
            {
                "10.0.1.0/24",
            },
        });
    
        var examplePublicIp = new Azure.Network.PublicIp("example", new()
        {
            Name = "testpip",
            Location = example.Location,
            ResourceGroupName = example.Name,
            AllocationMethod = "Static",
            Sku = "Standard",
        });
    
        var exampleFirewall = new Azure.Network.Firewall("example", new()
        {
            Name = "testfirewall",
            Location = example.Location,
            ResourceGroupName = example.Name,
            SkuName = "AZFW_VNet",
            SkuTier = "Standard",
            IpConfigurations = new[]
            {
                new Azure.Network.Inputs.FirewallIpConfigurationArgs
                {
                    Name = "configuration",
                    SubnetId = exampleSubnet.Id,
                    PublicIpAddressId = examplePublicIp.Id,
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azure.core.ResourceGroup;
    import com.pulumi.azure.core.ResourceGroupArgs;
    import com.pulumi.azure.network.VirtualNetwork;
    import com.pulumi.azure.network.VirtualNetworkArgs;
    import com.pulumi.azure.network.Subnet;
    import com.pulumi.azure.network.SubnetArgs;
    import com.pulumi.azure.network.PublicIp;
    import com.pulumi.azure.network.PublicIpArgs;
    import com.pulumi.azure.network.Firewall;
    import com.pulumi.azure.network.FirewallArgs;
    import com.pulumi.azure.network.inputs.FirewallIpConfigurationArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new ResourceGroup("example", ResourceGroupArgs.builder()
                .name("example-resources")
                .location("West Europe")
                .build());
    
            var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()
                .name("testvnet")
                .addressSpaces("10.0.0.0/16")
                .location(example.location())
                .resourceGroupName(example.name())
                .build());
    
            var exampleSubnet = new Subnet("exampleSubnet", SubnetArgs.builder()
                .name("AzureFirewallSubnet")
                .resourceGroupName(example.name())
                .virtualNetworkName(exampleVirtualNetwork.name())
                .addressPrefixes("10.0.1.0/24")
                .build());
    
            var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()
                .name("testpip")
                .location(example.location())
                .resourceGroupName(example.name())
                .allocationMethod("Static")
                .sku("Standard")
                .build());
    
            var exampleFirewall = new Firewall("exampleFirewall", FirewallArgs.builder()
                .name("testfirewall")
                .location(example.location())
                .resourceGroupName(example.name())
                .skuName("AZFW_VNet")
                .skuTier("Standard")
                .ipConfigurations(FirewallIpConfigurationArgs.builder()
                    .name("configuration")
                    .subnetId(exampleSubnet.id())
                    .publicIpAddressId(examplePublicIp.id())
                    .build())
                .build());
    
        }
    }
    
    resources:
      example:
        type: azure:core:ResourceGroup
        properties:
          name: example-resources
          location: West Europe
      exampleVirtualNetwork:
        type: azure:network:VirtualNetwork
        name: example
        properties:
          name: testvnet
          addressSpaces:
            - 10.0.0.0/16
          location: ${example.location}
          resourceGroupName: ${example.name}
      exampleSubnet:
        type: azure:network:Subnet
        name: example
        properties:
          name: AzureFirewallSubnet
          resourceGroupName: ${example.name}
          virtualNetworkName: ${exampleVirtualNetwork.name}
          addressPrefixes:
            - 10.0.1.0/24
      examplePublicIp:
        type: azure:network:PublicIp
        name: example
        properties:
          name: testpip
          location: ${example.location}
          resourceGroupName: ${example.name}
          allocationMethod: Static
          sku: Standard
      exampleFirewall:
        type: azure:network:Firewall
        name: example
        properties:
          name: testfirewall
          location: ${example.location}
          resourceGroupName: ${example.name}
          skuName: AZFW_VNet
          skuTier: Standard
          ipConfigurations:
            - name: configuration
              subnetId: ${exampleSubnet.id}
              publicIpAddressId: ${examplePublicIp.id}
    

    Create Firewall Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Firewall(name: string, args: FirewallArgs, opts?: CustomResourceOptions);
    @overload
    def Firewall(resource_name: str,
                 args: FirewallArgs,
                 opts: Optional[ResourceOptions] = None)
    
    @overload
    def Firewall(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 resource_group_name: Optional[str] = None,
                 sku_tier: Optional[str] = None,
                 sku_name: Optional[str] = None,
                 ip_configurations: Optional[Sequence[FirewallIpConfigurationArgs]] = None,
                 location: Optional[str] = None,
                 management_ip_configuration: Optional[FirewallManagementIpConfigurationArgs] = None,
                 name: Optional[str] = None,
                 private_ip_ranges: Optional[Sequence[str]] = None,
                 dns_proxy_enabled: Optional[bool] = None,
                 firewall_policy_id: Optional[str] = None,
                 dns_servers: Optional[Sequence[str]] = None,
                 tags: Optional[Mapping[str, str]] = None,
                 threat_intel_mode: Optional[str] = None,
                 virtual_hub: Optional[FirewallVirtualHubArgs] = None,
                 zones: Optional[Sequence[str]] = None)
    func NewFirewall(ctx *Context, name string, args FirewallArgs, opts ...ResourceOption) (*Firewall, error)
    public Firewall(string name, FirewallArgs args, CustomResourceOptions? opts = null)
    public Firewall(String name, FirewallArgs args)
    public Firewall(String name, FirewallArgs args, CustomResourceOptions options)
    
    type: azure:network:Firewall
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args FirewallArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FirewallArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FirewallArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FirewallArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FirewallArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var firewallResource = new Azure.Network.Firewall("firewallResource", new()
    {
        ResourceGroupName = "string",
        SkuTier = "string",
        SkuName = "string",
        IpConfigurations = new[]
        {
            new Azure.Network.Inputs.FirewallIpConfigurationArgs
            {
                Name = "string",
                PrivateIpAddress = "string",
                PublicIpAddressId = "string",
                SubnetId = "string",
            },
        },
        Location = "string",
        ManagementIpConfiguration = new Azure.Network.Inputs.FirewallManagementIpConfigurationArgs
        {
            Name = "string",
            PublicIpAddressId = "string",
            SubnetId = "string",
            PrivateIpAddress = "string",
        },
        Name = "string",
        PrivateIpRanges = new[]
        {
            "string",
        },
        DnsProxyEnabled = false,
        FirewallPolicyId = "string",
        DnsServers = new[]
        {
            "string",
        },
        Tags = 
        {
            { "string", "string" },
        },
        ThreatIntelMode = "string",
        VirtualHub = new Azure.Network.Inputs.FirewallVirtualHubArgs
        {
            VirtualHubId = "string",
            PrivateIpAddress = "string",
            PublicIpAddresses = new[]
            {
                "string",
            },
            PublicIpCount = 0,
        },
        Zones = new[]
        {
            "string",
        },
    });
    
    example, err := network.NewFirewall(ctx, "firewallResource", &network.FirewallArgs{
    	ResourceGroupName: pulumi.String("string"),
    	SkuTier:           pulumi.String("string"),
    	SkuName:           pulumi.String("string"),
    	IpConfigurations: network.FirewallIpConfigurationArray{
    		&network.FirewallIpConfigurationArgs{
    			Name:              pulumi.String("string"),
    			PrivateIpAddress:  pulumi.String("string"),
    			PublicIpAddressId: pulumi.String("string"),
    			SubnetId:          pulumi.String("string"),
    		},
    	},
    	Location: pulumi.String("string"),
    	ManagementIpConfiguration: &network.FirewallManagementIpConfigurationArgs{
    		Name:              pulumi.String("string"),
    		PublicIpAddressId: pulumi.String("string"),
    		SubnetId:          pulumi.String("string"),
    		PrivateIpAddress:  pulumi.String("string"),
    	},
    	Name: pulumi.String("string"),
    	PrivateIpRanges: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	DnsProxyEnabled:  pulumi.Bool(false),
    	FirewallPolicyId: pulumi.String("string"),
    	DnsServers: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Tags: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	ThreatIntelMode: pulumi.String("string"),
    	VirtualHub: &network.FirewallVirtualHubArgs{
    		VirtualHubId:     pulumi.String("string"),
    		PrivateIpAddress: pulumi.String("string"),
    		PublicIpAddresses: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    		PublicIpCount: pulumi.Int(0),
    	},
    	Zones: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    })
    
    var firewallResource = new Firewall("firewallResource", FirewallArgs.builder()
        .resourceGroupName("string")
        .skuTier("string")
        .skuName("string")
        .ipConfigurations(FirewallIpConfigurationArgs.builder()
            .name("string")
            .privateIpAddress("string")
            .publicIpAddressId("string")
            .subnetId("string")
            .build())
        .location("string")
        .managementIpConfiguration(FirewallManagementIpConfigurationArgs.builder()
            .name("string")
            .publicIpAddressId("string")
            .subnetId("string")
            .privateIpAddress("string")
            .build())
        .name("string")
        .privateIpRanges("string")
        .dnsProxyEnabled(false)
        .firewallPolicyId("string")
        .dnsServers("string")
        .tags(Map.of("string", "string"))
        .threatIntelMode("string")
        .virtualHub(FirewallVirtualHubArgs.builder()
            .virtualHubId("string")
            .privateIpAddress("string")
            .publicIpAddresses("string")
            .publicIpCount(0)
            .build())
        .zones("string")
        .build());
    
    firewall_resource = azure.network.Firewall("firewallResource",
        resource_group_name="string",
        sku_tier="string",
        sku_name="string",
        ip_configurations=[azure.network.FirewallIpConfigurationArgs(
            name="string",
            private_ip_address="string",
            public_ip_address_id="string",
            subnet_id="string",
        )],
        location="string",
        management_ip_configuration=azure.network.FirewallManagementIpConfigurationArgs(
            name="string",
            public_ip_address_id="string",
            subnet_id="string",
            private_ip_address="string",
        ),
        name="string",
        private_ip_ranges=["string"],
        dns_proxy_enabled=False,
        firewall_policy_id="string",
        dns_servers=["string"],
        tags={
            "string": "string",
        },
        threat_intel_mode="string",
        virtual_hub=azure.network.FirewallVirtualHubArgs(
            virtual_hub_id="string",
            private_ip_address="string",
            public_ip_addresses=["string"],
            public_ip_count=0,
        ),
        zones=["string"])
    
    const firewallResource = new azure.network.Firewall("firewallResource", {
        resourceGroupName: "string",
        skuTier: "string",
        skuName: "string",
        ipConfigurations: [{
            name: "string",
            privateIpAddress: "string",
            publicIpAddressId: "string",
            subnetId: "string",
        }],
        location: "string",
        managementIpConfiguration: {
            name: "string",
            publicIpAddressId: "string",
            subnetId: "string",
            privateIpAddress: "string",
        },
        name: "string",
        privateIpRanges: ["string"],
        dnsProxyEnabled: false,
        firewallPolicyId: "string",
        dnsServers: ["string"],
        tags: {
            string: "string",
        },
        threatIntelMode: "string",
        virtualHub: {
            virtualHubId: "string",
            privateIpAddress: "string",
            publicIpAddresses: ["string"],
            publicIpCount: 0,
        },
        zones: ["string"],
    });
    
    type: azure:network:Firewall
    properties:
        dnsProxyEnabled: false
        dnsServers:
            - string
        firewallPolicyId: string
        ipConfigurations:
            - name: string
              privateIpAddress: string
              publicIpAddressId: string
              subnetId: string
        location: string
        managementIpConfiguration:
            name: string
            privateIpAddress: string
            publicIpAddressId: string
            subnetId: string
        name: string
        privateIpRanges:
            - string
        resourceGroupName: string
        skuName: string
        skuTier: string
        tags:
            string: string
        threatIntelMode: string
        virtualHub:
            privateIpAddress: string
            publicIpAddresses:
                - string
            publicIpCount: 0
            virtualHubId: string
        zones:
            - string
    

    Firewall Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Firewall resource accepts the following input properties:

    ResourceGroupName string
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    SkuName string
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    SkuTier string
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    DnsProxyEnabled bool
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    DnsServers List<string>
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    FirewallPolicyId string
    The ID of the Firewall Policy applied to this Firewall.
    IpConfigurations List<FirewallIpConfiguration>
    An ip_configuration block as documented below.
    Location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    ManagementIpConfiguration FirewallManagementIpConfiguration
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    Name string
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    PrivateIpRanges List<string>
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    Tags Dictionary<string, string>
    A mapping of tags to assign to the resource.
    ThreatIntelMode string
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    VirtualHub FirewallVirtualHub
    A virtual_hub block as documented below.
    Zones List<string>

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    ResourceGroupName string
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    SkuName string
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    SkuTier string
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    DnsProxyEnabled bool
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    DnsServers []string
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    FirewallPolicyId string
    The ID of the Firewall Policy applied to this Firewall.
    IpConfigurations []FirewallIpConfigurationArgs
    An ip_configuration block as documented below.
    Location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    ManagementIpConfiguration FirewallManagementIpConfigurationArgs
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    Name string
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    PrivateIpRanges []string
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    Tags map[string]string
    A mapping of tags to assign to the resource.
    ThreatIntelMode string
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    VirtualHub FirewallVirtualHubArgs
    A virtual_hub block as documented below.
    Zones []string

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    resourceGroupName String
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    skuName String
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    skuTier String
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    dnsProxyEnabled Boolean
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    dnsServers List<String>
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    firewallPolicyId String
    The ID of the Firewall Policy applied to this Firewall.
    ipConfigurations List<FirewallIpConfiguration>
    An ip_configuration block as documented below.
    location String
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    managementIpConfiguration FirewallManagementIpConfiguration
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    name String
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    privateIpRanges List<String>
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    tags Map<String,String>
    A mapping of tags to assign to the resource.
    threatIntelMode String
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    virtualHub FirewallVirtualHub
    A virtual_hub block as documented below.
    zones List<String>

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    resourceGroupName string
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    skuName string
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    skuTier string
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    dnsProxyEnabled boolean
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    dnsServers string[]
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    firewallPolicyId string
    The ID of the Firewall Policy applied to this Firewall.
    ipConfigurations FirewallIpConfiguration[]
    An ip_configuration block as documented below.
    location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    managementIpConfiguration FirewallManagementIpConfiguration
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    name string
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    privateIpRanges string[]
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    tags {[key: string]: string}
    A mapping of tags to assign to the resource.
    threatIntelMode string
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    virtualHub FirewallVirtualHub
    A virtual_hub block as documented below.
    zones string[]

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    resource_group_name str
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    sku_name str
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    sku_tier str
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    dns_proxy_enabled bool
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    dns_servers Sequence[str]
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    firewall_policy_id str
    The ID of the Firewall Policy applied to this Firewall.
    ip_configurations Sequence[FirewallIpConfigurationArgs]
    An ip_configuration block as documented below.
    location str
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    management_ip_configuration FirewallManagementIpConfigurationArgs
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    name str
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    private_ip_ranges Sequence[str]
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    tags Mapping[str, str]
    A mapping of tags to assign to the resource.
    threat_intel_mode str
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    virtual_hub FirewallVirtualHubArgs
    A virtual_hub block as documented below.
    zones Sequence[str]

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    resourceGroupName String
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    skuName String
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    skuTier String
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    dnsProxyEnabled Boolean
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    dnsServers List<String>
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    firewallPolicyId String
    The ID of the Firewall Policy applied to this Firewall.
    ipConfigurations List<Property Map>
    An ip_configuration block as documented below.
    location String
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    managementIpConfiguration Property Map
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    name String
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    privateIpRanges List<String>
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    tags Map<String>
    A mapping of tags to assign to the resource.
    threatIntelMode String
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    virtualHub Property Map
    A virtual_hub block as documented below.
    zones List<String>

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Firewall resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Firewall Resource

    Get an existing Firewall resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: FirewallState, opts?: CustomResourceOptions): Firewall
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            dns_proxy_enabled: Optional[bool] = None,
            dns_servers: Optional[Sequence[str]] = None,
            firewall_policy_id: Optional[str] = None,
            ip_configurations: Optional[Sequence[FirewallIpConfigurationArgs]] = None,
            location: Optional[str] = None,
            management_ip_configuration: Optional[FirewallManagementIpConfigurationArgs] = None,
            name: Optional[str] = None,
            private_ip_ranges: Optional[Sequence[str]] = None,
            resource_group_name: Optional[str] = None,
            sku_name: Optional[str] = None,
            sku_tier: Optional[str] = None,
            tags: Optional[Mapping[str, str]] = None,
            threat_intel_mode: Optional[str] = None,
            virtual_hub: Optional[FirewallVirtualHubArgs] = None,
            zones: Optional[Sequence[str]] = None) -> Firewall
    func GetFirewall(ctx *Context, name string, id IDInput, state *FirewallState, opts ...ResourceOption) (*Firewall, error)
    public static Firewall Get(string name, Input<string> id, FirewallState? state, CustomResourceOptions? opts = null)
    public static Firewall get(String name, Output<String> id, FirewallState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    DnsProxyEnabled bool
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    DnsServers List<string>
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    FirewallPolicyId string
    The ID of the Firewall Policy applied to this Firewall.
    IpConfigurations List<FirewallIpConfiguration>
    An ip_configuration block as documented below.
    Location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    ManagementIpConfiguration FirewallManagementIpConfiguration
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    Name string
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    PrivateIpRanges List<string>
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    ResourceGroupName string
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    SkuName string
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    SkuTier string
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    Tags Dictionary<string, string>
    A mapping of tags to assign to the resource.
    ThreatIntelMode string
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    VirtualHub FirewallVirtualHub
    A virtual_hub block as documented below.
    Zones List<string>

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    DnsProxyEnabled bool
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    DnsServers []string
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    FirewallPolicyId string
    The ID of the Firewall Policy applied to this Firewall.
    IpConfigurations []FirewallIpConfigurationArgs
    An ip_configuration block as documented below.
    Location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    ManagementIpConfiguration FirewallManagementIpConfigurationArgs
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    Name string
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    PrivateIpRanges []string
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    ResourceGroupName string
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    SkuName string
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    SkuTier string
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    Tags map[string]string
    A mapping of tags to assign to the resource.
    ThreatIntelMode string
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    VirtualHub FirewallVirtualHubArgs
    A virtual_hub block as documented below.
    Zones []string

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    dnsProxyEnabled Boolean
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    dnsServers List<String>
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    firewallPolicyId String
    The ID of the Firewall Policy applied to this Firewall.
    ipConfigurations List<FirewallIpConfiguration>
    An ip_configuration block as documented below.
    location String
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    managementIpConfiguration FirewallManagementIpConfiguration
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    name String
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    privateIpRanges List<String>
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    resourceGroupName String
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    skuName String
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    skuTier String
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    tags Map<String,String>
    A mapping of tags to assign to the resource.
    threatIntelMode String
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    virtualHub FirewallVirtualHub
    A virtual_hub block as documented below.
    zones List<String>

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    dnsProxyEnabled boolean
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    dnsServers string[]
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    firewallPolicyId string
    The ID of the Firewall Policy applied to this Firewall.
    ipConfigurations FirewallIpConfiguration[]
    An ip_configuration block as documented below.
    location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    managementIpConfiguration FirewallManagementIpConfiguration
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    name string
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    privateIpRanges string[]
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    resourceGroupName string
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    skuName string
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    skuTier string
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    tags {[key: string]: string}
    A mapping of tags to assign to the resource.
    threatIntelMode string
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    virtualHub FirewallVirtualHub
    A virtual_hub block as documented below.
    zones string[]

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    dns_proxy_enabled bool
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    dns_servers Sequence[str]
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    firewall_policy_id str
    The ID of the Firewall Policy applied to this Firewall.
    ip_configurations Sequence[FirewallIpConfigurationArgs]
    An ip_configuration block as documented below.
    location str
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    management_ip_configuration FirewallManagementIpConfigurationArgs
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    name str
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    private_ip_ranges Sequence[str]
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    resource_group_name str
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    sku_name str
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    sku_tier str
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    tags Mapping[str, str]
    A mapping of tags to assign to the resource.
    threat_intel_mode str
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    virtual_hub FirewallVirtualHubArgs
    A virtual_hub block as documented below.
    zones Sequence[str]

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    dnsProxyEnabled Boolean
    Whether DNS proxy is enabled. It will forward DNS requests to the DNS servers when set to true. It will be set to true if dns_servers provided with a not empty list.
    dnsServers List<String>
    A list of DNS servers that the Azure Firewall will direct DNS traffic to the for name resolution.
    firewallPolicyId String
    The ID of the Firewall Policy applied to this Firewall.
    ipConfigurations List<Property Map>
    An ip_configuration block as documented below.
    location String
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    managementIpConfiguration Property Map
    A management_ip_configuration block as documented below, which allows force-tunnelling of traffic to be performed by the firewall. Adding or removing this block or changing the subnet_id in an existing block forces a new resource to be created. Changing this forces a new resource to be created.
    name String
    Specifies the name of the Firewall. Changing this forces a new resource to be created.
    privateIpRanges List<String>
    A list of SNAT private CIDR IP ranges, or the special string IANAPrivateRanges, which indicates Azure Firewall does not SNAT when the destination IP address is a private range per IANA RFC 1918.
    resourceGroupName String
    The name of the resource group in which to create the resource. Changing this forces a new resource to be created.
    skuName String
    SKU name of the Firewall. Possible values are AZFW_Hub and AZFW_VNet. Changing this forces a new resource to be created.
    skuTier String
    SKU tier of the Firewall. Possible values are Premium, Standard and Basic.
    tags Map<String>
    A mapping of tags to assign to the resource.
    threatIntelMode String
    The operation mode for threat intelligence-based filtering. Possible values are: Off, Alert and Deny. Defaults to Alert.
    virtualHub Property Map
    A virtual_hub block as documented below.
    zones List<String>

    Specifies a list of Availability Zones in which this Azure Firewall should be located. Changing this forces a new Azure Firewall to be created.

    Please Note: Availability Zones are only supported in several regions at this time.

    Supporting Types

    FirewallIpConfiguration, FirewallIpConfigurationArgs

    Name string
    Specifies the name of the IP Configuration.
    PrivateIpAddress string
    The private IP address associated with the Firewall.
    PublicIpAddressId string

    The ID of the Public IP Address associated with the firewall.

    NOTE A public ip address is required unless a management_ip_configuration block is specified.

    NOTE When multiple ip_configuration blocks with public_ip_address_id are configured, pulumi up will raise an error when one or some of these ip_configuration blocks are removed. because the public_ip_address_id is still used by the firewall resource until the firewall resource is updated. and the destruction of azure.network.PublicIp happens before the update of firewall by default. to destroy of azure.network.PublicIp will cause the error. The workaround is to set create_before_destroy=true to the azure.network.PublicIp resource lifecycle block. See more detail: destroying.md#create-before-destroy

    NOTE The Public IP must have a Static allocation and Standard SKU.

    SubnetId string

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Subnet used for the Firewall must have the name AzureFirewallSubnet and the subnet mask must be at least a /26.

    NOTE At least one and only one ip_configuration block may contain a subnet_id.

    Name string
    Specifies the name of the IP Configuration.
    PrivateIpAddress string
    The private IP address associated with the Firewall.
    PublicIpAddressId string

    The ID of the Public IP Address associated with the firewall.

    NOTE A public ip address is required unless a management_ip_configuration block is specified.

    NOTE When multiple ip_configuration blocks with public_ip_address_id are configured, pulumi up will raise an error when one or some of these ip_configuration blocks are removed. because the public_ip_address_id is still used by the firewall resource until the firewall resource is updated. and the destruction of azure.network.PublicIp happens before the update of firewall by default. to destroy of azure.network.PublicIp will cause the error. The workaround is to set create_before_destroy=true to the azure.network.PublicIp resource lifecycle block. See more detail: destroying.md#create-before-destroy

    NOTE The Public IP must have a Static allocation and Standard SKU.

    SubnetId string

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Subnet used for the Firewall must have the name AzureFirewallSubnet and the subnet mask must be at least a /26.

    NOTE At least one and only one ip_configuration block may contain a subnet_id.

    name String
    Specifies the name of the IP Configuration.
    privateIpAddress String
    The private IP address associated with the Firewall.
    publicIpAddressId String

    The ID of the Public IP Address associated with the firewall.

    NOTE A public ip address is required unless a management_ip_configuration block is specified.

    NOTE When multiple ip_configuration blocks with public_ip_address_id are configured, pulumi up will raise an error when one or some of these ip_configuration blocks are removed. because the public_ip_address_id is still used by the firewall resource until the firewall resource is updated. and the destruction of azure.network.PublicIp happens before the update of firewall by default. to destroy of azure.network.PublicIp will cause the error. The workaround is to set create_before_destroy=true to the azure.network.PublicIp resource lifecycle block. See more detail: destroying.md#create-before-destroy

    NOTE The Public IP must have a Static allocation and Standard SKU.

    subnetId String

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Subnet used for the Firewall must have the name AzureFirewallSubnet and the subnet mask must be at least a /26.

    NOTE At least one and only one ip_configuration block may contain a subnet_id.

    name string
    Specifies the name of the IP Configuration.
    privateIpAddress string
    The private IP address associated with the Firewall.
    publicIpAddressId string

    The ID of the Public IP Address associated with the firewall.

    NOTE A public ip address is required unless a management_ip_configuration block is specified.

    NOTE When multiple ip_configuration blocks with public_ip_address_id are configured, pulumi up will raise an error when one or some of these ip_configuration blocks are removed. because the public_ip_address_id is still used by the firewall resource until the firewall resource is updated. and the destruction of azure.network.PublicIp happens before the update of firewall by default. to destroy of azure.network.PublicIp will cause the error. The workaround is to set create_before_destroy=true to the azure.network.PublicIp resource lifecycle block. See more detail: destroying.md#create-before-destroy

    NOTE The Public IP must have a Static allocation and Standard SKU.

    subnetId string

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Subnet used for the Firewall must have the name AzureFirewallSubnet and the subnet mask must be at least a /26.

    NOTE At least one and only one ip_configuration block may contain a subnet_id.

    name str
    Specifies the name of the IP Configuration.
    private_ip_address str
    The private IP address associated with the Firewall.
    public_ip_address_id str

    The ID of the Public IP Address associated with the firewall.

    NOTE A public ip address is required unless a management_ip_configuration block is specified.

    NOTE When multiple ip_configuration blocks with public_ip_address_id are configured, pulumi up will raise an error when one or some of these ip_configuration blocks are removed. because the public_ip_address_id is still used by the firewall resource until the firewall resource is updated. and the destruction of azure.network.PublicIp happens before the update of firewall by default. to destroy of azure.network.PublicIp will cause the error. The workaround is to set create_before_destroy=true to the azure.network.PublicIp resource lifecycle block. See more detail: destroying.md#create-before-destroy

    NOTE The Public IP must have a Static allocation and Standard SKU.

    subnet_id str

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Subnet used for the Firewall must have the name AzureFirewallSubnet and the subnet mask must be at least a /26.

    NOTE At least one and only one ip_configuration block may contain a subnet_id.

    name String
    Specifies the name of the IP Configuration.
    privateIpAddress String
    The private IP address associated with the Firewall.
    publicIpAddressId String

    The ID of the Public IP Address associated with the firewall.

    NOTE A public ip address is required unless a management_ip_configuration block is specified.

    NOTE When multiple ip_configuration blocks with public_ip_address_id are configured, pulumi up will raise an error when one or some of these ip_configuration blocks are removed. because the public_ip_address_id is still used by the firewall resource until the firewall resource is updated. and the destruction of azure.network.PublicIp happens before the update of firewall by default. to destroy of azure.network.PublicIp will cause the error. The workaround is to set create_before_destroy=true to the azure.network.PublicIp resource lifecycle block. See more detail: destroying.md#create-before-destroy

    NOTE The Public IP must have a Static allocation and Standard SKU.

    subnetId String

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Subnet used for the Firewall must have the name AzureFirewallSubnet and the subnet mask must be at least a /26.

    NOTE At least one and only one ip_configuration block may contain a subnet_id.

    FirewallManagementIpConfiguration, FirewallManagementIpConfigurationArgs

    Name string
    Specifies the name of the IP Configuration.
    PublicIpAddressId string

    The ID of the Public IP Address associated with the firewall.

    NOTE The Public IP must have a Static allocation and Standard SKU.

    SubnetId string

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Management Subnet used for the Firewall must have the name AzureFirewallManagementSubnet and the subnet mask must be at least a /26.

    PrivateIpAddress string
    The private IP address associated with the Firewall.
    Name string
    Specifies the name of the IP Configuration.
    PublicIpAddressId string

    The ID of the Public IP Address associated with the firewall.

    NOTE The Public IP must have a Static allocation and Standard SKU.

    SubnetId string

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Management Subnet used for the Firewall must have the name AzureFirewallManagementSubnet and the subnet mask must be at least a /26.

    PrivateIpAddress string
    The private IP address associated with the Firewall.
    name String
    Specifies the name of the IP Configuration.
    publicIpAddressId String

    The ID of the Public IP Address associated with the firewall.

    NOTE The Public IP must have a Static allocation and Standard SKU.

    subnetId String

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Management Subnet used for the Firewall must have the name AzureFirewallManagementSubnet and the subnet mask must be at least a /26.

    privateIpAddress String
    The private IP address associated with the Firewall.
    name string
    Specifies the name of the IP Configuration.
    publicIpAddressId string

    The ID of the Public IP Address associated with the firewall.

    NOTE The Public IP must have a Static allocation and Standard SKU.

    subnetId string

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Management Subnet used for the Firewall must have the name AzureFirewallManagementSubnet and the subnet mask must be at least a /26.

    privateIpAddress string
    The private IP address associated with the Firewall.
    name str
    Specifies the name of the IP Configuration.
    public_ip_address_id str

    The ID of the Public IP Address associated with the firewall.

    NOTE The Public IP must have a Static allocation and Standard SKU.

    subnet_id str

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Management Subnet used for the Firewall must have the name AzureFirewallManagementSubnet and the subnet mask must be at least a /26.

    private_ip_address str
    The private IP address associated with the Firewall.
    name String
    Specifies the name of the IP Configuration.
    publicIpAddressId String

    The ID of the Public IP Address associated with the firewall.

    NOTE The Public IP must have a Static allocation and Standard SKU.

    subnetId String

    Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.

    NOTE The Management Subnet used for the Firewall must have the name AzureFirewallManagementSubnet and the subnet mask must be at least a /26.

    privateIpAddress String
    The private IP address associated with the Firewall.

    FirewallVirtualHub, FirewallVirtualHubArgs

    VirtualHubId string
    Specifies the ID of the Virtual Hub where the Firewall resides in.
    PrivateIpAddress string
    The private IP address associated with the Firewall.
    PublicIpAddresses List<string>
    The list of public IP addresses associated with the Firewall.
    PublicIpCount int
    Specifies the number of public IPs to assign to the Firewall. Defaults to 1.
    VirtualHubId string
    Specifies the ID of the Virtual Hub where the Firewall resides in.
    PrivateIpAddress string
    The private IP address associated with the Firewall.
    PublicIpAddresses []string
    The list of public IP addresses associated with the Firewall.
    PublicIpCount int
    Specifies the number of public IPs to assign to the Firewall. Defaults to 1.
    virtualHubId String
    Specifies the ID of the Virtual Hub where the Firewall resides in.
    privateIpAddress String
    The private IP address associated with the Firewall.
    publicIpAddresses List<String>
    The list of public IP addresses associated with the Firewall.
    publicIpCount Integer
    Specifies the number of public IPs to assign to the Firewall. Defaults to 1.
    virtualHubId string
    Specifies the ID of the Virtual Hub where the Firewall resides in.
    privateIpAddress string
    The private IP address associated with the Firewall.
    publicIpAddresses string[]
    The list of public IP addresses associated with the Firewall.
    publicIpCount number
    Specifies the number of public IPs to assign to the Firewall. Defaults to 1.
    virtual_hub_id str
    Specifies the ID of the Virtual Hub where the Firewall resides in.
    private_ip_address str
    The private IP address associated with the Firewall.
    public_ip_addresses Sequence[str]
    The list of public IP addresses associated with the Firewall.
    public_ip_count int
    Specifies the number of public IPs to assign to the Firewall. Defaults to 1.
    virtualHubId String
    Specifies the ID of the Virtual Hub where the Firewall resides in.
    privateIpAddress String
    The private IP address associated with the Firewall.
    publicIpAddresses List<String>
    The list of public IP addresses associated with the Firewall.
    publicIpCount Number
    Specifies the number of public IPs to assign to the Firewall. Defaults to 1.

    Import

    Azure Firewalls can be imported using the resource id, e.g.

    $ pulumi import azure:network/firewall:Firewall example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.Network/azureFirewalls/testfirewall
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azurerm Terraform Provider.
    azure logo

    We recommend using Azure Native.

    Azure Classic v5.81.0 published on Monday, Jun 24, 2024 by Pulumi