azure.paloalto.NextGenerationFirewallVirtualNetworkPanorama

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = new azure.core.ResourceGroup("example", {
    name: "example-resource-group",
    location: "westeurope",
});
const examplePublicIp = new azure.network.PublicIp("example", {
    name: "example-public-ip",
    location: example.location,
    resourceGroupName: example.name,
    allocationMethod: "Static",
    sku: "Standard",
});
const exampleNetworkSecurityGroup = new azure.network.NetworkSecurityGroup("example", {
    name: "example-nsg",
    location: test.location,
    resourceGroupName: test.name,
});
const exampleVirtualNetwork = new azure.network.VirtualNetwork("example", {
    name: "example-vnet",
    addressSpaces: ["10.0.0.0/16"],
    location: example.location,
    resourceGroupName: example.name,
    tags: {
        environment: "Production",
    },
});
const trust = new azure.network.Subnet("trust", {
    name: "example-trust-subnet",
    resourceGroupName: example.name,
    virtualNetworkName: exampleVirtualNetwork.name,
    addressPrefixes: ["10.0.1.0/24"],
    delegations: [{
        name: "trusted",
        serviceDelegation: {
            name: "PaloAltoNetworks.Cloudngfw/firewalls",
            actions: ["Microsoft.Network/virtualNetworks/subnets/join/action"],
        },
    }],
});
const trustSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("trust", {
    subnetId: trust.id,
    networkSecurityGroupId: exampleNetworkSecurityGroup.id,
});
const untrust = new azure.network.Subnet("untrust", {
    name: "example-untrust-subnet",
    resourceGroupName: example.name,
    virtualNetworkName: exampleVirtualNetwork.name,
    addressPrefixes: ["10.0.2.0/24"],
    delegations: [{
        name: "untrusted",
        serviceDelegation: {
            name: "PaloAltoNetworks.Cloudngfw/firewalls",
            actions: ["Microsoft.Network/virtualNetworks/subnets/join/action"],
        },
    }],
});
const untrustSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("untrust", {
    subnetId: untrust.id,
    networkSecurityGroupId: exampleNetworkSecurityGroup.id,
});
const exampleNextGenerationFirewallVirtualNetworkPanorama = new azure.paloalto.NextGenerationFirewallVirtualNetworkPanorama("example", {
    name: "example-ngfwvh",
    resourceGroupName: example.name,
    location: example.location,
    panoramaBase64Config: "e2RnbmFtZTogY25nZnctYXotZXhhbXBsZSwgdHBsbmFtZTogY25nZnctZXhhbXBsZS10ZW1wbGF0ZS1zdGFjaywgZXhhbXBsZS1wYW5vcmFtYS1zZXJ2ZXI6IDE5Mi4xNjguMC4xLCB2bS1hdXRoLWtleTogMDAwMDAwMDAwMDAwMDAwLCBleHBpcnk6IDIwMjQvMDcvMzF9Cg==",
    networkProfile: {
        publicIpAddressIds: [examplePublicIp.id],
        vnetConfiguration: {
            virtualNetworkId: exampleVirtualNetwork.id,
            trustedSubnetId: trust.id,
            untrustedSubnetId: untrust.id,
        },
    },
});

import pulumi
import pulumi_azure as azure

example = azure.core.ResourceGroup("example",
    name="example-resource-group",
    location="westeurope")
example_public_ip = azure.network.PublicIp("example",
    name="example-public-ip",
    location=example.location,
    resource_group_name=example.name,
    allocation_method="Static",
    sku="Standard")
example_network_security_group = azure.network.NetworkSecurityGroup("example",
    name="example-nsg",
    location=test["location"],
    resource_group_name=test["name"])
example_virtual_network = azure.network.VirtualNetwork("example",
    name="example-vnet",
    address_spaces=["10.0.0.0/16"],
    location=example.location,
    resource_group_name=example.name,
    tags={
        "environment": "Production",
    })
trust = azure.network.Subnet("trust",
    name="example-trust-subnet",
    resource_group_name=example.name,
    virtual_network_name=example_virtual_network.name,
    address_prefixes=["10.0.1.0/24"],
    delegations=[azure.network.SubnetDelegationArgs(
        name="trusted",
        service_delegation=azure.network.SubnetDelegationServiceDelegationArgs(
            name="PaloAltoNetworks.Cloudngfw/firewalls",
            actions=["Microsoft.Network/virtualNetworks/subnets/join/action"],
        ),
    )])
trust_subnet_network_security_group_association = azure.network.SubnetNetworkSecurityGroupAssociation("trust",
    subnet_id=trust.id,
    network_security_group_id=example_network_security_group.id)
untrust = azure.network.Subnet("untrust",
    name="example-untrust-subnet",
    resource_group_name=example.name,
    virtual_network_name=example_virtual_network.name,
    address_prefixes=["10.0.2.0/24"],
    delegations=[azure.network.SubnetDelegationArgs(
        name="untrusted",
        service_delegation=azure.network.SubnetDelegationServiceDelegationArgs(
            name="PaloAltoNetworks.Cloudngfw/firewalls",
            actions=["Microsoft.Network/virtualNetworks/subnets/join/action"],
        ),
    )])
untrust_subnet_network_security_group_association = azure.network.SubnetNetworkSecurityGroupAssociation("untrust",
    subnet_id=untrust.id,
    network_security_group_id=example_network_security_group.id)
example_next_generation_firewall_virtual_network_panorama = azure.paloalto.NextGenerationFirewallVirtualNetworkPanorama("example",
    name="example-ngfwvh",
    resource_group_name=example.name,
    location=example.location,
    panorama_base64_config="e2RnbmFtZTogY25nZnctYXotZXhhbXBsZSwgdHBsbmFtZTogY25nZnctZXhhbXBsZS10ZW1wbGF0ZS1zdGFjaywgZXhhbXBsZS1wYW5vcmFtYS1zZXJ2ZXI6IDE5Mi4xNjguMC4xLCB2bS1hdXRoLWtleTogMDAwMDAwMDAwMDAwMDAwLCBleHBpcnk6IDIwMjQvMDcvMzF9Cg==",
    network_profile=azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs(
        public_ip_address_ids=[example_public_ip.id],
        vnet_configuration=azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs(
            virtual_network_id=example_virtual_network.id,
            trusted_subnet_id=trust.id,
            untrusted_subnet_id=untrust.id,
        ),
    ))

package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/network"
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/paloalto"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resource-group"),
			Location: pulumi.String("westeurope"),
		})
		if err != nil {
			return err
		}
		examplePublicIp, err := network.NewPublicIp(ctx, "example", &network.PublicIpArgs{
			Name:              pulumi.String("example-public-ip"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			AllocationMethod:  pulumi.String("Static"),
			Sku:               pulumi.String("Standard"),
		})
		if err != nil {
			return err
		}
		exampleNetworkSecurityGroup, err := network.NewNetworkSecurityGroup(ctx, "example", &network.NetworkSecurityGroupArgs{
			Name:              pulumi.String("example-nsg"),
			Location:          pulumi.Any(test.Location),
			ResourceGroupName: pulumi.Any(test.Name),
		})
		if err != nil {
			return err
		}
		exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "example", &network.VirtualNetworkArgs{
			Name: pulumi.String("example-vnet"),
			AddressSpaces: pulumi.StringArray{
				pulumi.String("10.0.0.0/16"),
			},
			Location:          example.Location,
			ResourceGroupName: example.Name,
			Tags: pulumi.StringMap{
				"environment": pulumi.String("Production"),
			},
		})
		if err != nil {
			return err
		}
		trust, err := network.NewSubnet(ctx, "trust", &network.SubnetArgs{
			Name:               pulumi.String("example-trust-subnet"),
			ResourceGroupName:  example.Name,
			VirtualNetworkName: exampleVirtualNetwork.Name,
			AddressPrefixes: pulumi.StringArray{
				pulumi.String("10.0.1.0/24"),
			},
			Delegations: network.SubnetDelegationArray{
				&network.SubnetDelegationArgs{
					Name: pulumi.String("trusted"),
					ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
						Name: pulumi.String("PaloAltoNetworks.Cloudngfw/firewalls"),
						Actions: pulumi.StringArray{
							pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = network.NewSubnetNetworkSecurityGroupAssociation(ctx, "trust", &network.SubnetNetworkSecurityGroupAssociationArgs{
			SubnetId:               trust.ID(),
			NetworkSecurityGroupId: exampleNetworkSecurityGroup.ID(),
		})
		if err != nil {
			return err
		}
		untrust, err := network.NewSubnet(ctx, "untrust", &network.SubnetArgs{
			Name:               pulumi.String("example-untrust-subnet"),
			ResourceGroupName:  example.Name,
			VirtualNetworkName: exampleVirtualNetwork.Name,
			AddressPrefixes: pulumi.StringArray{
				pulumi.String("10.0.2.0/24"),
			},
			Delegations: network.SubnetDelegationArray{
				&network.SubnetDelegationArgs{
					Name: pulumi.String("untrusted"),
					ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
						Name: pulumi.String("PaloAltoNetworks.Cloudngfw/firewalls"),
						Actions: pulumi.StringArray{
							pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = network.NewSubnetNetworkSecurityGroupAssociation(ctx, "untrust", &network.SubnetNetworkSecurityGroupAssociationArgs{
			SubnetId:               untrust.ID(),
			NetworkSecurityGroupId: exampleNetworkSecurityGroup.ID(),
		})
		if err != nil {
			return err
		}
		_, err = paloalto.NewNextGenerationFirewallVirtualNetworkPanorama(ctx, "example", &paloalto.NextGenerationFirewallVirtualNetworkPanoramaArgs{
			Name:                 pulumi.String("example-ngfwvh"),
			ResourceGroupName:    example.Name,
			Location:             example.Location,
			PanoramaBase64Config: pulumi.String("e2RnbmFtZTogY25nZnctYXotZXhhbXBsZSwgdHBsbmFtZTogY25nZnctZXhhbXBsZS10ZW1wbGF0ZS1zdGFjaywgZXhhbXBsZS1wYW5vcmFtYS1zZXJ2ZXI6IDE5Mi4xNjguMC4xLCB2bS1hdXRoLWtleTogMDAwMDAwMDAwMDAwMDAwLCBleHBpcnk6IDIwMjQvMDcvMzF9Cg=="),
			NetworkProfile: &paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs{
				PublicIpAddressIds: pulumi.StringArray{
					examplePublicIp.ID(),
				},
				VnetConfiguration: &paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs{
					VirtualNetworkId:  exampleVirtualNetwork.ID(),
					TrustedSubnetId:   trust.ID(),
					UntrustedSubnetId: untrust.ID(),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resource-group",
        Location = "westeurope",
    });

    var examplePublicIp = new Azure.Network.PublicIp("example", new()
    {
        Name = "example-public-ip",
        Location = example.Location,
        ResourceGroupName = example.Name,
        AllocationMethod = "Static",
        Sku = "Standard",
    });

    var exampleNetworkSecurityGroup = new Azure.Network.NetworkSecurityGroup("example", new()
    {
        Name = "example-nsg",
        Location = test.Location,
        ResourceGroupName = test.Name,
    });

    var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("example", new()
    {
        Name = "example-vnet",
        AddressSpaces = new[]
        {
            "10.0.0.0/16",
        },
        Location = example.Location,
        ResourceGroupName = example.Name,
        Tags = 
        {
            { "environment", "Production" },
        },
    });

    var trust = new Azure.Network.Subnet("trust", new()
    {
        Name = "example-trust-subnet",
        ResourceGroupName = example.Name,
        VirtualNetworkName = exampleVirtualNetwork.Name,
        AddressPrefixes = new[]
        {
            "10.0.1.0/24",
        },
        Delegations = new[]
        {
            new Azure.Network.Inputs.SubnetDelegationArgs
            {
                Name = "trusted",
                ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
                {
                    Name = "PaloAltoNetworks.Cloudngfw/firewalls",
                    Actions = new[]
                    {
                        "Microsoft.Network/virtualNetworks/subnets/join/action",
                    },
                },
            },
        },
    });

    var trustSubnetNetworkSecurityGroupAssociation = new Azure.Network.SubnetNetworkSecurityGroupAssociation("trust", new()
    {
        SubnetId = trust.Id,
        NetworkSecurityGroupId = exampleNetworkSecurityGroup.Id,
    });

    var untrust = new Azure.Network.Subnet("untrust", new()
    {
        Name = "example-untrust-subnet",
        ResourceGroupName = example.Name,
        VirtualNetworkName = exampleVirtualNetwork.Name,
        AddressPrefixes = new[]
        {
            "10.0.2.0/24",
        },
        Delegations = new[]
        {
            new Azure.Network.Inputs.SubnetDelegationArgs
            {
                Name = "untrusted",
                ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
                {
                    Name = "PaloAltoNetworks.Cloudngfw/firewalls",
                    Actions = new[]
                    {
                        "Microsoft.Network/virtualNetworks/subnets/join/action",
                    },
                },
            },
        },
    });

    var untrustSubnetNetworkSecurityGroupAssociation = new Azure.Network.SubnetNetworkSecurityGroupAssociation("untrust", new()
    {
        SubnetId = untrust.Id,
        NetworkSecurityGroupId = exampleNetworkSecurityGroup.Id,
    });

    var exampleNextGenerationFirewallVirtualNetworkPanorama = new Azure.PaloAlto.NextGenerationFirewallVirtualNetworkPanorama("example", new()
    {
        Name = "example-ngfwvh",
        ResourceGroupName = example.Name,
        Location = example.Location,
        PanoramaBase64Config = "e2RnbmFtZTogY25nZnctYXotZXhhbXBsZSwgdHBsbmFtZTogY25nZnctZXhhbXBsZS10ZW1wbGF0ZS1zdGFjaywgZXhhbXBsZS1wYW5vcmFtYS1zZXJ2ZXI6IDE5Mi4xNjguMC4xLCB2bS1hdXRoLWtleTogMDAwMDAwMDAwMDAwMDAwLCBleHBpcnk6IDIwMjQvMDcvMzF9Cg==",
        NetworkProfile = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs
        {
            PublicIpAddressIds = new[]
            {
                examplePublicIp.Id,
            },
            VnetConfiguration = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs
            {
                VirtualNetworkId = exampleVirtualNetwork.Id,
                TrustedSubnetId = trust.Id,
                UntrustedSubnetId = untrust.Id,
            },
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.PublicIp;
import com.pulumi.azure.network.PublicIpArgs;
import com.pulumi.azure.network.NetworkSecurityGroup;
import com.pulumi.azure.network.NetworkSecurityGroupArgs;
import com.pulumi.azure.network.VirtualNetwork;
import com.pulumi.azure.network.VirtualNetworkArgs;
import com.pulumi.azure.network.Subnet;
import com.pulumi.azure.network.SubnetArgs;
import com.pulumi.azure.network.inputs.SubnetDelegationArgs;
import com.pulumi.azure.network.inputs.SubnetDelegationServiceDelegationArgs;
import com.pulumi.azure.network.SubnetNetworkSecurityGroupAssociation;
import com.pulumi.azure.network.SubnetNetworkSecurityGroupAssociationArgs;
import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkPanorama;
import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaArgs;
import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs;
import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()        
            .name("example-resource-group")
            .location("westeurope")
            .build());

        var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()        
            .name("example-public-ip")
            .location(example.location())
            .resourceGroupName(example.name())
            .allocationMethod("Static")
            .sku("Standard")
            .build());

        var exampleNetworkSecurityGroup = new NetworkSecurityGroup("exampleNetworkSecurityGroup", NetworkSecurityGroupArgs.builder()        
            .name("example-nsg")
            .location(test.location())
            .resourceGroupName(test.name())
            .build());

        var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()        
            .name("example-vnet")
            .addressSpaces("10.0.0.0/16")
            .location(example.location())
            .resourceGroupName(example.name())
            .tags(Map.of("environment", "Production"))
            .build());

        var trust = new Subnet("trust", SubnetArgs.builder()        
            .name("example-trust-subnet")
            .resourceGroupName(example.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.0.1.0/24")
            .delegations(SubnetDelegationArgs.builder()
                .name("trusted")
                .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
                    .name("PaloAltoNetworks.Cloudngfw/firewalls")
                    .actions("Microsoft.Network/virtualNetworks/subnets/join/action")
                    .build())
                .build())
            .build());

        var trustSubnetNetworkSecurityGroupAssociation = new SubnetNetworkSecurityGroupAssociation("trustSubnetNetworkSecurityGroupAssociation", SubnetNetworkSecurityGroupAssociationArgs.builder()        
            .subnetId(trust.id())
            .networkSecurityGroupId(exampleNetworkSecurityGroup.id())
            .build());

        var untrust = new Subnet("untrust", SubnetArgs.builder()        
            .name("example-untrust-subnet")
            .resourceGroupName(example.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.0.2.0/24")
            .delegations(SubnetDelegationArgs.builder()
                .name("untrusted")
                .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
                    .name("PaloAltoNetworks.Cloudngfw/firewalls")
                    .actions("Microsoft.Network/virtualNetworks/subnets/join/action")
                    .build())
                .build())
            .build());

        var untrustSubnetNetworkSecurityGroupAssociation = new SubnetNetworkSecurityGroupAssociation("untrustSubnetNetworkSecurityGroupAssociation", SubnetNetworkSecurityGroupAssociationArgs.builder()        
            .subnetId(untrust.id())
            .networkSecurityGroupId(exampleNetworkSecurityGroup.id())
            .build());

        var exampleNextGenerationFirewallVirtualNetworkPanorama = new NextGenerationFirewallVirtualNetworkPanorama("exampleNextGenerationFirewallVirtualNetworkPanorama", NextGenerationFirewallVirtualNetworkPanoramaArgs.builder()        
            .name("example-ngfwvh")
            .resourceGroupName(example.name())
            .location(example.location())
            .panoramaBase64Config("e2RnbmFtZTogY25nZnctYXotZXhhbXBsZSwgdHBsbmFtZTogY25nZnctZXhhbXBsZS10ZW1wbGF0ZS1zdGFjaywgZXhhbXBsZS1wYW5vcmFtYS1zZXJ2ZXI6IDE5Mi4xNjguMC4xLCB2bS1hdXRoLWtleTogMDAwMDAwMDAwMDAwMDAwLCBleHBpcnk6IDIwMjQvMDcvMzF9Cg==")
            .networkProfile(NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs.builder()
                .publicIpAddressIds(examplePublicIp.id())
                .vnetConfiguration(NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs.builder()
                    .virtualNetworkId(exampleVirtualNetwork.id())
                    .trustedSubnetId(trust.id())
                    .untrustedSubnetId(untrust.id())
                    .build())
                .build())
            .build());

    }
}

resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resource-group
      location: westeurope
  examplePublicIp:
    type: azure:network:PublicIp
    name: example
    properties:
      name: example-public-ip
      location: ${example.location}
      resourceGroupName: ${example.name}
      allocationMethod: Static
      sku: Standard
  exampleNetworkSecurityGroup:
    type: azure:network:NetworkSecurityGroup
    name: example
    properties:
      name: example-nsg
      location: ${test.location}
      resourceGroupName: ${test.name}
  exampleVirtualNetwork:
    type: azure:network:VirtualNetwork
    name: example
    properties:
      name: example-vnet
      addressSpaces:
        - 10.0.0.0/16
      location: ${example.location}
      resourceGroupName: ${example.name}
      tags:
        environment: Production
  trust:
    type: azure:network:Subnet
    properties:
      name: example-trust-subnet
      resourceGroupName: ${example.name}
      virtualNetworkName: ${exampleVirtualNetwork.name}
      addressPrefixes:
        - 10.0.1.0/24
      delegations:
        - name: trusted
          serviceDelegation:
            name: PaloAltoNetworks.Cloudngfw/firewalls
            actions:
              - Microsoft.Network/virtualNetworks/subnets/join/action
  trustSubnetNetworkSecurityGroupAssociation:
    type: azure:network:SubnetNetworkSecurityGroupAssociation
    name: trust
    properties:
      subnetId: ${trust.id}
      networkSecurityGroupId: ${exampleNetworkSecurityGroup.id}
  untrust:
    type: azure:network:Subnet
    properties:
      name: example-untrust-subnet
      resourceGroupName: ${example.name}
      virtualNetworkName: ${exampleVirtualNetwork.name}
      addressPrefixes:
        - 10.0.2.0/24
      delegations:
        - name: untrusted
          serviceDelegation:
            name: PaloAltoNetworks.Cloudngfw/firewalls
            actions:
              - Microsoft.Network/virtualNetworks/subnets/join/action
  untrustSubnetNetworkSecurityGroupAssociation:
    type: azure:network:SubnetNetworkSecurityGroupAssociation
    name: untrust
    properties:
      subnetId: ${untrust.id}
      networkSecurityGroupId: ${exampleNetworkSecurityGroup.id}
  exampleNextGenerationFirewallVirtualNetworkPanorama:
    type: azure:paloalto:NextGenerationFirewallVirtualNetworkPanorama
    name: example
    properties:
      name: example-ngfwvh
      resourceGroupName: ${example.name}
      location: ${example.location}
      panoramaBase64Config: e2RnbmFtZTogY25nZnctYXotZXhhbXBsZSwgdHBsbmFtZTogY25nZnctZXhhbXBsZS10ZW1wbGF0ZS1zdGFjaywgZXhhbXBsZS1wYW5vcmFtYS1zZXJ2ZXI6IDE5Mi4xNjguMC4xLCB2bS1hdXRoLWtleTogMDAwMDAwMDAwMDAwMDAwLCBleHBpcnk6IDIwMjQvMDcvMzF9Cg==
      networkProfile:
        publicIpAddressIds:
          - ${examplePublicIp.id}
        vnetConfiguration:
          virtualNetworkId: ${exampleVirtualNetwork.id}
          trustedSubnetId: ${trust.id}
          untrustedSubnetId: ${untrust.id}

var nextGenerationFirewallVirtualNetworkPanoramaResource = new Azure.PaloAlto.NextGenerationFirewallVirtualNetworkPanorama("nextGenerationFirewallVirtualNetworkPanoramaResource", new()
{
    NetworkProfile = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs
    {
        PublicIpAddressIds = new[]
        {
            "string",
        },
        VnetConfiguration = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs
        {
            VirtualNetworkId = "string",
            IpOfTrustForUserDefinedRoutes = "string",
            TrustedSubnetId = "string",
            UntrustedSubnetId = "string",
        },
        EgressNatIpAddressIds = new[]
        {
            "string",
        },
        EgressNatIpAddresses = new[]
        {
            "string",
        },
        PublicIpAddresses = new[]
        {
            "string",
        },
        TrustedAddressRanges = new[]
        {
            "string",
        },
    },
    PanoramaBase64Config = "string",
    ResourceGroupName = "string",
    DestinationNats = new[]
    {
        new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatArgs
        {
            Name = "string",
            Protocol = "string",
            BackendConfig = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatBackendConfigArgs
            {
                Port = 0,
                PublicIpAddress = "string",
            },
            FrontendConfig = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatFrontendConfigArgs
            {
                Port = 0,
                PublicIpAddressId = "string",
            },
        },
    },
    DnsSettings = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkPanoramaDnsSettingsArgs
    {
        AzureDnsServers = new[]
        {
            "string",
        },
        DnsServers = new[]
        {
            "string",
        },
        UseAzureDns = false,
    },
    Location = "string",
    Name = "string",
    Tags = 
    {
        { "string", "string" },
    },
});

example, err := paloalto.NewNextGenerationFirewallVirtualNetworkPanorama(ctx, "nextGenerationFirewallVirtualNetworkPanoramaResource", &paloalto.NextGenerationFirewallVirtualNetworkPanoramaArgs{
	NetworkProfile: &paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs{
		PublicIpAddressIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		VnetConfiguration: &paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs{
			VirtualNetworkId:              pulumi.String("string"),
			IpOfTrustForUserDefinedRoutes: pulumi.String("string"),
			TrustedSubnetId:               pulumi.String("string"),
			UntrustedSubnetId:             pulumi.String("string"),
		},
		EgressNatIpAddressIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		EgressNatIpAddresses: pulumi.StringArray{
			pulumi.String("string"),
		},
		PublicIpAddresses: pulumi.StringArray{
			pulumi.String("string"),
		},
		TrustedAddressRanges: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	PanoramaBase64Config: pulumi.String("string"),
	ResourceGroupName:    pulumi.String("string"),
	DestinationNats: paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatArray{
		&paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatArgs{
			Name:     pulumi.String("string"),
			Protocol: pulumi.String("string"),
			BackendConfig: &paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatBackendConfigArgs{
				Port:            pulumi.Int(0),
				PublicIpAddress: pulumi.String("string"),
			},
			FrontendConfig: &paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatFrontendConfigArgs{
				Port:              pulumi.Int(0),
				PublicIpAddressId: pulumi.String("string"),
			},
		},
	},
	DnsSettings: &paloalto.NextGenerationFirewallVirtualNetworkPanoramaDnsSettingsArgs{
		AzureDnsServers: pulumi.StringArray{
			pulumi.String("string"),
		},
		DnsServers: pulumi.StringArray{
			pulumi.String("string"),
		},
		UseAzureDns: pulumi.Bool(false),
	},
	Location: pulumi.String("string"),
	Name:     pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

var nextGenerationFirewallVirtualNetworkPanoramaResource = new NextGenerationFirewallVirtualNetworkPanorama("nextGenerationFirewallVirtualNetworkPanoramaResource", NextGenerationFirewallVirtualNetworkPanoramaArgs.builder()        
    .networkProfile(NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs.builder()
        .publicIpAddressIds("string")
        .vnetConfiguration(NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs.builder()
            .virtualNetworkId("string")
            .ipOfTrustForUserDefinedRoutes("string")
            .trustedSubnetId("string")
            .untrustedSubnetId("string")
            .build())
        .egressNatIpAddressIds("string")
        .egressNatIpAddresses("string")
        .publicIpAddresses("string")
        .trustedAddressRanges("string")
        .build())
    .panoramaBase64Config("string")
    .resourceGroupName("string")
    .destinationNats(NextGenerationFirewallVirtualNetworkPanoramaDestinationNatArgs.builder()
        .name("string")
        .protocol("string")
        .backendConfig(NextGenerationFirewallVirtualNetworkPanoramaDestinationNatBackendConfigArgs.builder()
            .port(0)
            .publicIpAddress("string")
            .build())
        .frontendConfig(NextGenerationFirewallVirtualNetworkPanoramaDestinationNatFrontendConfigArgs.builder()
            .port(0)
            .publicIpAddressId("string")
            .build())
        .build())
    .dnsSettings(NextGenerationFirewallVirtualNetworkPanoramaDnsSettingsArgs.builder()
        .azureDnsServers("string")
        .dnsServers("string")
        .useAzureDns(false)
        .build())
    .location("string")
    .name("string")
    .tags(Map.of("string", "string"))
    .build());

next_generation_firewall_virtual_network_panorama_resource = azure.paloalto.NextGenerationFirewallVirtualNetworkPanorama("nextGenerationFirewallVirtualNetworkPanoramaResource",
    network_profile=azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileArgs(
        public_ip_address_ids=["string"],
        vnet_configuration=azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfigurationArgs(
            virtual_network_id="string",
            ip_of_trust_for_user_defined_routes="string",
            trusted_subnet_id="string",
            untrusted_subnet_id="string",
        ),
        egress_nat_ip_address_ids=["string"],
        egress_nat_ip_addresses=["string"],
        public_ip_addresses=["string"],
        trusted_address_ranges=["string"],
    ),
    panorama_base64_config="string",
    resource_group_name="string",
    destination_nats=[azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatArgs(
        name="string",
        protocol="string",
        backend_config=azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatBackendConfigArgs(
            port=0,
            public_ip_address="string",
        ),
        frontend_config=azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatFrontendConfigArgs(
            port=0,
            public_ip_address_id="string",
        ),
    )],
    dns_settings=azure.paloalto.NextGenerationFirewallVirtualNetworkPanoramaDnsSettingsArgs(
        azure_dns_servers=["string"],
        dns_servers=["string"],
        use_azure_dns=False,
    ),
    location="string",
    name="string",
    tags={
        "string": "string",
    })

const nextGenerationFirewallVirtualNetworkPanoramaResource = new azure.paloalto.NextGenerationFirewallVirtualNetworkPanorama("nextGenerationFirewallVirtualNetworkPanoramaResource", {
    networkProfile: {
        publicIpAddressIds: ["string"],
        vnetConfiguration: {
            virtualNetworkId: "string",
            ipOfTrustForUserDefinedRoutes: "string",
            trustedSubnetId: "string",
            untrustedSubnetId: "string",
        },
        egressNatIpAddressIds: ["string"],
        egressNatIpAddresses: ["string"],
        publicIpAddresses: ["string"],
        trustedAddressRanges: ["string"],
    },
    panoramaBase64Config: "string",
    resourceGroupName: "string",
    destinationNats: [{
        name: "string",
        protocol: "string",
        backendConfig: {
            port: 0,
            publicIpAddress: "string",
        },
        frontendConfig: {
            port: 0,
            publicIpAddressId: "string",
        },
    }],
    dnsSettings: {
        azureDnsServers: ["string"],
        dnsServers: ["string"],
        useAzureDns: false,
    },
    location: "string",
    name: "string",
    tags: {
        string: "string",
    },
});

type: azure:paloalto:NextGenerationFirewallVirtualNetworkPanorama
properties:
    destinationNats:
        - backendConfig:
            port: 0
            publicIpAddress: string
          frontendConfig:
            port: 0
            publicIpAddressId: string
          name: string
          protocol: string
    dnsSettings:
        azureDnsServers:
            - string
        dnsServers:
            - string
        useAzureDns: false
    location: string
    name: string
    networkProfile:
        egressNatIpAddressIds:
            - string
        egressNatIpAddresses:
            - string
        publicIpAddressIds:
            - string
        publicIpAddresses:
            - string
        trustedAddressRanges:
            - string
        vnetConfiguration:
            ipOfTrustForUserDefinedRoutes: string
            trustedSubnetId: string
            untrustedSubnetId: string
            virtualNetworkId: string
    panoramaBase64Config: string
    resourceGroupName: string
    tags:
        string: string