AWS Classic v5.33.0, Mar 24 23

aws.networkfirewall.Firewall

Provides an AWS Network Firewall Firewall Resource

Example Usage

using System.Collections.Generic;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.NetworkFirewall.Firewall("example", new()
    {
        FirewallPolicyArn = aws_networkfirewall_firewall_policy.Example.Arn,
        VpcId = aws_vpc.Example.Id,
        SubnetMappings = new[]
        {
            new Aws.NetworkFirewall.Inputs.FirewallSubnetMappingArgs
            {
                SubnetId = aws_subnet.Example.Id,
            },
        },
        Tags = 
        {
            { "Tag1", "Value1" },
            { "Tag2", "Value2" },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/networkfirewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := networkfirewall.NewFirewall(ctx, "example", &networkfirewall.FirewallArgs{
			FirewallPolicyArn: pulumi.Any(aws_networkfirewall_firewall_policy.Example.Arn),
			VpcId:             pulumi.Any(aws_vpc.Example.Id),
			SubnetMappings: networkfirewall.FirewallSubnetMappingArray{
				&networkfirewall.FirewallSubnetMappingArgs{
					SubnetId: pulumi.Any(aws_subnet.Example.Id),
				},
			},
			Tags: pulumi.StringMap{
				"Tag1": pulumi.String("Value1"),
				"Tag2": pulumi.String("Value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.networkfirewall.Firewall;
import com.pulumi.aws.networkfirewall.FirewallArgs;
import com.pulumi.aws.networkfirewall.inputs.FirewallSubnetMappingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Firewall("example", FirewallArgs.builder()        
            .firewallPolicyArn(aws_networkfirewall_firewall_policy.example().arn())
            .vpcId(aws_vpc.example().id())
            .subnetMappings(FirewallSubnetMappingArgs.builder()
                .subnetId(aws_subnet.example().id())
                .build())
            .tags(Map.ofEntries(
                Map.entry("Tag1", "Value1"),
                Map.entry("Tag2", "Value2")
            ))
            .build());

    }
}

import pulumi
import pulumi_aws as aws

example = aws.networkfirewall.Firewall("example",
    firewall_policy_arn=aws_networkfirewall_firewall_policy["example"]["arn"],
    vpc_id=aws_vpc["example"]["id"],
    subnet_mappings=[aws.networkfirewall.FirewallSubnetMappingArgs(
        subnet_id=aws_subnet["example"]["id"],
    )],
    tags={
        "Tag1": "Value1",
        "Tag2": "Value2",
    })

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.networkfirewall.Firewall("example", {
    firewallPolicyArn: aws_networkfirewall_firewall_policy.example.arn,
    vpcId: aws_vpc.example.id,
    subnetMappings: [{
        subnetId: aws_subnet.example.id,
    }],
    tags: {
        Tag1: "Value1",
        Tag2: "Value2",
    },
});

resources:
  example:
    type: aws:networkfirewall:Firewall
    properties:
      firewallPolicyArn: ${aws_networkfirewall_firewall_policy.example.arn}
      vpcId: ${aws_vpc.example.id}
      subnetMappings:
        - subnetId: ${aws_subnet.example.id}
      tags:
        Tag1: Value1
        Tag2: Value2

Create Firewall Resource

new Firewall(name: string, args: FirewallArgs, opts?: CustomResourceOptions);

@overload
def Firewall(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             delete_protection: Optional[bool] = None,
             description: Optional[str] = None,
             encryption_configuration: Optional[FirewallEncryptionConfigurationArgs] = None,
             firewall_policy_arn: Optional[str] = None,
             firewall_policy_change_protection: Optional[bool] = None,
             name: Optional[str] = None,
             subnet_change_protection: Optional[bool] = None,
             subnet_mappings: Optional[Sequence[FirewallSubnetMappingArgs]] = None,
             tags: Optional[Mapping[str, str]] = None,
             vpc_id: Optional[str] = None)
@overload
def Firewall(resource_name: str,
             args: FirewallArgs,
             opts: Optional[ResourceOptions] = None)

func NewFirewall(ctx *Context, name string, args FirewallArgs, opts ...ResourceOption) (*Firewall, error)

public Firewall(string name, FirewallArgs args, CustomResourceOptions? opts = null)

public Firewall(String name, FirewallArgs args)
public Firewall(String name, FirewallArgs args, CustomResourceOptions options)

type: aws:networkfirewall:Firewall
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args FirewallArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args FirewallArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args FirewallArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args FirewallArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args FirewallArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Firewall Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Firewall resource accepts the following input properties:

FirewallPolicyArn string: The Amazon Resource Name (ARN) of the VPC Firewall policy.
SubnetMappings List<FirewallSubnetMappingArgs>: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
VpcId string: The unique identifier of the VPC where AWS Network Firewall should create the firewall.
DeleteProtection bool: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
Description string: A friendly description of the firewall.
EncryptionConfiguration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
FirewallPolicyChangeProtection bool: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
Name string: A friendly name of the firewall.
SubnetChangeProtection bool: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
Tags Dictionary<string, string>: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

FirewallPolicyArn string: The Amazon Resource Name (ARN) of the VPC Firewall policy.
SubnetMappings []FirewallSubnetMappingArgs: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
VpcId string: The unique identifier of the VPC where AWS Network Firewall should create the firewall.
DeleteProtection bool: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
Description string: A friendly description of the firewall.
EncryptionConfiguration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
FirewallPolicyChangeProtection bool: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
Name string: A friendly name of the firewall.
SubnetChangeProtection bool: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
Tags map[string]string: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

firewallPolicyArn String: The Amazon Resource Name (ARN) of the VPC Firewall policy.
subnetMappings List<FirewallSubnetMappingArgs>: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
vpcId String: The unique identifier of the VPC where AWS Network Firewall should create the firewall.
deleteProtection Boolean: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
description String: A friendly description of the firewall.
encryptionConfiguration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
firewallPolicyChangeProtection Boolean: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
name String: A friendly name of the firewall.
subnetChangeProtection Boolean: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
tags Map<String,String>: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

firewallPolicyArn string: The Amazon Resource Name (ARN) of the VPC Firewall policy.
subnetMappings FirewallSubnetMappingArgs[]: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
vpcId string: The unique identifier of the VPC where AWS Network Firewall should create the firewall.
deleteProtection boolean: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
description string: A friendly description of the firewall.
encryptionConfiguration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
firewallPolicyChangeProtection boolean: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
name string: A friendly name of the firewall.
subnetChangeProtection boolean: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
tags {[key: string]: string}: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

firewall_policy_arn str: The Amazon Resource Name (ARN) of the VPC Firewall policy.
subnet_mappings Sequence[FirewallSubnetMappingArgs]: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
vpc_id str: The unique identifier of the VPC where AWS Network Firewall should create the firewall.
delete_protection bool: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
description str: A friendly description of the firewall.
encryption_configuration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
firewall_policy_change_protection bool: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
name str: A friendly name of the firewall.
subnet_change_protection bool: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
tags Mapping[str, str]: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

firewallPolicyArn String: The Amazon Resource Name (ARN) of the VPC Firewall policy.
subnetMappings List<Property Map>: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
vpcId String: The unique identifier of the VPC where AWS Network Firewall should create the firewall.
deleteProtection Boolean: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
description String: A friendly description of the firewall.
encryptionConfiguration Property Map: KMS encryption configuration settings. See Encryption Configuration below for details.
firewallPolicyChangeProtection Boolean: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
name String: A friendly name of the firewall.
subnetChangeProtection Boolean: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
tags Map<String>: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

Outputs

All input properties are implicitly available as output properties. Additionally, the Firewall resource produces the following output properties:

Arn string: The Amazon Resource Name (ARN) that identifies the firewall.
FirewallStatuses List<FirewallFirewallStatus>: Nested list of information about the current status of the firewall.
Id string: The provider-assigned unique ID for this managed resource.
TagsAll Dictionary<string, string>: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
UpdateToken string: A string token used when updating a firewall.

Arn string: The Amazon Resource Name (ARN) that identifies the firewall.
FirewallStatuses []FirewallFirewallStatus: Nested list of information about the current status of the firewall.
Id string: The provider-assigned unique ID for this managed resource.
TagsAll map[string]string: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
UpdateToken string: A string token used when updating a firewall.

arn String: The Amazon Resource Name (ARN) that identifies the firewall.
firewallStatuses List<FirewallFirewallStatus>: Nested list of information about the current status of the firewall.
id String: The provider-assigned unique ID for this managed resource.
tagsAll Map<String,String>: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
updateToken String: A string token used when updating a firewall.

arn string: The Amazon Resource Name (ARN) that identifies the firewall.
firewallStatuses FirewallFirewallStatus[]: Nested list of information about the current status of the firewall.
id string: The provider-assigned unique ID for this managed resource.
tagsAll {[key: string]: string}: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
updateToken string: A string token used when updating a firewall.

arn str: The Amazon Resource Name (ARN) that identifies the firewall.
firewall_statuses Sequence[FirewallFirewallStatus]: Nested list of information about the current status of the firewall.
id str: The provider-assigned unique ID for this managed resource.
tags_all Mapping[str, str]: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
update_token str: A string token used when updating a firewall.

arn String: The Amazon Resource Name (ARN) that identifies the firewall.
firewallStatuses List<Property Map>: Nested list of information about the current status of the firewall.
id String: The provider-assigned unique ID for this managed resource.
tagsAll Map<String>: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
updateToken String: A string token used when updating a firewall.

Look up Existing Firewall Resource

Get an existing Firewall resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: FirewallState, opts?: CustomResourceOptions): Firewall

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn: Optional[str] = None,
        delete_protection: Optional[bool] = None,
        description: Optional[str] = None,
        encryption_configuration: Optional[FirewallEncryptionConfigurationArgs] = None,
        firewall_policy_arn: Optional[str] = None,
        firewall_policy_change_protection: Optional[bool] = None,
        firewall_statuses: Optional[Sequence[FirewallFirewallStatusArgs]] = None,
        name: Optional[str] = None,
        subnet_change_protection: Optional[bool] = None,
        subnet_mappings: Optional[Sequence[FirewallSubnetMappingArgs]] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        update_token: Optional[str] = None,
        vpc_id: Optional[str] = None) -> Firewall

func GetFirewall(ctx *Context, name string, id IDInput, state *FirewallState, opts ...ResourceOption) (*Firewall, error)

public static Firewall Get(string name, Input<string> id, FirewallState? state, CustomResourceOptions? opts = null)

public static Firewall get(String name, Output<String> id, FirewallState state, CustomResourceOptions options)

Resource lookup is not supported in YAML

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Arn string: The Amazon Resource Name (ARN) that identifies the firewall.
DeleteProtection bool: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
Description string: A friendly description of the firewall.
EncryptionConfiguration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
FirewallPolicyArn string: The Amazon Resource Name (ARN) of the VPC Firewall policy.
FirewallPolicyChangeProtection bool: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
FirewallStatuses List<FirewallFirewallStatusArgs>: Nested list of information about the current status of the firewall.
Name string: A friendly name of the firewall.
SubnetChangeProtection bool: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
SubnetMappings List<FirewallSubnetMappingArgs>: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
Tags Dictionary<string, string>: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
TagsAll Dictionary<string, string>: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
UpdateToken string: A string token used when updating a firewall.
VpcId string: The unique identifier of the VPC where AWS Network Firewall should create the firewall.

Arn string: The Amazon Resource Name (ARN) that identifies the firewall.
DeleteProtection bool: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
Description string: A friendly description of the firewall.
EncryptionConfiguration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
FirewallPolicyArn string: The Amazon Resource Name (ARN) of the VPC Firewall policy.
FirewallPolicyChangeProtection bool: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
FirewallStatuses []FirewallFirewallStatusArgs: Nested list of information about the current status of the firewall.
Name string: A friendly name of the firewall.
SubnetChangeProtection bool: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
SubnetMappings []FirewallSubnetMappingArgs: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
Tags map[string]string: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
TagsAll map[string]string: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
UpdateToken string: A string token used when updating a firewall.
VpcId string: The unique identifier of the VPC where AWS Network Firewall should create the firewall.

arn String: The Amazon Resource Name (ARN) that identifies the firewall.
deleteProtection Boolean: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
description String: A friendly description of the firewall.
encryptionConfiguration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
firewallPolicyArn String: The Amazon Resource Name (ARN) of the VPC Firewall policy.
firewallPolicyChangeProtection Boolean: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
firewallStatuses List<FirewallFirewallStatusArgs>: Nested list of information about the current status of the firewall.
name String: A friendly name of the firewall.
subnetChangeProtection Boolean: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
subnetMappings List<FirewallSubnetMappingArgs>: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
tags Map<String,String>: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
tagsAll Map<String,String>: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
updateToken String: A string token used when updating a firewall.
vpcId String: The unique identifier of the VPC where AWS Network Firewall should create the firewall.

arn string: The Amazon Resource Name (ARN) that identifies the firewall.
deleteProtection boolean: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
description string: A friendly description of the firewall.
encryptionConfiguration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
firewallPolicyArn string: The Amazon Resource Name (ARN) of the VPC Firewall policy.
firewallPolicyChangeProtection boolean: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
firewallStatuses FirewallFirewallStatusArgs[]: Nested list of information about the current status of the firewall.
name string: A friendly name of the firewall.
subnetChangeProtection boolean: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
subnetMappings FirewallSubnetMappingArgs[]: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
tags {[key: string]: string}: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
tagsAll {[key: string]: string}: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
updateToken string: A string token used when updating a firewall.
vpcId string: The unique identifier of the VPC where AWS Network Firewall should create the firewall.

arn str: The Amazon Resource Name (ARN) that identifies the firewall.
delete_protection bool: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
description str: A friendly description of the firewall.
encryption_configuration FirewallEncryptionConfigurationArgs: KMS encryption configuration settings. See Encryption Configuration below for details.
firewall_policy_arn str: The Amazon Resource Name (ARN) of the VPC Firewall policy.
firewall_policy_change_protection bool: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
firewall_statuses Sequence[FirewallFirewallStatusArgs]: Nested list of information about the current status of the firewall.
name str: A friendly name of the firewall.
subnet_change_protection bool: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
subnet_mappings Sequence[FirewallSubnetMappingArgs]: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
tags Mapping[str, str]: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
tags_all Mapping[str, str]: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
update_token str: A string token used when updating a firewall.
vpc_id str: The unique identifier of the VPC where AWS Network Firewall should create the firewall.

arn String: The Amazon Resource Name (ARN) that identifies the firewall.
deleteProtection Boolean: A boolean flag indicating whether it is possible to delete the firewall. Defaults to false.
description String: A friendly description of the firewall.
encryptionConfiguration Property Map: KMS encryption configuration settings. See Encryption Configuration below for details.
firewallPolicyArn String: The Amazon Resource Name (ARN) of the VPC Firewall policy.
firewallPolicyChangeProtection Boolean: A boolean flag indicating whether it is possible to change the associated firewall policy. Defaults to false.
firewallStatuses List<Property Map>: Nested list of information about the current status of the firewall.
name String: A friendly name of the firewall.
subnetChangeProtection Boolean: A boolean flag indicating whether it is possible to change the associated subnet(s). Defaults to false.
subnetMappings List<Property Map>: Set of configuration blocks describing the public subnets. Each subnet must belong to a different Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet. See Subnet Mapping below for details.
tags Map<String>: Map of resource tags to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
tagsAll Map<String>: A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
updateToken String: A string token used when updating a firewall.
vpcId String: The unique identifier of the VPC where AWS Network Firewall should create the firewall.

Supporting Types

FirewallEncryptionConfiguration

Type string: The type of AWS KMS key to use for encryption of your Network Firewall resources. Valid values are CUSTOMER_KMS and AWS_OWNED_KMS_KEY.
KeyId string: The ID of the customer managed key. You can use any of the key identifiers that KMS supports, unless you're using a key that's managed by another account. If you're using a key managed by another account, then specify the key ARN.

Type string: The type of AWS KMS key to use for encryption of your Network Firewall resources. Valid values are CUSTOMER_KMS and AWS_OWNED_KMS_KEY.
KeyId string: The ID of the customer managed key. You can use any of the key identifiers that KMS supports, unless you're using a key that's managed by another account. If you're using a key managed by another account, then specify the key ARN.

type String: The type of AWS KMS key to use for encryption of your Network Firewall resources. Valid values are CUSTOMER_KMS and AWS_OWNED_KMS_KEY.
keyId String: The ID of the customer managed key. You can use any of the key identifiers that KMS supports, unless you're using a key that's managed by another account. If you're using a key managed by another account, then specify the key ARN.

type string: The type of AWS KMS key to use for encryption of your Network Firewall resources. Valid values are CUSTOMER_KMS and AWS_OWNED_KMS_KEY.
keyId string: The ID of the customer managed key. You can use any of the key identifiers that KMS supports, unless you're using a key that's managed by another account. If you're using a key managed by another account, then specify the key ARN.

type str: The type of AWS KMS key to use for encryption of your Network Firewall resources. Valid values are CUSTOMER_KMS and AWS_OWNED_KMS_KEY.
key_id str: The ID of the customer managed key. You can use any of the key identifiers that KMS supports, unless you're using a key that's managed by another account. If you're using a key managed by another account, then specify the key ARN.

type String: The type of AWS KMS key to use for encryption of your Network Firewall resources. Valid values are CUSTOMER_KMS and AWS_OWNED_KMS_KEY.
keyId String: The ID of the customer managed key. You can use any of the key identifiers that KMS supports, unless you're using a key that's managed by another account. If you're using a key managed by another account, then specify the key ARN.

FirewallFirewallStatus

SyncStates List<FirewallFirewallStatusSyncState>: Set of subnets configured for use by the firewall.

SyncStates []FirewallFirewallStatusSyncState: Set of subnets configured for use by the firewall.

syncStates List<FirewallFirewallStatusSyncState>: Set of subnets configured for use by the firewall.

syncStates FirewallFirewallStatusSyncState[]: Set of subnets configured for use by the firewall.

sync_states Sequence[FirewallFirewallStatusSyncState]: Set of subnets configured for use by the firewall.

syncStates List<Property Map>: Set of subnets configured for use by the firewall.

FirewallFirewallStatusSyncState

Attachments List<FirewallFirewallStatusSyncStateAttachment>: Nested list describing the attachment status of the firewall's association with a single VPC subnet.
AvailabilityZone string: The Availability Zone where the subnet is configured.

Attachments []FirewallFirewallStatusSyncStateAttachment: Nested list describing the attachment status of the firewall's association with a single VPC subnet.
AvailabilityZone string: The Availability Zone where the subnet is configured.

attachments List<FirewallFirewallStatusSyncStateAttachment>: Nested list describing the attachment status of the firewall's association with a single VPC subnet.
availabilityZone String: The Availability Zone where the subnet is configured.

attachments FirewallFirewallStatusSyncStateAttachment[]: Nested list describing the attachment status of the firewall's association with a single VPC subnet.
availabilityZone string: The Availability Zone where the subnet is configured.

attachments Sequence[FirewallFirewallStatusSyncStateAttachment]: Nested list describing the attachment status of the firewall's association with a single VPC subnet.
availability_zone str: The Availability Zone where the subnet is configured.

attachments List<Property Map>: Nested list describing the attachment status of the firewall's association with a single VPC subnet.
availabilityZone String: The Availability Zone where the subnet is configured.

FirewallFirewallStatusSyncStateAttachment

EndpointId string: The identifier of the firewall endpoint that AWS Network Firewall has instantiated in the subnet. You use this to identify the firewall endpoint in the VPC route tables, when you redirect the VPC traffic through the endpoint.
SubnetId string: The unique identifier for the subnet.

EndpointId string: The identifier of the firewall endpoint that AWS Network Firewall has instantiated in the subnet. You use this to identify the firewall endpoint in the VPC route tables, when you redirect the VPC traffic through the endpoint.
SubnetId string: The unique identifier for the subnet.

endpointId String: The identifier of the firewall endpoint that AWS Network Firewall has instantiated in the subnet. You use this to identify the firewall endpoint in the VPC route tables, when you redirect the VPC traffic through the endpoint.
subnetId String: The unique identifier for the subnet.

endpointId string: The identifier of the firewall endpoint that AWS Network Firewall has instantiated in the subnet. You use this to identify the firewall endpoint in the VPC route tables, when you redirect the VPC traffic through the endpoint.
subnetId string: The unique identifier for the subnet.

endpoint_id str: The identifier of the firewall endpoint that AWS Network Firewall has instantiated in the subnet. You use this to identify the firewall endpoint in the VPC route tables, when you redirect the VPC traffic through the endpoint.
subnet_id str: The unique identifier for the subnet.

endpointId String: The identifier of the firewall endpoint that AWS Network Firewall has instantiated in the subnet. You use this to identify the firewall endpoint in the VPC route tables, when you redirect the VPC traffic through the endpoint.
subnetId String: The unique identifier for the subnet.

FirewallSubnetMapping

SubnetId string: The unique identifier for the subnet.
IpAddressType string: The subnet's IP address type. Valida values: "DUALSTACK", "IPV4".

SubnetId string: The unique identifier for the subnet.
IpAddressType string: The subnet's IP address type. Valida values: "DUALSTACK", "IPV4".

subnetId String: The unique identifier for the subnet.
ipAddressType String: The subnet's IP address type. Valida values: "DUALSTACK", "IPV4".

subnetId string: The unique identifier for the subnet.
ipAddressType string: The subnet's IP address type. Valida values: "DUALSTACK", "IPV4".

subnet_id str: The unique identifier for the subnet.
ip_address_type str: The subnet's IP address type. Valida values: "DUALSTACK", "IPV4".

subnetId String: The unique identifier for the subnet.
ipAddressType String: The subnet's IP address type. Valida values: "DUALSTACK", "IPV4".

Import

Network Firewall Firewalls can be imported using their ARN.

 $ pulumi import aws:networkfirewall/firewall:Firewall example arn:aws:network-firewall:us-west-1:123456789012:firewall/example

Package Details

Repository: AWS Classic pulumi/pulumi-aws
License: Apache-2.0
Notes: This Pulumi package is based on the aws Terraform Provider.