azure.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManager

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = new azure.core.ResourceGroup("example", {
    name: "example-resource-group",
    location: "westeurope",
});
const examplePublicIp = new azure.network.PublicIp("example", {
    name: "example-public-ip",
    location: example.location,
    resourceGroupName: example.name,
    allocationMethod: "Static",
    sku: "Standard",
});
const exampleNetworkSecurityGroup = new azure.network.NetworkSecurityGroup("example", {
    name: "example-nsg",
    location: example.location,
    resourceGroupName: example.name,
});
const exampleVirtualNetwork = new azure.network.VirtualNetwork("example", {
    name: "example-vnet",
    addressSpaces: ["10.0.0.0/16"],
    location: example.location,
    resourceGroupName: example.name,
    tags: {
        environment: "Production",
    },
});
const trust = new azure.network.Subnet("trust", {
    name: "example-trust-subnet",
    resourceGroupName: example.name,
    virtualNetworkName: exampleVirtualNetwork.name,
    addressPrefixes: ["10.0.1.0/24"],
    delegations: [{
        name: "trusted",
        serviceDelegation: {
            name: "PaloAltoNetworks.Cloudngfw/firewalls",
            actions: ["Microsoft.Network/virtualNetworks/subnets/join/action"],
        },
    }],
});
const trustSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("trust", {
    subnetId: trust.id,
    networkSecurityGroupId: exampleNetworkSecurityGroup.id,
});
const untrust = new azure.network.Subnet("untrust", {
    name: "example-untrust-subnet",
    resourceGroupName: example.name,
    virtualNetworkName: exampleVirtualNetwork.name,
    addressPrefixes: ["10.0.2.0/24"],
    delegations: [{
        name: "untrusted",
        serviceDelegation: {
            name: "PaloAltoNetworks.Cloudngfw/firewalls",
            actions: ["Microsoft.Network/virtualNetworks/subnets/join/action"],
        },
    }],
});
const untrustSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("untrust", {
    subnetId: untrust.id,
    networkSecurityGroupId: exampleNetworkSecurityGroup.id,
});
const exampleNextGenerationFirewallVirtualNetworkStrataCloudManager = new azure.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManager("example", {
    name: "example-ngfwvh",
    resourceGroupName: example.name,
    location: example.location,
    strataCloudManagerTenantName: "example-scm-tenant",
    networkProfile: {
        publicIpAddressIds: [examplePublicIp.id],
        vnetConfiguration: {
            virtualNetworkId: exampleVirtualNetwork.id,
            trustedSubnetId: trust.id,
            untrustedSubnetId: untrust.id,
        },
    },
});

import pulumi
import pulumi_azure as azure

example = azure.core.ResourceGroup("example",
    name="example-resource-group",
    location="westeurope")
example_public_ip = azure.network.PublicIp("example",
    name="example-public-ip",
    location=example.location,
    resource_group_name=example.name,
    allocation_method="Static",
    sku="Standard")
example_network_security_group = azure.network.NetworkSecurityGroup("example",
    name="example-nsg",
    location=example.location,
    resource_group_name=example.name)
example_virtual_network = azure.network.VirtualNetwork("example",
    name="example-vnet",
    address_spaces=["10.0.0.0/16"],
    location=example.location,
    resource_group_name=example.name,
    tags={
        "environment": "Production",
    })
trust = azure.network.Subnet("trust",
    name="example-trust-subnet",
    resource_group_name=example.name,
    virtual_network_name=example_virtual_network.name,
    address_prefixes=["10.0.1.0/24"],
    delegations=[{
        "name": "trusted",
        "service_delegation": {
            "name": "PaloAltoNetworks.Cloudngfw/firewalls",
            "actions": ["Microsoft.Network/virtualNetworks/subnets/join/action"],
        },
    }])
trust_subnet_network_security_group_association = azure.network.SubnetNetworkSecurityGroupAssociation("trust",
    subnet_id=trust.id,
    network_security_group_id=example_network_security_group.id)
untrust = azure.network.Subnet("untrust",
    name="example-untrust-subnet",
    resource_group_name=example.name,
    virtual_network_name=example_virtual_network.name,
    address_prefixes=["10.0.2.0/24"],
    delegations=[{
        "name": "untrusted",
        "service_delegation": {
            "name": "PaloAltoNetworks.Cloudngfw/firewalls",
            "actions": ["Microsoft.Network/virtualNetworks/subnets/join/action"],
        },
    }])
untrust_subnet_network_security_group_association = azure.network.SubnetNetworkSecurityGroupAssociation("untrust",
    subnet_id=untrust.id,
    network_security_group_id=example_network_security_group.id)
example_next_generation_firewall_virtual_network_strata_cloud_manager = azure.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManager("example",
    name="example-ngfwvh",
    resource_group_name=example.name,
    location=example.location,
    strata_cloud_manager_tenant_name="example-scm-tenant",
    network_profile={
        "public_ip_address_ids": [example_public_ip.id],
        "vnet_configuration": {
            "virtual_network_id": example_virtual_network.id,
            "trusted_subnet_id": trust.id,
            "untrusted_subnet_id": untrust.id,
        },
    })

package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/network"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/paloalto"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resource-group"),
			Location: pulumi.String("westeurope"),
		})
		if err != nil {
			return err
		}
		examplePublicIp, err := network.NewPublicIp(ctx, "example", &network.PublicIpArgs{
			Name:              pulumi.String("example-public-ip"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			AllocationMethod:  pulumi.String("Static"),
			Sku:               pulumi.String("Standard"),
		})
		if err != nil {
			return err
		}
		exampleNetworkSecurityGroup, err := network.NewNetworkSecurityGroup(ctx, "example", &network.NetworkSecurityGroupArgs{
			Name:              pulumi.String("example-nsg"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
		})
		if err != nil {
			return err
		}
		exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "example", &network.VirtualNetworkArgs{
			Name: pulumi.String("example-vnet"),
			AddressSpaces: pulumi.StringArray{
				pulumi.String("10.0.0.0/16"),
			},
			Location:          example.Location,
			ResourceGroupName: example.Name,
			Tags: pulumi.StringMap{
				"environment": pulumi.String("Production"),
			},
		})
		if err != nil {
			return err
		}
		trust, err := network.NewSubnet(ctx, "trust", &network.SubnetArgs{
			Name:               pulumi.String("example-trust-subnet"),
			ResourceGroupName:  example.Name,
			VirtualNetworkName: exampleVirtualNetwork.Name,
			AddressPrefixes: pulumi.StringArray{
				pulumi.String("10.0.1.0/24"),
			},
			Delegations: network.SubnetDelegationArray{
				&network.SubnetDelegationArgs{
					Name: pulumi.String("trusted"),
					ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
						Name: pulumi.String("PaloAltoNetworks.Cloudngfw/firewalls"),
						Actions: pulumi.StringArray{
							pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = network.NewSubnetNetworkSecurityGroupAssociation(ctx, "trust", &network.SubnetNetworkSecurityGroupAssociationArgs{
			SubnetId:               trust.ID(),
			NetworkSecurityGroupId: exampleNetworkSecurityGroup.ID(),
		})
		if err != nil {
			return err
		}
		untrust, err := network.NewSubnet(ctx, "untrust", &network.SubnetArgs{
			Name:               pulumi.String("example-untrust-subnet"),
			ResourceGroupName:  example.Name,
			VirtualNetworkName: exampleVirtualNetwork.Name,
			AddressPrefixes: pulumi.StringArray{
				pulumi.String("10.0.2.0/24"),
			},
			Delegations: network.SubnetDelegationArray{
				&network.SubnetDelegationArgs{
					Name: pulumi.String("untrusted"),
					ServiceDelegation: &network.SubnetDelegationServiceDelegationArgs{
						Name: pulumi.String("PaloAltoNetworks.Cloudngfw/firewalls"),
						Actions: pulumi.StringArray{
							pulumi.String("Microsoft.Network/virtualNetworks/subnets/join/action"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = network.NewSubnetNetworkSecurityGroupAssociation(ctx, "untrust", &network.SubnetNetworkSecurityGroupAssociationArgs{
			SubnetId:               untrust.ID(),
			NetworkSecurityGroupId: exampleNetworkSecurityGroup.ID(),
		})
		if err != nil {
			return err
		}
		_, err = paloalto.NewNextGenerationFirewallVirtualNetworkStrataCloudManager(ctx, "example", &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerArgs{
			Name:                         pulumi.String("example-ngfwvh"),
			ResourceGroupName:            example.Name,
			Location:                     example.Location,
			StrataCloudManagerTenantName: pulumi.String("example-scm-tenant"),
			NetworkProfile: &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileArgs{
				PublicIpAddressIds: pulumi.StringArray{
					examplePublicIp.ID(),
				},
				VnetConfiguration: &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfigurationArgs{
					VirtualNetworkId:  exampleVirtualNetwork.ID(),
					TrustedSubnetId:   trust.ID(),
					UntrustedSubnetId: untrust.ID(),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resource-group",
        Location = "westeurope",
    });

    var examplePublicIp = new Azure.Network.PublicIp("example", new()
    {
        Name = "example-public-ip",
        Location = example.Location,
        ResourceGroupName = example.Name,
        AllocationMethod = "Static",
        Sku = "Standard",
    });

    var exampleNetworkSecurityGroup = new Azure.Network.NetworkSecurityGroup("example", new()
    {
        Name = "example-nsg",
        Location = example.Location,
        ResourceGroupName = example.Name,
    });

    var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("example", new()
    {
        Name = "example-vnet",
        AddressSpaces = new[]
        {
            "10.0.0.0/16",
        },
        Location = example.Location,
        ResourceGroupName = example.Name,
        Tags = 
        {
            { "environment", "Production" },
        },
    });

    var trust = new Azure.Network.Subnet("trust", new()
    {
        Name = "example-trust-subnet",
        ResourceGroupName = example.Name,
        VirtualNetworkName = exampleVirtualNetwork.Name,
        AddressPrefixes = new[]
        {
            "10.0.1.0/24",
        },
        Delegations = new[]
        {
            new Azure.Network.Inputs.SubnetDelegationArgs
            {
                Name = "trusted",
                ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
                {
                    Name = "PaloAltoNetworks.Cloudngfw/firewalls",
                    Actions = new[]
                    {
                        "Microsoft.Network/virtualNetworks/subnets/join/action",
                    },
                },
            },
        },
    });

    var trustSubnetNetworkSecurityGroupAssociation = new Azure.Network.SubnetNetworkSecurityGroupAssociation("trust", new()
    {
        SubnetId = trust.Id,
        NetworkSecurityGroupId = exampleNetworkSecurityGroup.Id,
    });

    var untrust = new Azure.Network.Subnet("untrust", new()
    {
        Name = "example-untrust-subnet",
        ResourceGroupName = example.Name,
        VirtualNetworkName = exampleVirtualNetwork.Name,
        AddressPrefixes = new[]
        {
            "10.0.2.0/24",
        },
        Delegations = new[]
        {
            new Azure.Network.Inputs.SubnetDelegationArgs
            {
                Name = "untrusted",
                ServiceDelegation = new Azure.Network.Inputs.SubnetDelegationServiceDelegationArgs
                {
                    Name = "PaloAltoNetworks.Cloudngfw/firewalls",
                    Actions = new[]
                    {
                        "Microsoft.Network/virtualNetworks/subnets/join/action",
                    },
                },
            },
        },
    });

    var untrustSubnetNetworkSecurityGroupAssociation = new Azure.Network.SubnetNetworkSecurityGroupAssociation("untrust", new()
    {
        SubnetId = untrust.Id,
        NetworkSecurityGroupId = exampleNetworkSecurityGroup.Id,
    });

    var exampleNextGenerationFirewallVirtualNetworkStrataCloudManager = new Azure.PaloAlto.NextGenerationFirewallVirtualNetworkStrataCloudManager("example", new()
    {
        Name = "example-ngfwvh",
        ResourceGroupName = example.Name,
        Location = example.Location,
        StrataCloudManagerTenantName = "example-scm-tenant",
        NetworkProfile = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileArgs
        {
            PublicIpAddressIds = new[]
            {
                examplePublicIp.Id,
            },
            VnetConfiguration = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfigurationArgs
            {
                VirtualNetworkId = exampleVirtualNetwork.Id,
                TrustedSubnetId = trust.Id,
                UntrustedSubnetId = untrust.Id,
            },
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.PublicIp;
import com.pulumi.azure.network.PublicIpArgs;
import com.pulumi.azure.network.NetworkSecurityGroup;
import com.pulumi.azure.network.NetworkSecurityGroupArgs;
import com.pulumi.azure.network.VirtualNetwork;
import com.pulumi.azure.network.VirtualNetworkArgs;
import com.pulumi.azure.network.Subnet;
import com.pulumi.azure.network.SubnetArgs;
import com.pulumi.azure.network.inputs.SubnetDelegationArgs;
import com.pulumi.azure.network.inputs.SubnetDelegationServiceDelegationArgs;
import com.pulumi.azure.network.SubnetNetworkSecurityGroupAssociation;
import com.pulumi.azure.network.SubnetNetworkSecurityGroupAssociationArgs;
import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManager;
import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerArgs;
import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileArgs;
import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example-resource-group")
            .location("westeurope")
            .build());

        var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()
            .name("example-public-ip")
            .location(example.location())
            .resourceGroupName(example.name())
            .allocationMethod("Static")
            .sku("Standard")
            .build());

        var exampleNetworkSecurityGroup = new NetworkSecurityGroup("exampleNetworkSecurityGroup", NetworkSecurityGroupArgs.builder()
            .name("example-nsg")
            .location(example.location())
            .resourceGroupName(example.name())
            .build());

        var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()
            .name("example-vnet")
            .addressSpaces("10.0.0.0/16")
            .location(example.location())
            .resourceGroupName(example.name())
            .tags(Map.of("environment", "Production"))
            .build());

        var trust = new Subnet("trust", SubnetArgs.builder()
            .name("example-trust-subnet")
            .resourceGroupName(example.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.0.1.0/24")
            .delegations(SubnetDelegationArgs.builder()
                .name("trusted")
                .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
                    .name("PaloAltoNetworks.Cloudngfw/firewalls")
                    .actions("Microsoft.Network/virtualNetworks/subnets/join/action")
                    .build())
                .build())
            .build());

        var trustSubnetNetworkSecurityGroupAssociation = new SubnetNetworkSecurityGroupAssociation("trustSubnetNetworkSecurityGroupAssociation", SubnetNetworkSecurityGroupAssociationArgs.builder()
            .subnetId(trust.id())
            .networkSecurityGroupId(exampleNetworkSecurityGroup.id())
            .build());

        var untrust = new Subnet("untrust", SubnetArgs.builder()
            .name("example-untrust-subnet")
            .resourceGroupName(example.name())
            .virtualNetworkName(exampleVirtualNetwork.name())
            .addressPrefixes("10.0.2.0/24")
            .delegations(SubnetDelegationArgs.builder()
                .name("untrusted")
                .serviceDelegation(SubnetDelegationServiceDelegationArgs.builder()
                    .name("PaloAltoNetworks.Cloudngfw/firewalls")
                    .actions("Microsoft.Network/virtualNetworks/subnets/join/action")
                    .build())
                .build())
            .build());

        var untrustSubnetNetworkSecurityGroupAssociation = new SubnetNetworkSecurityGroupAssociation("untrustSubnetNetworkSecurityGroupAssociation", SubnetNetworkSecurityGroupAssociationArgs.builder()
            .subnetId(untrust.id())
            .networkSecurityGroupId(exampleNetworkSecurityGroup.id())
            .build());

        var exampleNextGenerationFirewallVirtualNetworkStrataCloudManager = new NextGenerationFirewallVirtualNetworkStrataCloudManager("exampleNextGenerationFirewallVirtualNetworkStrataCloudManager", NextGenerationFirewallVirtualNetworkStrataCloudManagerArgs.builder()
            .name("example-ngfwvh")
            .resourceGroupName(example.name())
            .location(example.location())
            .strataCloudManagerTenantName("example-scm-tenant")
            .networkProfile(NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileArgs.builder()
                .publicIpAddressIds(examplePublicIp.id())
                .vnetConfiguration(NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfigurationArgs.builder()
                    .virtualNetworkId(exampleVirtualNetwork.id())
                    .trustedSubnetId(trust.id())
                    .untrustedSubnetId(untrust.id())
                    .build())
                .build())
            .build());

    }
}

resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resource-group
      location: westeurope
  examplePublicIp:
    type: azure:network:PublicIp
    name: example
    properties:
      name: example-public-ip
      location: ${example.location}
      resourceGroupName: ${example.name}
      allocationMethod: Static
      sku: Standard
  exampleNetworkSecurityGroup:
    type: azure:network:NetworkSecurityGroup
    name: example
    properties:
      name: example-nsg
      location: ${example.location}
      resourceGroupName: ${example.name}
  exampleVirtualNetwork:
    type: azure:network:VirtualNetwork
    name: example
    properties:
      name: example-vnet
      addressSpaces:
        - 10.0.0.0/16
      location: ${example.location}
      resourceGroupName: ${example.name}
      tags:
        environment: Production
  trust:
    type: azure:network:Subnet
    properties:
      name: example-trust-subnet
      resourceGroupName: ${example.name}
      virtualNetworkName: ${exampleVirtualNetwork.name}
      addressPrefixes:
        - 10.0.1.0/24
      delegations:
        - name: trusted
          serviceDelegation:
            name: PaloAltoNetworks.Cloudngfw/firewalls
            actions:
              - Microsoft.Network/virtualNetworks/subnets/join/action
  trustSubnetNetworkSecurityGroupAssociation:
    type: azure:network:SubnetNetworkSecurityGroupAssociation
    name: trust
    properties:
      subnetId: ${trust.id}
      networkSecurityGroupId: ${exampleNetworkSecurityGroup.id}
  untrust:
    type: azure:network:Subnet
    properties:
      name: example-untrust-subnet
      resourceGroupName: ${example.name}
      virtualNetworkName: ${exampleVirtualNetwork.name}
      addressPrefixes:
        - 10.0.2.0/24
      delegations:
        - name: untrusted
          serviceDelegation:
            name: PaloAltoNetworks.Cloudngfw/firewalls
            actions:
              - Microsoft.Network/virtualNetworks/subnets/join/action
  untrustSubnetNetworkSecurityGroupAssociation:
    type: azure:network:SubnetNetworkSecurityGroupAssociation
    name: untrust
    properties:
      subnetId: ${untrust.id}
      networkSecurityGroupId: ${exampleNetworkSecurityGroup.id}
  exampleNextGenerationFirewallVirtualNetworkStrataCloudManager:
    type: azure:paloalto:NextGenerationFirewallVirtualNetworkStrataCloudManager
    name: example
    properties:
      name: example-ngfwvh
      resourceGroupName: ${example.name}
      location: ${example.location}
      strataCloudManagerTenantName: example-scm-tenant
      networkProfile:
        publicIpAddressIds:
          - ${examplePublicIp.id}
        vnetConfiguration:
          virtualNetworkId: ${exampleVirtualNetwork.id}
          trustedSubnetId: ${trust.id}
          untrustedSubnetId: ${untrust.id}

var nextGenerationFirewallVirtualNetworkStrataCloudManagerResource = new Azure.PaloAlto.NextGenerationFirewallVirtualNetworkStrataCloudManager("nextGenerationFirewallVirtualNetworkStrataCloudManagerResource", new()
{
    NetworkProfile = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileArgs
    {
        PublicIpAddressIds = new[]
        {
            "string",
        },
        VnetConfiguration = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfigurationArgs
        {
            VirtualNetworkId = "string",
            IpOfTrustForUserDefinedRoutes = "string",
            TrustedSubnetId = "string",
            UntrustedSubnetId = "string",
        },
        EgressNatIpAddressIds = new[]
        {
            "string",
        },
        EgressNatIpAddresses = new[]
        {
            "string",
        },
        PublicIpAddresses = new[]
        {
            "string",
        },
        TrustedAddressRanges = new[]
        {
            "string",
        },
    },
    ResourceGroupName = "string",
    StrataCloudManagerTenantName = "string",
    DestinationNats = new[]
    {
        new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatArgs
        {
            Name = "string",
            Protocol = "string",
            BackendConfig = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatBackendConfigArgs
            {
                Port = 0,
                PublicIpAddress = "string",
            },
            FrontendConfig = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatFrontendConfigArgs
            {
                Port = 0,
                PublicIpAddressId = "string",
            },
        },
    },
    DnsSettings = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerDnsSettingsArgs
    {
        AzureDnsServers = new[]
        {
            "string",
        },
        DnsServers = new[]
        {
            "string",
        },
        UseAzureDns = false,
    },
    Identity = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualNetworkStrataCloudManagerIdentityArgs
    {
        IdentityIds = new[]
        {
            "string",
        },
        Type = "string",
    },
    Location = "string",
    MarketplaceOfferId = "string",
    Name = "string",
    PlanId = "string",
    Tags = 
    {
        { "string", "string" },
    },
});

example, err := paloalto.NewNextGenerationFirewallVirtualNetworkStrataCloudManager(ctx, "nextGenerationFirewallVirtualNetworkStrataCloudManagerResource", &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerArgs{
	NetworkProfile: &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileArgs{
		PublicIpAddressIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		VnetConfiguration: &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfigurationArgs{
			VirtualNetworkId:              pulumi.String("string"),
			IpOfTrustForUserDefinedRoutes: pulumi.String("string"),
			TrustedSubnetId:               pulumi.String("string"),
			UntrustedSubnetId:             pulumi.String("string"),
		},
		EgressNatIpAddressIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		EgressNatIpAddresses: pulumi.StringArray{
			pulumi.String("string"),
		},
		PublicIpAddresses: pulumi.StringArray{
			pulumi.String("string"),
		},
		TrustedAddressRanges: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	ResourceGroupName:            pulumi.String("string"),
	StrataCloudManagerTenantName: pulumi.String("string"),
	DestinationNats: paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatArray{
		&paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatArgs{
			Name:     pulumi.String("string"),
			Protocol: pulumi.String("string"),
			BackendConfig: &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatBackendConfigArgs{
				Port:            pulumi.Int(0),
				PublicIpAddress: pulumi.String("string"),
			},
			FrontendConfig: &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatFrontendConfigArgs{
				Port:              pulumi.Int(0),
				PublicIpAddressId: pulumi.String("string"),
			},
		},
	},
	DnsSettings: &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerDnsSettingsArgs{
		AzureDnsServers: pulumi.StringArray{
			pulumi.String("string"),
		},
		DnsServers: pulumi.StringArray{
			pulumi.String("string"),
		},
		UseAzureDns: pulumi.Bool(false),
	},
	Identity: &paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerIdentityArgs{
		IdentityIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		Type: pulumi.String("string"),
	},
	Location:           pulumi.String("string"),
	MarketplaceOfferId: pulumi.String("string"),
	Name:               pulumi.String("string"),
	PlanId:             pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

var nextGenerationFirewallVirtualNetworkStrataCloudManagerResource = new NextGenerationFirewallVirtualNetworkStrataCloudManager("nextGenerationFirewallVirtualNetworkStrataCloudManagerResource", NextGenerationFirewallVirtualNetworkStrataCloudManagerArgs.builder()
    .networkProfile(NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileArgs.builder()
        .publicIpAddressIds("string")
        .vnetConfiguration(NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfigurationArgs.builder()
            .virtualNetworkId("string")
            .ipOfTrustForUserDefinedRoutes("string")
            .trustedSubnetId("string")
            .untrustedSubnetId("string")
            .build())
        .egressNatIpAddressIds("string")
        .egressNatIpAddresses("string")
        .publicIpAddresses("string")
        .trustedAddressRanges("string")
        .build())
    .resourceGroupName("string")
    .strataCloudManagerTenantName("string")
    .destinationNats(NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatArgs.builder()
        .name("string")
        .protocol("string")
        .backendConfig(NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatBackendConfigArgs.builder()
            .port(0)
            .publicIpAddress("string")
            .build())
        .frontendConfig(NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatFrontendConfigArgs.builder()
            .port(0)
            .publicIpAddressId("string")
            .build())
        .build())
    .dnsSettings(NextGenerationFirewallVirtualNetworkStrataCloudManagerDnsSettingsArgs.builder()
        .azureDnsServers("string")
        .dnsServers("string")
        .useAzureDns(false)
        .build())
    .identity(NextGenerationFirewallVirtualNetworkStrataCloudManagerIdentityArgs.builder()
        .identityIds("string")
        .type("string")
        .build())
    .location("string")
    .marketplaceOfferId("string")
    .name("string")
    .planId("string")
    .tags(Map.of("string", "string"))
    .build());

next_generation_firewall_virtual_network_strata_cloud_manager_resource = azure.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManager("nextGenerationFirewallVirtualNetworkStrataCloudManagerResource",
    network_profile={
        "public_ip_address_ids": ["string"],
        "vnet_configuration": {
            "virtual_network_id": "string",
            "ip_of_trust_for_user_defined_routes": "string",
            "trusted_subnet_id": "string",
            "untrusted_subnet_id": "string",
        },
        "egress_nat_ip_address_ids": ["string"],
        "egress_nat_ip_addresses": ["string"],
        "public_ip_addresses": ["string"],
        "trusted_address_ranges": ["string"],
    },
    resource_group_name="string",
    strata_cloud_manager_tenant_name="string",
    destination_nats=[{
        "name": "string",
        "protocol": "string",
        "backend_config": {
            "port": 0,
            "public_ip_address": "string",
        },
        "frontend_config": {
            "port": 0,
            "public_ip_address_id": "string",
        },
    }],
    dns_settings={
        "azure_dns_servers": ["string"],
        "dns_servers": ["string"],
        "use_azure_dns": False,
    },
    identity={
        "identity_ids": ["string"],
        "type": "string",
    },
    location="string",
    marketplace_offer_id="string",
    name="string",
    plan_id="string",
    tags={
        "string": "string",
    })

const nextGenerationFirewallVirtualNetworkStrataCloudManagerResource = new azure.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManager("nextGenerationFirewallVirtualNetworkStrataCloudManagerResource", {
    networkProfile: {
        publicIpAddressIds: ["string"],
        vnetConfiguration: {
            virtualNetworkId: "string",
            ipOfTrustForUserDefinedRoutes: "string",
            trustedSubnetId: "string",
            untrustedSubnetId: "string",
        },
        egressNatIpAddressIds: ["string"],
        egressNatIpAddresses: ["string"],
        publicIpAddresses: ["string"],
        trustedAddressRanges: ["string"],
    },
    resourceGroupName: "string",
    strataCloudManagerTenantName: "string",
    destinationNats: [{
        name: "string",
        protocol: "string",
        backendConfig: {
            port: 0,
            publicIpAddress: "string",
        },
        frontendConfig: {
            port: 0,
            publicIpAddressId: "string",
        },
    }],
    dnsSettings: {
        azureDnsServers: ["string"],
        dnsServers: ["string"],
        useAzureDns: false,
    },
    identity: {
        identityIds: ["string"],
        type: "string",
    },
    location: "string",
    marketplaceOfferId: "string",
    name: "string",
    planId: "string",
    tags: {
        string: "string",
    },
});

type: azure:paloalto:NextGenerationFirewallVirtualNetworkStrataCloudManager
properties:
    destinationNats:
        - backendConfig:
            port: 0
            publicIpAddress: string
          frontendConfig:
            port: 0
            publicIpAddressId: string
          name: string
          protocol: string
    dnsSettings:
        azureDnsServers:
            - string
        dnsServers:
            - string
        useAzureDns: false
    identity:
        identityIds:
            - string
        type: string
    location: string
    marketplaceOfferId: string
    name: string
    networkProfile:
        egressNatIpAddressIds:
            - string
        egressNatIpAddresses:
            - string
        publicIpAddressIds:
            - string
        publicIpAddresses:
            - string
        trustedAddressRanges:
            - string
        vnetConfiguration:
            ipOfTrustForUserDefinedRoutes: string
            trustedSubnetId: string
            untrustedSubnetId: string
            virtualNetworkId: string
    planId: string
    resourceGroupName: string
    strataCloudManagerTenantName: string
    tags:
        string: string