1. Packages
  2. Packages
  3. Oracle Cloud Infrastructure
  4. API Docs
  5. NetworkFirewall
  6. NetworkFirewall
Viewing docs for Oracle Cloud Infrastructure v4.11.0
published on Friday, May 15, 2026 by Pulumi
oci logo
Viewing docs for Oracle Cloud Infrastructure v4.11.0
published on Friday, May 15, 2026 by Pulumi

    This resource provides the Network Firewall resource in Oracle Cloud Infrastructure Network Firewall service. Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/network-firewall/latest/NetworkFirewall

    Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/network_firewall

    Creates a new NetworkFirewall.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as oci from "@pulumi/oci";
    
    const testNetworkFirewall = new oci.networkfirewall.NetworkFirewall("test_network_firewall", {
        compartmentId: compartmentId,
        networkFirewallPolicyId: testNetworkFirewallPolicy.id,
        subnetId: testSubnet.id,
        availabilityDomain: networkFirewallAvailabilityDomain,
        definedTags: {
            "Operations.CostCenter": "42",
        },
        displayName: networkFirewallDisplayName,
        freeformTags: {
            Department: "Finance",
        },
        ipv4address: networkFirewallIpv4address,
        ipv6address: networkFirewallIpv6address,
        natConfiguration: {
            mustEnablePrivateNat: networkFirewallNatConfigurationMustEnablePrivateNat === "true",
        },
        networkSecurityGroupIds: networkFirewallNetworkSecurityGroupIds,
        shape: networkFirewallShape,
    });
    
    import pulumi
    import pulumi_oci as oci
    
    test_network_firewall = oci.networkfirewall.NetworkFirewall("test_network_firewall",
        compartment_id=compartment_id,
        network_firewall_policy_id=test_network_firewall_policy["id"],
        subnet_id=test_subnet["id"],
        availability_domain=network_firewall_availability_domain,
        defined_tags={
            "Operations.CostCenter": "42",
        },
        display_name=network_firewall_display_name,
        freeform_tags={
            "Department": "Finance",
        },
        ipv4address=network_firewall_ipv4address,
        ipv6address=network_firewall_ipv6address,
        nat_configuration={
            "must_enable_private_nat": network_firewall_nat_configuration_must_enable_private_nat == "true",
        },
        network_security_group_ids=network_firewall_network_security_group_ids,
        shape=network_firewall_shape)
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-oci/sdk/v4/go/oci/networkfirewall"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := networkfirewall.NewNetworkFirewall(ctx, "test_network_firewall", &networkfirewall.NetworkFirewallArgs{
    			CompartmentId:           pulumi.Any(compartmentId),
    			NetworkFirewallPolicyId: pulumi.Any(testNetworkFirewallPolicy.Id),
    			SubnetId:                pulumi.Any(testSubnet.Id),
    			AvailabilityDomain:      pulumi.Any(networkFirewallAvailabilityDomain),
    			DefinedTags: pulumi.StringMap{
    				"Operations.CostCenter": pulumi.String("42"),
    			},
    			DisplayName: pulumi.Any(networkFirewallDisplayName),
    			FreeformTags: pulumi.StringMap{
    				"Department": pulumi.String("Finance"),
    			},
    			Ipv4address: pulumi.Any(networkFirewallIpv4address),
    			Ipv6address: pulumi.Any(networkFirewallIpv6address),
    			NatConfiguration: &networkfirewall.NetworkFirewallNatConfigurationArgs{
    				MustEnablePrivateNat: pulumi.Any(networkFirewallNatConfigurationMustEnablePrivateNat),
    			},
    			NetworkSecurityGroupIds: pulumi.Any(networkFirewallNetworkSecurityGroupIds),
    			Shape:                   pulumi.Any(networkFirewallShape),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Oci = Pulumi.Oci;
    
    return await Deployment.RunAsync(() => 
    {
        var testNetworkFirewall = new Oci.NetworkFirewall.NetworkFirewall("test_network_firewall", new()
        {
            CompartmentId = compartmentId,
            NetworkFirewallPolicyId = testNetworkFirewallPolicy.Id,
            SubnetId = testSubnet.Id,
            AvailabilityDomain = networkFirewallAvailabilityDomain,
            DefinedTags = 
            {
                { "Operations.CostCenter", "42" },
            },
            DisplayName = networkFirewallDisplayName,
            FreeformTags = 
            {
                { "Department", "Finance" },
            },
            Ipv4address = networkFirewallIpv4address,
            Ipv6address = networkFirewallIpv6address,
            NatConfiguration = new Oci.NetworkFirewall.Inputs.NetworkFirewallNatConfigurationArgs
            {
                MustEnablePrivateNat = networkFirewallNatConfigurationMustEnablePrivateNat,
            },
            NetworkSecurityGroupIds = networkFirewallNetworkSecurityGroupIds,
            Shape = networkFirewallShape,
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.oci.NetworkFirewall.NetworkFirewall;
    import com.pulumi.oci.NetworkFirewall.NetworkFirewallArgs;
    import com.pulumi.oci.NetworkFirewall.inputs.NetworkFirewallNatConfigurationArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var testNetworkFirewall = new NetworkFirewall("testNetworkFirewall", NetworkFirewallArgs.builder()
                .compartmentId(compartmentId)
                .networkFirewallPolicyId(testNetworkFirewallPolicy.id())
                .subnetId(testSubnet.id())
                .availabilityDomain(networkFirewallAvailabilityDomain)
                .definedTags(Map.of("Operations.CostCenter", "42"))
                .displayName(networkFirewallDisplayName)
                .freeformTags(Map.of("Department", "Finance"))
                .ipv4address(networkFirewallIpv4address)
                .ipv6address(networkFirewallIpv6address)
                .natConfiguration(NetworkFirewallNatConfigurationArgs.builder()
                    .mustEnablePrivateNat(networkFirewallNatConfigurationMustEnablePrivateNat)
                    .build())
                .networkSecurityGroupIds(networkFirewallNetworkSecurityGroupIds)
                .shape(networkFirewallShape)
                .build());
    
        }
    }
    
    resources:
      testNetworkFirewall:
        type: oci:NetworkFirewall:NetworkFirewall
        name: test_network_firewall
        properties:
          compartmentId: ${compartmentId}
          networkFirewallPolicyId: ${testNetworkFirewallPolicy.id}
          subnetId: ${testSubnet.id}
          availabilityDomain: ${networkFirewallAvailabilityDomain}
          definedTags:
            Operations.CostCenter: '42'
          displayName: ${networkFirewallDisplayName}
          freeformTags:
            Department: Finance
          ipv4address: ${networkFirewallIpv4address}
          ipv6address: ${networkFirewallIpv6address}
          natConfiguration:
            mustEnablePrivateNat: ${networkFirewallNatConfigurationMustEnablePrivateNat}
          networkSecurityGroupIds: ${networkFirewallNetworkSecurityGroupIds}
          shape: ${networkFirewallShape}
    
    Example coming soon!
    

    Create NetworkFirewall Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NetworkFirewall(name: string, args: NetworkFirewallArgs, opts?: CustomResourceOptions);
    @overload
    def NetworkFirewall(resource_name: str,
                        args: NetworkFirewallArgs,
                        opts: Optional[ResourceOptions] = None)
    
    @overload
    def NetworkFirewall(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        compartment_id: Optional[str] = None,
                        network_firewall_policy_id: Optional[str] = None,
                        subnet_id: Optional[str] = None,
                        availability_domain: Optional[str] = None,
                        defined_tags: Optional[Mapping[str, str]] = None,
                        display_name: Optional[str] = None,
                        freeform_tags: Optional[Mapping[str, str]] = None,
                        ipv4address: Optional[str] = None,
                        ipv6address: Optional[str] = None,
                        nat_configuration: Optional[NetworkFirewallNatConfigurationArgs] = None,
                        network_security_group_ids: Optional[Sequence[str]] = None,
                        shape: Optional[str] = None)
    func NewNetworkFirewall(ctx *Context, name string, args NetworkFirewallArgs, opts ...ResourceOption) (*NetworkFirewall, error)
    public NetworkFirewall(string name, NetworkFirewallArgs args, CustomResourceOptions? opts = null)
    public NetworkFirewall(String name, NetworkFirewallArgs args)
    public NetworkFirewall(String name, NetworkFirewallArgs args, CustomResourceOptions options)
    
    type: oci:NetworkFirewall:NetworkFirewall
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "oci_networkfirewall_networkfirewall" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args NetworkFirewallArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NetworkFirewallArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NetworkFirewallArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NetworkFirewallArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NetworkFirewallArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var networkFirewallResource = new Oci.NetworkFirewall.NetworkFirewall("networkFirewallResource", new()
    {
        CompartmentId = "string",
        NetworkFirewallPolicyId = "string",
        SubnetId = "string",
        AvailabilityDomain = "string",
        DefinedTags = 
        {
            { "string", "string" },
        },
        DisplayName = "string",
        FreeformTags = 
        {
            { "string", "string" },
        },
        Ipv4address = "string",
        Ipv6address = "string",
        NatConfiguration = new Oci.NetworkFirewall.Inputs.NetworkFirewallNatConfigurationArgs
        {
            MustEnablePrivateNat = false,
            NatIpAddressLists = new[]
            {
                "string",
            },
        },
        NetworkSecurityGroupIds = new[]
        {
            "string",
        },
        Shape = "string",
    });
    
    example, err := networkfirewall.NewNetworkFirewall(ctx, "networkFirewallResource", &networkfirewall.NetworkFirewallArgs{
    	CompartmentId:           pulumi.String("string"),
    	NetworkFirewallPolicyId: pulumi.String("string"),
    	SubnetId:                pulumi.String("string"),
    	AvailabilityDomain:      pulumi.String("string"),
    	DefinedTags: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	DisplayName: pulumi.String("string"),
    	FreeformTags: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	Ipv4address: pulumi.String("string"),
    	Ipv6address: pulumi.String("string"),
    	NatConfiguration: &networkfirewall.NetworkFirewallNatConfigurationArgs{
    		MustEnablePrivateNat: pulumi.Bool(false),
    		NatIpAddressLists: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    	},
    	NetworkSecurityGroupIds: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Shape: pulumi.String("string"),
    })
    
    resource "oci_networkfirewall_networkfirewall" "networkFirewallResource" {
      compartment_id             = "string"
      network_firewall_policy_id = "string"
      subnet_id                  = "string"
      availability_domain        = "string"
      defined_tags = {
        "string" = "string"
      }
      display_name = "string"
      freeform_tags = {
        "string" = "string"
      }
      ipv4address = "string"
      ipv6address = "string"
      nat_configuration = {
        must_enable_private_nat = false
        nat_ip_address_lists    = ["string"]
      }
      network_security_group_ids = ["string"]
      shape                      = "string"
    }
    
    var networkFirewallResource = new NetworkFirewall("networkFirewallResource", NetworkFirewallArgs.builder()
        .compartmentId("string")
        .networkFirewallPolicyId("string")
        .subnetId("string")
        .availabilityDomain("string")
        .definedTags(Map.of("string", "string"))
        .displayName("string")
        .freeformTags(Map.of("string", "string"))
        .ipv4address("string")
        .ipv6address("string")
        .natConfiguration(NetworkFirewallNatConfigurationArgs.builder()
            .mustEnablePrivateNat(false)
            .natIpAddressLists("string")
            .build())
        .networkSecurityGroupIds("string")
        .shape("string")
        .build());
    
    network_firewall_resource = oci.networkfirewall.NetworkFirewall("networkFirewallResource",
        compartment_id="string",
        network_firewall_policy_id="string",
        subnet_id="string",
        availability_domain="string",
        defined_tags={
            "string": "string",
        },
        display_name="string",
        freeform_tags={
            "string": "string",
        },
        ipv4address="string",
        ipv6address="string",
        nat_configuration={
            "must_enable_private_nat": False,
            "nat_ip_address_lists": ["string"],
        },
        network_security_group_ids=["string"],
        shape="string")
    
    const networkFirewallResource = new oci.networkfirewall.NetworkFirewall("networkFirewallResource", {
        compartmentId: "string",
        networkFirewallPolicyId: "string",
        subnetId: "string",
        availabilityDomain: "string",
        definedTags: {
            string: "string",
        },
        displayName: "string",
        freeformTags: {
            string: "string",
        },
        ipv4address: "string",
        ipv6address: "string",
        natConfiguration: {
            mustEnablePrivateNat: false,
            natIpAddressLists: ["string"],
        },
        networkSecurityGroupIds: ["string"],
        shape: "string",
    });
    
    type: oci:NetworkFirewall:NetworkFirewall
    properties:
        availabilityDomain: string
        compartmentId: string
        definedTags:
            string: string
        displayName: string
        freeformTags:
            string: string
        ipv4address: string
        ipv6address: string
        natConfiguration:
            mustEnablePrivateNat: false
            natIpAddressLists:
                - string
        networkFirewallPolicyId: string
        networkSecurityGroupIds:
            - string
        shape: string
        subnetId: string
    

    NetworkFirewall Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The NetworkFirewall resource accepts the following input properties:

    CompartmentId string
    (Updatable) The OCID of the compartment containing the Network Firewall.
    NetworkFirewallPolicyId string
    (Updatable) The OCID of the Network Firewall Policy.
    SubnetId string

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    AvailabilityDomain string
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    DefinedTags Dictionary<string, string>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    DisplayName string
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    FreeformTags Dictionary<string, string>
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    Ipv4address string
    IPv4 address for the Network Firewall.
    Ipv6address string
    IPv6 address for the Network Firewall.
    NatConfiguration NetworkFirewallNatConfiguration
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    NetworkSecurityGroupIds List<string>
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    Shape string
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    CompartmentId string
    (Updatable) The OCID of the compartment containing the Network Firewall.
    NetworkFirewallPolicyId string
    (Updatable) The OCID of the Network Firewall Policy.
    SubnetId string

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    AvailabilityDomain string
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    DefinedTags map[string]string
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    DisplayName string
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    FreeformTags map[string]string
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    Ipv4address string
    IPv4 address for the Network Firewall.
    Ipv6address string
    IPv6 address for the Network Firewall.
    NatConfiguration NetworkFirewallNatConfigurationArgs
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    NetworkSecurityGroupIds []string
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    Shape string
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    compartment_id string
    (Updatable) The OCID of the compartment containing the Network Firewall.
    network_firewall_policy_id string
    (Updatable) The OCID of the Network Firewall Policy.
    subnet_id string

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    availability_domain string
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    defined_tags map(string)
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    display_name string
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeform_tags map(string)
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address string
    IPv4 address for the Network Firewall.
    ipv6address string
    IPv6 address for the Network Firewall.
    nat_configuration object
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    network_security_group_ids list(string)
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape string
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    compartmentId String
    (Updatable) The OCID of the compartment containing the Network Firewall.
    networkFirewallPolicyId String
    (Updatable) The OCID of the Network Firewall Policy.
    subnetId String

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    availabilityDomain String
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    definedTags Map<String,String>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    displayName String
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeformTags Map<String,String>
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address String
    IPv4 address for the Network Firewall.
    ipv6address String
    IPv6 address for the Network Firewall.
    natConfiguration NatConfiguration
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    networkSecurityGroupIds List<String>
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape String
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    compartmentId string
    (Updatable) The OCID of the compartment containing the Network Firewall.
    networkFirewallPolicyId string
    (Updatable) The OCID of the Network Firewall Policy.
    subnetId string

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    availabilityDomain string
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    definedTags {[key: string]: string}
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    displayName string
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeformTags {[key: string]: string}
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address string
    IPv4 address for the Network Firewall.
    ipv6address string
    IPv6 address for the Network Firewall.
    natConfiguration NetworkFirewallNatConfiguration
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    networkSecurityGroupIds string[]
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape string
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    compartment_id str
    (Updatable) The OCID of the compartment containing the Network Firewall.
    network_firewall_policy_id str
    (Updatable) The OCID of the Network Firewall Policy.
    subnet_id str

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    availability_domain str
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    defined_tags Mapping[str, str]
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    display_name str
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeform_tags Mapping[str, str]
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address str
    IPv4 address for the Network Firewall.
    ipv6address str
    IPv6 address for the Network Firewall.
    nat_configuration NetworkFirewallNatConfigurationArgs
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    network_security_group_ids Sequence[str]
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape str
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    compartmentId String
    (Updatable) The OCID of the compartment containing the Network Firewall.
    networkFirewallPolicyId String
    (Updatable) The OCID of the Network Firewall Policy.
    subnetId String

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    availabilityDomain String
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    definedTags Map<String>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    displayName String
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeformTags Map<String>
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address String
    IPv4 address for the Network Firewall.
    ipv6address String
    IPv6 address for the Network Firewall.
    natConfiguration Property Map
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    networkSecurityGroupIds List<String>
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape String
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NetworkFirewall resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    LifecycleDetails string
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    State string
    The current state of the Network Firewall.
    SystemTags Dictionary<string, string>
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    TimeCreated string
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    TimeUpdated string
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    Id string
    The provider-assigned unique ID for this managed resource.
    LifecycleDetails string
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    State string
    The current state of the Network Firewall.
    SystemTags map[string]string
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    TimeCreated string
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    TimeUpdated string
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    id string
    The provider-assigned unique ID for this managed resource.
    lifecycle_details string
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    state string
    The current state of the Network Firewall.
    system_tags map(string)
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    time_created string
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    time_updated string
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    id String
    The provider-assigned unique ID for this managed resource.
    lifecycleDetails String
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    state String
    The current state of the Network Firewall.
    systemTags Map<String,String>
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated String
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeUpdated String
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    id string
    The provider-assigned unique ID for this managed resource.
    lifecycleDetails string
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    state string
    The current state of the Network Firewall.
    systemTags {[key: string]: string}
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated string
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeUpdated string
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    id str
    The provider-assigned unique ID for this managed resource.
    lifecycle_details str
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    state str
    The current state of the Network Firewall.
    system_tags Mapping[str, str]
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    time_created str
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    time_updated str
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    id String
    The provider-assigned unique ID for this managed resource.
    lifecycleDetails String
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    state String
    The current state of the Network Firewall.
    systemTags Map<String>
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated String
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeUpdated String
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

    Look up Existing NetworkFirewall Resource

    Get an existing NetworkFirewall resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NetworkFirewallState, opts?: CustomResourceOptions): NetworkFirewall
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            availability_domain: Optional[str] = None,
            compartment_id: Optional[str] = None,
            defined_tags: Optional[Mapping[str, str]] = None,
            display_name: Optional[str] = None,
            freeform_tags: Optional[Mapping[str, str]] = None,
            ipv4address: Optional[str] = None,
            ipv6address: Optional[str] = None,
            lifecycle_details: Optional[str] = None,
            nat_configuration: Optional[NetworkFirewallNatConfigurationArgs] = None,
            network_firewall_policy_id: Optional[str] = None,
            network_security_group_ids: Optional[Sequence[str]] = None,
            shape: Optional[str] = None,
            state: Optional[str] = None,
            subnet_id: Optional[str] = None,
            system_tags: Optional[Mapping[str, str]] = None,
            time_created: Optional[str] = None,
            time_updated: Optional[str] = None) -> NetworkFirewall
    func GetNetworkFirewall(ctx *Context, name string, id IDInput, state *NetworkFirewallState, opts ...ResourceOption) (*NetworkFirewall, error)
    public static NetworkFirewall Get(string name, Input<string> id, NetworkFirewallState? state, CustomResourceOptions? opts = null)
    public static NetworkFirewall get(String name, Output<String> id, NetworkFirewallState state, CustomResourceOptions options)
    resources:  _:    type: oci:NetworkFirewall:NetworkFirewall    get:      id: ${id}
    import {
      to = oci_networkfirewall_networkfirewall.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AvailabilityDomain string
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    CompartmentId string
    (Updatable) The OCID of the compartment containing the Network Firewall.
    DefinedTags Dictionary<string, string>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    DisplayName string
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    FreeformTags Dictionary<string, string>
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    Ipv4address string
    IPv4 address for the Network Firewall.
    Ipv6address string
    IPv6 address for the Network Firewall.
    LifecycleDetails string
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    NatConfiguration NetworkFirewallNatConfiguration
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    NetworkFirewallPolicyId string
    (Updatable) The OCID of the Network Firewall Policy.
    NetworkSecurityGroupIds List<string>
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    Shape string
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    State string
    The current state of the Network Firewall.
    SubnetId string

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    SystemTags Dictionary<string, string>
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    TimeCreated string
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    TimeUpdated string
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    AvailabilityDomain string
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    CompartmentId string
    (Updatable) The OCID of the compartment containing the Network Firewall.
    DefinedTags map[string]string
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    DisplayName string
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    FreeformTags map[string]string
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    Ipv4address string
    IPv4 address for the Network Firewall.
    Ipv6address string
    IPv6 address for the Network Firewall.
    LifecycleDetails string
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    NatConfiguration NetworkFirewallNatConfigurationArgs
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    NetworkFirewallPolicyId string
    (Updatable) The OCID of the Network Firewall Policy.
    NetworkSecurityGroupIds []string
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    Shape string
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    State string
    The current state of the Network Firewall.
    SubnetId string

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    SystemTags map[string]string
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    TimeCreated string
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    TimeUpdated string
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    availability_domain string
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    compartment_id string
    (Updatable) The OCID of the compartment containing the Network Firewall.
    defined_tags map(string)
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    display_name string
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeform_tags map(string)
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address string
    IPv4 address for the Network Firewall.
    ipv6address string
    IPv6 address for the Network Firewall.
    lifecycle_details string
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    nat_configuration object
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    network_firewall_policy_id string
    (Updatable) The OCID of the Network Firewall Policy.
    network_security_group_ids list(string)
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape string
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    state string
    The current state of the Network Firewall.
    subnet_id string

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    system_tags map(string)
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    time_created string
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    time_updated string
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    availabilityDomain String
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    compartmentId String
    (Updatable) The OCID of the compartment containing the Network Firewall.
    definedTags Map<String,String>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    displayName String
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeformTags Map<String,String>
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address String
    IPv4 address for the Network Firewall.
    ipv6address String
    IPv6 address for the Network Firewall.
    lifecycleDetails String
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    natConfiguration NatConfiguration
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    networkFirewallPolicyId String
    (Updatable) The OCID of the Network Firewall Policy.
    networkSecurityGroupIds List<String>
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape String
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    state String
    The current state of the Network Firewall.
    subnetId String

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    systemTags Map<String,String>
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated String
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeUpdated String
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    availabilityDomain string
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    compartmentId string
    (Updatable) The OCID of the compartment containing the Network Firewall.
    definedTags {[key: string]: string}
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    displayName string
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeformTags {[key: string]: string}
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address string
    IPv4 address for the Network Firewall.
    ipv6address string
    IPv6 address for the Network Firewall.
    lifecycleDetails string
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    natConfiguration NetworkFirewallNatConfiguration
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    networkFirewallPolicyId string
    (Updatable) The OCID of the Network Firewall Policy.
    networkSecurityGroupIds string[]
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape string
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    state string
    The current state of the Network Firewall.
    subnetId string

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    systemTags {[key: string]: string}
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated string
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeUpdated string
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    availability_domain str
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    compartment_id str
    (Updatable) The OCID of the compartment containing the Network Firewall.
    defined_tags Mapping[str, str]
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    display_name str
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeform_tags Mapping[str, str]
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address str
    IPv4 address for the Network Firewall.
    ipv6address str
    IPv6 address for the Network Firewall.
    lifecycle_details str
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    nat_configuration NetworkFirewallNatConfigurationArgs
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    network_firewall_policy_id str
    (Updatable) The OCID of the Network Firewall Policy.
    network_security_group_ids Sequence[str]
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape str
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    state str
    The current state of the Network Firewall.
    subnet_id str

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    system_tags Mapping[str, str]
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    time_created str
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    time_updated str
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    availabilityDomain String
    Availability Domain where Network Firewall instance is created. To get a list of availability domains for a tenancy, use ListAvailabilityDomains operation. Example: kIdk:PHX-AD-1
    compartmentId String
    (Updatable) The OCID of the compartment containing the Network Firewall.
    definedTags Map<String>
    (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
    displayName String
    (Updatable) A user-friendly name for the Network Firewall. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    freeformTags Map<String>
    (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
    ipv4address String
    IPv4 address for the Network Firewall.
    ipv6address String
    IPv6 address for the Network Firewall.
    lifecycleDetails String
    A message describing the current state in more detail. For example, it can be used to provide actionable information for a resource in 'FAILED' state.
    natConfiguration Property Map
    (Updatable) Request to configure Network Address Translation (NAT) on a firewall. To perform NAT on traffic passing the private NAT IPs to the firewall, the attached network firewall policy must also have NAT rules and NAT configuration must be enabled. If NAT configuration is enabled and the attached firewall policy does not contain NAT rule then NAT IPs will get allocated but NAT will not be performed on any traffic.
    networkFirewallPolicyId String
    (Updatable) The OCID of the Network Firewall Policy.
    networkSecurityGroupIds List<String>
    (Updatable) An array of network security groups OCID associated with the Network Firewall.
    shape String
    (Updatable) The shape of a firewall to determine the bandwidth that the firewall allows.
    state String
    The current state of the Network Firewall.
    subnetId String

    The OCID of the subnet associated with the Network Firewall.

    ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

    systemTags Map<String>
    Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}
    timeCreated String
    The time at which the Network Firewall was created in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeUpdated String
    The time at which the Network Firewall was updated in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

    Supporting Types

    NetworkFirewallNatConfiguration, NetworkFirewallNatConfigurationArgs

    MustEnablePrivateNat bool
    (Updatable) The value of this field must be set to true if the network firewall policy being applied contains NAT rules. The value of this field can be set to false if the network firewall policy being applied or the currently attached firewall policy doesn't contain NAT rules.
    NatIpAddressLists List<string>
    An array of Private NAT IP addresses that are associated with the Network Firewall. These IP addresses are reserved for NAT and shouldn't be used for any other purpose in the subnet. This list contains IP addresses when NAT configuration is enabled. This list is empty or null IP when NAT configuration is disabled.
    MustEnablePrivateNat bool
    (Updatable) The value of this field must be set to true if the network firewall policy being applied contains NAT rules. The value of this field can be set to false if the network firewall policy being applied or the currently attached firewall policy doesn't contain NAT rules.
    NatIpAddressLists []string
    An array of Private NAT IP addresses that are associated with the Network Firewall. These IP addresses are reserved for NAT and shouldn't be used for any other purpose in the subnet. This list contains IP addresses when NAT configuration is enabled. This list is empty or null IP when NAT configuration is disabled.
    must_enable_private_nat bool
    (Updatable) The value of this field must be set to true if the network firewall policy being applied contains NAT rules. The value of this field can be set to false if the network firewall policy being applied or the currently attached firewall policy doesn't contain NAT rules.
    nat_ip_address_lists list(string)
    An array of Private NAT IP addresses that are associated with the Network Firewall. These IP addresses are reserved for NAT and shouldn't be used for any other purpose in the subnet. This list contains IP addresses when NAT configuration is enabled. This list is empty or null IP when NAT configuration is disabled.
    mustEnablePrivateNat Boolean
    (Updatable) The value of this field must be set to true if the network firewall policy being applied contains NAT rules. The value of this field can be set to false if the network firewall policy being applied or the currently attached firewall policy doesn't contain NAT rules.
    natIpAddressLists List<String>
    An array of Private NAT IP addresses that are associated with the Network Firewall. These IP addresses are reserved for NAT and shouldn't be used for any other purpose in the subnet. This list contains IP addresses when NAT configuration is enabled. This list is empty or null IP when NAT configuration is disabled.
    mustEnablePrivateNat boolean
    (Updatable) The value of this field must be set to true if the network firewall policy being applied contains NAT rules. The value of this field can be set to false if the network firewall policy being applied or the currently attached firewall policy doesn't contain NAT rules.
    natIpAddressLists string[]
    An array of Private NAT IP addresses that are associated with the Network Firewall. These IP addresses are reserved for NAT and shouldn't be used for any other purpose in the subnet. This list contains IP addresses when NAT configuration is enabled. This list is empty or null IP when NAT configuration is disabled.
    must_enable_private_nat bool
    (Updatable) The value of this field must be set to true if the network firewall policy being applied contains NAT rules. The value of this field can be set to false if the network firewall policy being applied or the currently attached firewall policy doesn't contain NAT rules.
    nat_ip_address_lists Sequence[str]
    An array of Private NAT IP addresses that are associated with the Network Firewall. These IP addresses are reserved for NAT and shouldn't be used for any other purpose in the subnet. This list contains IP addresses when NAT configuration is enabled. This list is empty or null IP when NAT configuration is disabled.
    mustEnablePrivateNat Boolean
    (Updatable) The value of this field must be set to true if the network firewall policy being applied contains NAT rules. The value of this field can be set to false if the network firewall policy being applied or the currently attached firewall policy doesn't contain NAT rules.
    natIpAddressLists List<String>
    An array of Private NAT IP addresses that are associated with the Network Firewall. These IP addresses are reserved for NAT and shouldn't be used for any other purpose in the subnet. This list contains IP addresses when NAT configuration is enabled. This list is empty or null IP when NAT configuration is disabled.

    Import

    NetworkFirewalls can be imported using the id, e.g.

    $ pulumi import oci:NetworkFirewall/networkFirewall:NetworkFirewall test_network_firewall "id"
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Viewing docs for Oracle Cloud Infrastructure v4.11.0
    published on Friday, May 15, 2026 by Pulumi
      Try Pulumi Cloud free. Your team will thank you.