Focus

VM-Series Deployment Guide

Get the VM-Series Firewall Amazon Machine Image (AMI) ID

Table of Contents

Get the VM-Series Firewall Amazon Machine Image (AMI) ID

If you want to automate the process of deploying the VM-Series firewall, learn how to get the AMI ID for the VM-Series firewall.

Use the following instructions to find the AMI ID for the VM-Series firewall that matches the PAN-OS version, license type, and AWS region in which you want to launch the VM-Series firewall.

Install AWS CLI on the client that you are using to retrieve the AMI ID, and login with your AWS credentials.
Refer to the AWS documentation for instructions on installing the CLI.

Find the AMI-ID with the following CLI command.

aws ec2 describe-images --filters "Name=product-code,Values=<license-type-value>" Name=name,Values=PA-VM-AWS*<PAN-OS-version>*  --region <region> --output json

You need to replace the value in the angle brackets <> with the relevant information as shown below:

Use the VM-Series product code for each license type. The values are:

Bundle 1—


												e9yfvyj3uag5uo5j2hjikv74n

Bundle 2—


												hd44w1chf26uv4p52cdynb2o

BYOL—


												6njl1pau431dv1qxipg63mvah

Use the PAN-OS version— 10.0. If there are multiple feature releases within a PAN-OS version all the AMI-IDs are listed for you. For example, in 9.0.x, you will view a listing of the AMI IDs for PAN-OS versions 9.0, 9.0.3.xfr, 9.0.5.xfr, and 9.0.6, and you can use the AMI-ID for the PAN-OS version you need.
Get the AWS region details from: https://docs.aws.amazon.com/general/latest/gr/rande.html.

For example: To find the AMI-ID for the VM-Series Bundle 1 for PAN-OS 10.0.0 in US California region, the CLI command is:


							aws ec2 describe-images --filters "Name=product-code,Values=e9yfvyj3uag5uo5j2hjikv74n" "Name=name,Values=PA-VM-AWS*10.0*"  --region us-west-1 --output json

The output is:


							{

            "ProductCodes": [

                {

                    "ProductCodeId": "e9yfvyj3uag5uo5j2hjikv74n", 

                    "ProductCodeType": "marketplace"

                }

            ], 

             "VirtualizationType": "hvm", 

            "Hypervisor": "xen", 

            "ImageOwnerAlias": "aws-marketplace", 

            "EnaSupport": true, 

            "SriovNetSupport": "simple", 

            "ImageId": "ami-06f7a63d7481d0ded", 

            "State": "available", 

            "BlockDeviceMappings": [

                {

                    "DeviceName": "/dev/xvda", 

                    "Ebs": {

                        "SnapshotId": "snap-0009036179b39824b", 

                        "DeleteOnTermination": false, 

                        "VolumeType": "gp2", 

                        "VolumeSize": 60, 

                        "Encrypted": false

                    }

                }

            ], 

            "Architecture": "x86_64", 

            "ImageLocation": "aws-marketplace/PA-VM-AWS-10.0.0-f1260463-68e1-4bfb-bf2e-075c2664c1d7-ami-06f7a63d7481d0ded.1", 

            "RootDeviceType": "ebs", 

            "OwnerId": "679593333241", 

            "RootDeviceName": "/dev/xvda", 

            "CreationDate": "2020-07-20T12:45:22.000Z", 

            "Public": true, 

            "ImageType": "machine", 

            "Name": "PA-VM-AWS-10.0.0-f1260463-68e1-4bfb-bf2e-075c2664c1d7-ami-06f7a63d7481d0ded.1"

        }

You can also output to a table format. For example, to see AMI for BYOL image for PAN-OS 10.0.2:

aws ec2 describe-images --filters "Name=product-code,Values=6njl1pau431dv1qxipg63mvah" "Name=name,Values=PA-VM-AWS*10.0.2*" --region us-west-1 --output table --query "Images[*].{Name:Name,AMI:ImageId,State:State}"

-------------------------------------------------------------------------------------------------------------------------|                          DescribeImages                           |+-----------------------+---------------------------------------------------------------------------------+-------------+|     AMI     |                   Name                    |  State  |+-----------------------+---------------------------------------------------------------------------------+-------------+| ami-037b90bd9b630f594| PA-VM-AWS-10.0.2-7064e142-2859-40a4-ab62-8b0996b842e9-ami-07a0e94019f2a2001.4 | available |+-----------------------+---------------------------------------------------------------------------------+-------------+

AMI on AWS GovCloud

Planning Worksheet for the VM-Series in the AWS VPC