Get the VM-Series Firewall Amazon Machine Image (AMI) ID

1. Install AWS CLI on the client that you are using to retrieve the AMI ID, and login with your AWS credentials.

   Refer to the AWS documentation for instructions on installing the CLI.
2. Find the AMI-ID with the following CLI command.

   aws ec2 describe-images --filters "Name=product-code,Values=<license-type-value>" Name=name,Values=PA-VM-AWS*<PAN-OS-version>*  --region <region> --output json

    You need to replace the value in the angle brackets <> with the relevant information as shown below:

   • Use the VM-Series product code for each license type. The values are:

     • Bundle 1—

       
       												e9yfvyj3uag5uo5j2hjikv74n
       											

     • Bundle 2—

       
       												hd44w1chf26uv4p52cdynb2o
       											

     • BYOL—

       
       												6njl1pau431dv1qxipg63mvah
       											

   • Use the PAN-OS version— 10.0. If there are multiple feature releases within a PAN-OS version all the AMI-IDs are listed for you. For example,  in 9.0.x, you will view a listing of the AMI IDs for PAN-OS versions 9.0, 9.0.3.xfr, 9.0.5.xfr, and 9.0.6, and you can use the AMI-ID for the PAN-OS version you need.
   • Get the AWS region details from: https://docs.aws.amazon.com/general/latest/gr/rande.html.

   For example: To find the AMI-ID for the VM-Series Bundle 1 for PAN-OS 10.0.0 in US California region, the CLI command is:

   
   							aws ec2 describe-images --filters "Name=product-code,Values=e9yfvyj3uag5uo5j2hjikv74n" "Name=name,Values=PA-VM-AWS*10.0*"  --region us-west-1 --output json
   						

   The output is:

   
   							{
   
               "ProductCodes": [
   
                   {
   
                       "ProductCodeId": "e9yfvyj3uag5uo5j2hjikv74n", 
   
                       "ProductCodeType": "marketplace"
   
                   }
   
               ], 
   
                "VirtualizationType": "hvm", 
   
               "Hypervisor": "xen", 
   
               "ImageOwnerAlias": "aws-marketplace", 
   
               "EnaSupport": true, 
   
               "SriovNetSupport": "simple", 
   
               "ImageId": "ami-06f7a63d7481d0ded", 
   
               "State": "available", 
   
               "BlockDeviceMappings": [
   
                   {
   
                       "DeviceName": "/dev/xvda", 
   
                       "Ebs": {
   
                           "SnapshotId": "snap-0009036179b39824b", 
   
                           "DeleteOnTermination": false, 
   
                           "VolumeType": "gp2", 
   
                           "VolumeSize": 60, 
   
                           "Encrypted": false
   
                       }
   
                   }
   
               ], 
   
               "Architecture": "x86_64", 
   
               "ImageLocation": "aws-marketplace/PA-VM-AWS-10.0.0-f1260463-68e1-4bfb-bf2e-075c2664c1d7-ami-06f7a63d7481d0ded.1", 
   
               "RootDeviceType": "ebs", 
   
               "OwnerId": "679593333241", 
   
               "RootDeviceName": "/dev/xvda", 
   
               "CreationDate": "2020-07-20T12:45:22.000Z", 
   
               "Public": true, 
   
               "ImageType": "machine", 
   
               "Name": "PA-VM-AWS-10.0.0-f1260463-68e1-4bfb-bf2e-075c2664c1d7-ami-06f7a63d7481d0ded.1"
   
           }
   						

   You can also output to a table format. For example, to see AMI for BYOL image for PAN-OS 10.0.2:

   aws ec2 describe-images --filters "Name=product-code,Values=6njl1pau431dv1qxipg63mvah" "Name=name,Values=PA-VM-AWS*10.0.2*" --region us-west-1 --output table --query "Images[*].{Name:Name,AMI:ImageId,State:State}"

   -------------------------------------------------------------------------------------------------------------------------|                          DescribeImages                           |+-----------------------+---------------------------------------------------------------------------------+-------------+|     AMI     |                   Name                    |  State  |+-----------------------+---------------------------------------------------------------------------------+-------------+| ami-037b90bd9b630f594| PA-VM-AWS-10.0.2-7064e142-2859-40a4-ab62-8b0996b842e9-ami-07a0e94019f2a2001.4 | available |+-----------------------+---------------------------------------------------------------------------------+-------------+

   PanOS 11.1.2 and later versions support ARM CPUs in AWS. Use the following command to find ARM AMIs:

   aws ec2 describe-images --filters "Name=name,Values=PA-VMARM-AWS*11.1.*" --region us-east-1 --output table --query "Images[*].{Name:Name,AMI:ImageId,State:State}"