Get the VM-Series Firewall Amazon Machine Image (AMI) ID

If you want to automate the process of deploying the VM-Series firewall, learn how to get the AMI ID for the VM-Series firewall.
Use the following instructions to find the AMI ID for the VM-Series firewall that matches the PAN-OS version, license type,  and AWS region in which you want to launch the VM-Series firewall.
  1. Install AWS CLI on the client that you are using to retrieve the AMI ID, and login with your AWS credentials.
    Refer to the AWS documentation for instructions on installing the CLI.
  2. Find the AMI-ID with the following CLI command.
    aws ec2 describe-images --filters "Name=product-code,Values=
    " Name=name,Values=PA-VM-AWS*
    *  --region
    --output json
     You need to replace the value in the angle brackets <> with the relevant information as shown below:
    • Use the VM-Series product code for each license type. The values are:
      • Bundle 1—
      • Bundle 2—
      • BYOL—
    • Use the PAN-OS version— 10.0. If there are multiple feature releases within a PAN-OS version all the AMI-IDs are listed for you. For example,  in 9.0.x, you will view a listing of the AMI IDs for PAN-OS versions 9.0, 9.0.3.xfr, 9.0.5.xfr, and 9.0.6, and you can use the AMI-ID for the PAN-OS version you need.
    For example: To find the AMI-ID for the VM-Series Bundle 1 for PAN-OS 10.0.0 in US California region, the CLI command is:
    aws ec2 describe-images --filters "Name=product-code,Values=e9yfvyj3uag5uo5j2hjikv74n" "Name=name,Values=PA-VM-AWS*10.0*"  --region us-west-1 --output json
    The output is:
    { "ProductCodes": [ { "ProductCodeId": "e9yfvyj3uag5uo5j2hjikv74n", "ProductCodeType": "marketplace" } ], "VirtualizationType": "hvm", "Hypervisor": "xen", "ImageOwnerAlias": "aws-marketplace", "EnaSupport": true, "SriovNetSupport": "simple", "ImageId": "ami-06f7a63d7481d0ded", "State": "available", "BlockDeviceMappings": [ { "DeviceName": "/dev/xvda", "Ebs": { "SnapshotId": "snap-0009036179b39824b", "DeleteOnTermination": false, "VolumeType": "gp2", "VolumeSize": 60, "Encrypted": false } } ], "Architecture": "x86_64", "ImageLocation": "aws-marketplace/PA-VM-AWS-10.0.0-f1260463-68e1-4bfb-bf2e-075c2664c1d7-ami-06f7a63d7481d0ded.1", "RootDeviceType": "ebs", "OwnerId": "679593333241", "RootDeviceName": "/dev/xvda", "CreationDate": "2020-07-20T12:45:22.000Z", "Public": true, "ImageType": "machine", "Name": "PA-VM-AWS-10.0.0-f1260463-68e1-4bfb-bf2e-075c2664c1d7-ami-06f7a63d7481d0ded.1" }
    You can also output to a table format. For example, to see AMI for BYOL image for PAN-OS 10.0.2:
    aws ec2 describe-images --filters "Name=product-code,Values=6njl1pau431dv1qxipg63mvah" "Name=name,Values=PA-VM-AWS*10.0.2*" --region us-west-1 --output table --query "Images[*].{Name:Name,AMI:ImageId,State:State}"
    -------------------------------------------------------------------------------------------------------------------------| DescribeImages |+-----------------------+---------------------------------------------------------------------------------+-------------+| AMI | Name | State |+-----------------------+---------------------------------------------------------------------------------+-------------+| ami-037b90bd9b630f594| PA-VM-AWS-10.0.2-7064e142-2859-40a4-ab62-8b0996b842e9-ami-07a0e94019f2a2001.4 | available |+-----------------------+---------------------------------------------------------------------------------+-------------+

Recommended For You