Get the VM-Series Firewall Amazon Machine Image (AMI) ID

If you want to automate the process of deploying the VM-Series firewall, learn how to get the AMI ID for the VM-Series firewall.
Use the following instructions to find the AMI ID for the VM-Series firewall that matches the PAN-OS version, license type,  and AWS region in which you want to launch the VM-Series firewall.
  1. Install AWS CLI on the client that you are using to retrieve the AMI ID, and login with your AWS credentials.
    Refer to the AWS documentation for instructions on installing the CLI.
  2. Find the AMI-ID with the following CLI command.
    aws ec2 describe-images --filters "Name=product-code,Values=
    <license-type-value>
    " Name=name,Values=PA-VM-AWS*
    <PAN-OS-version>
    *  --region
    <region>
    --output table --query "Images[*].{Name:Name,AMI:ImageId,State:State}
    Code copied to clipboard
    Unable to copy due to lack of browser support.
     You need to replace the value in the angle brackets <> with the relevant information as shown below:
    • Use the VM-Series product code for each license type. The values are:
      • Bundle 1—
        e9yfvyj3uag5uo5j2hjikv74n
        Code copied to clipboard
        Unable to copy due to lack of browser support.
      • Bundle 2—
        hd44w1chf26uv4p52cdynb2o
        Code copied to clipboard
        Unable to copy due to lack of browser support.
      • BYOL—
        6njl1pau431dv1qxipg63mvah
        Code copied to clipboard
        Unable to copy due to lack of browser support.
    • Use the PAN-OS version— 10.0. If there are multiple feature releases within a PAN-OS version all the AMI-IDs are listed for you. For example,  in 9.0.x, you will view a listing of the AMI IDs for PAN-OS versions 9.0, 9.0.3.xfr, 9.0.5.xfr, and 9.0.6, and you can use the AMI-ID for the PAN-OS version you need.
    For example: To find the AMI-ID for the VM-Series Bundle 1 for PAN-OS 10.0.0 in US California region, the CLI command is:
    aws ec2 describe-images --filters "Name=product-code,Values=e9yfvyj3uag5uo5j2hjikv74n" "Name=name,Values=PA-VM-AWS*10.0*"  --region us-west-1 --output json
    Code copied to clipboard
    Unable to copy due to lack of browser support.
    The output is:
    { "ProductCodes": [ { "ProductCodeId": "e9yfvyj3uag5uo5j2hjikv74n", "ProductCodeType": "marketplace" } ], "VirtualizationType": "hvm", "Hypervisor": "xen", "ImageOwnerAlias": "aws-marketplace", "EnaSupport": true, "SriovNetSupport": "simple", "ImageId": "ami-06f7a63d7481d0ded", "State": "available", "BlockDeviceMappings": [ { "DeviceName": "/dev/xvda", "Ebs": { "SnapshotId": "snap-0009036179b39824b", "DeleteOnTermination": false, "VolumeType": "gp2", "VolumeSize": 60, "Encrypted": false } } ], "Architecture": "x86_64", "ImageLocation": "aws-marketplace/PA-VM-AWS-10.0.0-f1260463-68e1-4bfb-bf2e-075c2664c1d7-ami-06f7a63d7481d0ded.1", "RootDeviceType": "ebs", "OwnerId": "679593333241", "RootDeviceName": "/dev/xvda", "CreationDate": "2020-07-20T12:45:22.000Z", "Public": true, "ImageType": "machine", "Name": "PA-VM-AWS-10.0.0-f1260463-68e1-4bfb-bf2e-075c2664c1d7-ami-06f7a63d7481d0ded.1" }
    Code copied to clipboard
    Unable to copy due to lack of browser support.
    You can also output to a table format. For example, to see AMI for BYOL image for PAN-OS 10.0.2:
    aws ec2 describe-images --filters "Name=product-code,Values=6njl1pau431dv1qxipg63mvah" "Name=name,Values=PA-VM-AWS*10.0.2*" --region us-west-1 --output table --query "Images[*].{Name:Name,AMI:ImageId,State:State}"
    Code copied to clipboard
    Unable to copy due to lack of browser support.
    -------------------------------------------------------------------------------------------------------------------------| DescribeImages |+-----------------------+---------------------------------------------------------------------------------+-------------+| AMI | Name | State |+-----------------------+---------------------------------------------------------------------------------+-------------+| ami-037b90bd9b630f594| PA-VM-AWS-10.0.2-7064e142-2859-40a4-ab62-8b0996b842e9-ami-07a0e94019f2a2001.4 | available |+-----------------------+---------------------------------------------------------------------------------+-------------+
    Code copied to clipboard
    Unable to copy due to lack of browser support.

Recommended For You