How to select AWS AMI image older than found on the AWS Marketplace?

• The article provides steps to select and load VM firewall on a different version using AMI ID.

• The default AMI in AWS marketplace for VM-series firewalls is decided based on different factors.
• The version changes from time to time.
• One cannot select a different PAN-OS version to install directly.

• The VM firewall below will use the PAN-OS 10.2.1 as the available software version.
• There is no drop down menu to chose the different version for deployment.

• VM-series Firewalls
• AWS Platforms

1. Install AWS CLI .
2. Find the AMI-ID with the following CLI command. Refer to the Documentation for exact command

aws ec2 describe-images --filters "Name=product-code,Values=<license-type-value>" Name=name,Values=PA-VM-AWS*<PAN-OS-version>*  --region <region> --output json

• An Example how to find the AMI-ID for the VM-Series Bundle 1 for PAN-OS 10.0.0 :

aws ec2 describe-images --filters "Name=product-code,Values=e9yfvyj3uag5uo5j2hjikv74n" "Name=name,Values=PA-VM-AWS*10.0*"  --region us-west-1 --output json

3. From the output, select the "ImageId" matching the version to be installed.

4. Copy the "ImageId",  Goto GUI:  EC2 dashboard > Images > AMIs. On the search bar select "Public images" , and enter the ImageId. Click on "Launch:

5. This will launch the VM firewall on the image version one has selected.

How to find the Amazon Machine Image ID for the VM-Series Panorama