gcloud-help/gcloud/alpha/network-security/firewall-endpoints/create

NAME
    gcloud alpha network-security firewall-endpoints create - create a Firewall
        Plus endpoint

SYNOPSIS
    gcloud alpha network-security firewall-endpoints create
        (FIREWALL_ENDPOINT : --organization=ORGANIZATION --zone=ZONE) [--async]
        [--billing-project=BILLING_PROJECT] [--block-partial-http]
        [--content-cloud-region=CONTENT_CLOUD_REGION]
        [--description=DESCRIPTION] [--enable-jumbo-frames] [--enable-wildfire]
        [--enable-wildfire-analysis-logging] [--labels=[KEY=VALUE,...]]
        [--max-wait=MAX_WAIT; default="60m"]
        [--target-firewall-attachment=TARGET_FIREWALL_ATTACHMENT]
        [--wildfire-analysis-action=WILDFIRE_ANALYSIS_ACTION]
        [--wildfire-analysis-timeout=WILDFIRE_ANALYSIS_TIMEOUT]
        [--wildfire-lookup-action=WILDFIRE_LOOKUP_ACTION]
        [--wildfire-lookup-timeout=WILDFIRE_LOOKUP_TIMEOUT]
        [--wildfire-region=WILDFIRE_REGION] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    (ALPHA) Create a firewall endpoint. Successful creation of an endpoint
    results in an endpoint in READY state. Check the progress of endpoint
    creation by using gcloud network-security firewall-endpoints list.

    For more examples, refer to the EXAMPLES section below.

EXAMPLES
    To create a firewall endpoint called my-endpoint, in zone us-central1-a and
    organization ID 1234, run:

        $ gcloud alpha network-security firewall-endpoints create \
            my-endpoint --zone=us-central1-a --organization=1234

POSITIONAL ARGUMENTS
     Firewall endpoint resource - Firewall Plus. The arguments in this group
     can be used to specify the attributes of this resource. (NOTE) Some
     attributes are not given arguments in this group but can be set in other
     ways.

     To set the project attribute:
      ◆ provide the argument FIREWALL_ENDPOINT on the command line with a
        fully specified name;
      ◆ set the property core/project. This resource can be one of the
        following types:
        [networksecurity.organizations.locations.firewallEndpoints,
        networksecurity.projects.locations.firewallEndpoints].

     This must be specified.

       FIREWALL_ENDPOINT
          ID of the firewall endpoint or fully qualified identifier for the
          firewall endpoint.

          To set the endpoint-name attribute:
          ▸ provide the argument FIREWALL_ENDPOINT on the command line.

          This positional argument must be specified if any of the other
          arguments in this group are specified.

       --organization=ORGANIZATION
          Organization ID of the firewall endpoint.

          To set the organization attribute:
          ▸ provide the argument FIREWALL_ENDPOINT on the command line with a
            fully specified name;
          ▸ provide the argument --organization on the command line. Must be
            specified for resource of type
            [networksecurity.organizations.locations.firewallEndpoints].

       --zone=ZONE
          Zone of the firewall endpoint.

          To set the zone attribute:
          ▸ provide the argument FIREWALL_ENDPOINT on the command line with a
            fully specified name;
          ▸ provide the argument --zone on the command line.

FLAGS
     --async
        Return immediately, without waiting for the operation in progress to
        complete. The default is True. Enabled by default, use --no-async to
        disable.

     --billing-project=BILLING_PROJECT
        The Google Cloud project ID to use for API enablement check, quota, and
        endpoint uptime billing. Overrides the default billing/quota_project
        property value for this command invocation.

     --block-partial-http
        Whether the endpoint will block HTTP partial responses. Defaults to
        false.

     --content-cloud-region=CONTENT_CLOUD_REGION
        The content cloud region the endpoint will use. Defaults to the nearest
        available region.

     --description=DESCRIPTION
        Description of the endpoint

     --enable-jumbo-frames
        Enable jumbo frames for the firewall endpoint. To disable jumbo frames,
        use --no-enable-jumbo-frames.

     --enable-wildfire
        If set to true, enable WildFire functionality on the endpoint. Use
        --enable-wildfire to enable. To disable, use --no-enable-wildfire.

     --enable-wildfire-analysis-logging
        Whether to disable WildFire submission log generation for files that
        timeout during WildFire inline cloud analysis. Defaults to false.

     --labels=[KEY=VALUE,...]
        List of label KEY=VALUE pairs to add.

        Keys must start with a lowercase character and contain only hyphens
        (-), underscores (_), lowercase characters, and numbers. Values must
        contain only hyphens (-), underscores (_), lowercase characters, and
        numbers.

     --max-wait=MAX_WAIT; default="60m"
        Time to synchronously wait for the operation to complete, after which
        the operation continues asynchronously. Ignored if --no-async isn't
        specified. See $ gcloud topic datetimes for information on time
        formats.

     --target-firewall-attachment=TARGET_FIREWALL_ATTACHMENT
        Target firewall attachment where third party endpoint forwards traffic.

     --wildfire-analysis-action=WILDFIRE_ANALYSIS_ACTION
        The action to take on WildFire inline cloud analysis timeout.
        WILDFIRE_ANALYSIS_ACTION must be one of: ALLOW, DENY.

     --wildfire-analysis-timeout=WILDFIRE_ANALYSIS_TIMEOUT
        The timeout (in milliseconds) on a file being held while WildFire
        inline cloud analysis is performed.

     --wildfire-lookup-action=WILDFIRE_LOOKUP_ACTION
        The action to take on WildFire real time signature lookup timeout.
        WILDFIRE_LOOKUP_ACTION must be one of: ALLOW, DENY.

     --wildfire-lookup-timeout=WILDFIRE_LOOKUP_TIMEOUT
        The timeout (in milliseconds) to hold a file while the WildFire real
        time signature cloud performs a signature lookup.

     --wildfire-region=WILDFIRE_REGION
        The region WildFire submissions from this endpoint will be sent to for
        analysis by WildFire. Defaults to the nearest available region.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
    access allowlist. These variants are also available:

        $ gcloud network-security firewall-endpoints create

        $ gcloud beta network-security firewall-endpoints create