Single configuration for multi-cloud firewall deployment

An apparatus for configuring resources of a service distributed across multiple cloud service providers, comprising:

• a storage configured to store instructions;
• and
• a processor configured to execute the instructions and cause the processor to:
• receive a request to configure a firewall in a cloud service provider, the request including a tag including a name that identifies a single firewall configuration information, wherein the single firewall configuration information is identified based on a name included in a tag included in the request and directions associated with network traffic included in the tag for egress and ingress firewalls;
• and
• provide derived firewall information from the single firewall configuration information based on an identity of the cloud service provider and the tag, wherein the single firewall configuration information includes network information for connecting the firewall to a private network in the cloud service provider.