adding back firewall from template with cli

Hello, I'm updating our firewall to be multizone. To do this I must download the template, delete the firewall, modify the template, deploy the template.

I can download the arm template and delete the firewall from az cli

az group export --subscription $s --resource-group $rg --resource-ids $id --include-parameter-default-value
az resource delete --subscription $s --resource-group $rg --name $n --resource-type "Microsoft.Network/azureFirewalls" --verbose

but when I try to do
az deployment group create --subscription $s --resource-group $rg --name $n --template-file $tf

I get 'list' object has no attribute 'get'

Not sure what the issue is, I've put in the actual values for the variables and get the same error.