» panos_address_group

This resource allows you to add/update/delete address groups.

Address groups are either statically defined or dynamically defined, so only static_addresses or dynamic_match should be defined within a given address group.

» Import Name

<vsys>:<name>

» Example Usage

# Static group
resource "panos_address_group" "example1" {
    name = "static ntp grp"
    description = "My NTP servers"
    static_addresses = ["ntp1", "ntp2", "ntp3"]
}

# Dynamic group
resource "panos_address_group" "example2" {
    name = "dynamic grp"
    description = "My internal NTP servers"
    dynamic_match = "'internal' and 'ntp'"
}

» Argument Reference

The following arguments are supported:

  • name - (Required) The address group's name.
  • vsys - (Optional) The vsys to put the address group into (default: vsys1).
  • static_addresses - (Optional) The address objects to include in this statically defined address group.
  • dynamic_match - (Optional) The IP tags to include in this DAG.
  • description - (Optional) The address group's description.
  • tags - (Optional) List of administrative tags.