HA configuration in the AWS

nson2139 — Thu, 13 Sep 2018 12:11:32 GMT

Folks,

some what confused on how to start with this. I went through all the documentation which talks about an IAM policiy and definining roles ubt am not able to get where to configure this.

My requirement is to have a firewall with an untrust/trust interface and a management interface. I believe I will need an additional HA interfaces as well.

The below link mentions about the policiy:

https://www.paloaltonetworks.com/documentation/80/virtualization/virtualization/set-up-the-vm-series-firewall-on-aws/high-availability-for-vm-series-firewall-on-aws/iam-roles-for-ha

Do I write the policy manually? And then attach this when I create the instances?

Thanks!!

Re: HA configuration in the AWS

jperry1 — Thu, 13 Sep 2018 16:14:30 GMT

We should outline that in the documentation but answer is yes and no.

1. You do have to create the policy yourself

2. But it should be attached to your AWS useraccount/role/usergroup. So no you don't attach it to an instance you attached to an identity.

there is a hyperlink in the IAM Roles for HA that provides all of that info. https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage.html#create-managed-policy-console

topic Re: HA configuration in the AWS in VM-Series in the Public Cloud

HA configuration in the AWS

Re: HA configuration in the AWS