Terraform

GGildenhuys — Tue, 30 May 2023 13:07:55 GMT

Hi I am trying to deploy Cloud NGFW for AWS using Terraform, but seems to be going around in circles.

I have a simple provider config:

provider "cloudngfwaws" {

arn = "arn:aws:iam::123456789:role/cloudngfwaws"

host = "api.us-east-1.aws.cloudngfw.paloaltonetworks.com"

region = "us-east-1"

skip_verify_certificate = true

}

Added all the tags to the role, but running a plan gives me this:

In the Terraform debug file I'm getting this:

[DEBUG] CloudNgfwAws API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/1.1 400 Bad Request
Connection: close
Content-Length: 148
Access-Control-Allow-Origin: *
Cache-Control: no-store

{
"ResponseStatus": {
"ErrorCode": 1,
"Reason": "Account is onboarded by FMS. Programmatic Access for CloudNGFWFirewallAdmin role is not supported."
}
}

FMS I am assuming is AWS Firewall Manager? this is a requirement as far as I understand?

Help!! What am I missing??

Re: Terraform

ssyed — Wed, 27 Sep 2023 18:14:53 GMT

Hi ,

FMS is not required for programmatic access. Please check this document to create roles.

https://pan.dev/cloudngfw/aws/api/

Thanks,

topic Terraform in Cloud NGFW for AWS Discussions

Terraform

Re: Terraform