topic AWS plugin to read Tags in AWS in order to be able to create dynamic address object groups and use in policy not working for RDS &amp; lambda in VM-Series in the Private Cloud https://live.paloaltonetworks.com/t5/vm-series-in-the-private-cloud/aws-plugin-to-read-tags-in-aws-in-order-to-be-able-to-create/m-p/585063#M214 <P>I'm using the AWS plugin to read VPC and EC2 tags in AWS in order to be able to create dynamic address object groups and use in policy. Since we are migrating the whole VPC behind the firewall, if there any other services except EC2/LB, firewalls cant read the tags and blocking traffic.&nbsp;</P> <P>How to get this working by having Panorama to read the Tags of RDS/Private NAT Gateways instances or other Ec2 services.&nbsp;</P> Fri, 26 Apr 2024 12:16:25 GMT AliHyder 2024-04-26T12:16:25Z AWS plugin to read Tags in AWS in order to be able to create dynamic address object groups and use in policy not working for RDS & lambda https://live.paloaltonetworks.com/t5/vm-series-in-the-private-cloud/aws-plugin-to-read-tags-in-aws-in-order-to-be-able-to-create/m-p/585063#M214 <P>I'm using the AWS plugin to read VPC and EC2 tags in AWS in order to be able to create dynamic address object groups and use in policy. Since we are migrating the whole VPC behind the firewall, if there any other services except EC2/LB, firewalls cant read the tags and blocking traffic.&nbsp;</P> <P>How to get this working by having Panorama to read the Tags of RDS/Private NAT Gateways instances or other Ec2 services.&nbsp;</P> Fri, 26 Apr 2024 12:16:25 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-private-cloud/aws-plugin-to-read-tags-in-aws-in-order-to-be-able-to-create/m-p/585063#M214 AliHyder 2024-04-26T12:16:25Z Re: AWS plugin to read Tags in AWS in order to be able to create dynamic address object groups an... https://live.paloaltonetworks.com/t5/vm-series-in-the-private-cloud/aws-plugin-to-read-tags-in-aws-in-order-to-be-able-to-create/m-p/586121#M216 <P>Hi <SPAN style="background: var(--ck-color-mention-background); color: var(--ck-color-mention-text);"><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/131447">@AliHyder</a></SPAN> ,</P> <P>&nbsp;</P> <P>Im not sure there is a way to read the tags off of AWS, but what I have done in the past is replicate the tags in AWS and attach them to created objects within the firewall.</P> Wed, 08 May 2024 05:00:05 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-private-cloud/aws-plugin-to-read-tags-in-aws-in-order-to-be-able-to-create/m-p/586121#M216 JayGolf 2024-05-08T05:00:05Z