topic Terraform Resource "Panos_security_policy" and the Warning listed for it. in Automation/API Discussions

Terraform Resource "Panos_security_policy" and the Warning listed for it.

ShafieAfridi — Tue, 31 Jan 2023 22:28:52 GMT

Hello All, I'm trying to use the above Terraform resource for testing and was confused by the warning that is listed on the Registry (Hashicorp) page associated with this resource. It says, that ": This resource will remove any security rule not defined in this resource."

what the * ? Will it remove all the existing rules that are on the firewall ? i hope not. But it is not clear to me.

What i understand from this warning is that all rules will be removed from firewall, except the one that i create using this terraform resource. Is that correct ?

To see the warning, you can use this link below.

https://registry.terraform.io/providers/PaloAltoNetworks/panos/latest/docs/resources/security_policy

My main concern is that i want to use this resource to create new rules and still have my existing rules in place with no affect to them. Thanks.

Re: Terraform Resource "Panos_security_policy" and the Warning listed for it.

gfreeman — Wed, 01 Feb 2023 11:07:41 GMT

panos_security_rule_group is right over there for this use case.

panos_security_policy is if your use case is "these rules and ONLY these rules."

Re: Terraform Resource "Panos_security_policy" and the Warning listed for it.

ShafieAfridi — Wed, 01 Feb 2023 15:38:48 GMT

Thanks for pointing that out. I was not sure since it says "group" and i only wanted to test a single firewall rule (not a group of rules). Earlier I used the Ansible task "panos_security_rule" so i was thinking may be the Terraform resource would be named similarly. But i guess naming convention is not same for Terraform and Ansible modules.