Terraform Resource "Panos_security_policy" and the Warning listed for it.

[ShafieAfridi]

Hello All, I'm trying to use the above Terraform resource for testing and was confused by the warning that is listed on the Registry (Hashicorp) page associated with this resource. It says, that ": This resource will remove any security rule not defined in this resource."   

what the * ?  Will it remove all the existing rules that are on the firewall ?  i hope not. But it is not clear to me.

What i understand from this warning is that all rules will be removed from firewall, except the one that i create using this terraform resource. Is that correct ?

To see the warning, you can use this link below.

https://registry.terraform.io/providers/PaloAltoNetworks/panos/latest/docs/resources/security_policy

My main concern is that i want to use this resource to create new rules and still have my existing rules in place with no affect to them. Thanks.

[gfreeman · Accepted solution]

panos_security_rule_group is right over there for this use case.

panos_security_policy is if your use case is "these rules and ONLY these rules."

[ShafieAfridi]

Thanks for pointing that out. I was not sure since it says "group" and i only wanted to test a single firewall rule (not a group of rules).  Earlier I used the Ansible task "panos_security_rule" so i was thinking may be the Terraform resource would be named similarly. But i guess naming convention is not same for Terraform and Ansible modules.