Terraform

[GGildenhuys]

Hi I am trying to deploy Cloud NGFW for AWS using Terraform, but seems to be going around in circles. 

I have a simple provider config:

provider "cloudngfwaws" {

  arn                     = "arn:aws:iam::123456789:role/cloudngfwaws"

  host                    = "api.us-east-1.aws.cloudngfw.paloaltonetworks.com"

  region                  = "us-east-1"

  skip_verify_certificate = true

}

Added all the tags to the role, but running a plan gives me this:

In the Terraform debug file I'm getting this:

[DEBUG] CloudNgfwAws API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/1.1 400 Bad Request
Connection: close
Content-Length: 148
Access-Control-Allow-Origin: *
Cache-Control: no-store

{
"ResponseStatus": {
"ErrorCode": 1,
"Reason": "Account is onboarded by FMS. Programmatic Access for CloudNGFWFirewallAdmin role is not supported."
}
}

FMS I am assuming is AWS Firewall Manager? this is a requirement as far as I understand?

Help!! What am I missing??

[ssyed]

Hi ,

FMS is not required for programmatic access. Please check this document to create roles.

https://pan.dev/cloudngfw/aws/api/

Thanks,