Azure Tag in Security policies

[Ramakrishnan]

Hi There,

How we could create dynamic security policies from Azure tag. In the Azure Market place I do see this statement.
"policies that are dynamically updated based on Azure tags assigned to workloads, allowing you to reduce the attack surface area and achieve compliance" 

Is that only for the model Active/Passive scenario or how and what should i do in PA configuration to place dynamic access policies in PA. 

Your swift response is highly appreciated. 

[S.Cantwell]

Here is a link in the admin guide to help you with your query:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/monitor-changes-in-the-virtual-envi...

Review and let us know if you have questions.