Panorama AWS Plugin details?

[Sec101]

Anyone have some good info/links as to what exactly the Panorama Plugin for AWS does?   I've read a bit about it's attempt to automate, and monitor, but is there a good document that lays out exactly what this plugin does, and how you can use it to build out AWS?

[kiwi]

Hi @Sec101 ,

With the AWS plugin on Panorama and API you can synchronously update Security policy on your firewalls. Panorama can then also collect a predefined set of attributes as tags for your AWS resources and register the information to your firewalls. When you reference these tags in Dynamic Address Groups and match against them in Security policy rules, you can consistently enforce policy across all assets deployed within your AWS accounts.

Use Case: Use Dynamic Address Groups to Secure New EC2 Instances within the VPC

A complete deployment guide can be found here:
Set Up the AWS Plugin for VM Monitoring on Panorama 

A complete list of attributes monitored can be found here:

List of Attributes Monitored on the AWS VPC 

Kind regards,

-Kiwi.

[Sec101]

Is there anythign in that plugin that will allow you to deploy VPCs, or is this only used for tagging purposes?