AWS plugin to read Tags in AWS in order to be able to create dynamic address object groups and use in policy not working for RDS & lambda

[AliHyder]

I'm using the AWS plugin to read VPC and EC2 tags in AWS in order to be able to create dynamic address object groups and use in policy. Since we are migrating the whole VPC behind the firewall, if there any other services except EC2/LB, firewalls cant read the tags and blocking traffic. 

How to get this working by having Panorama to read the Tags of RDS/Private NAT Gateways instances or other Ec2 services. 

[JayGolf]

Hi @AliHyder ,

Im not sure there is a way to read the tags off of AWS, but what I have done in the past is replicate the tags in AWS and attach them to created objects within the firewall.