Trust interface on vm not coming up in AWS

[ASM_Research]

Im doing some testing in AWS with a DEV server on the inside of my vm 100..  I have E1/2 configured as gateway interface with a ENI private IP address we created in AWS.  However, after troubleshooting almost the entire day I cant get it to come up.  Im using 9.0.1 so this could be a bug but Im not sure.  Has anybody every encountered this?

[hsong]

The intercace not coming up: is that means no traffic flow? If it’s newly added to the VM, please make sure that disable source/ destination check of the ENI.

[ASM_Research]

I have a better understanding of the problem. In AWS , the way the IP addresses are allocated are very confusing to me. Ive read the PA documentation and I cant find anywhere were it explains how you are supposed to use the Eth0, Eth1, etc and how these map back to the Palo Alto vm's.  I have to understand IP addressing in AWS land and I just cant get my head around it.  If anybody has a knowledge based article that explains this please send.  Also, the vm-series deployment guide IS NOT helpful for this. Yes, I read it

[jmeurer]

AWS ETH0 = PA Management

AWS ETH1 = PA ETH1/1

AWS ETH2 = PA ETH1/2

AWS ETH3 = PA ETH1/3

This assumes you did not perform an interface swap during deployment.  If so Management and ETH1/1 would be reversed so that ETH1/1 is the target of an ELB.

[ASM_Research]

Thank you. unfortunately, that brings up more questions so I think I will stop here