Thanks no problem. If you have questions around anything else feel free to comment and would love to make videos around solutions

Hey I’m glad it helped

can you share the exact error message.

@@letmetechyou I have posted this a few times it keeps failing to get to you hopefully this makes it, and thanks for the quick reply

@@letmetechyou thats so weird try this Error: Duplicate object key │ │ on .terraform/modules/alz/locals.management.tf line 65, in locals: │ 63: azurerm_monitor_data_collection_rule_management = { │ 64: for resource in module.management_resources.configuration.azurerm_monitor_data_collection_rule : │ 65: resource.resource_id => resource │ 66: if resource.managed_by_module │ 67: } │ ├──────────────── │ │ resource.resource_id is "/there isa subcription resoursce group name and resource name here" I removed as my post kept getting failing to upload │ │ Two different items produced the key │ "/there isa subcription resoursce group name and resource name here" I removed as my post kept getting failing to upload │ in this 'for' expression. If duplicates are expected, use the ellipsis │ (...) after the value expression to enable grouping by key. the code looks like this: azurerm_data_collection_rule = { management = { vminsights = { name = "dcr-insight-${var.zone}-${var.environment}-uks-001" #sku_name = }, # change_tracking = { # name = "dcr-ct-${var.zone}-${var.environment}-uks-001" # # # #sku_name = # }, # defendersql = { # name = "dcr-def-${var.zone}-${var.environment}-uks-001" # } } } vminsight works change_tracking and defendersql don't

@@letmetechyou I have no idea why I cant post the whole error but it is saying: Error: Duplicate object key │ │ on .terraform/modules/alz/locals.management.tf line 65, in locals: │ 63: azurerm_monitor_data_collection_rule_management = { │ 64: for resource in module.management_resources.configuration.azurerm_monitor_data_collection_rule : │ 65: resource.resource_id => resource │ 66: if resource.managed_by_module │ 67: } and then giving the resource id which is what I am trying to set the new name to be followed by: Two different items produced the key and the same id

@@letmetechyou this is the code: azurerm_data_collection_rule = { management = { vminsights = { name = "dcr-insight-${var.zone}-${var.environment}-uks-001" #sku_name = }, # change_tracking = { # name = "dcr-ct-${var.zone}-${var.environment}-uks-001" # # # #sku_name = # }, # defender_sql = { # name = "dcr-def-${var.zone}-${var.environment}-uks-001" # } } } the defender_sql name also won't change

The audio does work.

@@madhurshukla23jan yes you can

@@letmetechyou can you suggest a way around or any form of guidance/documentation please

I just updated the link. Thanks

@@letmetechyou thannkyou :)

@@virtualworld6637 what issues are you having

@@letmetechyou i am trying to deploy rules in the panaroma ( new rule) and also i need to make change to the existing rules which are there but i am unable to take out the existing rules from the panaroma through terraform, is it possible and i have used terraform import command with specific rule name and even given the config into the main.tf but i have 100 rules, i cant specify each name, do you have any other solution to achieve it?

@@anisharajput410 I haven’t used terraform to manage panorama. I just use terraform to deploy the Palo environment, then panorama becomes my source of truth.

@@letmetechyou Any scope if you can help in deploying this for panaroma? In case you want to try

Thanks. Check out my other video on how to use the import block which i think is a lot easier. kzbin.info/www/bejne/pIrPqGptaLp4ppY

Yea it is I would use the caf deployment. I actually have a video on how to do that.

@@letmetechyou thanks for your quick response. In which video ? It will be helpful.

kzbin.info/www/bejne/Z2jNlJmVe6yma5Isi=dLIkDOI-0sTVIiAy

Thanks. I’m glad it helped. Hope I can continue to make videos that could be of benefit

thanks for the feedback. been improving over time!

A lot of companies live in the 80s.

No problem. Glad it helped.

oh wow thats pretty awesome. I'm going to have to check that out

If you already have one then you don’t have to use this to build a new one. It could be used for new ones in different environments or regions. You could also not utilize it at all to build any networking resources

Check out my latest video I just uploaded.

Glad you enjoyed it!

Check out my latest video I just uploaded.

@@letmetechyou Thanks a lot for your quick response

No problem. Thanks for watching.

the lib folder is so that you can have custom policies, definitions and settings that you can override from the default module. you can copy it out of the /.terraform/modules/alz/modules/archetypes/lib folder after you do a terraform init on that module. you reference the archetype id in the settings.core file

The subnet was referenced in both locations because the root allowed for it to be created at the root for all subscriptions to see the policy and the policy assignment is what actually does the assigning at that management group level.

let me know if you need a better example of anything

@@letmetechyou Thank you for your reply. I just finished watching the entire series and it is helpful. I saw that we need to set the archetype id in settings.core to get it applied. so 1. if i copy the entire folder, only what i reference is what going to be applied? 2. the root template would always be applied if i have it in the path. i dont have to reference it?

you can install the terraform extension in vscode

I plan to do that soon. Getting the eval license is pretty hard.