Feature enhancement for checkpoint_management_access_rule to support Network and Host ranges instead of creating object

[wcarty]

Add support so that checkpoint_management_access_rule can support directly passing in network and host without the need to create objects.

example
resource "checkpoint_management_access_rule" "test" {
name = "test"
layer = "network"
position = {top="top"}
source = ["10.37.0.0/16"]
destination = ["10.38.0.0/16"]
service = ["443"]
content = ["Any"]
time = ["Any"]
install_on = ["Policy Targets"]
track = {
type = "Log"
accounting = false
alert = "none"
enable_firewall_session = false
per_connection = true
per_session = false
}
action_settings = {}
custom_fields = {}
vpn = "Any"

}

checkpoint_management_access_rule.test will be created

• resource "checkpoint_management_access_rule" "test" {
  • action = "Drop"
  • content = [
    • "Any",
      ]
  • content_direction = "any"
  • content_negate = false
  • destination = [
    • "10.38.0.0/16",
      ]
  • destination_negate = false
  • enabled = true
  • id = (known after apply)
  • ignore_errors = false
  • ignore_warnings = false
  • install_on = [
    • "Policy Targets",
      ]
  • layer = "network"
  • name = "test"
  • position = {
    • "top" = "top"
      }
  • service = [
    • "443",
      ]
  • service_negate = false
  • source = [
    • "10.37.0.0/16",
      ]
  • source_negate = false
  • time = [
    • "Any",
      ]
  • track = {
    • "accounting" = "false"
    • "alert" = "none"
    • "enable_firewall_session" = "false"
    • "per_connection" = "true"
    • "per_session" = "false"
    • "type" = "Log"
      }
  • vpn = "Any"
    }

Error: Failed to execute API call
│ Status: 404 Not Found
│ Code: generic_err_object_not_found
│ Message: Requested object [10.37.0.0/16] not found
│
│ with checkpoint_management_access_rule.test,
│ on rules.tf line 1, in resource "checkpoint_management_access_rule" "test":
│ 1: resource "checkpoint_management_access_rule" "test" {

[Mudpuppy12]

This is similar if not exactly this issue as requested in 2021:

#88

[chkp-royl]

Hi @wcarty ,

Thanks for suggest this new feature.
This is currently not supported by our provider or API and I will write here if there will be any updates about it.

Thanks,
Roy