Support filtering on AWS autoscaling group for dynamic address objects

A FortiGate-VM deployed on AWS can create a dynamic address based on an AWS Fabric connector and use an autoscaling group (ASG) filter to obtain ASG members' primary IP addresses or NICs. You can use this feature for load balancing to optimize network efficiency.

To create an address with an ASG filter using the GUI:

In FortiOS, go to Policy & Objects > Addresses.
Click Create New, then select Address.
Enter the address name. From the Type dropdown list, select Dynamic.
From the Sub Type dropdown list, select Fabric Connector Address.
From the SDN Connector dropdown list, select the AWS Fabric connector.
In the Filter fields, enter the desired filter. In this example, you would enter AutoScaleGroup=<ASG ID> in the Filter field.
From the Interface dropdown list, select an interface where the Fabric connector covers where relevant.
Click OK. Once saved, FortiOS lists the address under Policy & Objects > Addresses.

To create an address with an ASG filter using the CLI:

config firewall address

edit "aws-asg-addr1"

set uuid 82e26cea-756e-51ea-d322-4259d3db301b

set type dynamic

set sdn "aws-sdn"

set filter "AutoScaleGroup=10703c-4f731e90-fortigate-payg-auto-scaling-group"

config list

edit "192.168.0.137"

edit "192.168.1.218"

end