Address Group Models

Overview

The Address Group models provide a structured way to manage address groups in Palo Alto Networks' Strata Cloud Manager. These models support both static and dynamic address groups, which can be defined in folders, snippets, or devices. The models handle validation of inputs and outputs when interacting with the SCM API.

Attributes

Attribute	Type	Required	Default	Description
name	str	Yes	None	Name of the address group. Max length: 63 chars. Must match pattern: ^[a-zA-Z0-9_ .-]+$
description	str	No	None	Description of the address group. Max length: 1023 chars
tag	List[str]	No	None	List of tags. Each tag max length: 64 chars
dynamic	DynamicFilter	No*	None	Dynamic filter for group membership
static	List[str]	No*	None	List of static addresses. Min: 1, Max: 255
folder	str	No**	None	Folder where group is defined. Max length: 64 chars
snippet	str	No**	None	Snippet where group is defined. Max length: 64 chars
device	str	No**	None	Device where group is defined. Max length: 64 chars
id	str	Yes***	None	UUID of the address group (response only)

* Either dynamic or static must be provided, but not both * Exactly one container type (folder/snippet/device) must be provided ** Only required for response model

Model Validators

Address Group Type Validation

The models enforce that exactly one group type (static or dynamic) must be specified:

# Using dictionaryfrom scm.config.objects import AddressGroup
# Error: both static and dynamic providedtry:
group_dict = {
"name": "invalid-group",
"static": ["addr1"],
"dynamic": {"filter": "'tag1'"},
"folder": "Shared"
}
address_group = AddressGroup(api_client)
response = address_group.create(group_dict)
except ValueError as e:
print(e) # "Exactly one of 'static' or 'dynamic' must be provided."
# Using model directlyfrom scm.models.objects import AddressGroupCreateModel
# Error: neither static nor dynamic providedtry:
group = AddressGroupCreateModel(
name="invalid-group",
folder="Shared"
)
except ValueError as e:
print(e) # "Exactly one of 'static' or 'dynamic' must be provided."

Container Type Validation

For create operations, exactly one container type must be specified:

# Using dictionarytry:
group_dict = {
"name": "invalid-group",
"static": ["addr1"],
"folder": "Shared",
"device": "fw01" # Can't specify both folder and device
}
response = address_group.create(group_dict)
except ValueError as e:
print(e) # "Exactly one of 'folder', 'snippet', or 'device' must be provided."
# Using model directlytry:
group = AddressGroupCreateModel(
name="invalid-group",
static=["addr1"],
folder="Shared",
device="fw01"
)
except ValueError as e:
print(e) # "Exactly one of 'folder', 'snippet', or 'device' must be provided."

Usage Examples

Creating a Static Address Group

# Using dictionaryfrom scm.config.objects import AddressGroup

static_group_dict = {
"name": "web-servers",
"description": "Web server group",
"static": ["web1", "web2", "web3"],
"folder": "Shared",
"tag": ["web", "production"]
}

address_group = AddressGroup(api_client)
response = address_group.create(static_group_dict)
# Using model directlyfrom scm.models.objects import AddressGroupCreateModel

static_group = AddressGroupCreateModel(
name="web-servers",
description="Web server group",
static=["web1", "web2", "web3"],
folder="Shared",
tag=["web", "production"]
)

payload = static_group.model_dump(exclude_unset=True)
response = address_group.create(payload)

Creating a Dynamic Address Group

# Using dictionarydynamic_group_dict = {
"name": "aws-instances",
"description": "AWS EC2 instances",
"dynamic": {
"filter": "'aws-tag' and 'production'"
},
"folder": "Cloud",
"tag": ["aws", "dynamic"]
}

response = address_group.create(dynamic_group_dict)
# Using model directlyfrom scm.models.objects import AddressGroupCreateModel, DynamicFilter

dynamic_group = AddressGroupCreateModel(
name="aws-instances",
description="AWS EC2 instances",
dynamic=DynamicFilter(filter="'aws-tag' and 'production'"),
folder="Cloud",
tag=["aws", "dynamic"]
)

payload = dynamic_group.model_dump(exclude_unset=True)
response = address_group.create(payload)

Updating an Address Group

# Using dictionaryupdate_dict = {
"id": "123e4567-e89b-12d3-a456-426655440000",
"name": "web-servers-updated",
"description": "Updated web server group",
"static": ["web1", "web2", "web3", "web4"],
"tag": ["web", "production", "updated"]
}

response = address_group.update(update_dict)
# Using model directlyfrom scm.models.objects import AddressGroupUpdateModel

update_group = AddressGroupUpdateModel(
id="123e4567-e89b-12d3-a456-426655440000",
name="web-servers-updated",
description="Updated web server group",
static=["web1", "web2", "web3", "web4"],
tag=["web", "production", "updated"]
)

payload = update_group.model_dump(exclude_unset=True)
response = address_group.update(payload)