About API-Created Dynamic Objects

A dynamic object is an object that specifies one or many IP addresses retrieved either using REST API calls or using the Cisco Secure Dynamic Attributes Connector, which is capable of updating IP addresses from cloud sources. These dynamic objects can be used in access control rules without the need to deploy the access control policy afterward.

For more information about the dynamic attributes connector, see the information later in this guide.

Differences between dynamic objects and network objects follow:

• Dynamic objects created using the dynamic attributes connector are pushed to the management center as soon as they're created and are updated at a regular interval.

• API-created dynamic objects:

  • Are IP addresses, with or without or classless inter-domain routing (CIDR), that can be used in access control rules much like a network object.

  • Do not support fully-qualified domain names or address ranges.

  • Must be updated using an API.