VM-Series firewall scale in and scale out using VM-Series
firewalls that are deployed using auto scaling templates based on
custom PAN-OS metrics.
The VM-Series firewalls natively publish these metrics to the Amazon
CloudWatch console and, based on the metrics you choose for the
scaling parameters, you can define CloudWatch alarms and policies
to dynamically deploy or terminate instances for managing the application
traffic in your AWS deployment.