Palo, ansible and ultimate rule add

I'm wondering if y'all can share your experience regarding automation specifically with Palo alto's ansible and some python in there.....

I recently started working at a large corporation that has multiple firewalls in multiple data centers and I'm trying to figure out the most ideal solution if I'm giving a source and a destination IP only to automate the end-to-end firewall (s) rule add .....

I have a budget for some tape, paper clips and an elastic band - a stapler might be provided but can not be relied on...