Which component allows the flexibility to add network resources but does not require making changes...

Dynamic address groups in Palo Alto Networks firewalls provide flexibility by allowing network resources to be added without requiring changes to existing policies and rules:

Dynamic address group: These groups automatically update based on tags and attributes assigned to network objects. When new resources are added with the appropriate tags, they are dynamically included in the address group, and the associated policies automatically apply to them without manual intervention.