如何通过Ansible向AWS安全组添加标签？

Question

我正在尝试通过Ansible管理AWS安全组,并希望为它们添加标签.有人能给我一个如何做到这一点的例子吗？

例如,我有一个安全组'test_security_group',我想在该安全组中添加标签'foo'.

根据Ansible文档,ec2_tag模块可以工作,但到目前为止我还没有成功地将它用于安全组.

Answer 1

像这样:

- name: Create security group for app instances
  local_action:
    module: ec2_group
    name: "http-everywhere"
    description: "My Security Group"
    vpc_id: "vpc=abcd1234"
    region: "us-east-1"
    rules: 
      - proto: tcp
        from_port: 80
        to_port: 80
        cidr_ip: 0.0.0.0/0
  register: aws_sg

- name: Tag the security group with a name
  local_action:
    module: ec2_tag
    resource: "{{aws_sg.group_id}}"
    region: "us-east-1"
    state: present
    tags:
      Name: "My Security Group Name"
      env: "production"
      service: "web"