Ansible创建AWS安全组并添加到实例

Question

I am creating an EC2 instance. My creation flow is,

1. Create Ami

2. Create security group

3. Create new Instance from AMI and add to security group

My new security group should only contain private ip of a new instance with appropriate ports open

My concern is, How can I create security group and add EC2 Instance private IP if that instance is yet to be created

Is there any way that I can wait for the Instance creation task first and after it is done I fetch the private IP and use that in above task which is "Security group Creation"?

If you have any suggestions please let me know

Thanks

Answer 1

Is there any way that I can wait for the Instance creation task first and after it is done I fetch the private IP and use that in above task which is "Security group Creation"?

Sure, that's exactly what ec2: (or the newer ec2_instance: ) will do when given the wait: yes argument. By using register: ec2_result you can then use ec2_result.instances[0].private_ip_address (as seen here ) inside the ec2_group: module to define the rules for the SG.