ansible.cfg

[defaults]
interpreter_python = auto_silent
vault_password_file=get_vault_password_from_keyring

[ssh_connection]
# Enabling pipelining reduces the number of SSH operations required to
# execute a module on the remote server. This can result in a significant
# performance improvement when enabled, however when using "sudo:" you must
# first disable 'requiretty' in /etc/sudoers
#
# By default, this option is disabled to preserve compatibility with
# sudoers configurations that have requiretty (the default on many distros).
#
pipelining = True

# Don't allow SCP:
# See https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
scp_if_ssh = False

ssh_args = -C -o ControlMaster=auto -o ControlPersist=600s -o ProxyCommand="sh -c \"aws ssm start-session --target %h --document-name AWS-StartSSHSession --parameters 'portNumber=%p'\""

[inventory]
enable_plugins = aws_ec2