Print the vaulted AWS secrets stored in Ansible Tower

.gitattributes

*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.tar filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text

.gitignore

*.keytab
*.retry
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Thumbs.db

.gitlab-ci.yml

ansible-lint:
  tags:
    - ansible
  script:
    - ansible-lint --version
    - git ls-files | grep yml | xargs ansible-lint --exclude=/home/gitlab-runner/.ansible/roles

ansible-review:
  tags:
    - ansible
  script:
    - ansible-review --version
    - git ls-files | grep yml | xargs ansible-review

yamllint:
  tags:
    - ansible
  script:
    - yamllint --version
    - yamllint .

.pre-commit-config.yaml

- repo: https://github.com/ansible/ansible-lint.git
  sha: v4.1.0
  hooks:
    - id: ansible-lint
      files: \.(yaml|yml)$
      args: [--exclude=/Users/dnorman/.ansible]

- repo: https://github.com/willthames/ansible-review.git
  sha: v0.13.9
  hooks:
    - id: ansible-review

.yamllint

extends: default

rules:
  braces: {max-spaces-inside: 1, level: error}
  brackets: {max-spaces-inside: 1, level: error}
  colons: {max-spaces-after: -1, level: error}
  commas: {max-spaces-after: -1, level: error}
  comments: disable
  comments-indentation: disable
  document-start: disable
  empty-lines: {max: 3, level: error}
  hyphens: {level: error}
  indentation: {spaces: 2}
  key-duplicates: enable
  line-length: disable
  new-line-at-end-of-file: disable
  new-lines: {type: unix}
  trailing-spaces: disable
  truthy: disable

ansible.cfg

[defaults]
callback_whitelist = profile_tasks,timer
display_skipped_hosts = no
force_valid_group_names = silently
host_key_checking = False
library = ~/.ansible/plugins/modules:/usr/share/ansible/plugins/modules:library/
timeout = 60
validate_certs=False

[ssh_connection]
ssh_args = -o ControlMaster=auto -o ControlPersist=60s -o UserKnownHostsFile=/dev/null

secrets.yml

---

- hosts: 127.0.0.1
  connection: local
  gather_facts: yes

  vars:
    ec2_instance_region: "us-east-1"

  tasks:
    - name: Debug print of account keys.
      debug:
        msg: "{{ item }}"
        verbosity: 4
      loop:
        - " secret access key: {{ lookup('env','AWS_SECRET_ACCESS_KEY') }}"
        - " access key: {{ lookup('env','AWS_ACCESS_KEY_ID') }}"