Piece 8 of Ansible-create-AWS-environment.yml file

Ansible-create-AWS-environment-8.yml

- name: create a security group for jumphosts
    ec2_group:
      state: present
      name: sg_ansibleVPC_publicsubnet_jumphost
      description: security group for jumphosts within the public subnet of ansible VPC
      vpc_id: "{{ ansibleVPC.vpc.id }}"
      region: "{{ vpc_region }}"
      rules:
        - proto: tcp
          ports:
            - 3389
          cidr_ip: 0.0.0.0/0
          rule_desc: allow rdp to jumphost
    register: sg_ansibleVPC_publicsubnet_jumphost

  - name: display details for jumphost security group
    debug: var=sg_ansibleVPC_publicsubnet_jumphost