ec2_group fails if security group already exists

Archives Ansible Project
1

Hi

I am having the following.
Given the following Variable rule:

ec2_security_groups_test:

  • sg_name: test-group
    sg_description: test-group
    vpc_id: “vpc-XXXXXX”
    region: “{{ region }}”
    sg_rules:
  • proto: 50
    from_port: -1
    to_port: -1
    cidr_ip: 12.12.12.12/32
  • proto: 50
    from_port: -1
    to_port: -1
    cidr_ip: 13.13.13.13/32
  • proto: 50
    from_port: -1
    to_port: -1
    group_name: test-group

it will work on the 1st run, but on the second I will have:

InvalidPermission.Duplicatethe specified rule “peer: 12.12.12.12/32, protocol: 50, ALLOW” already existse890595b-9609-4c31-a611-87da7b5de7ae

I have tried specifying Ports, also “-1”… Nothing seems to work.
If I say TCP or UDP it works fine, but when I specify a numeric port as above I got the issue:

Any possible workaround/tips?

Thanks!