using rule_desc with ec2_group will always clear the rules on the first run

Archives Ansible Project
1

I just recently discovered rule_desc. So upon adding the description to some plays I am seeing the behavior that the first time ec2_group is executed with the rule description, all rules (or at least the rules with the descriptions) are removed. Only on the second run of ec2_groups are the rules with the descriptions created. Subsequent runs are then unchanged.

I still have some other experiments to run to see the scope of this. Like what happens if the description is changed for a rule that already has a description.

In the meantime, has anybody else seen this.

ansible versions: 2.6.4, 2.6.5

2

I find that when I change a rule_desc I get an error

An error occurred (InvalidPermission.NotFound) when calling the RevokeSecurityGroupIngress operation: The specified rule does not exist in this security group."

Immediately rerunning the play and ec2_group shows no change. So the previous execution actually changed the rule description before crashing.