Use AWS named profiles

global_vars/noninteractive/amazon-site.yml

@@ -42,8 +42,7 @@ aws_vpc_subnet_id_var: ""
 aws_instance_name: streisand
 
 # The AWS credentials to use.
-aws_access_key: ""
-aws_secret_key: ""
+aws_profile: ""
 
 # Definitions needed for Let's Encrypt HTTPS (or TLS) certificate setup.
 #

playbooks/amazon.yml

@@ -90,12 +90,8 @@
  default: "streisand"
  private: no
 
- - name: "aws_access_key"
- prompt: "\n\nThe following information can be found in the IAM Management Console.\nhttps://console.aws.amazon.com/iam/home?#security_credential\n\nWhat is your AWS Access Key ID?\n"
- private: no
-
- - name: "aws_secret_key"
- prompt: "\nWhat is your AWS Secret Access Key?\n"
+ - name: "aws_profile"
+ prompt: "\nWhat is your AWS named profile?\n"
  private: no
 
  - name: "confirmation"

playbooks/roles/ec2-security-group/tasks/main.yml

@@ -5,8 +5,7 @@
  description: Security group for Streisand
  region: "{{ aws_region }}"
  vpc_id: "{{ aws_vpc_id | default(omit) }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
 
 - name: Pause for fifteen seconds to ensure the EC2 security group has been created
  pause:
@@ -18,8 +17,7 @@
  description: Security group for Streisand
  region: "{{ aws_region }}"
  vpc_id: "{{ aws_vpc_id | default(omit) }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  rules:
  # Nginx
  # ---
@@ -53,8 +51,7 @@
  description: Security group for Streisand
  region: "{{ aws_region }}"
  vpc_id: "{{ aws_vpc_id | default(omit) }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  purge_rules: no
  purge_rules_egress: no
  rules:
@@ -80,8 +77,7 @@
  description: Security group for Streisand
  region: "{{ aws_region }}"
  vpc_id: "{{ aws_vpc_id | default(omit) }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  purge_rules: no
  purge_rules_egress: no
  rules:
@@ -107,8 +103,7 @@
  description: Security group for Streisand
  region: "{{ aws_region }}"
  vpc_id: "{{ aws_vpc_id | default(omit) }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  purge_rules: no
  purge_rules_egress: no
  rules:
@@ -128,8 +123,7 @@
  description: Security group for Streisand
  region: "{{ aws_region }}"
  vpc_id: "{{ aws_vpc_id | default(omit) }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  purge_rules: no
  purge_rules_egress: no
  rules:
@@ -155,8 +149,7 @@
  description: Security group for Streisand
  region: "{{ aws_region }}"
  vpc_id: "{{ aws_vpc_id | default(omit) }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  purge_rules: no
  purge_rules_egress: no
  rules:
@@ -182,8 +175,7 @@
  description: Security group for Streisand
  region: "{{ aws_region }}"
  vpc_id: "{{ aws_vpc_id | default(omit) }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  purge_rules: no
  purge_rules_egress: no
  rules:

playbooks/roles/genesis-amazon/tasks/main.yml

@@ -11,24 +11,21 @@
  ec2_key:
  name: streisand-ssh
  state: absent
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  region: "{{ aws_region }}"
  wait: yes
 
 - name: Add the SSH key to Amazon under the name of 'streisand-ssh'
  ec2_key:
  name: streisand-ssh
  key_material: "{{ ssh_key.stdout }}"
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  region: "{{ aws_region }}"
  wait: yes
 
 - name: Determine which AMI to use
  ec2_ami_facts:
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  owners: "{{ aws_ami_owner }}"
  region: "{{ aws_region }}"
  filters:
@@ -37,8 +34,7 @@
 
 - name: Create the EC2 instance
  ec2:
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  instance_type: "{{ aws_instance_type }}"
  image: "{{ ami.images|sort(reverse=True,attribute='name')|map(attribute='image_id')|first }}"
  region: "{{ aws_region }}"
@@ -56,8 +52,7 @@
  name: "autorecover-{{ aws_instance_name }}"
  description: "This alarm will auto-recover the EC2 instance on host failure"
  state: present
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  region: "{{ aws_region }}"
  namespace: "AWS/EC2"
  metric: StatusCheckFailed_System
@@ -81,8 +76,7 @@
 
 - name: Allocate and associate Elastic IP
  ec2_eip:
- aws_access_key: "{{ aws_access_key }}"
- aws_secret_key: "{{ aws_secret_key }}"
+ profile: "{{ aws_profile }}"
  region: "{{ aws_region }}"
  device_id: "{{ streisand_server.instances[0].id }}"
  in_vpc: "{{ aws_vpc_id is defined and aws_vpc_id != '' }}"