sg_rule_manager.py

#!/usr/bin/python

from ansible.module_utils.basic import AnsibleModule
import boto3

def main():
    module_args = dict(
        instance_id=dict(type='str', required=True),
        ingress_rule=dict(type='dict', required=True),
        egress_rule=dict(type='dict', required=True)
        )

    result = dict(
        changed=False,
        message=''
    )

    module = AnsibleModule(
        argument_spec=module_args,
        supports_check_mode=True
    )

    instance_id = module.params['instance_id']
    ingresss_rule = module.params['ingress_rule']
    egress_rule = module.params['egress_rule']

    ec2 = boto3.client('ec2')

    try:
        # Get the security group associated with the instance
        instances = ec2.describe_instances(InstanceIds=[instance_id])
        security_groups = instances['Reservations'][0]['Instances'][0]['SecurityGroups']

        if not security_groups:
            module.fail_json(msg='No security groups found for the instance.', **result)

        security_group_id = security_groups[0]['GroupId']

        # Add ingress rule
        ec2.authorize_security_group_ingress(
            GroupId=security_group_id,
            IpPermissions=[ingresss_rule]
        )

        # Remove egress rule
        ec2.revoke_security_group_egress(
            GroupId=security_group_id,
            IpPermissions=[egress_rule]
        )

        result['changed'] = True
        result['message'] = 'Ingress rule added and egress rule removed successfully.'

    except Exception as e:
        module.fail_json(msg=str(e), **result)

    module.exit_json(**result)

if __name__ == '__main__':
    main()