create_aws_vpc.yml

---
- name: Provision AWS instances
  hosts: localhost
  connection: local
  gather_facts: False

  # load AWS variables from this group vars file
  vars_files:
  - group_vars/all

  tasks:
  - name: Verify that you have set a value for user_name before running
    assert:
      that:
        - user_name is defined
      fail_msg: "You must define your user_name in extra_vars"
      success_msg: "user_name set to {{user_name}}"

  - name: create a VPC with dedicated tenancy and a couple of tags
    ec2_vpc_net:
      name: "{{ ec2_vpc_net_name }}"
      cidr_block: "{{ ec2_cidr }}"
      region: "{{ ec2_region }}"
      tags:
        Name: "{{ ec2_vpc_net_name }}"
        ansible_group: "{{ ec2_ansible_group }}"
        Contact: "{{ my_email_address }}"
        DeleteBy: Never
      tenancy: default
    register: my_vpc

  - name: dump vpc info for my_vpc
    debug: 
      var: my_vpc
    when: debug_flag is defined

  - name: create security group "{{ ec2_security_group_name }}"
    ec2_group:
      name: "{{ ec2_security_group_name }}"
      description: security group with rule descriptions
      vpc_id: "{{ my_vpc.vpc.id }}"
      region: "{{ ec2_region }}"
      tags:
        Name: "{{ ec2_security_group_name }}"
        ansible_group: "{{ ec2_ansible_group }}"
        Contact: "{{ my_email_address }}"
        DeleteBy: Never
      rules:
        - proto: icmp
          from_port: 8 # icmp type, -1 = any type
          to_port:  -1 # icmp subtype, -1 = any subtype
          cidr_ip: 0.0.0.0/0
          rule_desc: allow ping
        - proto: tcp
          ports:
          - 22
          - 80
          cidr_ip: 0.0.0.0/0
          rule_desc: allow all on port 22,80
    register: my_security_group

  - name: dump security group info for {{ my_security_group }}
    debug: 
      var: my_security_group
    when: debug_flag is defined

  - name: dump security group info for {{ my_security_group.group_id }}
    debug: 
      var: my_security_group.group_id
    when: debug_flag is defined

  - name: dump security group info for {{ my_security_group.group_name }}
    debug: 
      var: my_security_group.group_name
    when: debug_flag is defined

  - name: Create {{ ec2_vpc_subnet_name }} subnet
    ec2_vpc_subnet:
      state: present
      vpc_id: "{{ my_vpc.vpc.id }}"
      region: "{{ ec2_region }}"
      cidr: "{{ ec2_cidr }}"
      map_public: yes
      tags:
        Name: "{{ ec2_vpc_subnet_name }}"
        ansible_group: "{{ ec2_ansible_group }}"
        Contact: "{{ my_email_address }}"
        DeleteBy: Never
    register: my_vpc_subnet

  - name: dump {{ ec2_vpc_subnet_name }} info
    debug: 
      var: my_vpc_subnet
    when: debug_flag is defined

  - name: create {{ ec2_igw_name }}"
    ec2_vpc_igw:
      vpc_id: "{{ my_vpc.vpc.id }}"
      region: "{{ ec2_region }}"
      state: present
      tags:
        Name:: "{{ ec2_igw_name }}"
        ansible_group: "{{ ec2_ansible_group }}"
        Contact: "{{ my_email_address }}"
        DeleteBy: Never
    register: my_igw

  - name: dump {{ ec2_igw_name }} info
    debug: 
      var: my_igw
    when: debug_flag is defined

  - name: Set up public subnet route table
    ec2_vpc_route_table:
      vpc_id: "{{ my_vpc.vpc.id }}"
      region: "{{ ec2_region }}"
      tags:
        Name: "{{ ec2_route_table_name }}"
        ansible_group: "{{ ec2_ansible_group }}"
        Contact: "{{ my_email_address }}"
        DeleteBy: Never
      subnets:
        - "{{ my_vpc_subnet.subnet.id }}"
      routes:
        - dest: 0.0.0.0/0
          gateway_id: "{{ my_igw.gateway_id }}"
    register: my_route_table

  - name: dump {{ my_route_table }} info
    debug: 
      var: my_route_table
    when: debug_flag is defined
...