split infrastructure further

[awsible] / roles / common-infrastructure / tasks / main.yml

---
- name: sg ssh
  ec2_group:
    vpc_id: "{{ vpc.vpc.id }}"
    region: "{{ vpc_region }}"
    state: present
    name: ssh
    description: "allow ssh from anywhere"
    purge_rules: false
    rules:
    - proto: tcp
      from_port: 22
      to_port: 22
      cidr_ip: 0.0.0.0/0
    rules_egress:
    - proto: all
      cidr_ip: 0.0.0.0/0
  register: sg_ssh