@ -23,20 +23,20 @@ DOCUMENTATION = '''
module : ec2_eni module : ec2_eni
short_description : Create and optionally attach an Elastic Network Interface ( ENI ) to an instance short_description : Create and optionally attach an Elastic Network Interface ( ENI ) to an instance
description : description :
- Create and optionally attach an Elastic Network Interface ( ENI ) to an instance . If an ENI ID or private_ip is \
- Create and optionally attach an Elastic Network Interface ( ENI ) to an instance . If an ENI ID or private_ip is
provided , the existing ENI ( if any ) will be modified . The ' attached ' parameter controls the attachment status \
provided , the existing ENI ( if any ) will be modified . The ' attached ' parameter controls the attachment status
of the network interface .
of the network interface .
version_added : " 2.0 " version_added : " 2.0 "
author : " Rob White (@wimnat) " author : " Rob White (@wimnat) "
options : options :
eni_id :
eni_id :
description :
description :
- The ID of the ENI
- The ID of the ENI ( to modify ) ; if null and state is present , a new eni will be created .
required : false
required : false
default : null
default : null
instance_id :
instance_id :
description :
description :
- Instance ID that you wish to attach ENI to . Since version 2.2 , use the ' attached ' parameter to attach or \
- Instance ID that you wish to attach ENI to . Since version 2.2 , use the ' attached ' parameter to attach or
detach an ENI . Prior to 2.2 , to detach an ENI from an instance , use ' None ' .
detach an ENI . Prior to 2.2 , to detach an ENI from an instance , use ' None ' .
required : false
required : false
default : null
default : null
@ -56,7 +56,7 @@ options:
default : null
default : null
security_groups :
security_groups :
description :
description :
- List of security groups associated with the interface . Only used when state = present . Since version 2.2 , you \
- List of security groups associated with the interface . Only used when state = present . Since version 2.2 , you
can specify security groups by ID or by name or a combination of both . Prior to 2.2 , you can specify only by ID .
can specify security groups by ID or by name or a combination of both . Prior to 2.2 , you can specify only by ID .
required : false
required : false
default : null
default : null
@ -73,27 +73,31 @@ options:
default : 0
default : 0
attached :
attached :
description :
description :
- Specifies if network interface should be attached or detached from instance . If ommited , attachment status \
- Specifies if network interface should be attached or detached from instance . If ommited , attachment status
won ' t change
won ' t change
required : false
required : false
default : yes
default : yes
version_added : 2.2
version_added : 2.2
force_detach :
force_detach :
description :
description :
- Force detachment of the interface . This applies either when explicitly detaching the interface by setting instance_id to None or when deleting an interface with state = absent .
- Force detachment of the interface . This applies either when explicitly detaching the interface by setting instance_id
to None or when deleting an interface with state = absent .
required : false
required : false
default : no
default : no
delete_on_termination :
delete_on_termination :
description :
description :
- Delete the interface when the instance it is attached to is terminated . You can only specify this flag when the interface is being modified , not on creation .
- Delete the interface when the instance it is attached to is terminated . You can only specify this flag when the
interface is being modified , not on creation .
required : false
required : false
source_dest_check :
source_dest_check :
description :
description :
- By default , interfaces perform source / destination checks . NAT instances however need this check to be disabled . You can only specify this flag when the interface is being modified , not on creation .
- By default , interfaces perform source / destination checks . NAT instances however need this check to be disabled .
You can only specify this flag when the interface is being modified , not on creation .
required : false
required : false
secondary_private_ip_addresses :
secondary_private_ip_addresses :
description :
description :
- A list of IP addresses to assign as secondary IP addresses to the network interface . This option is mutually exclusive of secondary_private_ip_address_count
- A list of IP addresses to assign as secondary IP addresses to the network interface .
This option is mutually exclusive of secondary_private_ip_address_count
required : false
required : false
version_added : 2.2
version_added : 2.2
secondary_private_ip_address_count :
secondary_private_ip_address_count :
@ -387,18 +391,30 @@ def modify_eni(connection, vpc_id, module, eni):
if secondary_private_ip_addresses is not None :
if secondary_private_ip_addresses is not None :
secondary_addresses_to_remove = list ( set ( current_secondary_addresses ) - set ( secondary_private_ip_addresses ) )
secondary_addresses_to_remove = list ( set ( current_secondary_addresses ) - set ( secondary_private_ip_addresses ) )
if secondary_addresses_to_remove :
if secondary_addresses_to_remove :
connection . unassign_private_ip_addresses ( network_interface_id = eni . id , private_ip_addresses = list ( set ( current_secondary_addresses ) - set ( secondary_private_ip_addresses ) ) , dry_run = False )
connection . unassign_private_ip_addresses ( network_interface_id = eni . id ,
connection . assign_private_ip_addresses ( network_interface_id = eni . id , private_ip_addresses = secondary_private_ip_addresses , secondary_private_ip_address_count = None , allow_reassignment = False , dry_run = False )
private_ip_addresses = list ( set ( current_secondary_addresses ) -
set ( secondary_private_ip_addresses ) ) ,
dry_run = False )
connection . assign_private_ip_addresses ( network_interface_id = eni . id ,
private_ip_addresses = secondary_private_ip_addresses ,
secondary_private_ip_address_count = None ,
allow_reassignment = False , dry_run = False )
if secondary_private_ip_address_count is not None :
if secondary_private_ip_address_count is not None :
current_secondary_address_count = len ( current_secondary_addresses )
current_secondary_address_count = len ( current_secondary_addresses )
if secondary_private_ip_address_count > current_secondary_address_count :
if secondary_private_ip_address_count > current_secondary_address_count :
connection . assign_private_ip_addresses ( network_interface_id = eni . id , private_ip_addresses = None , secondary_private_ip_address_count = ( secondary_private_ip_address_count - current_secondary_address_count ) , allow_reassignment = False , dry_run = False )
connection . assign_private_ip_addresses ( network_interface_id = eni . id ,
private_ip_addresses = None ,
secondary_private_ip_address_count = ( secondary_private_ip_address_count -
current_secondary_address_count ) ,
allow_reassignment = False , dry_run = False )
changed = True
changed = True
elif secondary_private_ip_address_count < current_secondary_address_count :
elif secondary_private_ip_address_count < current_secondary_address_count :
# How many of these addresses do we want to remove
# How many of these addresses do we want to remove
secondary_addresses_to_remove_count = current_secondary_address_count - secondary_private_ip_address_count
secondary_addresses_to_remove_count = current_secondary_address_count - secondary_private_ip_address_count
connection . unassign_private_ip_addresses ( network_interface_id = eni . id , private_ip_addresses = current_secondary_addresses [ : secondary_addresses_to_remove_count ] , dry_run = False )
connection . unassign_private_ip_addresses ( network_interface_id = eni . id ,
private_ip_addresses = current_secondary_addresses [ : secondary_addresses_to_remove_count ] ,
dry_run = False )
if attached is True :
if attached is True :
if eni . attachment and eni . attachment . instance_id != instance_id :
if eni . attachment and eni . attachment . instance_id != instance_id :
@ -467,6 +483,9 @@ def find_eni(connection, module):
instance_id = module . params . get ( ' instance_id ' )
instance_id = module . params . get ( ' instance_id ' )
device_index = module . params . get ( ' device_index ' )
device_index = module . params . get ( ' device_index ' )
if not eni_id :
return None
try :
try :
filters = { }
filters = { }
if subnet_id :
if subnet_id :
@ -556,8 +575,6 @@ def main():
module . fail_json ( msg = " region must be specified " )
module . fail_json ( msg = " region must be specified " )
state = module . params . get ( " state " )
state = module . params . get ( " state " )
eni_id = module . params . get ( " eni_id " )
private_ip_address = module . params . get ( ' private_ip_address ' )
if state == ' present ' :
if state == ' present ' :
subnet_id = module . params . get ( " subnet_id " )
subnet_id = module . params . get ( " subnet_id " )
Sloane Hertel
8 years ago
committed by