From c5edaf5e682f0a520c20730d8b8c1211563ba758 Mon Sep 17 00:00:00 2001 From: Mark Chappell Date: Tue, 22 Nov 2016 13:38:15 +0100 Subject: [PATCH] ec2_lc.py: Also pass 'encrypted' when adding a volume This only allows for using the default KMS keys, but enables encryption at rest without needing to migrate the module to boto3 --- lib/ansible/modules/cloud/amazon/ec2_lc.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/ansible/modules/cloud/amazon/ec2_lc.py b/lib/ansible/modules/cloud/amazon/ec2_lc.py index 013f9be24e2..d9cc3398a6d 100644 --- a/lib/ansible/modules/cloud/amazon/ec2_lc.py +++ b/lib/ansible/modules/cloud/amazon/ec2_lc.py @@ -140,6 +140,7 @@ EXAMPLES = ''' device_type: io1 iops: 3000 delete_on_termination: true + encrypted: true - device_name: /dev/sdb ephemeral: ephemeral0 @@ -177,7 +178,8 @@ def create_block_device(module, volume): size=volume.get('volume_size'), volume_type=volume.get('device_type'), delete_on_termination=volume.get('delete_on_termination', False), - iops=volume.get('iops')) + iops=volume.get('iops'), + encrypted=volume.get('encrypted',None)) def create_launch_config(connection, module):