Create a policy like this, substituting your AWS account number, then attach it to all groups and roles. It will prevent deletion of RDS instances containing the string "prod" in their name.
Note: This is intended to prevent accidental deletion, and is easily sidestepped.
| --- | |
| - block: | |
| - name: Retrieve some information | |
| stat: | |
| path: /path/to/a/file | |
| register: info_result | |
| - name: Check a condition | |
| assert: |
| - hosts: localhost | |
| connection: local | |
| tasks: | |
| - ec2_ami_find: | |
| name: "arch-linux-hvm-*.x86_64-ebs" | |
| virtualization_type: hvm | |
| owner: 093273469852 # Uplink Labs | |
| sort: name |
| #!/usr/bin/python | |
| DOCUMENTATION = ''' | |
| --- | |
| module: git_facts | |
| version_added: "devel" | |
| short_description: retrieve facts about a git repository | |
| description: | |
| - retrieve facts about a git repository. This module has a dependency on GitPython. | |
| options: |
| #!/usr/bin/env python | |
| import re, sys | |
| filename = sys.argv[1] | |
| match = sys.argv[2] | |
| append = sys.argv[3] | |
| f = open(filename, 'r+') | |
| content = f.read() |
| $ ansible-playbook -i test.ini test.yml --limit group1 | |
| PLAY [all] ******************************************************************** | |
| GATHERING FACTS *************************************************************** | |
| ok: [group1] | |
| TASK: [command true] ********************************************************** | |
| changed: [host1] |
| --- | |
| - hosts: localhost | |
| connection: local | |
| tasks: | |
| - set_fact: | |
| is_test: "{{ env == 'development' or 'test' in env }}" | |
| - set_fact: | |
| security_group: blah |
