Orchestration reference example

secgroup.sls

Ensure elb-external security group exists:
  boto_secgroup.present:
    - name: elb-external
    - description: elb-external
    - rules:
        - ip_protocol: tcp
          from_port: 80
          to_port: 80
          cidr_ip:
            - 0.0.0.0/0
        - ip_protocol: tcp
          from_port: 443
          to_port: 443
          cidr_ip:
            - 0.0.0.0/0
    - vpc_name: primary-production-iad
    - profile: primary_profile

Ensure {{ grains.service_name }} security group exists:
  boto_secgroup.present:
    - name: {{ grains.service_name }}
    - description: {{ grains.service_name }}
    - rules:
        - ip_protocol: tcp
          from_port: 80
          to_port: 80
          source_group_name: elb-external
        - ip_protocol: tcp
          from_port: 2049
          to_port: 2049
          source_group_name: {{ grains.service_name }}
    - vpc_name: primary-production-iad
    - profile: primary_profile