Installs AWS Inspector (awsagent) on RedHat/CentOS or Debian/Ubuntu.
None.
Available variables are listed below, along with default values (see defaults/main.yml
):
aws_inspector_url: "https://d1wk0tztpsntt1.cloudfront.net/linux/latest/install"
aws_inspector_installer_dest: /tmp/aws_inspector_agent_installer
URL from which inspector installer will be downloaded, and temporary directory where installer will be stored.
awsagent_state: started
awsagent_enabled: true
Control the awsagent
service; by default, for Amazon Inspector to work correctly, you must have awsagent
running on any server you want inspected.
There is also a handler, restart awsagent
, which can be used to restart the agent.
aws_inspector_role_test_mode: false
Set this to true
if testing or using this role outside of an EC2 instance (e.g. if testing in CI or building a server in a different cloud environment).
None.
- hosts: ec2-instances
roles:
- geerlingguy.aws-inspector
MIT / BSD
This role was created in 2017 by Jeff Geerling, author of Ansible for DevOps.