community.aws.cloudfront_distribution_info (5.1.0) — module

Obtain facts about an AWS CloudFront distribution

| "added in version" 1.0.0 of community.aws"

Authors: Willem van Ketwich (@wilvk)

Install collection

Install with ansible-galaxy collection install community.aws:==5.1.0


Add to requirements.yml

  collections:
    - name: community.aws
      version: 5.1.0

Description

Gets information about an AWS CloudFront distribution.

Prior to release 5.0.0 this module was called C(community.aws.cloudfront_info). The usage did not change.


Requirements

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
# Note: These examples do not set authentication details, see the AWS Guide for details.

- name: Get a summary of distributions
  community.aws.cloudfront_distribution_info:
    summary: true
  register: result
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Get information about a distribution
  community.aws.cloudfront_distribution_info:
    distribution: true
    distribution_id: my-cloudfront-distribution-id
  register: result_did
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- ansible.builtin.debug:
    msg: "{{ result_did['cloudfront']['my-cloudfront-distribution-id'] }}"
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Get information about a distribution using the CNAME of the cloudfront distribution.
  community.aws.cloudfront_distribution_info:
    distribution: true
    domain_name_alias: www.my-website.com
  register: result_website
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- ansible.builtin.debug:
    msg: "{{ result_website['cloudfront']['www.my-website.com'] }}"
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Get all information about an invalidation for a distribution.
  community.aws.cloudfront_distribution_info:
    invalidation: true
    distribution_id: my-cloudfront-distribution-id
    invalidation_id: my-cloudfront-invalidation-id
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Get all information about a CloudFront origin access identity.
  community.aws.cloudfront_distribution_info:
    origin_access_identity: true
    origin_access_identity_id: my-cloudfront-origin-access-identity-id
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Get all information about lists not requiring parameters (ie. list_origin_access_identities, list_distributions, list_streaming_distributions)
  community.aws.cloudfront_distribution_info:
    origin_access_identity: true
    origin_access_identity_id: my-cloudfront-origin-access-identity-id
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Get all information about lists not requiring parameters (ie. list_origin_access_identities, list_distributions, list_streaming_distributions)
  community.aws.cloudfront_distribution_info:
    all_lists: true

Inputs

    
region:
    aliases:
    - aws_region
    - ec2_region
    description:
    - The AWS region to use.
    - For global services such as IAM, Route53 and CloudFront, I(region) is ignored.
    - The C(AWS_REGION) or C(EC2_REGION) environment variables may also be used.
    - See the Amazon AWS documentation for more information U(http://docs.aws.amazon.com/general/latest/gr/rande.html#ec2_region).
    - The C(ec2_region) alias has been deprecated and will be removed in a release after
      2024-12-01
    - Support for the C(EC2_REGION) environment variable has been deprecated and will
      be removed in a release after 2024-12-01.
    type: str

profile:
    aliases:
    - aws_profile
    description:
    - A named AWS profile to use for authentication.
    - See the AWS documentation for more information about named profiles U(https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-profiles.html).
    - The C(AWS_PROFILE) environment variable may also be used.
    - The I(profile) option is mutually exclusive with the I(aws_access_key), I(aws_secret_key)
      and I(security_token) options.
    type: str

summary:
    default: false
    description:
    - Returns a summary of all distributions, streaming distributions and origin_access_identities.
    - This is the default behaviour if no option is selected.
    required: false
    type: bool

all_lists:
    default: false
    description:
    - Get all CloudFront lists that do not require parameters.
    required: false
    type: bool

access_key:
    aliases:
    - aws_access_key_id
    - aws_access_key
    - ec2_access_key
    description:
    - AWS access key ID.
    - See the AWS documentation for more information about access tokens U(https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys).
    - The C(AWS_ACCESS_KEY_ID), C(AWS_ACCESS_KEY) or C(EC2_ACCESS_KEY) environment variables
      may also be used in decreasing order of preference.
    - The I(aws_access_key) and I(profile) options are mutually exclusive.
    - The I(aws_access_key_id) alias was added in release 5.1.0 for consistency with the
      AWS botocore SDK.
    - The I(ec2_access_key) alias has been deprecated and will be removed in a release
      after 2024-12-01.
    - Support for the C(EC2_ACCESS_KEY) environment variable has been deprecated and will
      be removed in a release after 2024-12-01.
    type: str

aws_config:
    description:
    - A dictionary to modify the botocore configuration.
    - Parameters can be found in the AWS documentation U(https://botocore.amazonaws.com/v1/documentation/api/latest/reference/config.html#botocore.config.Config).
    type: dict

secret_key:
    aliases:
    - aws_secret_access_key
    - aws_secret_key
    - ec2_secret_key
    description:
    - AWS secret access key.
    - See the AWS documentation for more information about access tokens U(https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys).
    - The C(AWS_SECRET_ACCESS_KEY), C(AWS_SECRET_KEY), or C(EC2_SECRET_KEY) environment
      variables may also be used in decreasing order of preference.
    - The I(secret_key) and I(profile) options are mutually exclusive.
    - The I(aws_secret_access_key) alias was added in release 5.1.0 for consistency with
      the AWS botocore SDK.
    - The I(ec2_secret_key) alias has been deprecated and will be removed in a release
      after 2024-12-01.
    - Support for the C(EC2_SECRET_KEY) environment variable has been deprecated and will
      be removed in a release after 2024-12-01.
    type: str

distribution:
    default: false
    description:
    - Get information about a distribution.
    - Requires I(distribution_id) or I(domain_name_alias) to be specified.
    required: false
    type: bool

endpoint_url:
    aliases:
    - ec2_url
    - aws_endpoint_url
    - s3_url
    description:
    - URL to connect to instead of the default AWS endpoints.  While this can be used
      to connection to other AWS-compatible services the amazon.aws and community.aws
      collections are only tested against AWS.
    - The  C(AWS_URL) or C(EC2_URL) environment variables may also be used, in decreasing
      order of preference.
    - The I(ec2_url) and I(s3_url) aliases have been deprecated and will be removed in
      a release after 2024-12-01.
    - Support for the C(EC2_URL) environment variable has been deprecated and will be
      removed in a release after 2024-12-01.
    type: str

invalidation:
    default: false
    description:
    - Get information about an invalidation.
    - Requires I(invalidation_id) to be specified.
    required: false
    type: bool

aws_ca_bundle:
    description:
    - The location of a CA Bundle to use when validating SSL certificates.
    - The C(AWS_CA_BUNDLE) environment variable may also be used.
    type: path

session_token:
    aliases:
    - aws_session_token
    - security_token
    - aws_security_token
    - access_token
    description:
    - AWS STS session token for use with temporary credentials.
    - See the AWS documentation for more information about access tokens U(https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys).
    - The C(AWS_SESSION_TOKEN), C(AWS_SECURITY_TOKEN) or C(EC2_SECURITY_TOKEN) environment
      variables may also be used in decreasing order of preference.
    - The I(security_token) and I(profile) options are mutually exclusive.
    - Aliases I(aws_session_token) and I(session_token) were added in release 3.2.0, with
      the parameter being renamed from I(security_token) to I(session_token) in release
      6.0.0.
    - The I(security_token), I(aws_security_token), and I(access_token) aliases have been
      deprecated and will be removed in a release after 2024-12-01.
    - Support for the C(EC2_SECRET_KEY) and C(AWS_SECURITY_TOKEN) environment variables
      has been deprecated and will be removed in a release after 2024-12-01.
    type: str

validate_certs:
    default: true
    description:
    - When set to C(false), SSL certificates will not be validated for communication with
      the AWS APIs.
    - Setting I(validate_certs=false) is strongly discouraged, as an alternative, consider
      setting I(aws_ca_bundle) instead.
    type: bool

distribution_id:
    description:
    - The id of the CloudFront distribution. Used with I(distribution), I(distribution_config),
      I(invalidation), I(streaming_distribution), I(streaming_distribution_config), I(list_invalidations).
    required: false
    type: str

invalidation_id:
    description:
    - The id of the invalidation to get information about.
    - Used with I(invalidation).
    required: false
    type: str

domain_name_alias:
    description:
    - Can be used instead of I(distribution_id) - uses the aliased CNAME for the CloudFront
      distribution to get the distribution id where required.
    required: false
    type: str

list_distributions:
    default: false
    description:
    - Get a list of CloudFront distributions.
    required: false
    type: bool

list_invalidations:
    default: false
    description:
    - Get a list of invalidations.
    - Requires I(distribution_id) or I(domain_name_alias) to be specified.
    required: false
    type: bool

distribution_config:
    default: false
    description:
    - Get the configuration information about a distribution.
    - Requires I(distribution_id) or I(domain_name_alias) to be specified.
    required: false
    type: bool

origin_access_identity:
    default: false
    description:
    - Get information about an origin access identity.
    - Requires I(origin_access_identity_id) to be specified.
    required: false
    type: bool

streaming_distribution:
    default: false
    description:
    - Get information about a specified RTMP distribution.
    - Requires I(distribution_id) or I(domain_name_alias) to be specified.
    required: false
    type: bool

origin_access_identity_id:
    description:
    - The id of the CloudFront origin access identity to get information about.
    required: false
    type: str

debug_botocore_endpoint_logs:
    default: false
    description:
    - Use a C(botocore.endpoint) logger to parse the unique (rather than total) C("resource:action")
      API calls made during a task, outputing the set to the resource_actions key in the
      task results. Use the C(aws_resource_action) callback to output to total list made
      during a playbook.
    - The C(ANSIBLE_DEBUG_BOTOCORE_LOGS) environment variable may also be used.
    type: bool

list_streaming_distributions:
    default: false
    description:
    - Get a list of streaming distributions.
    required: false
    type: bool

list_origin_access_identities:
    default: false
    description:
    - Get a list of CloudFront origin access identities.
    - Requires I(origin_access_identity_id) to be set.
    required: false
    type: bool

origin_access_identity_config:
    default: false
    description:
    - Get the configuration information about an origin access identity.
    - Requires I(origin_access_identity_id) to be specified.
    required: false
    type: bool

streaming_distribution_config:
    default: false
    description:
    - Get the configuration information about a specified RTMP distribution.
    - Requires I(distribution_id) or I(domain_name_alias) to be specified.
    required: false
    type: bool

list_distributions_by_web_acl_id:
    default: false
    description:
    - Get a list of distributions using web acl id as a filter.
    - Requires I(web_acl_id) to be set.
    required: false
    type: bool

Outputs

distribution:
  description: 'Facts about a CloudFront distribution. Requires I(distribution_id)
    or I(domain_name_alias) to be specified. Requires I(origin_access_identity_id)
    to be set.

    '
  returned: only if distribution is true
  type: dict
distribution_config:
  description: 'Facts about a CloudFront distribution''s config. Requires I(distribution_id)
    or I(domain_name_alias) to be specified.

    '
  returned: only if I(distribution_config) is true
  type: dict
invalidation:
  description: 'Describes the invalidation information for the distribution. Requires
    I(invalidation_id) to be specified and either I(distribution_id) or I(domain_name_alias.)

    '
  returned: only if invalidation is true
  type: dict
origin_access_identity:
  description: Describes the origin access identity information. Requires I(origin_access_identity_id)
    to be set.
  returned: only if I(origin_access_identity) is true
  type: dict
origin_access_identity_configuration:
  description: Describes the origin access identity information configuration information.
    Requires I(origin_access_identity_id) to be set.
  returned: only if I(origin_access_identity_configuration) is true
  type: dict
result:
  description: 'Result dict not nested under the CloudFront ID to access results of
    module without the knowledge of that id as figuring out the DistributionId is
    usually the reason one uses this module in the first place.

    '
  returned: always
  type: dict
streaming_distribution:
  description: 'Describes the streaming information for the distribution. Requires
    I(distribution_id) or I(domain_name_alias) to be specified.

    '
  returned: only if I(streaming_distribution) is true
  type: dict
streaming_distribution_config:
  description: 'Describes the streaming configuration information for the distribution.
    Requires I(distribution_id) or I(domain_name_alias) to be specified.

    '
  returned: only if I(streaming_distribution_config) is true
  type: dict
summary:
  description: Gives a summary of distributions, streaming distributions and origin
    access identities.
  returned: as default or if summary is true
  type: dict