Security enhancement pr devel 2.x

roles/aws/aws_vpc/defaults/main.yml

@@ -70,6 +70,7 @@ _common_security_groups:
           - 22
         cidr_ip: 0.0.0.0/0
         rule_desc: Allow all incoming tcp traffic on port 22.
+    rules_egress: []
   web_open:
     name: web_open
     description: Allow all incoming web traffic on ports 80 and 443.
@@ -80,6 +81,7 @@ _common_security_groups:
           - 443
         cidr_ip: 0.0.0.0/0
         rule_desc: Allow all incoming tcp traffic on ports 80 and 443.
+    rules_egress: []
   mailpit_open:
     name: mailpit_open
     description: Allow all incoming traffic on port 8025 for Mailpit.
@@ -89,6 +91,7 @@ _common_security_groups:
           - 8025
         cidr_ip: 0.0.0.0/0
         rule_desc: Allow all incoming tcp traffic on port 8025.
+    rules_egress: []
   ftp_open:
     name: ftp_open
     description: Allow all incoming traffic on ports 20 and 21 for FTP.
@@ -99,6 +102,7 @@ _common_security_groups:
           - 21
         cidr_ip: 0.0.0.0/0
         rule_desc: Allow all incoming tcp traffic on ports 20 and 21.
+    rules_egress: []
   sftp_open:
     name: sftp_open
     description: Allow all incoming traffic on ports 989 and 990 for sFTP.
@@ -109,6 +113,7 @@ _common_security_groups:
           - 990
         cidr_ip: 0.0.0.0/0
         rule_desc: Allow all incoming tcp traffic on ports 989 and 990.
+    rules_egress: []
   ossec:
     name: ossec
     description: Allow all incoming traffic on ports 1514 and 1515 for OSSEC.
@@ -119,6 +124,7 @@ _common_security_groups:
           - 1515
         cidr_ip: 0.0.0.0/0
         rule_desc: Allow all incoming udp traffic on ports 1514 and 1515.
+    rules_egress: []
   openvpn:
     name: openvpn
     description: Allow all incoming traffic on port 1194 for OpenVPN.
@@ -128,3 +134,4 @@ _common_security_groups:
           - 1194
         cidr_ip: 0.0.0.0/0
         rule_desc: Allow all incoming udp traffic on port 1194.
+    rules_egress: []