chris being helpful

cloud/setup.yml

@@ -174,9 +174,9 @@ controller_templates:
         - question_name: Specify target instance type
           type: text
           variable: instance_type
+          default: t3a.medium
           required: true
 
-
   - name: Cloud / AWS / Restore EC2 from Snapshot
     job_type: run
     organization: Default

collections/ansible_collections/demo/cloud/roles/aws/tasks/resize_ec2.yml

@@ -6,7 +6,7 @@
   block:
     - name: AWS | RESIZE EC2 | assert required vars
       ansible.builtin.assert:
-        that: 
+        that:
           - instance_id is defined
           - aws_region is defined
         fail_msg: "instance_id, aws_region is required for resize operations"

linux/disa_stig.yml

@@ -0,0 +1,15 @@
+---
+- name: Apply compliance profile
+  hosts: "{{ _hosts | default(omit) }}"
+  become: true
+  vars:
+    compliance_profile: undef
+
+  tasks:
+    - name: Check os type
+      ansible.builtin.assert:
+        that: "ansible_os_family == 'RedHat'"
+
+    - name: Run Compliance Profile
+      ansible.builtin.include_role:
+        name: "demo.compliance.rhel{{ ansible_distribution_major_version }}STIG"

linux/setup.yml

@@ -356,6 +356,28 @@ controller_templates:
           variable: _hosts
           required: true
 
+  - name: "LINUX / DISA STIG"
+    job_type: run
+    inventory: "Demo Inventory"
+    project: "Ansible Product Demos"
+    playbook: "linux/disa_stig.yml"
+    notification_templates_started: Telemetry
+    notification_templates_success: Telemetry
+    notification_templates_error: Telemetry
+    credentials:
+      - "Demo Credential"
+    extra_vars:
+      sudo_remove_nopasswd: false
+    survey_enabled: true
+    survey:
+      name: ''
+      description: ''
+      spec:
+        - question_name: Server Name or Pattern
+          type: text
+          variable: _hosts
+          required: true
+
   - name: "LINUX / Multi-profile Compliance"
     job_type: run
     inventory: "Demo Inventory"