AnsibleByExample

amazon.aws 12.1.0 Released - Regional NAT Gateway Support and ACM Bugfix

Beginner
2026-11-052By Luca Berton

Lesson 1 of 25 in AWS Automation

AWS with Ansible — full curriculum
  1. 1. AWS Basics for Ansible
  2. 2. Installing the amazon.aws Collection and boto3
  3. 3. AWS Credentials and Profiles: Safe Configuration
  4. 4. Your First AWS Playbook: Regions, Tags and Idempotency
  5. 5. AWS Dynamic Inventory with the aws_ec2 Plugin
  6. 6. Grouping and Filtering Hosts with keyed_groups and Filters
  7. 7. Provisioning EC2 Instances
  8. 8. AMIs and Launch Templates
  9. 9. Building VPC Networks with Ansible
  10. 10. Security Groups and Network Access Control
  11. 11. Elastic IPs and Load Balancers
  12. 12. S3 Buckets and Object Management
  13. 13. IAM Users, Roles and Policies
  14. 14. RDS Databases with Ansible
  15. 15. Route 53 DNS Automation
  16. 16. CloudWatch Monitoring and Alarms
  17. 17. Managing Secrets: Secrets Manager, SSM Parameter Store and Ansible Vault
  18. 18. Post-Provisioning Configuration with Roles
  19. 19. Bridging Provisioning and Configuration: add_host and wait_for
  20. 20. Auto Scaling Groups and Rolling Updates
  21. 21. Validating Infrastructure with Assertions and Health Checks
  22. 22. Error Handling and Rollback in AWS Playbooks
  23. 23. Structuring a Reusable AWS Automation Project
  24. 24. Cost Control and Teardown Playbooks
  25. 25. Capstone: Provision and Configure a Multi-Tier AWS Application
View path overview →

Introduction

amazon.aws is the Ansible Content Collection that provides modules and plugins for managing Amazon Web Services infrastructure, including EC2, VPC, IAM, S3, and related services. Version 12.1.0 has been published to Ansible Galaxy, following 12.0.0. This is a minor release that adds regional NAT gateway support to the ec2_vpc_nat_gateway module and fixes a KeyError bug in the acm module_utils used when listing ACM certificates without a DomainName.

Whats New

Minor Changes

  • ec2_vpc_nat_gateway - Added availability_mode and vpc_id parameters for regional NAT gateway support (PR #2989).
  • ec2_vpc_nat_gateway - The release_eip option now correctly releases all EIP addresses when deleting a NAT gateway with multiple addresses (PR #2989).
  • ec2_vpc_nat_gateway_info - Added return field documentation for regional NAT gateway fields availability_mode, auto_scaling_ips, auto_provision_zones, and route_table_id (PR #2989).

Bugfixes

  • module_utils/acm - fixed a KeyError when listing ACM certificates that have no DomainName, for example a certificate imported without a valid domain name. The certificate ARN is now used in error messages instead (issue #2405).

Affected Components

ComponentTypeChange
ec2_vpc_nat_gatewayModuleNew availability_mode and vpc_id parameters, release_eip fix
ec2_vpc_nat_gateway_infoModuleNew return field documentation
module_utils/acmModule UtilKeyError bugfix on missing DomainName

How to Install and Verify

# Install or upgrade the collection from Ansible Galaxy
ansible-galaxy collection install amazon.aws:==12.1.0

# Alternatively, upgrade to the latest available version
ansible-galaxy collection install amazon.aws --upgrade

# Verify the installed version
ansible-galaxy collection list amazon.aws

# Confirm the ec2_vpc_nat_gateway module documentation includes the new parameters
ansible-doc amazon.aws.ec2_vpc_nat_gateway | grep -A2 availability_mode

Conclusion

Users managing regional NAT gateways in AWS should upgrade to amazon.aws 12.1.0 to take advantage of the availability_mode and vpc_id parameters, as well as the corrected release_eip behavior. Anyone affected by KeyError exceptions when listing ACM certificates imported without a domain name will also want this release, since the fix referenced in issue #2405 replaces the missing DomainName with the certificate ARN in error output.

All Tutorials