ansible.azure.automation/roles/azure_nsg/tasks/present.yml

---
- name: Build tags list
  set_fact:
    tags_list: "{{ tags_list | default([]) | union([[tag.key,tag.value]|join(':')]) }}"
  loop: "{{ lookup('dict', nsg.tags | default({}, true)) }}"
  loop_control:
    loop_var: "tag"

- name: Get security group
  azure_rm_securitygroup_info:
    ad_user: "{{ azure_ad_user | default(omit) }}"
    password: "{{ azure_password | default(omit) }}"
    subscription_id: "{{ azure_subscription_id | default(lookup('env', 'AZURE_SUBSCRIPTION_ID')) }}"
    client_id: "{{ azure_client_id | default(lookup('env', 'AZURE_CLIENT_ID')) }}"
    secret: "{{ azure_secret | default(lookup('env', 'AZURE_SECRET')) }}"
    tenant: "{{ azure_tenant | default(lookup('env', 'AZURE_TENANT')) }}"
    resource_group: "{{ nsg.resource_group }}"
    tags: "{{ tags_list | default(omit) }}"
    name: "{{ nsg.name | default(omit) }}"
  register: azure_nsg_facts

- name: Create security group
  azure_rm_securitygroup:
    ad_user: "{{ azure_ad_user | default(omit) }}"
    password: "{{ azure_password | default(omit) }}"
    subscription_id: "{{ azure_subscription_id | default(lookup('env', 'AZURE_SUBSCRIPTION_ID')) }}"
    client_id: "{{ azure_client_id | default(lookup('env', 'AZURE_CLIENT_ID')) }}"
    secret: "{{ azure_secret | default(lookup('env', 'AZURE_SECRET')) }}"
    tenant: "{{ azure_tenant | default(lookup('env', 'AZURE_TENANT')) }}"
    name: "{{ nsg.name }}"
    default_rules: "{{ nsg.default_rules | default(omit, true) }}"
    purge_default_rules: "{{ nsg.purge_default_rules | default(omit, true) }}"
    rules: "{{ nsg.rules | default(omit, true) }}"
    purge_rules: "{{ nsg.purge_rules | default(true, true) }}"
    append_tags: false
    location: "{{ nsg.location | default(omit, true) }}"
    resource_group: "{{ nsg.resource_group }}"
    state: "present"
    tags: "{{ nsg.tags | default(omit, true) }}"
  register: creatensg
...