Install via official package repository for Ubuntu

handlers/main.yml

@@ -0,0 +1,4 @@
+---
+- name: Update the package cache
+  ansible.builtin.package:
+    update_cache: true

meta/main.yml

@@ -18,7 +18,10 @@ galaxy_info:
   # OS family.  This simplifies a lot of things for roles that support
   # Kali Linux, so it makes sense to force the installation of Ansible
   # 2.10 or newer.
-  min_ansible_version: "2.10"
+  #
+  # We use ansible.builtin.deb822_repository in this role (for
+  # Ubuntu), and this module was introduced in ansible-core 2.15.
+  min_ansible_version: "2.15"
   namespace: cisagov
   platforms:
     - name: Amazon Linux

tasks/install_Debian.yml

@@ -3,8 +3,8 @@
   ansible.builtin.include_tasks: install_common.yml
 
 - name: >-
-    Build deb packages from the aws/efs-utils code (Debian post-Bullseye,
-    Kali, and Ubuntu)
+    Build deb packages from the aws/efs-utils code (Debian post-Bullseye and
+    Kali)
   # A dependency of aws/efs-utils (aws/aws-lc-rs) can only be built
   # using gcc<=13.  This is the reason for the params below.  See here
   # for more details:

tasks/install_Ubuntu.yml

@@ -0,0 +1,32 @@
+---
+- name: Add official aws/efs-utils repo
+  block:
+    - name: Install prerequisites so apt can use DEB822 repos
+      ansible.builtin.package:
+        name:
+          - python3-debian
+
+    - name: Add the official aws/efs-utils repo
+      ansible.builtin.deb822_repository:
+        components:
+          - main
+        name: efs-utils
+        signed_by: https://amazon-efs-utils.aws.com/efs-utils-armored.gpg
+        suites:
+          - "{{ ansible_facts['distribution_version'] }}"
+        uris:
+          - >-
+            https://amazon-efs-utils.aws.com/repo/deb/ubuntu/{{
+            ansible_facts['distribution_version'] }}
+      notify:
+        - Update the package cache
+
+    # We need the handler that updates the apt package cache to run
+    # now if it is necessary.
+    - name: Flush handlers
+      ansible.builtin.meta: flush_handlers
+
+- name: Install amazon-efs-utils
+  ansible.builtin.package:
+    name:
+      - amazon-efs-utils