cloudfront_distribution: fix restrictions (ansible#37476)

lib/ansible/modules/cloud/amazon/cloudfront_distribution.py

@@ -1691,7 +1691,7 @@ def validate_restrictions(self, config, restrictions, purge_restrictions=False):
                                               rest not in geo_restriction_items])
             valid_restrictions = ansible_list_to_cloudfront_list(geo_restriction_items)
             valid_restrictions['restriction_type'] = geo_restriction.get('restriction_type')
-            return valid_restrictions
+            return {'geo_restriction': valid_restrictions}
         except Exception as e:
             self.module.fail_json_aws(e, msg="Error validating restrictions")
 

test/integration/targets/cloudfront_distribution/tasks/main.yml

@@ -53,6 +53,23 @@
       that:
         - update_origin_http_port.changed
 
+  - name: update restrictions
+    cloudfront_distribution:
+      alias: "{{ cloudfront_alias }}"
+      restrictions:
+        geo_restriction:
+          restriction_type: "whitelist"
+          items:
+            - "US"
+      state: present
+      <<: *aws_connection_info
+    register: update_restrictions
+
+  - name: ensure restrictions was updated
+    assert:
+      that:
+        - update_restrictions.changed
+
   - name: set a random comment
     set_fact:
       comment: "{{'ABCDEFabcdef123456'|shuffle|join }}"