- hosts: all become: true become_method: sudo become_user: root remote_user: infra roles: - configure-fips-policies