- name: Assign users to groups
  iam:
    profile: "{{ aws_account }}"
    access_key_state: create
    groups: "{{ item.groups }}"
    iam_type: user
    name: "{{ item.name }}"
    password: "{{ lookup('password', '/dev/null length=16') }}"
    update_password: on_create
    state: present
  with_items: "{{ aws_users }}"
  register: credentials

- name: Abbreviate the dictionary lookup
  set_fact:
    "{{ item.name }}": "{{ (credentials.results | selectattr('user_name','equalto', item.name) | list | first) }}"
  with_items: "{{ aws_users }}"

- name: debug
  mail:
    host: smtp.gmail.com
    port: 587
    username: redacted
    password: redacted
    to: redacted
    subject: "test email"
    body:
      - "{{ lookup('vars',item.name).invocation.module_args.password }}"
      - "{{ lookup('vars', item.name).item.email }}"
      - "{{ lookup('vars', item.name).created_keys[0]['access_key_id'] }}"
      - "{{ lookup('vars', item.name).created_keys[0]['secret_access_key'] }}"
  with_items: "{{ aws_users }}"
  when: lookup('vars', item.name).created_keys | length > 0