- name: Generate random passwords
  set_fact:
    "{{ item.name }}_password": "{{ lookup('password', '/dev/null length=16') }}"
  with_items: "{{ aws_users }}"

- name: Assign users to groups
  iam:
    profile: "{{ aws_account }}"
    access_key_state: create
    groups: "{{ item.groups }}"
    iam_type: user
    name: "{{ item.name }}"
    password: "{{ lookup('vars', item.name + '_password') }}"
    update_password: on_create
    state: present
  with_items: "{{ aws_users }}"
  register: credentials

- name: Send email
  mail:
    host: smtp.gmail.com
    port: 587
    username: redacted
    password: redacted
    to: "{{ item.item.email }}"
    subject: "test email"
    body:
      - "{{ lookup('vars', item.item.name + '_password') }}"
      - "{{ item.created_keys[0]['access_key_id'] }}"
      - "{{ item.created_keys[0]['secret_access_key'] }}"
  with_items: "{{ credentials.results }}"
  when: item.created_keys | length > 0