---
- name: Apply CIS-inspired IBM AIX 7 hardening controls
  hosts: aix
  become: true
  gather_facts: true

  roles:
    - role: cis-aix7-hardening
      tags:
        - cis
        - aix7
        - hardening

  post_tasks:
    - name: Show AIX hardening validation summary
      ansible.builtin.debug:
        var: cis_aix_validation_summary
      when: cis_aix_validation_summary is defined
      tags:
        - always
        - postcheck