Using su in playbook tasks generates a warning. You cannot become root nor is there a root password on EC2 instances on AWS. Instead you can su without a password using the default ec2_user account. However, Ansible whines about su in shell commands and we want to suppress that without generating another named, password-protected account.