diff --git a/roles/bitbucket_mesh/tasks/main.yml b/roles/bitbucket_mesh/tasks/main.yml
index 814a038..e7b2f2b 100644
--- a/roles/bitbucket_mesh/tasks/main.yml
+++ b/roles/bitbucket_mesh/tasks/main.yml
@@ -15,17 +15,17 @@
 
 # optionally grab basic_auth creds from secrets_manager secret called 'download_atlassian'
 - name: set basic_auth facts if the secret exists
-    ansible.builtin.set_fact:
-      download_atlassian_password: "{{ lookup('amazon.aws.aws_secret', atl_download_secret_name + '.password', region=ansible_ec2_placement_region, bypath=false, nested=true, on_denied='skip', on_missing='skip') }}"
-      download_atlassian_username: "{{ lookup('amazon.aws.aws_secret', atl_download_secret_name + '.username', region=ansible_ec2_placement_region, bypath=false, nested=true, on_denied='skip', on_missing='skip') }}"
-    failed_when: false
-    ignore_errors: yes
-    no_log: true
-    when:
-      - ansible_ec2_placement_region is defined
-      - atl_download_secret_name is defined
-    tags:
-      - runtime_pkg
+  ansible.builtin.set_fact:
+    download_atlassian_password: "{{ lookup('amazon.aws.aws_secret', atl_download_secret_name + '.password', region=ansible_ec2_placement_region, bypath=false, nested=true, on_denied='skip', on_missing='skip') }}"
+    download_atlassian_username: "{{ lookup('amazon.aws.aws_secret', atl_download_secret_name + '.username', region=ansible_ec2_placement_region, bypath=false, nested=true, on_denied='skip', on_missing='skip') }}"
+  failed_when: false
+  ignore_errors: yes
+  no_log: true
+  when:
+    - ansible_ec2_placement_region is defined
+    - atl_download_secret_name is defined
+  tags:
+    - runtime_pkg
 
 - name: download the mesh distribution using maven
   community.general.maven_artifact: