[vr46]

That’s not quite true. Ansible will happily run locally without SSH. A machine can easily be configured to pull Ansible roles from git or S3 and then run a playbook.