diff --git a/src/aws.yml b/src/aws.yml
index 70c10c0c..f05d07f8 100644
--- a/src/aws.yml
+++ b/src/aws.yml
@@ -1,7 +1,7 @@
 ---
 - hosts: all
   name: AWS-specific roles
-  become: yes
+  become: true
   become_method: ansible.builtin.sudo
   tasks:
     - name: Install Amazon EFS utilities
diff --git a/src/base.yml b/src/base.yml
index 560796ce..5064841a 100644
--- a/src/base.yml
+++ b/src/base.yml
@@ -1,7 +1,7 @@
 ---
 - hosts: all
   name: Setup base image
-  become: yes
+  become: true
   become_method: ansible.builtin.sudo
   tasks:
     - name: Install and configure automated security updates
diff --git a/src/example.yml b/src/example.yml
index d1ddfa66..ca2e6f59 100644
--- a/src/example.yml
+++ b/src/example.yml
@@ -1,7 +1,7 @@
 ---
 - hosts: all
   name: Project-specific roles
-  become: yes
+  become: true
   become_method: ansible.builtin.sudo
   tasks:
     # The cisagov/ansible-role-example Ansible role is just a no-op,
diff --git a/src/python.yml b/src/python.yml
index c98ef2a8..c1d369f1 100644
--- a/src/python.yml
+++ b/src/python.yml
@@ -1,7 +1,7 @@
 ---
 - hosts: all
   name: Install pip3/python3 and remove pip2/python2
-  become: yes
+  become: true
   become_method: ansible.builtin.sudo
   tasks:
     # If pip were to be installed first, then the OS _could_ pull
diff --git a/src/upgrade.yml b/src/upgrade.yml
index 417992f3..e8dfe7db 100644
--- a/src/upgrade.yml
+++ b/src/upgrade.yml
@@ -1,7 +1,7 @@
 ---
 - hosts: all
   name: Upgrade base image
-  become: yes
+  become: true
   become_method: ansible.builtin.sudo
   tasks:
     - name: Upgrade all packages