openstack-ansible-security/doc/source/developer-notes/V-38490.rst

Exception

Disabling the usb-storage module can add extra security, but it's not necessary on most systems. To disable the usb-storage module on hosts, set disable_usb_storage to yes:

disable_usb_storage: yes