medium10 pts · first answer countsterraformsecrets-management

Sensitive outputs and state

A module creates a database password and marks the output sensitive = true. A reviewer says the secret is now safe. What is the catch?

A.Terraform encrypts sensitive values in state using a key derived from the provider credentials.B.It only hides the value in CLI output; state still holds it in plain text.C.Sensitive values are never written to the state file, only to the plan file.D.Setting sensitive = true makes apply fail, so the password is never created.

Discussion 0

Join free to post in the discussion.

Sensitive outputs and state

Discussion 0

Related questions