Terraform state records every attribute of every resource and data source it manages, and many of those attributes are secrets: database master passwords, generated private keys, access tokens, connection strings. Marking a variable or output sensitive hides it on screen but does not remove it from state. So you must assume that anyone who can read your state can read your secrets, and protect state accordingly.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.