StudyToCert

All certifications / Terraform Associate / Lessons

HashiCorp Certified: Terraform Associate Terraform Associate (004) · Domain 4: Terraform configuration

Sensitive data: `sensitive` values, ephemeral variables and resources, write-only arguments, secrets in state

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Infrastructure code constantly handles secrets: database passwords, API tokens, private keys. Terraform offers several tools for them, and the exam expects you to know exactly what each one protects and what it does not. The oldest and most misunderstood is the sensitive flag.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Terraform Associate for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Terraform Associate study plan