mirror of
https://github.com/opentffoundation/opentf.git
synced 2026-02-27 20:01:34 -05:00
e27aacebf9
Similar to `after_unknown`, `before_sensitive` and `after_sensitive` are values with similar structure to `before` and `after` which encode the presence of sensitive values in a planned change. These should be used to obscure sensitive values from human-readable output. These values follow the same structure as the `before` and `after` values, replacing sensitive values with `true`, and non-sensitive values with `false`. Following the `after_unknown` precedent, we omit non-sensitive `false` values for object attributes/map values, to make serialization more compact. One difference from `after_unknown` is that a sensitive complex value (collection or structural type) is replaced with `true`. If the complex value itself is sensitive, all of its contents should be obscured.
14 lines
191 B
HCL
14 lines
191 B
HCL
variable "test_var" {
|
|
default = "boop"
|
|
sensitive = true
|
|
}
|
|
|
|
resource "test_instance" "test" {
|
|
ami = var.test_var
|
|
}
|
|
|
|
output "test" {
|
|
value = test_instance.test.ami
|
|
sensitive = true
|
|
}
|