Skip to content

Commit 92d761c

Browse files
authored
Updating the wrapper output as sensitive to prevent exposure of secret values in terragrunt apply logs
This PR updates the output "wrapper" block in the cloudfront support module wrapper to set the sensitive flag to "true" value. Terragrunt apply logs for cloudfront distributions expose a secret value being inserted for custom origin request header when passed through this wrapper output. By marking the wrapper output as sensitive we ensure consistent redaction of secrets across all stages of terragrunt output, avoiding any accidental exposure of sensitive vault derived values in logs.
1 parent d66669f commit 92d761c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

wrappers/outputs.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
output "wrapper" {
22
description = "Map of outputs of a wrapper."
33
value = module.wrapper
4-
# sensitive = false # No sensitive module output found
4+
sensitive = true # Set to true to hide the sensitive output in the console
55
}

0 commit comments

Comments
 (0)