Skip to content

Commit 7553adb

Browse files
authored
fix: Set sensitive=true for sensitive outputs and use tolist() (#148)
1 parent 50e46b3 commit 7553adb

File tree

3 files changed

+5
-1
lines changed

3 files changed

+5
-1
lines changed

examples/iam-user/outputs.tf

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,11 +41,13 @@ output "this_iam_access_key_encrypted_secret" {
4141
output "this_iam_access_key_secret" {
4242
description = "The access key secret"
4343
value = module.iam_user.this_iam_access_key_secret
44+
sensitive = true
4445
}
4546

4647
output "this_iam_access_key_ses_smtp_password_v4" {
4748
description = "The secret access key converted into an SES SMTP password"
4849
value = module.iam_user.this_iam_access_key_ses_smtp_password_v4
50+
sensitive = true
4951
}
5052

5153
output "this_iam_access_key_status" {

modules/iam-assumable-role/main.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
locals {
2-
role_sts_externalid = flatten(list(var.role_sts_externalid))
2+
role_sts_externalid = flatten(tolist(var.role_sts_externalid))
33
}
44

55
data "aws_iam_policy_document" "assume_role" {

modules/iam-user/outputs.tf

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,7 @@ output "this_iam_access_key_id" {
4343
output "this_iam_access_key_secret" {
4444
description = "The access key secret"
4545
value = element(concat(aws_iam_access_key.this_no_pgp.*.secret, [""]), 0)
46+
sensitive = true
4647
}
4748

4849
output "this_iam_access_key_key_fingerprint" {
@@ -65,6 +66,7 @@ output "this_iam_access_key_ses_smtp_password_v4" {
6566
),
6667
0
6768
)
69+
sensitive = true
6870
}
6971

7072
output "this_iam_access_key_status" {

0 commit comments

Comments
 (0)