fix: Fixed output of iam_user_login_profile_password in iam-user submodule (#214)

Author: antonbabenko

examples/iam-user/README.md

@@ -55,6 +55,7 @@ No inputs.
 | <a name="output_iam_user_arn"></a> [iam\_user\_arn](#output\_iam\_user\_arn) | The ARN assigned by AWS for this user |
 | <a name="output_iam_user_login_profile_encrypted_password"></a> [iam\_user\_login\_profile\_encrypted\_password](#output\_iam\_user\_login\_profile\_encrypted\_password) | The encrypted password, base64 encoded |
 | <a name="output_iam_user_login_profile_key_fingerprint"></a> [iam\_user\_login\_profile\_key\_fingerprint](#output\_iam\_user\_login\_profile\_key\_fingerprint) | The fingerprint of the PGP key used to encrypt the password |
+| <a name="output_iam_user_login_profile_password"></a> [iam\_user\_login\_profile\_password](#output\_iam\_user\_login\_profile\_password) | The user password |
 | <a name="output_iam_user_name"></a> [iam\_user\_name](#output\_iam\_user\_name) | The user's name |
 | <a name="output_iam_user_unique_id"></a> [iam\_user\_unique\_id](#output\_iam\_user\_unique\_id) | The unique ID assigned by AWS |
 | <a name="output_keybase_password_decrypt_command"></a> [keybase\_password\_decrypt\_command](#output\_keybase\_password\_decrypt\_command) | Decrypt user password command |

examples/iam-user/outputs.tf

@@ -23,6 +23,12 @@ output "iam_user_login_profile_encrypted_password" {
   value       = module.iam_user.iam_user_login_profile_encrypted_password
 }
 
+output "iam_user_login_profile_password" {
+  description = "The user password"
+  value       = module.iam_user.iam_user_login_profile_password
+  sensitive   = true
+}
+
 output "iam_access_key_id" {
   description = "The access key ID"
   value       = module.iam_user.iam_access_key_id

modules/iam-user/outputs.tf

@@ -30,7 +30,7 @@ output "iam_user_login_profile_encrypted_password" {
 
 output "iam_user_login_profile_password" {
   description = "The user password"
-  value       = try(aws_iam_user_login_profile.this[0].password, "")
+  value       = lookup(try(aws_iam_user_login_profile.this[0], {}), "password", sensitive(""))
   sensitive   = true
 }