Skip to content

Support write-only parameters for setting the master user credentials #516

@komaspieler

Description

@komaspieler

Is your request related to a new offering from AWS?

Yes, the master_password_wo argument is available in the current provider: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#master_password_wo-1

Is your request related to a problem? Please describe.

Currently, the module stores the master_password parameter plaintext in the terraform state which is not ideal.

Describe the solution you'd like.

It should be possible to decide whether ephemeral credentials should be used to create the database instance or whether it is okay to store the credentials in the state.

Describe alternatives you've considered.

I'm not aware of any other methods that could be used to avoid storing the master_password value in the state besides allowing AWS to manage the credentials, which is often undesirable.

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions