Support for ephemeral for access_key for container app environment storage

[Gwenael22]

Is there an existing issue for this?

• I have searched the existing issues

ARM API Version Stability

• I confirm that this feature request relies on a stable ARM API, or I have read the guide and believe this request qualifies for an exception.

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave comments along the lines of "+1", "me too" or "any updates", they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment and review the contribution guide to help.

Description

Currently, access_key for container app environment storage are stored in the Terraform state file in plain text. Ideally, these access keys should not be stored at all, or at the very least, should not be stored as plain text.

One potential solution is to make the access_key field write-only and support ephemeral attributes to prevent them from being persisted in the state.

It will permit to use azurerm_key_vault_secret ephemeral

New or Affected Resource(s)/Data Source(s)

azurerm_container_app_environment_storage

Potential Terraform Configuration

References

No response