Ravi Sir's Cards › AWS
Where do secrets go in Terraform?
This interview card answers: Where do secrets go in Terraform? Not in git. Use Secrets Manager/SSM parameters; mark sensitive; restrict state access. State can contain secret values — encrypt and limit who can read the bucket. DB password from aws_secretsmanager_secret_version, not a checked-in tfvars.
Read card text
What this card says
What it is
Not in git. Use Secrets Manager/SSM parameters; mark sensitive; restrict state access.
sensitive
Why it matters
State can contain secret values — encrypt and limit who can read the bucket.
How / example
DB password from aws_secretsmanager_secret_version, not a checked-in tfvars.