Keeping Secrets out of Terraform State | Object Partners

▤ Summary

One problem with creating these resources via Terraform is that the statefile is stored in plain text. Yes, you could treat that statefile as a secret itself, but that may not be good enough depending on your security requirements. It may seem obvious, but the various cloud provider’s SDKs and APIs usually include a way to set these values. I’ll show here how to set up a new RDS instance and keep its master password from prying eyes. You can view my directory structure and full text of this example on GitHub here I hope this sparks some creative ways to maintain your secrecy!

▦ Linked Companies

Object Partners

$10M to $25M

GitHub, Inc.

$1M to $5M