Commit 7553adb7 authored by Anton Babenko's avatar Anton Babenko Committed by GitHub

fix: Set sensitive=true for sensitive outputs and use tolist() (#148)

parent 50e46b39
...@@ -41,11 +41,13 @@ output "this_iam_access_key_encrypted_secret" { ...@@ -41,11 +41,13 @@ output "this_iam_access_key_encrypted_secret" {
output "this_iam_access_key_secret" { output "this_iam_access_key_secret" {
description = "The access key secret" description = "The access key secret"
value = module.iam_user.this_iam_access_key_secret value = module.iam_user.this_iam_access_key_secret
sensitive = true
} }
output "this_iam_access_key_ses_smtp_password_v4" { output "this_iam_access_key_ses_smtp_password_v4" {
description = "The secret access key converted into an SES SMTP password" description = "The secret access key converted into an SES SMTP password"
value = module.iam_user.this_iam_access_key_ses_smtp_password_v4 value = module.iam_user.this_iam_access_key_ses_smtp_password_v4
sensitive = true
} }
output "this_iam_access_key_status" { output "this_iam_access_key_status" {
......
locals { locals {
role_sts_externalid = flatten(list(var.role_sts_externalid)) role_sts_externalid = flatten(tolist(var.role_sts_externalid))
} }
data "aws_iam_policy_document" "assume_role" { data "aws_iam_policy_document" "assume_role" {
......
...@@ -43,6 +43,7 @@ output "this_iam_access_key_id" { ...@@ -43,6 +43,7 @@ output "this_iam_access_key_id" {
output "this_iam_access_key_secret" { output "this_iam_access_key_secret" {
description = "The access key secret" description = "The access key secret"
value = element(concat(aws_iam_access_key.this_no_pgp.*.secret, [""]), 0) value = element(concat(aws_iam_access_key.this_no_pgp.*.secret, [""]), 0)
sensitive = true
} }
output "this_iam_access_key_key_fingerprint" { output "this_iam_access_key_key_fingerprint" {
...@@ -65,6 +66,7 @@ output "this_iam_access_key_ses_smtp_password_v4" { ...@@ -65,6 +66,7 @@ output "this_iam_access_key_ses_smtp_password_v4" {
), ),
0 0
) )
sensitive = true
} }
output "this_iam_access_key_status" { output "this_iam_access_key_status" {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment