github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/general/secrets/AVD-GEN-0004/Terraform.md (about)

     1  
     2  Remove plaintext secrets and encrypt them within a secrets manager instead.
     3  
     4  ```hcl
     5  variable "password" {
     6    description = "The root password for our VM"
     7    type        = string
     8  }
     9  
    10  resource "evil_corp" "virtual_machine" {
    11    root_password = var.password
    12  }
    13  ```
    14  
    15  #### Remediation Links
    16   - https://www.terraform.io/docs/state/sensitive-data.html
    17