Secrets Management with AWS Secrets Manager and Terraform

Create and version AWS Secrets Manager secrets with Terraform, inspect how data sources expose plaintext values through state, and finish with Terraform patterns that reduce persistence of sensitive data.

You'll learn to:

• Create and version a secret in AWS Secrets Manager with Terraform
• Read a secret through a Terraform data source and inspect where the value is persisted
• Explain why `sensitive = true` redacts output but does not encrypt state
• Use Terraform's newer secret-handling patterns to keep sensitive values out of state
• Compare AWS-native secrets workflows with the broader guidance taught in section 12