Secrets Management with GCP Secret Manager and Terraform
Use Secret Manager, Terraform state inspection, and write-only patterns to handle GCP secrets without turning this into a Vault lab.
Lab Overview
Create and version secrets in Google Secret Manager, inspect how traditional data sources leak secret values into Terraform state, and finish with Terraform 1.11 write-only attributes to keep secret values out of state.
What You'll Learn
Create a Secret Manager secret with replication configuration
Generate a random password and store it as a secret version
Read the secret with a Terraform data source and confirm the value lands in state
Control access to a secret with Secret Manager IAM
Explain why `sensitive = true` only redacts output and does not protect state
Use the `secret_data_wo` write-only attribute to avoid storing secret values in state
Prerequisites
Terraform state management fundamentals
Basic familiarity with GCP IAM and Secret Manager
Technologies Covered
Choose your plan
Simple, Transparent Pricing
Unlock full access to TeKanAid courses, labs, and bootcamps
Just exploring? Start free below. Want the full experience? Try Premium free for 7 days (card required, $0 today).
Pro
All courses, with lab scripts to run on your own machine
Renews automatically. Cancel anytime.
Final price verified at checkout.
- Full access to all courses
- Lab scripts to download and run on your own machine (hosted labs not included)
- Progress tracking
- Certificate of completion
- Community access
- Self-paced bootcamps
- Premium puzzle library not included (5 free puzzles available)
- New content access
Premium
Full access, including unlimited hosted labs
Renews automatically. Cancel anytime.
Final price verified at checkout.
- Everything in Pro
- Unlimited hands-on labs, fully hosted on TeKanAid Academy (nothing to set up)
- Full access to the puzzle library
- Lab AI Assistant
- Priority support
Prefer a single course?
Purchase individual courses for a one-time fee of $79. Full access to course content, quizzes, certificates, and community features, lab access is not included.
Browse CoursesJust exploring? Start free, no account needed
Three free ways to start. All bridge into the paid Premium catalog when you're ready.
Not ready to commit? The crash course is email-only. No academy account required.
Ready to Get Started?
Start this hands-on lab and build real-world Platform Engineering skills
Get Access Now