False promises - the keys object is NOT returning the whole key_vault_key

[ngrande]

terraform-azurerm-avm-res-keyvault-vault/modules/key/outputs.tf

Line 1 in 5e64449

output "id" {

Cheers matt-FFFFF,

in the module you write:

keys
Description: A map of key keys to key values. The key value is the entire azurerm_key_vault_key resource. The key value contains the following attributes: - id: The Key Vault Key ID - resource_id: The Azure resource id of the key. - resource_versionless_id: The versionless Azure resource id of the key. - versionless_id: The Base ID of the Key Vault Key

The key value is the entire azurerm_key_vault_key resource.

I wish it were.

Unfortunately you created your own outputs for key instead of just simply returning the whole object.
This way you can not access other attributes from the original key like here:
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault_key#attributes-reference

Missing are:
n - The RSA modulus of this Key Vault Key.
e - The RSA public exponent of this Key Vault Key.
x - The EC X component of this Key Vault Key.
y - The EC Y component of this Key Vault Key.
public_key_pem - The PEM encoded public key of this Key Vault Key.
public_key_openssh - The OpenSSH encoded public key of this Key Vault Key.

I wish you would just return the whole object, let the original maintainer maintain it.

[matt-FFFFFF]

We have decided on AVM that entire resources should not be returned as outputs.

Doing so causes problems with sensitive attributes, and also carries the risk of provider schema changes making changes and causing inconsistencies.

We have decided to be explicit for these reasons. I'd happily accept a PR to correct the documentation error and add the attributes that you would like.