Skip to content

Fix: Consistent sensitive handling for access_key storage resources#570

Open
al-cheb wants to merge 1 commit intoyandex-cloud:masterfrom
al-cheb:storage_access_key_sensitive
Open

Fix: Consistent sensitive handling for access_key storage resources#570
al-cheb wants to merge 1 commit intoyandex-cloud:masterfrom
al-cheb:storage_access_key_sensitive

Conversation

@al-cheb
Copy link

@al-cheb al-cheb commented Sep 25, 2025

Before: Only yandex_storage_bucket_policy hid the access_key value.

# yandex_storage_bucket_policy.internal will be created
  + resource "yandex_storage_bucket_policy" "internal" {
      + access_key = (sensitive value)

For other storage_bucket resources the access_key attribute doesn't have Sensitive property.

# yandex_storage_bucket.internal will be created
+ resource "yandex_storage_bucket" "internal" {
	+ access_key            = "123456789"

# yandex_storage_bucket_grant.internal will be created
+ resource "yandex_storage_bucket_grant" "internal" {
	+ access_key = "123456789"

After: The access_key is now correctly marked as sensitive for yandex_storage_bucket, yandex_storage_bucket_grant, and yandex_storage_bucket_policy.

# yandex_storage_bucket.internal will be created
+ resource "yandex_storage_bucket" "internal" {
	+ access_key            = "(sensitive value)"

# yandex_storage_bucket_grant.internal will be created
+ resource "yandex_storage_bucket_grant" "internal" {
	+ access_key = "(sensitive value)"

# yandex_storage_bucket_policy.internal will be created
  + resource "yandex_storage_bucket_policy" "internal" {
      + access_key = (sensitive value)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant