initial commit

ephemeral-resource/main.tf

@@ -0,0 +1,24 @@
+/*
+Note that attribute of ephemeral resources can only be accessed by write-only parameters
+such as secret_string_wo
+*/
+
+ephemeral "random_password" "example" {
+  length  = 16
+  special = true
+}
+
+resource "aws_secretsmanager_secret" "example" {
+  name = "example-secret"
+  description = "example secret created from ephemeral resource"
+}
+
+resource "aws_secretsmanager_secret_version" "example" {
+  secret_id                = aws_secretsmanager_secret.example.id
+  secret_string_wo         = ephemeral.random_password.example.result
+  secret_string_wo_version = 1
+}
+
+ephemeral "aws_secretsmanager_secret_version" "example" {
+  secret_id = aws_secretsmanager_secret_version.example.secret_id
+}