/*
Note that attribute of ephemeral resources can only be accessed by write-only parameters
such as secret_string_wo
*/

ephemeral "random_password" "example" {
  length  = 16
  special = true
}

resource "aws_secretsmanager_secret" "example" {
  name = "example-secret"
  description = "example secret created from ephemeral resource"
}

resource "aws_secretsmanager_secret_version" "example" {
  secret_id                = aws_secretsmanager_secret.example.id
  secret_string_wo         = ephemeral.random_password.example.result
  secret_string_wo_version = 1
}

ephemeral "aws_secretsmanager_secret_version" "example" {
  secret_id = aws_secretsmanager_secret_version.example.secret_id
}