diff --git a/third_party/terraform/data_sources/data_source_storage_object_signed_url.go b/third_party/terraform/data_sources/data_source_storage_object_signed_url.go
index b57d314e6cfd..a14a0ec5dd14 100644
--- a/third_party/terraform/data_sources/data_source_storage_object_signed_url.go
+++ b/third_party/terraform/data_sources/data_source_storage_object_signed_url.go
@@ -51,8 +51,9 @@ func dataSourceGoogleSignedUrl() *schema.Resource {
 				Default:  "",
 			},
 			"credentials": {
-				Type:     schema.TypeString,
-				Optional: true,
+				Type:      schema.TypeString,
+				Sensitive: true,
+				Optional:  true,
 			},
 			"duration": {
 				Type:     schema.TypeString,