resource/aws_cognito_user_pool_client: Mark client secret as sensitive (

#13680) Prevent the sensitive client_secret attribute being leaked in logs.
hashicorp · Jun 12, 2020 · d9df6d1 · d9df6d1
1 parent 42c6f65
commit d9df6d1
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/aws/resource_aws_cognito_user_pool_client.go b/aws/resource_aws_cognito_user_pool_client.go
@@ -30,8 +30,9 @@ func resourceAwsCognitoUserPoolClient() *schema.Resource {
 			},
 
 			"client_secret": {
-				Type:     schema.TypeString,
-				Computed: true,
+				Type:      schema.TypeString,
+				Computed:  true,
+				Sensitive: true,
 			},
 
 			"generate_secret": {