provider/aws: Mark password fields as sensitive (#13147)

builtin/providers/aws/resource_aws_api_gateway_domain_name.go

@@ -48,6 +48,7 @@ func resourceAwsApiGatewayDomainName() *schema.Resource {
 				Type:          schema.TypeString,
 				ForceNew:      true,
 				Optional:      true,
+				Sensitive:     true,
 				ConflictsWith: []string{"certificate_arn"},
 			},
 

builtin/providers/aws/resource_aws_directory_service_directory.go

@@ -33,9 +33,10 @@ func resourceAwsDirectoryServiceDirectory() *schema.Resource {
 				ForceNew: true,
 			},
 			"password": &schema.Schema{
-				Type:     schema.TypeString,
+				Type:      schema.TypeString,
-				Required: true,
+				Required:  true,
-				ForceNew: true,
+				ForceNew:  true,
+				Sensitive: true,
 			},
 			"size": &schema.Schema{
 				Type:     schema.TypeString,

builtin/providers/aws/resource_aws_kinesis_firehose_delivery_stream.go

@@ -150,8 +150,9 @@ func resourceAwsKinesisFirehoseDeliveryStream() *schema.Resource {
 						},
 
 						"password": {
-							Type:     schema.TypeString,
+							Type:      schema.TypeString,
-							Required: true,
+							Required:  true,
+							Sensitive: true,
 						},
 
 						"role_arn": {

builtin/providers/aws/resource_aws_opsworks_application.go

@@ -102,8 +102,9 @@ func resourceAwsOpsworksApplication() *schema.Resource {
 						},
 
 						"password": {
-							Type:     schema.TypeString,
+							Type:      schema.TypeString,
-							Optional: true,
+							Optional:  true,
+							Sensitive: true,
 						},
 
 						"revision": {
@@ -187,8 +188,9 @@ func resourceAwsOpsworksApplication() *schema.Resource {
 							},
 						},
 						"private_key": {
-							Type:     schema.TypeString,
+							Type:      schema.TypeString,
-							Required: true,
+							Required:  true,
+							Sensitive: true,
 							StateFunc: func(v interface{}) string {
 								switch v.(type) {
 								case string:

builtin/providers/aws/resource_aws_opsworks_stack.go

@@ -111,8 +111,9 @@ func resourceAwsOpsworksStack() *schema.Resource {
 						},
 
 						"password": {
-							Type:     schema.TypeString,
+							Type:      schema.TypeString,
-							Optional: true,
+							Optional:  true,
+							Sensitive: true,
 						},
 
 						"revision": {