ResiLien
/
terraform
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

website: warning that plan files are insecure

This commit is contained in:
Mitchell Hashimoto 2014-07-25 21:42:06 -07:00
parent d5049b65da
commit a03af7809c
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
website/source/docs/commands/plan.html.markdown
View File

@ -25,7 +25,10 @@ The command-line flags are all optional. The list of available flags are:
* `-no-color` - Disables output with coloring.
* `-out=path` - The path to save the generated execution plan.
* `-out=path` - The path to save the generated execution plan. This plan
can then be used with `terraform apply` to be certain that only the
changes shown in this plan are applied. Read the warning on saved
plans below.
* `-refresh=true` - Update the state prior to checking for differences.
@ -38,3 +41,15 @@ The command-line flags are all optional. The list of available flags are:
a file. If "terraform.tfvars" is present, it will be automatically
loaded if this flag is not specified.
## Security Warning
Saved plan files (with the `-out` flag) encode the configuration,
state, diff, and _variables_. Variables are often used to store secrets.
Therefore, the plan file can potentially store secrets.
Terraform itself does not encrypt the plan file. It is highly
recommended to encrypt the plan file if you intend to transfer it
or keep it at rest for an extended priod of time.
Future versions of Terraform will make plan files more
secure.