pass possible variables via configuration instead of bash commands

[bilalcaliskan]

Investigate the proper approach, apply then.

• Manual entry during plan/apply
• Default value in declaration block
• TF_VAR_ environment variales
• terraform.tfvars file
• *.auto.tfvars file
• Command line -var or -var-file

[bilalcaliskan]

• Mark variables as sensitive:
  • sensitive = true
• Pass to terraform apply with:
  • TF_VAR_variable
  • -var (retrieved from secret manager at runtime)
• Can also use external secret store:
  • for example, AWS Secrets Manager