Hello Pulumi enthusiasts :slightly_smiling_face: I...
# general
m
Hello Pulumi enthusiasts 🙂 I have a question regarding the Random Provider. It states
Unless otherwise stated within the documentation of a specific resource, this provider's results are not sufficiently random for cryptographic use.
Looking at RandomString, the docs say
for sensitive random values please use random_password.
However, there is no mention on RandomPassword about using it for uniques as a random value for password. Can anyone support whether it is safe to use
Random Password
to create and manage passwords? Thanks in advance!
q
RandomPassword
does use a cryptographic random number generated, so it's safe to use for managing passwords. In detail, this provider is bridged from the upstream terraform provider: https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/password It seems like we're loosing the resource description in the bridging process. I opened https://github.com/pulumi/pulumi-random/issues/1808 so we can follow up and fix this
m
Thank you Florian! 🙂