https://pulumi.com logo
#general
Title
# general
c

colossal-australia-65039

05/20/2021, 11:58 PM
I thought Pulumi was supposed to properly recognize cloud provider secrets and encrypt them in preview/state. Or am I wrong about that? This TS code will show the value in plaintext in a preview:
Copy code
import { getSecretVersion, getSecret } from "@pulumi/aws/secretsmanager"

getSecret({ name: "somesecret" }).then((s) => getSecretVersion({ secretId: s.arn }).then((sv) => sv.secretString))
l

little-cartoon-10569

05/21/2021, 12:04 AM
I see Promises there, not Outputs...?
Pulumi hides exported secret Outputs. You can break this in your code, by doing things like writing values to the console from within an apply().
👍 1
c

colossal-australia-65039

05/21/2021, 12:08 AM
Pulumi hides exported secret Outputs.
aha thanks edit: got it working, thanks again!
👍 1
3 Views