From 88c89f1a7d98e72eb109d38e102aed6b2504b918 Mon Sep 17 00:00:00 2001
From: Jake Heath <jheath@chanzuckerberg.com>
Date: Wed, 23 Nov 2022 13:38:54 -0800
Subject: [PATCH] feat: sensitive outputs fixes #759

---
 apply/apply.go                                |  12 +-
 .../module-invocation/outputs.tf.tmpl         |   5 +-
 testdata/tfe_config/terraform/tfe/outputs.tf  |  12 +-
 .../terraform/envs/prod/vpc/outputs.tf        | 129 ++++++++++++------
 .../terraform/envs/staging/vpc/outputs.tf     | 129 ++++++++++++------
 .../terraform/envs/staging/vpc/fogg.tf        |   2 +-
 .../terraform/envs/staging/vpc/outputs.tf     | 129 ++++++++++++------
 7 files changed, 278 insertions(+), 140 deletions(-)

diff --git a/apply/apply.go b/apply/apply.go
index 0ecbe7b7d..d25b244f8 100644
--- a/apply/apply.go
+++ b/apply/apply.go
@@ -24,6 +24,7 @@ import (
 	"github.com/chanzuckerberg/fogg/util"
 	getter "github.com/hashicorp/go-getter"
 	"github.com/hashicorp/hcl2/hclwrite"
+	"github.com/hashicorp/terraform-config-inspect/tfconfig"
 	"github.com/sirupsen/logrus"
 	"github.com/spf13/afero"
 )
@@ -547,7 +548,7 @@ type moduleData struct {
 	ModuleName   string
 	ModuleSource string
 	Variables    []string
-	Outputs      []string
+	Outputs      []*tfconfig.Output
 }
 
 func applyModuleInvocation(
@@ -583,11 +584,14 @@ func applyModuleInvocation(
 		}
 	}
 	sort.Strings(variables)
-	outputs := make([]string, 0)
+
+	outputs := make([]*tfconfig.Output, 0)
 	for _, o := range moduleConfig.Outputs {
-		outputs = append(outputs, o.Name)
+		outputs = append(outputs, o)
 	}
-	sort.Strings(outputs)
+	sort.Slice(outputs, func(i, j int) bool {
+		return outputs[i].Name < outputs[j].Name
+	})
 
 	moduleName := ""
 	if inModuleName != nil {
diff --git a/templates/templates/module-invocation/outputs.tf.tmpl b/templates/templates/module-invocation/outputs.tf.tmpl
index d7262f3c0..717ed1d4d 100644
--- a/templates/templates/module-invocation/outputs.tf.tmpl
+++ b/templates/templates/module-invocation/outputs.tf.tmpl
@@ -3,8 +3,9 @@
 
 {{ $outer := . -}}
 {{- range .Outputs -}}
-output "{{.}}" {
-  value = module.{{$outer.ModuleName}}.{{.}}
+output "{{.Name}}" {
+  value = module.{{$outer.ModuleName}}.{{.Name}}
+  sensitive = {{.Sensitive}}
 }
 
 {{end}}
diff --git a/testdata/tfe_config/terraform/tfe/outputs.tf b/testdata/tfe_config/terraform/tfe/outputs.tf
index 84a6f2f73..203518505 100644
--- a/testdata/tfe_config/terraform/tfe/outputs.tf
+++ b/testdata/tfe_config/terraform/tfe/outputs.tf
@@ -2,19 +2,23 @@
 # Make improvements in fogg, so that everyone can benefit.
 
 output "database_name" {
-  value = module.aws-aurora-postgres.database_name
+  value     = module.aws-aurora-postgres.database_name
+  sensitive = false
 }
 
 output "endpoint" {
-  value = module.aws-aurora-postgres.endpoint
+  value     = module.aws-aurora-postgres.endpoint
+  sensitive = false
 }
 
 output "port" {
-  value = module.aws-aurora-postgres.port
+  value     = module.aws-aurora-postgres.port
+  sensitive = false
 }
 
 output "reader_endpoint" {
-  value = module.aws-aurora-postgres.reader_endpoint
+  value     = module.aws-aurora-postgres.reader_endpoint
+  sensitive = false
 }
 
 
diff --git a/testdata/v2_full_yaml/terraform/envs/prod/vpc/outputs.tf b/testdata/v2_full_yaml/terraform/envs/prod/vpc/outputs.tf
index 06adb7a77..61792bb98 100644
--- a/testdata/v2_full_yaml/terraform/envs/prod/vpc/outputs.tf
+++ b/testdata/v2_full_yaml/terraform/envs/prod/vpc/outputs.tf
@@ -2,175 +2,218 @@
 # Make improvements in fogg, so that everyone can benefit.
 
 output "database_subnet_group" {
-  value = module.prod-vpc.database_subnet_group
+  value     = module.prod-vpc.database_subnet_group
+  sensitive = false
 }
 
 output "database_subnets" {
-  value = module.prod-vpc.database_subnets
+  value     = module.prod-vpc.database_subnets
+  sensitive = false
 }
 
 output "database_subnets_cidr_blocks" {
-  value = module.prod-vpc.database_subnets_cidr_blocks
+  value     = module.prod-vpc.database_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "default_network_acl_id" {
-  value = module.prod-vpc.default_network_acl_id
+  value     = module.prod-vpc.default_network_acl_id
+  sensitive = false
 }
 
 output "default_route_table_id" {
-  value = module.prod-vpc.default_route_table_id
+  value     = module.prod-vpc.default_route_table_id
+  sensitive = false
 }
 
 output "default_security_group_id" {
-  value = module.prod-vpc.default_security_group_id
+  value     = module.prod-vpc.default_security_group_id
+  sensitive = false
 }
 
 output "default_vpc_cidr_block" {
-  value = module.prod-vpc.default_vpc_cidr_block
+  value     = module.prod-vpc.default_vpc_cidr_block
+  sensitive = false
 }
 
 output "default_vpc_default_network_acl_id" {
-  value = module.prod-vpc.default_vpc_default_network_acl_id
+  value     = module.prod-vpc.default_vpc_default_network_acl_id
+  sensitive = false
 }
 
 output "default_vpc_default_route_table_id" {
-  value = module.prod-vpc.default_vpc_default_route_table_id
+  value     = module.prod-vpc.default_vpc_default_route_table_id
+  sensitive = false
 }
 
 output "default_vpc_default_security_group_id" {
-  value = module.prod-vpc.default_vpc_default_security_group_id
+  value     = module.prod-vpc.default_vpc_default_security_group_id
+  sensitive = false
 }
 
 output "default_vpc_enable_dns_hostnames" {
-  value = module.prod-vpc.default_vpc_enable_dns_hostnames
+  value     = module.prod-vpc.default_vpc_enable_dns_hostnames
+  sensitive = false
 }
 
 output "default_vpc_enable_dns_support" {
-  value = module.prod-vpc.default_vpc_enable_dns_support
+  value     = module.prod-vpc.default_vpc_enable_dns_support
+  sensitive = false
 }
 
 output "default_vpc_id" {
-  value = module.prod-vpc.default_vpc_id
+  value     = module.prod-vpc.default_vpc_id
+  sensitive = false
 }
 
 output "default_vpc_instance_tenancy" {
-  value = module.prod-vpc.default_vpc_instance_tenancy
+  value     = module.prod-vpc.default_vpc_instance_tenancy
+  sensitive = false
 }
 
 output "default_vpc_main_route_table_id" {
-  value = module.prod-vpc.default_vpc_main_route_table_id
+  value     = module.prod-vpc.default_vpc_main_route_table_id
+  sensitive = false
 }
 
 output "elasticache_subnet_group" {
-  value = module.prod-vpc.elasticache_subnet_group
+  value     = module.prod-vpc.elasticache_subnet_group
+  sensitive = false
 }
 
 output "elasticache_subnet_group_name" {
-  value = module.prod-vpc.elasticache_subnet_group_name
+  value     = module.prod-vpc.elasticache_subnet_group_name
+  sensitive = false
 }
 
 output "elasticache_subnets" {
-  value = module.prod-vpc.elasticache_subnets
+  value     = module.prod-vpc.elasticache_subnets
+  sensitive = false
 }
 
 output "elasticache_subnets_cidr_blocks" {
-  value = module.prod-vpc.elasticache_subnets_cidr_blocks
+  value     = module.prod-vpc.elasticache_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "igw_id" {
-  value = module.prod-vpc.igw_id
+  value     = module.prod-vpc.igw_id
+  sensitive = false
 }
 
 output "nat_ids" {
-  value = module.prod-vpc.nat_ids
+  value     = module.prod-vpc.nat_ids
+  sensitive = false
 }
 
 output "nat_public_ips" {
-  value = module.prod-vpc.nat_public_ips
+  value     = module.prod-vpc.nat_public_ips
+  sensitive = false
 }
 
 output "natgw_ids" {
-  value = module.prod-vpc.natgw_ids
+  value     = module.prod-vpc.natgw_ids
+  sensitive = false
 }
 
 output "private_route_table_ids" {
-  value = module.prod-vpc.private_route_table_ids
+  value     = module.prod-vpc.private_route_table_ids
+  sensitive = false
 }
 
 output "private_subnets" {
-  value = module.prod-vpc.private_subnets
+  value     = module.prod-vpc.private_subnets
+  sensitive = false
 }
 
 output "private_subnets_cidr_blocks" {
-  value = module.prod-vpc.private_subnets_cidr_blocks
+  value     = module.prod-vpc.private_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "public_route_table_ids" {
-  value = module.prod-vpc.public_route_table_ids
+  value     = module.prod-vpc.public_route_table_ids
+  sensitive = false
 }
 
 output "public_subnets" {
-  value = module.prod-vpc.public_subnets
+  value     = module.prod-vpc.public_subnets
+  sensitive = false
 }
 
 output "public_subnets_cidr_blocks" {
-  value = module.prod-vpc.public_subnets_cidr_blocks
+  value     = module.prod-vpc.public_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "redshift_subnet_group" {
-  value = module.prod-vpc.redshift_subnet_group
+  value     = module.prod-vpc.redshift_subnet_group
+  sensitive = false
 }
 
 output "redshift_subnets" {
-  value = module.prod-vpc.redshift_subnets
+  value     = module.prod-vpc.redshift_subnets
+  sensitive = false
 }
 
 output "redshift_subnets_cidr_blocks" {
-  value = module.prod-vpc.redshift_subnets_cidr_blocks
+  value     = module.prod-vpc.redshift_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "vgw_id" {
-  value = module.prod-vpc.vgw_id
+  value     = module.prod-vpc.vgw_id
+  sensitive = false
 }
 
 output "vpc_cidr_block" {
-  value = module.prod-vpc.vpc_cidr_block
+  value     = module.prod-vpc.vpc_cidr_block
+  sensitive = false
 }
 
 output "vpc_enable_dns_hostnames" {
-  value = module.prod-vpc.vpc_enable_dns_hostnames
+  value     = module.prod-vpc.vpc_enable_dns_hostnames
+  sensitive = false
 }
 
 output "vpc_enable_dns_support" {
-  value = module.prod-vpc.vpc_enable_dns_support
+  value     = module.prod-vpc.vpc_enable_dns_support
+  sensitive = false
 }
 
 output "vpc_endpoint_dynamodb_id" {
-  value = module.prod-vpc.vpc_endpoint_dynamodb_id
+  value     = module.prod-vpc.vpc_endpoint_dynamodb_id
+  sensitive = false
 }
 
 output "vpc_endpoint_dynamodb_pl_id" {
-  value = module.prod-vpc.vpc_endpoint_dynamodb_pl_id
+  value     = module.prod-vpc.vpc_endpoint_dynamodb_pl_id
+  sensitive = false
 }
 
 output "vpc_endpoint_s3_id" {
-  value = module.prod-vpc.vpc_endpoint_s3_id
+  value     = module.prod-vpc.vpc_endpoint_s3_id
+  sensitive = false
 }
 
 output "vpc_endpoint_s3_pl_id" {
-  value = module.prod-vpc.vpc_endpoint_s3_pl_id
+  value     = module.prod-vpc.vpc_endpoint_s3_pl_id
+  sensitive = false
 }
 
 output "vpc_id" {
-  value = module.prod-vpc.vpc_id
+  value     = module.prod-vpc.vpc_id
+  sensitive = false
 }
 
 output "vpc_instance_tenancy" {
-  value = module.prod-vpc.vpc_instance_tenancy
+  value     = module.prod-vpc.vpc_instance_tenancy
+  sensitive = false
 }
 
 output "vpc_main_route_table_id" {
-  value = module.prod-vpc.vpc_main_route_table_id
+  value     = module.prod-vpc.vpc_main_route_table_id
+  sensitive = false
 }
 
 
diff --git a/testdata/v2_full_yaml/terraform/envs/staging/vpc/outputs.tf b/testdata/v2_full_yaml/terraform/envs/staging/vpc/outputs.tf
index 721080113..c08ba2bba 100644
--- a/testdata/v2_full_yaml/terraform/envs/staging/vpc/outputs.tf
+++ b/testdata/v2_full_yaml/terraform/envs/staging/vpc/outputs.tf
@@ -2,175 +2,218 @@
 # Make improvements in fogg, so that everyone can benefit.
 
 output "database_subnet_group" {
-  value = module.terraform-aws-vpc.database_subnet_group
+  value     = module.terraform-aws-vpc.database_subnet_group
+  sensitive = false
 }
 
 output "database_subnets" {
-  value = module.terraform-aws-vpc.database_subnets
+  value     = module.terraform-aws-vpc.database_subnets
+  sensitive = false
 }
 
 output "database_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.database_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.database_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "default_network_acl_id" {
-  value = module.terraform-aws-vpc.default_network_acl_id
+  value     = module.terraform-aws-vpc.default_network_acl_id
+  sensitive = false
 }
 
 output "default_route_table_id" {
-  value = module.terraform-aws-vpc.default_route_table_id
+  value     = module.terraform-aws-vpc.default_route_table_id
+  sensitive = false
 }
 
 output "default_security_group_id" {
-  value = module.terraform-aws-vpc.default_security_group_id
+  value     = module.terraform-aws-vpc.default_security_group_id
+  sensitive = false
 }
 
 output "default_vpc_cidr_block" {
-  value = module.terraform-aws-vpc.default_vpc_cidr_block
+  value     = module.terraform-aws-vpc.default_vpc_cidr_block
+  sensitive = false
 }
 
 output "default_vpc_default_network_acl_id" {
-  value = module.terraform-aws-vpc.default_vpc_default_network_acl_id
+  value     = module.terraform-aws-vpc.default_vpc_default_network_acl_id
+  sensitive = false
 }
 
 output "default_vpc_default_route_table_id" {
-  value = module.terraform-aws-vpc.default_vpc_default_route_table_id
+  value     = module.terraform-aws-vpc.default_vpc_default_route_table_id
+  sensitive = false
 }
 
 output "default_vpc_default_security_group_id" {
-  value = module.terraform-aws-vpc.default_vpc_default_security_group_id
+  value     = module.terraform-aws-vpc.default_vpc_default_security_group_id
+  sensitive = false
 }
 
 output "default_vpc_enable_dns_hostnames" {
-  value = module.terraform-aws-vpc.default_vpc_enable_dns_hostnames
+  value     = module.terraform-aws-vpc.default_vpc_enable_dns_hostnames
+  sensitive = false
 }
 
 output "default_vpc_enable_dns_support" {
-  value = module.terraform-aws-vpc.default_vpc_enable_dns_support
+  value     = module.terraform-aws-vpc.default_vpc_enable_dns_support
+  sensitive = false
 }
 
 output "default_vpc_id" {
-  value = module.terraform-aws-vpc.default_vpc_id
+  value     = module.terraform-aws-vpc.default_vpc_id
+  sensitive = false
 }
 
 output "default_vpc_instance_tenancy" {
-  value = module.terraform-aws-vpc.default_vpc_instance_tenancy
+  value     = module.terraform-aws-vpc.default_vpc_instance_tenancy
+  sensitive = false
 }
 
 output "default_vpc_main_route_table_id" {
-  value = module.terraform-aws-vpc.default_vpc_main_route_table_id
+  value     = module.terraform-aws-vpc.default_vpc_main_route_table_id
+  sensitive = false
 }
 
 output "elasticache_subnet_group" {
-  value = module.terraform-aws-vpc.elasticache_subnet_group
+  value     = module.terraform-aws-vpc.elasticache_subnet_group
+  sensitive = false
 }
 
 output "elasticache_subnet_group_name" {
-  value = module.terraform-aws-vpc.elasticache_subnet_group_name
+  value     = module.terraform-aws-vpc.elasticache_subnet_group_name
+  sensitive = false
 }
 
 output "elasticache_subnets" {
-  value = module.terraform-aws-vpc.elasticache_subnets
+  value     = module.terraform-aws-vpc.elasticache_subnets
+  sensitive = false
 }
 
 output "elasticache_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.elasticache_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.elasticache_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "igw_id" {
-  value = module.terraform-aws-vpc.igw_id
+  value     = module.terraform-aws-vpc.igw_id
+  sensitive = false
 }
 
 output "nat_ids" {
-  value = module.terraform-aws-vpc.nat_ids
+  value     = module.terraform-aws-vpc.nat_ids
+  sensitive = false
 }
 
 output "nat_public_ips" {
-  value = module.terraform-aws-vpc.nat_public_ips
+  value     = module.terraform-aws-vpc.nat_public_ips
+  sensitive = false
 }
 
 output "natgw_ids" {
-  value = module.terraform-aws-vpc.natgw_ids
+  value     = module.terraform-aws-vpc.natgw_ids
+  sensitive = false
 }
 
 output "private_route_table_ids" {
-  value = module.terraform-aws-vpc.private_route_table_ids
+  value     = module.terraform-aws-vpc.private_route_table_ids
+  sensitive = false
 }
 
 output "private_subnets" {
-  value = module.terraform-aws-vpc.private_subnets
+  value     = module.terraform-aws-vpc.private_subnets
+  sensitive = false
 }
 
 output "private_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.private_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.private_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "public_route_table_ids" {
-  value = module.terraform-aws-vpc.public_route_table_ids
+  value     = module.terraform-aws-vpc.public_route_table_ids
+  sensitive = false
 }
 
 output "public_subnets" {
-  value = module.terraform-aws-vpc.public_subnets
+  value     = module.terraform-aws-vpc.public_subnets
+  sensitive = false
 }
 
 output "public_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.public_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.public_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "redshift_subnet_group" {
-  value = module.terraform-aws-vpc.redshift_subnet_group
+  value     = module.terraform-aws-vpc.redshift_subnet_group
+  sensitive = false
 }
 
 output "redshift_subnets" {
-  value = module.terraform-aws-vpc.redshift_subnets
+  value     = module.terraform-aws-vpc.redshift_subnets
+  sensitive = false
 }
 
 output "redshift_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.redshift_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.redshift_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "vgw_id" {
-  value = module.terraform-aws-vpc.vgw_id
+  value     = module.terraform-aws-vpc.vgw_id
+  sensitive = false
 }
 
 output "vpc_cidr_block" {
-  value = module.terraform-aws-vpc.vpc_cidr_block
+  value     = module.terraform-aws-vpc.vpc_cidr_block
+  sensitive = false
 }
 
 output "vpc_enable_dns_hostnames" {
-  value = module.terraform-aws-vpc.vpc_enable_dns_hostnames
+  value     = module.terraform-aws-vpc.vpc_enable_dns_hostnames
+  sensitive = false
 }
 
 output "vpc_enable_dns_support" {
-  value = module.terraform-aws-vpc.vpc_enable_dns_support
+  value     = module.terraform-aws-vpc.vpc_enable_dns_support
+  sensitive = false
 }
 
 output "vpc_endpoint_dynamodb_id" {
-  value = module.terraform-aws-vpc.vpc_endpoint_dynamodb_id
+  value     = module.terraform-aws-vpc.vpc_endpoint_dynamodb_id
+  sensitive = false
 }
 
 output "vpc_endpoint_dynamodb_pl_id" {
-  value = module.terraform-aws-vpc.vpc_endpoint_dynamodb_pl_id
+  value     = module.terraform-aws-vpc.vpc_endpoint_dynamodb_pl_id
+  sensitive = false
 }
 
 output "vpc_endpoint_s3_id" {
-  value = module.terraform-aws-vpc.vpc_endpoint_s3_id
+  value     = module.terraform-aws-vpc.vpc_endpoint_s3_id
+  sensitive = false
 }
 
 output "vpc_endpoint_s3_pl_id" {
-  value = module.terraform-aws-vpc.vpc_endpoint_s3_pl_id
+  value     = module.terraform-aws-vpc.vpc_endpoint_s3_pl_id
+  sensitive = false
 }
 
 output "vpc_id" {
-  value = module.terraform-aws-vpc.vpc_id
+  value     = module.terraform-aws-vpc.vpc_id
+  sensitive = false
 }
 
 output "vpc_instance_tenancy" {
-  value = module.terraform-aws-vpc.vpc_instance_tenancy
+  value     = module.terraform-aws-vpc.vpc_instance_tenancy
+  sensitive = false
 }
 
 output "vpc_main_route_table_id" {
-  value = module.terraform-aws-vpc.vpc_main_route_table_id
+  value     = module.terraform-aws-vpc.vpc_main_route_table_id
+  sensitive = false
 }
 
 
diff --git a/testdata/v2_no_aws_provider_yaml/terraform/envs/staging/vpc/fogg.tf b/testdata/v2_no_aws_provider_yaml/terraform/envs/staging/vpc/fogg.tf
index 46798650a..f21d30bb6 100644
--- a/testdata/v2_no_aws_provider_yaml/terraform/envs/staging/vpc/fogg.tf
+++ b/testdata/v2_no_aws_provider_yaml/terraform/envs/staging/vpc/fogg.tf
@@ -1,7 +1,7 @@
 # Auto-generated by fogg. Do not edit
 # Make improvements in fogg, so that everyone can benefit.
 terraform {
-  required_version = "=0.100.0"
+  required_version = "=0.13.5"
 
   backend "s3" {
 
diff --git a/testdata/v2_no_aws_provider_yaml/terraform/envs/staging/vpc/outputs.tf b/testdata/v2_no_aws_provider_yaml/terraform/envs/staging/vpc/outputs.tf
index 721080113..c08ba2bba 100644
--- a/testdata/v2_no_aws_provider_yaml/terraform/envs/staging/vpc/outputs.tf
+++ b/testdata/v2_no_aws_provider_yaml/terraform/envs/staging/vpc/outputs.tf
@@ -2,175 +2,218 @@
 # Make improvements in fogg, so that everyone can benefit.
 
 output "database_subnet_group" {
-  value = module.terraform-aws-vpc.database_subnet_group
+  value     = module.terraform-aws-vpc.database_subnet_group
+  sensitive = false
 }
 
 output "database_subnets" {
-  value = module.terraform-aws-vpc.database_subnets
+  value     = module.terraform-aws-vpc.database_subnets
+  sensitive = false
 }
 
 output "database_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.database_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.database_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "default_network_acl_id" {
-  value = module.terraform-aws-vpc.default_network_acl_id
+  value     = module.terraform-aws-vpc.default_network_acl_id
+  sensitive = false
 }
 
 output "default_route_table_id" {
-  value = module.terraform-aws-vpc.default_route_table_id
+  value     = module.terraform-aws-vpc.default_route_table_id
+  sensitive = false
 }
 
 output "default_security_group_id" {
-  value = module.terraform-aws-vpc.default_security_group_id
+  value     = module.terraform-aws-vpc.default_security_group_id
+  sensitive = false
 }
 
 output "default_vpc_cidr_block" {
-  value = module.terraform-aws-vpc.default_vpc_cidr_block
+  value     = module.terraform-aws-vpc.default_vpc_cidr_block
+  sensitive = false
 }
 
 output "default_vpc_default_network_acl_id" {
-  value = module.terraform-aws-vpc.default_vpc_default_network_acl_id
+  value     = module.terraform-aws-vpc.default_vpc_default_network_acl_id
+  sensitive = false
 }
 
 output "default_vpc_default_route_table_id" {
-  value = module.terraform-aws-vpc.default_vpc_default_route_table_id
+  value     = module.terraform-aws-vpc.default_vpc_default_route_table_id
+  sensitive = false
 }
 
 output "default_vpc_default_security_group_id" {
-  value = module.terraform-aws-vpc.default_vpc_default_security_group_id
+  value     = module.terraform-aws-vpc.default_vpc_default_security_group_id
+  sensitive = false
 }
 
 output "default_vpc_enable_dns_hostnames" {
-  value = module.terraform-aws-vpc.default_vpc_enable_dns_hostnames
+  value     = module.terraform-aws-vpc.default_vpc_enable_dns_hostnames
+  sensitive = false
 }
 
 output "default_vpc_enable_dns_support" {
-  value = module.terraform-aws-vpc.default_vpc_enable_dns_support
+  value     = module.terraform-aws-vpc.default_vpc_enable_dns_support
+  sensitive = false
 }
 
 output "default_vpc_id" {
-  value = module.terraform-aws-vpc.default_vpc_id
+  value     = module.terraform-aws-vpc.default_vpc_id
+  sensitive = false
 }
 
 output "default_vpc_instance_tenancy" {
-  value = module.terraform-aws-vpc.default_vpc_instance_tenancy
+  value     = module.terraform-aws-vpc.default_vpc_instance_tenancy
+  sensitive = false
 }
 
 output "default_vpc_main_route_table_id" {
-  value = module.terraform-aws-vpc.default_vpc_main_route_table_id
+  value     = module.terraform-aws-vpc.default_vpc_main_route_table_id
+  sensitive = false
 }
 
 output "elasticache_subnet_group" {
-  value = module.terraform-aws-vpc.elasticache_subnet_group
+  value     = module.terraform-aws-vpc.elasticache_subnet_group
+  sensitive = false
 }
 
 output "elasticache_subnet_group_name" {
-  value = module.terraform-aws-vpc.elasticache_subnet_group_name
+  value     = module.terraform-aws-vpc.elasticache_subnet_group_name
+  sensitive = false
 }
 
 output "elasticache_subnets" {
-  value = module.terraform-aws-vpc.elasticache_subnets
+  value     = module.terraform-aws-vpc.elasticache_subnets
+  sensitive = false
 }
 
 output "elasticache_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.elasticache_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.elasticache_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "igw_id" {
-  value = module.terraform-aws-vpc.igw_id
+  value     = module.terraform-aws-vpc.igw_id
+  sensitive = false
 }
 
 output "nat_ids" {
-  value = module.terraform-aws-vpc.nat_ids
+  value     = module.terraform-aws-vpc.nat_ids
+  sensitive = false
 }
 
 output "nat_public_ips" {
-  value = module.terraform-aws-vpc.nat_public_ips
+  value     = module.terraform-aws-vpc.nat_public_ips
+  sensitive = false
 }
 
 output "natgw_ids" {
-  value = module.terraform-aws-vpc.natgw_ids
+  value     = module.terraform-aws-vpc.natgw_ids
+  sensitive = false
 }
 
 output "private_route_table_ids" {
-  value = module.terraform-aws-vpc.private_route_table_ids
+  value     = module.terraform-aws-vpc.private_route_table_ids
+  sensitive = false
 }
 
 output "private_subnets" {
-  value = module.terraform-aws-vpc.private_subnets
+  value     = module.terraform-aws-vpc.private_subnets
+  sensitive = false
 }
 
 output "private_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.private_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.private_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "public_route_table_ids" {
-  value = module.terraform-aws-vpc.public_route_table_ids
+  value     = module.terraform-aws-vpc.public_route_table_ids
+  sensitive = false
 }
 
 output "public_subnets" {
-  value = module.terraform-aws-vpc.public_subnets
+  value     = module.terraform-aws-vpc.public_subnets
+  sensitive = false
 }
 
 output "public_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.public_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.public_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "redshift_subnet_group" {
-  value = module.terraform-aws-vpc.redshift_subnet_group
+  value     = module.terraform-aws-vpc.redshift_subnet_group
+  sensitive = false
 }
 
 output "redshift_subnets" {
-  value = module.terraform-aws-vpc.redshift_subnets
+  value     = module.terraform-aws-vpc.redshift_subnets
+  sensitive = false
 }
 
 output "redshift_subnets_cidr_blocks" {
-  value = module.terraform-aws-vpc.redshift_subnets_cidr_blocks
+  value     = module.terraform-aws-vpc.redshift_subnets_cidr_blocks
+  sensitive = false
 }
 
 output "vgw_id" {
-  value = module.terraform-aws-vpc.vgw_id
+  value     = module.terraform-aws-vpc.vgw_id
+  sensitive = false
 }
 
 output "vpc_cidr_block" {
-  value = module.terraform-aws-vpc.vpc_cidr_block
+  value     = module.terraform-aws-vpc.vpc_cidr_block
+  sensitive = false
 }
 
 output "vpc_enable_dns_hostnames" {
-  value = module.terraform-aws-vpc.vpc_enable_dns_hostnames
+  value     = module.terraform-aws-vpc.vpc_enable_dns_hostnames
+  sensitive = false
 }
 
 output "vpc_enable_dns_support" {
-  value = module.terraform-aws-vpc.vpc_enable_dns_support
+  value     = module.terraform-aws-vpc.vpc_enable_dns_support
+  sensitive = false
 }
 
 output "vpc_endpoint_dynamodb_id" {
-  value = module.terraform-aws-vpc.vpc_endpoint_dynamodb_id
+  value     = module.terraform-aws-vpc.vpc_endpoint_dynamodb_id
+  sensitive = false
 }
 
 output "vpc_endpoint_dynamodb_pl_id" {
-  value = module.terraform-aws-vpc.vpc_endpoint_dynamodb_pl_id
+  value     = module.terraform-aws-vpc.vpc_endpoint_dynamodb_pl_id
+  sensitive = false
 }
 
 output "vpc_endpoint_s3_id" {
-  value = module.terraform-aws-vpc.vpc_endpoint_s3_id
+  value     = module.terraform-aws-vpc.vpc_endpoint_s3_id
+  sensitive = false
 }
 
 output "vpc_endpoint_s3_pl_id" {
-  value = module.terraform-aws-vpc.vpc_endpoint_s3_pl_id
+  value     = module.terraform-aws-vpc.vpc_endpoint_s3_pl_id
+  sensitive = false
 }
 
 output "vpc_id" {
-  value = module.terraform-aws-vpc.vpc_id
+  value     = module.terraform-aws-vpc.vpc_id
+  sensitive = false
 }
 
 output "vpc_instance_tenancy" {
-  value = module.terraform-aws-vpc.vpc_instance_tenancy
+  value     = module.terraform-aws-vpc.vpc_instance_tenancy
+  sensitive = false
 }
 
 output "vpc_main_route_table_id" {
-  value = module.terraform-aws-vpc.vpc_main_route_table_id
+  value     = module.terraform-aws-vpc.vpc_main_route_table_id
+  sensitive = false
 }