news
OpenTofu Introduces Ephemeral Support for Safer Secrets Management
Quoting: OpenTofu Introduces Ephemeral Support for Safer Secrets Management —
OpenTofu, a community-driven IaC tool (a fork of Terraform) under the Linux Foundation’s stewardship, has introduced ephemeral attributes in its nightly builds — a long-time requested feature designed to prevent sensitive values from being persisted in state files. But before we go further, let me clarify what exactly we’re talking about.
As their name suggests, ephemeral attributes allow values to exist only during a single execution of the OpenTofu CLI (plan/apply) and are discarded immediately afterward. In practice, this means that when you mark specific attributes as ephemeral, they will not be stored in the state.