The Terraform Book

Chapter 3: Building an application stack with Terraform
Outputs can also be marked as containing sensitive material by setting the
sensitive attribute.
Listing 3.49: The vpc module outputs
output "public_subnet_id" {
value = "${aws_subnet.public.id}"
sensitive = true
}
When outputs are displayed—for instance, at the end of the application of a plan—
sensitive outputs are redacted, with displayed instead of their value.
NOTE This is purely a visual change. The outputs are not encrypted or
protected.
We’ll see how to use these outputs inside our stack configuration shortly.
NOTE We recommend using a naming convention for Terraform files inside
modules. This isn’t required but it makes code organization and comprehension
easier. We use interface.tf for variables and outputs and main.tf for resources.
With that our module is complete. Now let’s see it at work.
Version: v1.1.1 (e771e4d) 39