Terraform Provider Ephemeral Resources Ephemeral resources (Terraform 1.10+) produce values that are never persisted to state or plan . They exist for exactly one job: handing secrets — tokens, generated passwords, short-lived certificates, decrypted values — to the parts of a configuration that need them, without writing them to disk. Any data source that returns a sensitive value is a candidate to be (or to also exist as) an ephemeral resource. Official docs: Ephemeral Resources. When to Use One | Situation | Use | |---|---| | Read-only lookup of non-sensitive data | Data source | | Value i…