Terraform

→ secrets

any variable foo can be replaced by environmeny by naming it TF_VAR_foo

SECRETS ARE ALWAYS STORED IN TERRAFORM STATE