mirror same result from secret_access_key

Author: BBBmau

mmv1/products/bigquerydatatransfer/Config.yaml

@@ -228,11 +228,13 @@ properties:
           The Secret Access Key of the AWS account transferring data from.
         sensitive: true
         exactly_one_of:
+          - 'sensitive_params.0.secretAccessKey'
           - 'sensitive_params.0.secretAccessKeyWo'
       - name: 'secretAccessKeyWo'
         type: String
         description: |
           The Secret Access Key of the AWS account transferring data from.
         write_only: true
         exactly_one_of:
+          - 'sensitive_params.0.secretAccessKeyWo'
           - 'sensitive_params.0.secretAccessKey'

mmv1/templates/terraform/constants/bigquery_data_transfer.go.tmpl

@@ -1,4 +1,5 @@
 var sensitiveParams = []string{"secret_access_key"}
+var sensitiveWoParams = []string{"secret_access_key_wo"}
 
 func sensitiveParamCustomizeDiff(_ context.Context, diff *schema.ResourceDiff, v interface{}) error {
 	for _, sp := range sensitiveParams {

mmv1/templates/terraform/encoders/bigquery_data_transfer.go.tmpl

@@ -40,6 +40,13 @@ for _, sp := range sensitiveParams {
 	}
 }
 
+for _, sp := range sensitiveWoParams {
+	if auth, _ := d.GetRawConfigAt(cty.GetAttrPath("sensitive_params").IndexInt(0).GetAttr(sp)); !auth.IsNull() {
+		sp = sp[:len(sp)-3] // removes _wo from the end of the param name
+		params[sp] = auth.AsString()
+	}
+}
+
 obj["params"] = params
 
 return obj, nil