wiz_service_account shows client_id client_secret in destroy plan output

[Ph4rell]

Terraform Version and Provider Version

Terraform v1.7.5
Wiz provider version: 1.2.1

Affected Resource(s)

• wiz_service_account

Terraform Configuration Files

resource "wiz_service_account" "connector" {
  name = "kubernetes-connector-sa"
  type = "KUBERNETES_CONNECTOR"
}

Expected Behavior

When we want to delete an resource of type service account with KUBERNETES_CONNECTOR as a type, the client_id and client_secret should be mark as sensitive in terraform output plan when destroying.

Actual Behavior

The client_id and client_secret is displayed in the terraform plan.

  # wiz_service_account.connector will be destroyed
  - resource "wiz_service_account" "connector" {
      - client_id           = "yyyyyyyyyyyyyyyyyyyyyyyyyy" -> null
      - client_secret       = "xxxxxxxxxxxxxxxxxxxxxxxx" -> null
      - created_at          = "2024-11-20T17:22:34.391Z" -> null
      - id                  = "pjmntxdq4bgwjj2hvlda4xcutopoyk5q2fuvepmetmpzufj54d5gg" -> null
      - last_rotated_at     = "2024-11-20T17:22:34.666Z" -> null
      - name                = "kubernetes-connector-sa" -> null
      - recreate_if_rotated = false -> null
      - scopes              = [] -> null
      - type                = "KUBERNETES_CONNECTOR" -> null
    }

Steps to Reproduce

1. Create a wiz_service_account of KUBERNETES_CONNECTORS type.
2. Terraform plan && terraform apply
3. Terraform destroy

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment