Terraform Ephemeral resource with azuread_application_password

[bwrogo]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritise this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritise the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Now that Terraform 1.10 supports ephemeral resources, could the team consider updating the azuread_application_password resource to support this?

This would improve the management of application registration secrets.

Thank you for your attention to this matter.

New or Affected Resource(s)

• azuread_application_password

Potential Terraform Configuration

• Basic Config:

ephemeral "azuread_application_password" "example" {
  application_id = azuread_application_registration.example.id
}

• With Rotation:

resource "azuread_application_registration" "example" {
  display_name = "example"
}

resource "time_rotating" "example" {
  rotation_days = 7
}

ephemeral "azuread_application_password" "example" {
  application_id = azuread_application_registration.example.id
  rotate_when_changed = {
    rotation = time_rotating.example.id
  }
}