sam deploy is showing parameters with NoEcho: true

[kstro21]

Description

If I add a parameter to my template and set the NoEcho option to true, then, when I run sam deploy with --parameter-overrides I can see the value of the parameter in the command output.

Steps to reproduce

1. Add a parameter with NoEcho: true

   MyParam:
      Type: String
      Description: My description
      NoEcho: true

2. Invoke sam deploy like this:

   sam deploy --stack-name my-stack --parameter-overrides MyParam=$SOME_ENV_VAR \
    --region $AWS_REGION --s3-bucket $FZ_BUCKET_NAME \
    --s3-prefix my-app-prefix --capabilities CAPABILITY_IAM --force-upload

Observed result

Deploying with following values
--
253 | ===============================
254 | Stack name                 : my-stack
255 | Region                     : us-east-1
256 | Confirm changeset          : False
257 | Deployment s3 bucket       : my-bucket
258 | Capabilities               : ["CAPABILITY_IAM"]
259 | Parameter overrides        : {'MyParam': 'ShouldntSeeThis'}

Expected result

I shouldn't see parameters with NoEcho: true in the cli output. It is ok if I'm local, but I don't want those values in my CI/CD pipeline's log

Additional environment details (Ex: Windows, Mac, Amazon Linux etc)

1. sam --version: 1.2.0

[vaunus]

+1 am also seeing the same issue. Would be good to get this merged in.

[aahung]

it is released in v1.16.0, please reopen if the issue still persists

[snoblenet]

I am experiencing this issue with SAM CLI v1.20.0 and the --debug flag, which I'd expect to result in secret params being obscured.