Example usage of custom connection keys

cmd/provider/main.go

@@ -26,7 +26,6 @@ import (
 	ctrl "sigs.k8s.io/controller-runtime"
 	"sigs.k8s.io/controller-runtime/pkg/log/zap"
 
-	"github.com/crossplane-contrib/terrajet/pkg/config"
 	"github.com/crossplane-contrib/terrajet/pkg/terraform"
 
 	"github.com/crossplane-contrib/provider-tf-aws/apis"
@@ -67,7 +66,7 @@ func main() {
 		SyncPeriod:       syncPeriod,
 	})
 	kingpin.FatalIfError(err, "Cannot create controller manager")
-	ws := terraform.NewWorkspaceStore(&config.Store, log)
+	ws := terraform.NewWorkspaceStore(log)
 	setup := clients.TerraformSetupBuilder(*terraformVersion, *providerSource, *providerVersion)
 
 	rl := ratelimiter.NewGlobal(ratelimiter.DefaultGlobalRPS)

config/iam/config.go

@@ -30,6 +30,18 @@ func init() {
 				Type: "User",
 			},
 		},
+		Sensitive: config.Sensitive{
+			AdditionalConnectionDetailsFn: func(attr map[string]interface{}) (map[string][]byte, error) {
+				conn := map[string][]byte{}
+				if a, ok := attr["id"].(string); ok {
+					conn["aws_access_key_id"] = []byte(a)
+				}
+				if a, ok := attr["secret"].(string); ok {
+					conn["aws_secret_access_key"] = []byte(a)
+				}
+				return conn, nil
+			},
+		},
 	})
 
 	config.Store.SetForResource("aws_iam_group", config.Resource{