v1.4.7/internal/terraform/testdata/validate-sensitive-provisioner-config/main.tf

variable "secret" {
  type      = string
  default   = " password123"
  sensitive = true
}

resource "aws_instance" "foo" {
  provisioner "test" {
    test_string = var.secret
  }
}