Sensitive

output "db_default_instance_password" {
  description = "The database password (this password may be old, because Terraform doesn't track it after initial creation)"
  value       = module.db_default.db_instance_password
  sensitive   = true
}

• Terraform resource: random password
• Case-sensitive