Mary has created a database instance in AWS and for ease of use is outputting the value of the database password with the following code: 1. output "db_password" 2. { 3. value = local.db_password 4…

`secure` is not a valid Terraform output block argument; no such parameter exists in the Terraform language.

Adding `sensitive = true` to an output block marks the value as sensitive, causing Terraform to redact it in CLI output and plan diffs, displaying `(sensitive value)` instead. This is the built-in, idiomatic Terraform mechanism for hiding secrets like database passwords without altering the underlying value.

Using a cryptographic hash would transform the value permanently and would not allow downstream consumers to retrieve the original password; it is not a Terraform output feature.

Terraform does not provide an `encrypt()` built-in function; encryption logic must be handled externally and is not how sensitive outputs are suppressed in the CLI.