terraform does mask sensitive values in the output (e.g. from terraform plan)
in order to protect them from being reveals to 3rd parties.
Sometimes it is neccessary to see the exact changes, terraform will perform to the infrastructure including all the changes to sensitive values. So far, terraform does not provide a feature to forcefully unmask the sensitive values in the concise diff plan outputs. The general advice given by the terraform maintainers is to use the JSON output in such cases. While the JSON output does provide all the necessary information, it is not perticularely easy to read for humans and to spot small differences.
There exists instructions using for example jq, but the process stays manual,
cumbersome and error prone.
tfreveal is here to fix this and provide an easy way to show the concise diff
plan outputs with all sensitive values revealed.