Interesting, thanks for showing that. I had been considering the Terraform provider and wanted to know what working with it would look like, so this post helped me.
Seeing this I’m not comfortable with the client secrets being stored in the tfstate, it makes me uncomfortable because the state management is only as good as my diligence (or lack of).
I don’t suppose there’s a way to have the client secrets not be stored in the TFState?
I’ve been using the Auth0 Deploy CLI which is more ‘stateless’ and that feels like the right way to do Auth0 deployments, but that’s based on my risk profile, I’m sure a TF way is perfectly good for others.