Fully Migrate Secrets Out Of Terraform Module State Without Breaking Existing Users

A few weeks ago I published a similar blog that shows how you can update your modules to optionally utilize ephemeral secrets, removing secrets from state for all new deployments. However, to maintain totally programmatic, older deployments still retained the secret. This blog explores a method to fully remove secrets from state, even on old deployments. However, it requires manual effort on behalf of users and involves some risk. Setup V1 of your module had a resource which introduced a secret