OpenTofuOpenTofu State Encryption: Protect Secrets at RestConfigure OpenTofu's built-in state encryption to protect sensitive values at rest. AES-GCM with PBKDF2 or AWS KMS / GCP KMS / Azure Key Vault key providers.May 4, 20263 min read