terraspace-secrets

You can retrieve AWS Secrets Manager values during Terraspace tfvars generation by using the `aws_secret()` function, which automatically fetches and injects the required values into your Terraform configurations.

Yes, you can fetch SSM Parameter Store values dynamically based on the current Terraspace environment by using `aws_ssm()` with `TS_ENV` expansion tokens in the parameter path, enabling environment-specific secret retrieval.

To prevent Terraspace from expanding tokens in your AWS secret paths, use the `expand: false` setting, which avoids accidental substitution of Terraspace expansion tokens within your secret or parameter identifiers.

Yes, you need both Terraform and Terraspace installed to process AWS resources and generate tfvars, as this secret retrieval automation relies on the Terraspace framework to interface with AWS services.

The best way to manage AWS secrets in Terraspace projects without manual intervention is automating retrieval with `aws_secret()` and `aws_ssm()`, ensuring correct values are used during tfvars generation by leveraging Terraspace expansion tokens.