provider/aws: Encrypt aws_iam_access_key.secret with pgp

[catsby]

Optionally encrypt the iam access key secret with a pgp key.

This is an alternative to #10450 where we forced users to supply a PGP Key, and was a breaking change.

Here we maintain the current behavior, but offer a pgp_key parameter to optionally encrypt the returned secret.

The upgrade UX becomes "nothing"; there is no diff or plan or change. Adding a pgp_key will result in a ForceNew plan.

[mitchellh]

Looks great. Awesome test case, too.

[mcanevet]

@catsby @mitchellh secret is not set anymore with this patch. Would it be possible to have a deprecation period of one release before removing this feature so that code written for 0.7 still works in 0.8?

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.