use Secret manager and add (additional_tags) --- used tag 2.0.0

tags = merge( { "Name" = "dbiaas-${local.identifier}" }, local.required_tags, var.additional_tags)

---

resource "random_password" "master" { length = 16 special = true override_special = "_!%^" }

resource "aws_secretsmanager_secret" "rds_credentials" { name = "sm-rds-${local.identifier}" description = "password for rds postgre" tags = local.required_tags }

resource "aws_secretsmanager_secret_version" "rds_credentials_v" { secret_id = aws_secretsmanager_secret.rds_credentials.id secret_string = random_password.master.result }