feat-req: Terraform Provider / Data Source for reading encrypted files

[cuotos]

I would love to be able to have a terraform data resource for decrypting files...

I want to store an RSA private key in a local file and have terraform be able to read the file.

something like the existing aws_kms_secrets data source (https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/kms_secrets)

data age_encrypted_file secure_file {
  path = "path/to/age.enc"
  age_key = var.age_decrypt_key 
    or
  ssh_key...
    or
  passphrase...
    etc
}

resource a_resource this {
  content = data.age_encrypted_file.secure_file
 }

This could potentially be extended to allow the decryption of a file containing k:v's permitting something like

required_option = data.age_encrypted_file.secure_file.a_value

but this would have added complexity of parsing config files which would require uses to create them to a standard of some sort.

My current workaround is to use a local-exec to decrypt the file to a .gitignored one.