[bpicolo]

Terraform stores secrets in state. Generated database password, etc.

[NateEag]

Oh, gotcha. I've not used Terraform yet.

Yes, if that's the case, then TXT records could easily be unsuitable. Depends exactly what metadata needs to be attached to your DNS records.