New option: -mask-sensitive to allow masking sensitive attributes

main.go

@@ -74,6 +74,7 @@ Usage: tfadd [global options] state [options]
 Options:
 
   -full               Output all non-computed properties in the generated config
+  -mask-sensitive     Mask sensitive properties
   -target=addr        Only generate for the specified resource (can specify multiple times)
 `
 	return strings.TrimSpace(helpText)
@@ -82,6 +83,7 @@ Options:
 func (r *stateCommand) Run(args []string) int {
 	fset := defaultFlagSet("state")
 	flagFull := fset.Bool("full", false, "Whether to generate all non-computed properties")
+	flagMaskSensitive := fset.Bool("mask-sensitive", false, "Whether to mask sensitive properties")
 	var flagTargets arrayFlag
 	fset.Var(&flagTargets, "target", "Only generate for the specified resource")
 	if err := fset.Parse(args); err != nil {
@@ -103,7 +105,10 @@ func (r *stateCommand) Run(args []string) int {
 		fmt.Fprintf(os.Stderr, err.Error())
 		return 1
 	}
-	opts := []tfadd.StateOption{tfadd.Full(*flagFull)}
+	opts := []tfadd.OptionSetter{
+		tfadd.Full(*flagFull),
+		tfadd.MaskSenstitive(*flagMaskSensitive),
+	}
 
 	var template []byte
 	if len(flagTargets) == 0 {

tfadd/internal/option.go

@@ -0,0 +1,7 @@
+package internal
+
+type Option struct {
+	// Whether to mask the sensitive attributes in the generated config?
+	// Set via MaskSensitive option.
+	MaskSensitive bool
+}