fix type check panic on GetRawConfigAt (#13204)

GoogleCloudPlatform · Feb 26, 2025 · 1467ae0 · 1467ae0
1 parent e98212e
commit 1467ae0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/mmv1/templates/terraform/constants/bigquery_data_transfer.go.tmpl b/mmv1/templates/terraform/constants/bigquery_data_transfer.go.tmpl
@@ -14,10 +14,10 @@ func sensitiveParamCustomizeDiff(_ context.Context, diff *schema.ResourceDiff, v
 	for _, sp := range sensitiveWoParams {
 		mapLabel := diff.Get("params." + sp[:len(sp)-3]).(string)
 		authLabel, _ := diff.GetRawConfigAt(cty.GetAttrPath("sensitive_params").IndexInt(0).GetAttr(sp))
-		if mapLabel != "" && authLabel.AsString() != "" {
+		if mapLabel != "" && (!authLabel.IsNull() && authLabel.Type() == cty.String) {
 			return fmt.Errorf("Sensitive param [%s] cannot be set in both `params` and the `sensitive_params` block.", sp)
 		}
-		if authLabel.AsString() != "" {
+		if !authLabel.IsNull() && authLabel.Type() == cty.String {
 			if _, versionExists := diff.GetOkExists("sensitive_params.0.secret_access_key_wo_version"); !versionExists {
 				return fmt.Errorf("Sensitive param [%s] must be set with %s_version", sp, sp)
 			}