Terminal Tutorial: what-if with a @secure() parameter

~/azure-bicep-reference — bash
# Ch4: what-if after adding @secure() param dbAdminPassword
# Preview only — dummy value, no apply
$ grep -A1 '@secure' main.bicep
@secure()
param dbAdminPassword string
$ export CLASS_RG=rg-hyf-students
$ az deployment group what-if \
    --resource-group "$CLASS_RG" \
    --template-file main.bicep \
    --parameters storageName=sthyfyourname dbAdminPassword=not-a-real-secret
Warning no-unused-params: Parameter "dbAdminPassword" is declared but never used.
# Expected here: dummy secret is for CLI hygiene practice, not wired to a resource
Resource and property changes are indicated with these symbols:
  + Create
Scope: /subscriptions/.../resourceGroups/rg-hyf-students
  + Microsoft.Storage/storageAccounts/sthyfyourname
  + Microsoft.Storage/storageAccounts/sthyfyourname/blobServices/default
  + Microsoft.Storage/storageAccounts/sthyfyourname/blobServices/default/containers/raw
Resource changes: 3 to create.
$ # Confirm the dummy never printed in the preview:
$ az deployment group what-if ... 2>&1 | grep -c 'not-a-real-secret' || true
0