Issue a warning when using additionalSecretOutputs: ['id']

[iwahbe]

Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

As shown in #8946, a resource id cannot be made secret. In a sense, it's logical that additionalSecretOutputs: ['id'] doesn't work, as id is not an output. On the other hand, some resources assign a potentially-secret output value to resource ID, which is currently impossible to hide from plain text. To prevent users from relying on additionalSecretOutputs, we should warn when this is passed.

Affected area/feature