diff --git a/terraform/cloudsql/mysql/provision/outputs.tf b/terraform/cloudsql/mysql/provision/outputs.tf
index c19886ec..6d59c28e 100644
--- a/terraform/cloudsql/mysql/provision/outputs.tf
+++ b/terraform/cloudsql/mysql/provision/outputs.tf
@@ -8,8 +8,14 @@ output "password" {
   value     = google_sql_user.admin_user.password
 }
 
-output "sslrootcert" { value = google_sql_database_instance.instance.server_ca_cert.0.cert }
-output "sslcert" { value = google_sql_ssl_cert.client_cert.cert }
+output "sslrootcert" {
+  sensitive = true
+  value     = google_sql_database_instance.instance.server_ca_cert.0.cert
+}
+output "sslcert" {
+  sensitive = true
+  value     = google_sql_ssl_cert.client_cert.cert
+}
 output "sslkey" {
   value     = google_sql_ssl_cert.client_cert.private_key
   sensitive = true
diff --git a/terraform/cloudsql/postgresql/provision/outputs.tf b/terraform/cloudsql/postgresql/provision/outputs.tf
index ad7665f4..bf50f9dd 100644
--- a/terraform/cloudsql/postgresql/provision/outputs.tf
+++ b/terraform/cloudsql/postgresql/provision/outputs.tf
@@ -9,10 +9,16 @@ output "password" {
 }
 output "require_ssl" { value = var.require_ssl }
 
-output "sslcert" { value = google_sql_ssl_cert.client_cert.cert }
+output "sslcert" {
+  sensitive = true
+  value     = google_sql_ssl_cert.client_cert.cert
+}
 output "sslkey" {
   value     = google_sql_ssl_cert.client_cert.private_key
   sensitive = true
 }
-output "sslrootcert" { value = google_sql_database_instance.instance.server_ca_cert.0.cert }
+output "sslrootcert" {
+  sensitive = true
+  value     = google_sql_database_instance.instance.server_ca_cert.0.cert
+}