diff --git a/modules/7_post/ibmcloud_lb/ibmcloud_lb.tf b/modules/7_post/ibmcloud_lb/ibmcloud_lb.tf
index 701b7fc..c39e831 100644
--- a/modules/7_post/ibmcloud_lb/ibmcloud_lb.tf
+++ b/modules/7_post/ibmcloud_lb/ibmcloud_lb.tf
@@ -18,13 +18,13 @@ resource "null_resource" "remove_lbs" {
     timeout             = "${var.connection_timeout}m"
     name_prefix         = "${var.name_prefix}"
     private_key         = sensitive(file(var.private_key_file))
-    host                = var.bastion_public_ip
+    host                = sensitive(var.bastion_public_ip)
     agent               = var.ssh_agent
     ansible_post_path   = local.ansible_post_path
-    ibmcloud_api_key    = var.ibmcloud_api_key
+    ibmcloud_api_key    = sensitive(var.ibmcloud_api_key)
     vpc_region          = var.vpc_region
-    resource_group_name = var.resource_group_name
-    vpc_name            = var.vpc_name
+    resource_group_name = sensitive(var.resource_group_name)
+    vpc_name            = sensitive(var.vpc_name)
   }
 
   connection {
diff --git a/modules/7_post/post.tf b/modules/7_post/post.tf
index f979cfd..ea4c8da 100644
--- a/modules/7_post/post.tf
+++ b/modules/7_post/post.tf
@@ -43,7 +43,7 @@ resource "null_resource" "remove_workers" {
     timeout           = "${var.connection_timeout}m"
     name_prefix       = "${var.name_prefix}"
     private_key       = sensitive(file(var.private_key_file))
-    host              = var.bastion_public_ip
+    host              = sensitive(var.bastion_public_ip)
     agent             = var.ssh_agent
     ansible_post_path = local.ansible_post_path
   }