diff --git a/outputs.tf b/outputs.tf
index 5f48c55..d002a3c 100644
--- a/outputs.tf
+++ b/outputs.tf
@@ -48,4 +48,5 @@ output "aliases" {
 output "grants" {
   description = "A map of grants created and their attributes"
   value       = aws_kms_grant.this
+  sensitive   = true
 }
diff --git a/wrappers/outputs.tf b/wrappers/outputs.tf
index ec6da5f..39779a5 100644
--- a/wrappers/outputs.tf
+++ b/wrappers/outputs.tf
@@ -1,5 +1,5 @@
 output "wrapper" {
   description = "Map of outputs of a wrapper."
   value       = module.wrapper
-  # sensitive = false # No sensitive module output found
+  sensitive   = true # At least one sensitive module output (grants) found (requires Terraform 0.14+)
 }