"(secretのarn)|(version id)"
aws secretsmanager list-secret-version-ids --secret-id (arn)
lifecycle { ignore_changes = [ secret_string, ] }