Hi guys. Ok. So I’ve created my RDS database with pulumi using this:

// Create an RDS instance using PostgreSQL
const postgresRdsInstance = new aws.rds.Instance("braindripdb", {
  engine: "postgres",
  engineVersion: "15.3",
  instanceClass: "db.t3.micro",
  allocatedStorage: 20,
  name: "braindripdb",
  username: "pgdbuser",
  password: "pgdbuser123",
  vpcSecurityGroupIds: [rdsSecurityGroup.id],
  publiclyAccessible: true,
  skipFinalSnapshot: true,
  applyImmediately: true,
});

// Export the RDS instance's endpoint
export const rdsInstanceEndpoint = postgresRdsInstance.endpoint;

But I’m thinking I’ve just put my username and pwd in my index.ts file which goes into my github for all to see. Surely, there’s a better way that does not involve me putting my DB username and password in plain text? How do you guys do it?

have you seen our docs on secrets yet? https://www.pulumi.com/docs/concepts/secrets/#programmatically-creating-secrets

Cool thx! Just what I needed. Thank you.