Folks, I’m starting on IaC and planning to use Pulumi! I would love to hear your thoughts on how to keep the State file safe.
Aren’t you worried about a file containing all the sensitive secrets? Even tho it would be in a bucket with encryption, I feel a bit worried about a single file containing all that sensitive material.
09/14/2023, 3:39 PM
@numerous-france-39194 Pulumi encrypts values in the state file
when you init a stack, you specify a password or you can bring your own encryption key
09/14/2023, 3:40 PM
Oh nice, so it does not contain the plaintext file with sensitive data like Terraform does