https://pulumi.com logo
#general
Title
# general
n

numerous-france-39194

09/14/2023, 3:35 PM
Folks, I’m starting on IaC and planning to use Pulumi! I would love to hear your thoughts on how to keep the State file safe. Aren’t you worried about a file containing all the sensitive secrets? Even tho it would be in a bucket with encryption, I feel a bit worried about a single file containing all that sensitive material. Thanks 🙂
b

billowy-army-68599

09/14/2023, 3:39 PM
@numerous-france-39194 Pulumi encrypts values in the state file
when you init a stack, you specify a password or you can bring your own encryption key
n

numerous-france-39194

09/14/2023, 3:40 PM
Oh nice, so it does not contain the plaintext file with sensitive data like Terraform does
b

billowy-army-68599

09/14/2023, 3:41 PM
correct
2 Views