Folks, I’m starting on IaC and planning to use Pul...
# general
n
Folks, I’m starting on IaC and planning to use Pulumi! I would love to hear your thoughts on how to keep the State file safe. Aren’t you worried about a file containing all the sensitive secrets? Even tho it would be in a bucket with encryption, I feel a bit worried about a single file containing all that sensitive material. Thanks 🙂
b
@numerous-france-39194 Pulumi encrypts values in the state file
when you init a stack, you specify a password or you can bring your own encryption key
n
Oh nice, so it does not contain the plaintext file with sensitive data like Terraform does
b
correct