Today, I'm excited to share that we are launching Pulumi ESC, a new product from Pulumi that manages and tames secrets and configuration complexity across all of your cloud infrastructure and application environments. p rocket Pulumi ESC introduces a new category of configuration-as-code product, motivated by our experience working with hundreds of Pulumi IaC customers to address their needs in managing secrets and configuration at scale within their Pulumi infrastructure and across other cloud applications and infrastructure projects. Pulumi ESC enables teams to aggregate secrets and configuration from many sources, manage hierarchical collections of configuration and secrets (“environments”), and consume those configuration and secrets from a variety of different infrastructure and application services. Pulumi ESC works hand-in-hand with Pulumi IaC to simplify configuration management, but also works independently from Pulumi IaC, as a solution for managing environments, secrets and configuration for any application or infrastructure project. For example, the Pulumi ESC CLI (

esc

) makes it possible to give your developers immediate, just-in-time authenticated and short-lived access to cloud credentials across any cloud provider with just a single command:

esc run aws-staging -- aws s3 ls.

Thanks 🙌 to everyone here who has shared feedback on Pulumi ESC over the last few months, and for all the feedback to date that helped motivate building this new feature. Looking forward to building Pulumi ESC with you from here! pulumi logo Join in the discussion at #esc. Learn more and/or help us to amplify the news at: • Blog: https://www.pulumi.com/blog/environments-secrets-configurations-management/ • Twitter/X: https://x.com/PulumiCorp/status/1711715535413444672?s=20 • LinkedIn: https://www.linkedin.com/posts/pulumi_introducing-pulumi-esc-easy-and-secure-environments-activity-7117483922447355904-orVN

Thanks, Luke! This should work with other backend providers besides Pulumi Cloud, correct? I use GCS buckets as my backend provider.

@full-eve-52536 Pulumi ESC currently works only with Pulumi Cloud.

We will be doing an AMA with Luke later on these threads. Can you please upvote? https://www.reddit.com/r/devops/comments/174ltul/testing_pulumis_new_iac_configuration_management/ https://www.reddit.com/r/sysadmin/comments/174lmgt/thoughts_on_pulumis_new_environments_secrets_and/