Hello, How do you manage your variables? I want to create a few lambda different git repo, and different pulumi deployments code. But subnets is the same for all and create allow rules with existing SG.

If they're different per stack, then having them in the stack config file is best. If they're consistent for all stacks, then putting them in code can simplify things if you want. You can also put them in

Pulumi.yaml

. If you have another pulumi project that sets up the shared resources (your subnets), then you can use a Stack Reference. That way you don't need to hard code any configs

This sounds like it could also be a good use case for Pulumi ESC. You can centralize any shared configuration in one environment file and have your different environments consume them.