This message was deleted.
# aws
s
This message was deleted.
l
If you are using our Pulumi Cloud, have a look at Environments, Secrets & Configuration (ESC) we launched last October. One of the secrets providers supported is to read secrets from AWS Secret Manager into an environment, then link that environment to one or more stacks. https://www.pulumi.com/docs/pulumi-cloud/esc/providers/aws-secrets/
r
Thanks Ringo! How about the other way around - we want to be able to allow user to create/update secret somewhere in Pulumi (or can be read by Pulumi) and sync them to AWS Secret Manager?
l
@rich-whale-93740 in that case, you create a Pulumi program and add
aws.secretsmanager.Secret
resources to it. Once you have the code, you create one or more stacks from it. https://www.pulumi.com/registry/packages/aws/api-docs/secretsmanager/secret/
r
Where would we place the secret for pulumi to read from?
l
You could use our Random provider and use generated values as the secrets to store in AWS Secrets Manager.