This message was deleted.

sparse-intern-71089

01/08/2024, 11:56 PM

This message was deleted.

limited-rainbow-51650

01/09/2024, 11:58 AM

If you are using our Pulumi Cloud, have a look at Environments, Secrets & Configuration (ESC) we launched last October. One of the secrets providers supported is to read secrets from AWS Secret Manager into an environment, then link that environment to one or more stacks. https://www.pulumi.com/docs/pulumi-cloud/esc/providers/aws-secrets/

rich-whale-93740

01/09/2024, 4:34 PM

Thanks Ringo! How about the other way around - we want to be able to allow user to create/update secret somewhere in Pulumi (or can be read by Pulumi) and sync them to AWS Secret Manager?

limited-rainbow-51650

01/09/2024, 4:36 PM

@rich-whale-93740 in that case, you create a Pulumi program and add

aws.secretsmanager.Secret

resources to it. Once you have the code, you create one or more stacks from it. https://www.pulumi.com/registry/packages/aws/api-docs/secretsmanager/secret/

rich-whale-93740

01/09/2024, 4:47 PM

Where would we place the secret for pulumi to read from?

limited-rainbow-51650

01/09/2024, 6:07 PM

You could use our Random provider and use generated values as the secrets to store in AWS Secrets Manager.

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.