Not sure if this is the best model but we went with Pulumi Automation API under a custom Go CLI. All projects in a monorepo, with single module for that repo, not per project. Keeping stacks fairly small such as vpc, core IAM, Postgres RDS, EKS, etc Within this it was easy to reference shared libs from a common directory as with any Go program Go CLI does parameterisation from YAML go templates - if you are using ESC you probably don’t need that so much.