Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
package-authoring
pulumi-ai
pulumi-cdk
pulumi-cloud
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by
Title
c
careful-television-82602
09/16/2021, 12:15 PM
Since the Pulumi state is centralized - what's the story on encryption? or is it also possible to keep the state in store that I control?
p
prehistoric-activity-61023
09/16/2021, 12:32 PM
you can use different backend to store pulumi state (including GCS, S3)
you can also (independently) specify the secret storage backend (so you can use KMS, Vault etc.)
check:
https://www.pulumi.com/docs/intro/concepts/state/
👍 1
c
careful-television-82602
09/16/2021, 12:58 PM
thanks!
"Encrypted state in transit and at rest" sounds good
3 Views
#getting-started
Join Slack