Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
package-authoring
pulumi-ai
pulumi-cdk
pulumi-cloud
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Title
c
careful-television-82602
09/16/2021, 12:15 PMSince the Pulumi state is centralized - what's the story on encryption? or is it also possible to keep the state in store that I control?
p
prehistoric-activity-61023
09/16/2021, 12:32 PMyou can use different backend to store pulumi state (including GCS, S3)
you can also (independently) specify the secret storage backend (so you can use KMS, Vault etc.)
c
careful-television-82602
09/16/2021, 12:58 PMthanks!
"Encrypted state in transit and at rest" sounds good