Channels
esc
welcome
pulumi-cdk
cloudengineering
yaml
blog-posts
localstack
pulumi-ai
package-authoring
policy-as-code
pulumiup-booth-support
oracle-cloud-infrastructure
learn-pulumi-events
linen
registry
built-with-pulumi
pulumi-cloud
contribex
testingtesting321
hacktoberfest
pulumi-crosscode
content-share
finops
multi-language-hackathon
office-hours
workshops
gitlab
general
pulumi-kubernetes-operator
jobs
pulumi-deployments
dotnet
aws
golang
announcements
java
pulumiverse
python
install
getting-started
cloudengineering-support
testingtesting123
hackathon-03-19-2020
typescript
google-cloud
contribute
azure
kubernetes
docs
automation-api
status
Powered by
#getting-started
Title
# getting-started
c
careful-television-82602
09/16/2021, 12:15 PM
Since the Pulumi state is centralized - what's the story on encryption? or is it also possible to keep the state in store that I control?
p
prehistoric-activity-61023
09/16/2021, 12:32 PM
you can use different backend to store pulumi state (including GCS, S3)
you can also (independently) specify the secret storage backend (so you can use KMS, Vault etc.)
check:
https://www.pulumi.com/docs/intro/concepts/state/
👍 1
c
careful-television-82602
09/16/2021, 12:58 PM
thanks!
"Encrypted state in transit and at rest" sounds good
3 Views
Post