No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Hello there,
is there a way to store certs in pulumi project without exposing a file with plaintext?

Hi <@USDHMRB8X>! You could use a config item marked as secret for this.

`pulumi config set -secret mycert “$(cat cert.pem)”`

And then you can use a `Config` object to retrieve it as a string.

The dash in secret should be two dashes but iOS won’t let me type that :face_with_rolling_eyes:

Let me correct that for you :slightly_smiling_face:. Here’s what <@UB8A66MPS> meant to type

```pulumi config set --secret mycert "$(cat cert.pem)"```

<@UB8A66MPS> <@UDE2DCFT3> great, thanks much