This message was deleted.
# general
s
This message was deleted.
i
I can't answer the first part, but for the second part, https://www.pulumi.com/docs/intro/concepts/config/
s
Yes, I think I understand generic per-stack config, but I didn't see how to associate a particular pulumi stack with an entry in my
~/.aws/credentials
file.
g
Yes, generally people use different AWS accounts for prod, dev, etc. stacks. This gives the best isolation of resources from impacting each other and best cost reporting from AWS as well.
✔️ 1
👍 1
i
g
The access keys you provide to Pulumi determine the account that the operations run within. Using AWS profiles is a good way to do this.
Also, you can set
allowedAccountIds
as an extra measure to ensure your Pulumi stacks are operating in the right AWS account. https://www.pulumi.com/docs/reference/pkg/aws/provider/#allowedaccountids_nodejs
👍 1
s
Oh drat, I just missed that entry. Thank you so much!
oh cool, that's great