We elected not to use a CLA or DCO, to ease contributing. Everything is Apache 2.0 licensed. A bit more info is available here https://github.com/pulumi/pulumi-aws/blob/master/COPYRIGHT, but it's (we hope) pretty standard stuff.