No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

image.png

So while performing migration of Backend from pulumi cloud to s3+dynamoDB+kms, We're getting this error:

Whether this passphrase is something that is created when creating a stack or what? I've tried exporting some random values within the code but no luck.

The passphrase is set when creating the stack, or changing to the passphrase secret provider

So if someone else created the stack, either directly using CLI or whether by using some CI-pipeline like github-actions, gitlab then how are we supposed to retrieve that passphrase?

And whether there is any way to find out whether it was created when creating the stack, or changing to the passphrase secret provider?

Because someone else created the stack and I am performing the migration, so I am getting stuck at this step.

And whether I can change the passphrase now in pulumi cloud and then try to import for the already existing stack?

&gt; how are we supposed to retrieve that passphrase?
You'd have to ask them for it. This is aes256 encrypted, there's no way to "recover" it.

&gt; And whether I can change the passphrase now in pulumi cloud and then try to import?
You'd have to delete all secret data from the stack file. We don't have anything to automatically clean that out, but you can look through the state file and delete all objects with the property `4dabf18193072939515e22adb298388d: 1b47061264138c4ac30d75fd1eb44270`