faint-balloon-3317405/23/2022, 8:19 PM
few-wolf-2730305/23/2022, 8:42 PM
orange-policeman-5911905/23/2022, 8:42 PM
with 1 million rounds and a per-environment salt. This function is provided by the official golang package golang.org/x/crypto/pbkdf2 The encryption algorithm is AES256GCM, which was created using
. The nonce is randomly generated via
faint-balloon-3317405/23/2022, 8:49 PM
orange-policeman-5911905/23/2022, 8:50 PM
Various Pulumi editions offer configurable secrets management options. By default, the Pulumi-hosted backend (app.pulumi.com) manages per-stack AWS KMS-based encryption keys on the server. All secrets are sent over HTTPS to app.pulumi.com, and the backend uses AES256GCM to encrypt values with the stack-specific key.