Skip to main content
New this week:
Pulumi Cloud as a Terraform state backend and module registry, and first-class support for HCL as a Pulumi language.
See the release
Product
For engineers
For enterprises
Docs
Registry
Blog
Pricing
Company
Core product
Platform overview
Everything platform engineering teams need to build, secure, and scale cloud infrastructure
Infrastructure as code
IaC for any cloud, in any language — Node.js, Python, Go, .NET, Java, and YAML
Key capabilities
AI infrastructure agent
Meet Neo, our AI-powered infrastructure engineering agent
Secrets & configuration
Environments, secrets, and configuration management
Insights & governance
Asset management, compliance remediation, and AI insights over the cloud
Internal developer platform
The fastest, most secure way to deliver cloud infrastructure
Get started
Follow a step-by-step guide to quickly learn Pulumi
Documentation
Complete guides and API references
Registry
Browse 170+ cloud providers and packages
Templates
Deploy common architectures on any cloud
Tutorials
Get hands-on with Pulumi concepts
Events and workshops
Live sessions and workshops
Community
Join 10k+ developers on Slack
Engineers love Pulumi
Hear from engineers why they love us
Pulumi guides
Practical infrastructure patterns for cloud providers
Releases
Major platform updates from the team
Enterprise solutions
Security, compliance, and support for teams
Case studies
How Snowflake, Mercedes-Benz, and others use Pulumi
Request a demo
See how Pulumi can help your team
Professional services
Get expert help with your implementation
Contact sales
Talk to our team about your needs
About us
Our purpose and values
Careers
Come work for Pulumi
Newsroom
Pulumi in the news
Awards
Recognition from press and analysts
25.6K
Contact us
Sign in
Dashboard
Get started
25.6K
Contact us
Sign in
Dashboard
Get started
Copy logo SVG
Download mark
Get other variants
Read brand guide
Docs Home
Download & Install Pulumi
Get Started
Infrastructure as Code
Overview
Get Started
AWS
Introduction
Install Pulumi
Configure access
Create project
Deploy
Make an update
Create a component
Cleanup & destroy
Next steps
Azure
Introduction
Install Pulumi
Configure access
Create project
Deploy
Make an update
Create a component
Cleanup & destroy
Next steps
Google Cloud
Introduction
Install Pulumi
Configure access
Create project
Deploy
Make an update
Create a component
Cleanup & destroy
Next steps
Kubernetes
Introduction
Install Pulumi
Configure access
Create project
Deploy
Make an update
Create a component
Cleanup & destroy
Next steps
Terraform Users
Introduction
Install and Configure
First Look
Reference Terraform State
Import Terraform Modules
Use Terraform Providers
Convert HCL Code
Orchestrate Together
Store Terraform State
Remote Execution
Next Steps
Concepts
Introduction
Pulumi Cloud
Projects
Introduction
Project file reference
Stack settings file reference
Stacks
Stash
Configuration
Resources
Introduction
Names
Resource options
Introduction
additionalSecretOutputs
aliases
customTimeouts
deleteBeforeReplace
deletedWith
dependsOn
envVarMappings
hideDiffs
hooks
ignoreChanges
import
parent
protect
provider
providers
replacementTrigger
replaceOnChanges
replaceWith
retainOnDelete
transformations
transforms
version
Providers
Introduction
Any Terraform Provider
Dynamic providers
Inputs & Outputs
Introduction
Apply
All
Helpers
State & backends
Secrets Handling
Introduction
Write-Only Fields
Functions
Introduction
Provider functions
Get functions
Resource methods
Function serialization
Components
Packages
Automation API
Assets & archives
Plugins
Converters
Guides
Basics
Introduction
How Pulumi IaC Works
Pulumi Cloud vs. OSS
Organizing Projects & Stacks
Building & Extending
Introduction
Components
When to Build a Component
Build a Component
Testing Components
Packaging Components
Packages
Introduction
Authoring a Source-Based Plugin Package
Authoring an Executable Plugin Package
Publishing to the Pulumi Registry
Repository Strategy
Local SDKs
Pulumi Go Provider SDK
Schema reference
Providers
Introduction
Provider Architecture
Build a Provider
Author a Dynamic Provider
Provider Configuration
Debugging Providers
Direct Implementation
Introduction
Protocol Reference
Python
TypeScript
Using Existing Tools
Use a Terraform Module
Creating Templates
Automation API
Advanced Patterns
Clouds
Introduction
AWS
Introduction
Choosing a Provider
API Gateway
AWS CDK
ECR
ECS
EKS
ELB
IAM
Lambda
VPC
Azure
Migration
Introduction
Migrating from...
Terraform
AWS CDK
Introduction
Migrating existing CDK
Using Pulumi with AWS CDK
AWS CloudFormation
Azure Resource Manager
Kubernetes YAML or Helm Charts
Serverless Framework
Importing Resources
Conversion tools
Finding AWS import IDs
Testing
Introduction
Unit testing
Integration testing
Introduction
Integration testing framework
Automation API testing
Operations
Introduction
Stack Management
Introduction
Protecting against undesired changes
Targeted updates
Running your program on refresh and destroy
Update plans
Drift detection
Editing state files
Restoring deleted stacks
Using a DIY Backend
Moving resources between stacks
Refactoring with aliases
Continuous Delivery
Introduction
Argo CD
AWS Code Services
Azure DevOps
Bitbucket Pipelines
Buildkite
CircleCI
Codefresh
GitHub Actions
GitLab CI/CD
Google Cloud Build
Harness
Jenkins
Octopus Deploy
TeamCity
Travis CI
Troubleshooting
Troubleshooting
Overview
Update Conflicts
Server Errors
Post-Step Event Errors
Connection Issues
Destroy Failures
Interrupted Updates
macOS Architecture Mismatch
Debugging
Overview
Logging
Attaching a Debugger
Performance and Tracing
Using Dev Builds for Unreleased Fixes
Docker Images
Image Build & Caching
Languages & SDKs
Overview
TypeScript
Introduction
SDK docs ↗
Policy SDK docs ↗
Provider package version management
Python
Introduction
SDK docs ↗
Policy SDK docs ↗
Blocking & async
Resource identity
C#, F#, VB (.NET)
Introduction
SDK docs ↗
Go
Introduction
Inputs & outputs
SDK docs ↗
Java
Introduction
SDK docs ↗
YAML
Introduction
Reference
Component Reference
HCL
Introduction
Reference
Component Reference
Pulumi CLI
Introduction
Commands
Introduction
pulumi
about
cancel
config
console
convert
destroy
env
gen-completion
import
login
logout
logs
new
org
package
plugin
policy
preview
refresh
schema
stack
state
up
version
watch
whoami
Environment variables
Command-line completion
Available versions
Direct Resource Operations
Calling the Cloud API
Pulumi CLI Exit Codes
Comparisons
Introduction
Terraform
Introduction
OpenTofu vs. Terraform
Pulumi terminology
Terraform Cloud
AWS CloudFormation
AWS CDK
CDKTF
Crossplane
OpenTofu
Spacelift
TACOS
ARM Templates
Helm
Kubernetes YAML Manifests
Serverless Framework
Chef & Puppet
Cloud SDKs
Custom solutions
Infrastructure AI
Overview
Pulumi Neo
Introduction
Get started with Neo
Permissions model
Neo in the CLI
Neo in your editor (ACP)
Tasks
Automations
Pull Requests
Code reviews
Previews
Integrations
Introduction
External MCP servers
CLI Integrations
Slack
Settings
Usage limits
Agent Skills
MCP server
CLI for agents
Deployments & Workflows
Overview
Get Started
Introduction
New Project Wizard
Pulumi and GitHub CLIs
Concepts
Introduction
Deployments Settings
Introduction
Source Settings
Path Filtering
Tag Filtering
Deployment Runner Pools
Pre-run Commands
Skipping Dependency Installation
Skipping Intermediate Deployments
Custom Executor Images
Dependency Caching
Environment Variables
Deployment Triggers
Drift Detection
TTL Stacks
Review Stacks
Scheduled operations
Pulumi-managed runners
Customer-managed runners
Webhooks
Guides
Introduction
Cloud Credentials
Requiring Approval
Customer-Managed Workflow Runners
Custom Images
Private Sources
Dependent Stack Updates
OIDC Setup
Introduction
AWS
Azure
Google Cloud
Operations
Introduction
Permissions
Deployment queue
Vs. Traditional CI/CD
Secrets & Configuration
Overview
Get Started
Concepts
Introduction
Environments
Providers
Rotators
Imports
Interpolations and References
Built-in Functions
Introduction
fn::concat
fn::final
fn::fromBase64
fn::fromJSON
fn::join
fn::open
fn::rotate
fn::split
fn::toBase64
fn::toJSON
fn::toString
fn::toYAML
fn::validate
fn::secret
Outputs
Versioning
Webhooks
Approvals
Customer Managed Keys
SDKs
Providers
Introduction
Login & OIDC
Introduction
aws-login
azure-login
doppler-login
gcp-login
gh-login
infisical-login
snowflake-login
vault-login
Secrets & config
Introduction
1password-secrets
aws-parameter-store
aws-secrets
azure-secrets
doppler-secrets
gcp-secrets
infisical-secrets
vault-secrets
external
IaC
Introduction
pulumi-stacks
terraform-state
Rotators
Introduction
aws-iam
azure-app-secret
mysql
passphrase
password
postgres
snowflake-user
external
Operations
Introduction
Rotating secrets
Introduction
Best practices
AWS Lambda Rotation Connector
Database User Setup
Guides
Introduction
Environment Composition Patterns
Use with Pulumi IaC
Introduction
Adopt ESC for config and secrets
Migrate from stack references to pulumi-stacks
Sync secrets to external platforms
Migrate from the ESC CLI
Running Commands with pulumi env run
Configuring OIDC
Introduction
AWS
Azure
Doppler
Google Cloud
Infisical
Vault
Integrate with…
Introduction
Kubernetes Cluster Access
Docker
Direnv
GitHub
Terraform
Cloudflare
Integrations
Introduction
Pulumi Service Provider
Automation API
Kubernetes
Introduction
External Secrets Operator (ESO)
Secrets Store CSI Driver
Administration
Introduction
Audit Logs
Deletion protection
Languages & SDKs
Overview
TypeScript
Python
Go
.NET
Comparisons
Introduction
HashiCorp Vault
Infisical
Doppler
Insights & Governance
Overview
Discovery
Introduction
Get Started
Introduction
Before You Begin
Create Accounts
Manage Accounts and Scans
Using Resource Explorer
Add Policies
Connect Cloud Accounts
Accounts
Resource Search
Visual Import
Discovered Stacks
Introduction
Migrate to Pulumi
Data Export
Policies
Introduction
Get Started
Policy Packs
Introduction
Pre-Built Packs
Write your own
Project File Reference
Policy Metadata
Policy Groups
Policy Findings
Integrations
Snyk Container Scanning
AWS Organizations Tag Policies
CLI Reference
CI/CD Integration
API & SDK Reference
Self-hosted Insights
Internal Developer Platform
Overview
Concepts
Introduction
Private Registry
Terraform modules
Organization templates
New Project Wizard
No-code stacks
Services
Guides
Introduction
Best Practices
Introduction
The Four Factors Framework
Patterns
Introduction
One ESC environment per service
One ESC environment per team
One ESC environment per lifecycle stage
Composable environments
Multiple workloads on shared infrastructure
Policies as tests
Components using other Components
Validating Component Inputs using Policy functions
Cost control using Components, Policies, and constrained inputs
Security Updates using Components
Publishing Components from GitHub Actions
Integrations
Introduction
Deploy with Pulumi button
Pulumi Backstage plugin
Administration
Overview
Organizations & Teams
Overview
Accounts
Organizations
Agent Accounts
Billing managers
Onboarding Guide
Introduction
Select the right model
Ways of working
Setting up for success
Migrating to Pulumi
Access & Identity
Overview
Role-Based Access Control (RBAC)
Introduction
Scopes
Introduction
Stacks
Environments
Insights accounts
Organization settings
Permission sets
Entities & Org Level
Roles
Teams
Access tokens
OIDC Issuers
Introduction
GitHub
GitLab
AWS EKS
Google GKE
SAML(SSO)
Introduction
Using SAML
Auth0
Entra ID
Google Workspace
JumpCloud
Okta
OneLogin
SAML admin
Troubleshooting
SCIM
Introduction
Entra ID
Okta
OneLogin
Security & Compliance
Overview
Audit Logs
Introduction
Export to AWS S3
Export to Microsoft Sentinel
Customer Managed Keys
Introduction
AWS KMS
Least Privilege
ESC Approvals
ESC Audit Logs
ESC Customer Managed Keys
Self-Hosting
Overview
Deployment options
Introduction
Docker Compose
ECS
EKS
AKS
GKE
Local-Docker
Bring-your-own infra
Components
Introduction
Pulumi API
Pulumi console
OpenSearch cluster
Pulumi Deployments
SAML SSO
Network reqs
Air-Gapped
Operations
Introduction
Architecture
Database
Compute Sizing
Object Storage
Networking
Monitoring
Backup and Recovery
Upgrades
Security Hardening
Changelog
Integrations
Overview
Clouds
Overview
AWS
Azure
Google Cloud
Kubernetes
Introduction
Pulumi Kubernetes Operator
Introduction
Installation
Defining stacks
Stack operations
Rolling out changes
crd2pulumi
Version Control
Overview
GitHub
GitLab
Bitbucket
Azure DevOps
Custom VCS
VS Code
Reference
Overview
Pulumi CLI
SDKs
TypeScript ↗
Python ↗
Go ↗
.NET ↗
Java ↗
TypeScript Policy SDK ↗
Python Policy SDK ↗
TypeScript ESC SDK ↗
Python ESC SDK ↗
Go ESC SDK ↗
.NET ESC SDK ↗
Pre-built Policy Packs
CIS
AWS
Azure
Google Cloud
CIS Kubernetes
AWS (EKS)
Azure (AKS)
Google Cloud (GKE)
CMMC
AWS
HITRUST
AWS
Azure
Google Cloud
AWS Native
ISO/IEC 27001
AWS
Azure
Google Cloud
AWS Organizations Tag Policies
NIST
AWS
Azure
Google Cloud
PCI DSS
AWS
Azure
Google Cloud
Pulumi Best Practices
AWS
Azure
Google Cloud
Registry URLs
REST API Docs
Introduction
Access Tokens
API Basics
AI
AI Agents
Audit Logs
Cloud Setup
Data Export
Deployment Runners
Deployments
Environments
Insights Accounts
Invites
Neo
OAuth Token Exchange
OIDC Issuers
Organizations
Policy Groups
Policy Packs
Policy Results
Registry
Registry Preview
Resource Search
Resources Under Management
Schedules
Services
Stack Config
Stack Policy
Stacks
Stack Tags
Stack Updates
Users
VCS Integrations
Webhooks
Miscellaneous
Schema
Property Paths
PulumiPlugin.yaml
Glossary
Support & Troubleshooting
Overview
Getting Support
Filing Issues
FAQ
Overview
IaC FAQ
Secrets & Config FAQ
Policies FAQ
SCIM FAQ
Pulumi Cloud FAQ
Tutorials ↗
Registry ↗
Pulumi AWSx
On this page
On this page
The infrastructure as code platform for any cloud.
Contact us
Get started
