Skip to main content

Pulumi ESC

Environments, Secrets, and Configuration consumed by Pulumi stacks and apps. Tutorials, templates, examples, blog posts, and workshops for Pulumi ESC.

Browse all
Tutorials

Learn by doing

Tutorial

ChatGPT clone with Pulumi ESC managed secrets

Use the Pulumi CLI and ESC SDK to manage secrets for a basic OpenAI-based ChatGPT clone.
15 min
Tutorial

Github actions with Pulumi ESC managed secrets

Use Pulumi ESC and Github Actions to manage secrets.
15 min
Tutorial

Integrate Pulumi with Secret Store CSI Driver in Kubernetes

Learn how to integrate the Secret Store CSI Driver with Pulumi ESC to securely manage your secrets in Kubernetes.
15 min
Tutorial

Integrate with External Secrets Operator (ESO)

Pulumi ESC integrates with the External Secrets Operator (ESO) to manage and deliver secrets in Kubernetes clusters.
15 min
Tutorial

Secure Kubernetes Application Secrets with Pulumi ESC

Securely manage secrets and configurations in a Kubernetes app with Pulumi ESC.
15 min
Tutorial

Configure applications dynamically with ESC version tagging

Use immutable versioning and dynamic tagging to configure multiple applications safely and easily with Pulumi ESC.
10 min
Tutorial

Setup Pulumi Service Provider using ESC

Create an ESC Environment to store your Pulumi Service Provider credentials and easily re-use them across your IaC stacks.
10 min
Templates

Bootstrap new projects

TemplatePulumi ESC

esc-connector-lambda-typescript

A template to setup an AWS Lambda Secret Rotation Connector
Deployable
Examples

Browse real-world programs

ExampleTypeScript

External secrets adapter for Pulumi ESC on AWS Lambda

External secrets adapter for Pulumi ESC using AWS Lambda with JWT authentication
From the blog

Keep your skills current

Blog PostOct 2024

Pulumi ESC and External Secrets Operator: The Perfect Solution for Today's Cloud-Native Secret Management

Learn how to manage Kubernetes secrets with Pulumi ESC and External Secrets Operator
Engin Diri
Blog PostJun 2026

Deploy a Private Hermes Agent on Render Securely with Pulumi, Modal, and Tailscale

Deploy a self-hosted Hermes agent as one Pulumi program across Render, Modal, and Tailscale — a code-executing AI agent with nothing on the public internet.
Engin Diri
Blog PostJan 2026

Deploy OpenClaw on AWS or Hetzner Securely with Pulumi and Tailscale

Deploy OpenClaw (formerly Moltbot/Clawdbot), an open-source AI assistant, to AWS and Hetzner using Pulumi with Tailscale for secure private access.
Engin Diri
Blog PostNov 2023

Secure your Kubernetes toolchain with Pulumi ESC and OIDC

With Pulumi and ESC, we provide an automated workflow that generates a kubeconfig on the fly for every command using short term credentials issued via OIDC.
Levi Blackstone and Eron Wright
Blog PostJun 2026

Fully Automated AI Inference on AWS, Azure, and Google Cloud with Pulumi

A zero-touch Ollama GPU inference server on AWS, Azure, or Google Cloud as one Pulumi program, with OIDC credentials from Pulumi ESC and no static keys.
Engin Diri
Blog PostDec 2024

Master Kubernetes Secrets with Pulumi ESC + Secrets Store CSI Driver

Learn how to manage Kubernetes secrets securely with Pulumi ESC and the Secrets Store CSI Driver.
Engin Diri
Blog PostFeb 2026

How We Load Data into Snowflake in Seconds with Pulumi

Learn how we load data into Snowflake in seconds using Firehose direct streaming and reusable Pulumi ComponentResources.
Pablo Seibelt and Lucas Crespo
Workshops

Get hands-on live — or catch a recording

WorkshopOn demand

Getting Started with Secrets Management on AWS

Learn how to manage configuration and secrets across all of your AWS environments with Pulumi ESC and AWS Secrets Manager.
Josh Kodroff +2

The infrastructure as code platform for any cloud.

Contact usGet started