---
title: "Secrets with Pulumi"
description: "Securely storing and managing secrets and credentials. Tutorials, examples, and blog posts for Secrets with Pulumi."
url: "https://www.pulumi.com/dev/tag/secrets/"
image: "https://www.pulumi.com/assets/og/dev/tag/secrets.png"
---

# Secrets with Pulumi

Securely storing and managing secrets and credentials. Tutorials, examples, and blog posts for Secrets with Pulumi.

## Tutorials

- [ChatGPT clone with Pulumi ESC managed secrets](https://www.pulumi.com/dev/tutorials/esc-managed-chatapp.md): Use the Pulumi CLI and ESC SDK to manage secrets for a basic OpenAI-based ChatGPT clone. — Python, YAML
- [Github actions with Pulumi ESC managed secrets](https://www.pulumi.com/dev/tutorials/esc-github.md): Use Pulumi ESC and Github Actions to manage secrets. — YAML
- [Integrate Pulumi with Secret Store CSI Driver in Kubernetes](https://www.pulumi.com/dev/tutorials/esc-secret-store-csi-driver.md): Learn how to integrate the Secret Store CSI Driver with Pulumi ESC to securely manage your secrets in Kubernetes. — Kubernetes · TypeScript, JavaScript, Python, Go, .NET, YAML
- [Integrate with External Secrets Operator (ESO)](https://www.pulumi.com/dev/tutorials/esc-external-secret-operator.md): Pulumi ESC integrates with the External Secrets Operator (ESO) to manage and deliver secrets in Kubernetes clusters. — Kubernetes · TypeScript, Python, Go, YAML
- [Secure Kubernetes Application Secrets with Pulumi ESC](https://www.pulumi.com/dev/tutorials/secure-kubernetes-app-secrets-with-esc.md): Securely manage secrets and configurations in a Kubernetes app with Pulumi ESC. — Kubernetes · TypeScript, YAML
- [Managing Configuration and Secrets](https://www.pulumi.com/dev/tutorials/managing-config-and-secrets.md): Learn how to manage plain-text and encrypted configuration values in Pulumi. — TypeScript, Python, Go, .NET, Java, YAML
- [Setup Pulumi Service Provider using ESC](https://www.pulumi.com/dev/tutorials/esc-setup-psp-creds.md): Create an ESC Environment to store your Pulumi Service Provider credentials and easily re-use them across your IaC stacks. — TypeScript

## Examples

- [Set up AWS Secrets Manager](https://www.pulumi.com/dev/examples/aws-cs-secrets-manager.md): A minimal AWS C# Pulumi program — AWS · .NET · One-click deploy
- [Set up AWS Secrets Manager](https://www.pulumi.com/dev/examples/aws-go-secrets-manager.md): A minimal AWS Go Pulumi program — AWS · Go · One-click deploy
- [Set up AWS Secrets Manager](https://www.pulumi.com/dev/examples/aws-py-secrets-manager.md): A minimal AWS Python Pulumi program — AWS · Python · One-click deploy
- [Lambda secrets](https://www.pulumi.com/dev/examples/aws-ts-lambda-secrets.md): A minimal AWS TypeScript Pulumi program — AWS · TypeScript · One-click deploy
- [Set up AWS Secrets Manager](https://www.pulumi.com/dev/examples/aws-ts-secrets-manager.md): Demo showing how to set up AWS secrets manager — AWS · TypeScript · One-click deploy
- [Setting up secrets providers for Pulumi](https://www.pulumi.com/dev/examples/secrets-provider.md)

## Blog Posts

- [Dynamic Credentials for Every AWS CLI Command: A Step-by-Step Guide to 'pulumi env run'](https://www.pulumi.com/blog/esc-env-run-aws/): Learn more about reducing the overhead of credentials management with the 'pulumi env run' command of Pulumi ESC. — AWS
- [Master Kubernetes Secrets with Pulumi ESC + Secrets Store CSI Driver](https://www.pulumi.com/blog/master-kubernetes-secrets-with-pulumi-esc-secrets-store-csi-driver/): Learn how to manage Kubernetes secrets securely with Pulumi ESC and the Secrets Store CSI Driver. — Kubernetes
- [The Pulumi 'Push to start' GitOps Experience](https://www.pulumi.com/blog/pulumi-developer-workflow/): Of all the cloud tools and tricks, AI + Pulumi + GitHub is THE cloud developer story of 2024. It's your opportunity. Will you capture it or just let it slip?
- [Pulumi Secrets Management](https://www.pulumi.com/blog/pulumi-secrets-management/): A practical example of storing secrets in a Pulumi program