Guides

These guides walk through common Discovery & governance tasks. Each one is self-contained, so start with whichever matches what you’re trying to do.

Discovery

• Connect cloud accounts: Onboard AWS, Azure, and Google Cloud accounts in bulk with the connection wizard.
• Search resources: Find resources with structured queries or natural language.
• Import resources with Visual Import: Generate Pulumi IaC code for discovered resources.
• Migrate a discovered stack: Move CloudFormation and ARM resources from a discovered stack to Pulumi IaC.
• Export resource data: Export resource data to CSV or read it through the REST API.

Policies

• Use pre-built policy packs: Apply ready-made compliance packs for frameworks such as CIS, PCI DSS, and HITRUST.
• Enforce AWS Organizations tag policies: Block deployments that are missing the tags your AWS Organizations tag policies require.
• Write a policy pack: Author custom policies in TypeScript, Python, or OPA.
• Enforce policies in CI/CD: Run policy checks in your pipelines before changes deploy.

Context API

• Query the Context API: Build selectors, follow relationships, and interpret graph query results.