Pulumi ESC: Identity & access management

Pulumi ESC provides identity and access management (IAM) controls to secure your environments, secrets, and configurations. Using role-based access control (RBAC), teams can enforce least-privilege access across environments, ensuring that users only have the permissions they need. ESC also supports access tokens for programmatic authentication and OpenID Connect (OIDC) for integrating with external identity providers.

Access controls in Pulumi ESC

• Teams and Role-based access control(RBAC): Manage permissions at the organization and environment levels.
• Access tokens: Securely authenticate and automate ESC operations.
• OpenID Connect (OIDC): Integrate with trusted third-party identity providers to authenticate users.
• SAML single sign-on (SSO): Configure SAML-based authentication for centralized access management.
• SCIM: Simplify user provisioning with the SCIM protocol

For additional details on configuring environment-specific access controls, refer to the Pulumi ESC access control documentation.