1. Docs
  2. Pulumi ESC
  3. Environment Definition Reference
  4. Tutorials

Providers

    ESC providers allow users to access credentials, configuration, and secrets stored outside of ESC. These providers are accessed via the fn::open built-in function.

    Credential providers

    ProviderDescription
    aws-loginThe aws-login provider enables you to log in to your AWS account using OpenID Connect or static credentials.
    azure-loginThe azure-login provider enables you to log in to Azure using OpenID Connect or static credentials.
    gcp-loginThe gcp-login provider enables you to log in to Google Cloud using OpenID Connect or static credentials.
    gh-loginThe gh-login provider enables you to log in to GitHub using app credentials.
    vault-loginThe vault-login provider enables you to log in to HashiCorp Vault using OpenID Connect or static credentials.

    Configuration and secrets providers

    ProviderDescription
    1password-secretsThe 1password-secrets provider enables you to dynamically import Secrets from 1Password into your Environment.
    aws-parameter-storeThe aws-parameter-store provider enables you to dynamically import parameters from AWS Parameter Store into your Environment.
    aws-secretsThe aws-secrets provider enables you to dynamically import Secrets from AWS Secrets Manager into your Environment.
    azure-secretsThe azure-secrets provider enables you to dynamically import Secrets from Azure Key Vault into your Environment.
    gcp-secretsThe gcp-secrets provider enables you to dynamically import Secrets from Google Cloud Secrets Manager into your Environment.
    pulumi-stacksThe pulumi-stacks provider enables you to dynamically import Stack outputs from Pulumi IaC into your Environment.
    vault-secretsThe vault-secrets provider enables you to dynamically import Secrets from HashiCorp Vault into your Environment.
      PulumiUP May 6, 2025. Register Now.