Pulumi Insights: Before You Begin
Before you begin
Before connecting your first cloud account, confirm the following prerequisites are in place.
- Ensure you’re an admin of your Pulumi organization, or have permission to connect cloud accounts and create Pulumi ESC (Environments, Secrets, and Configuration) environments.
- You’re using Pulumi’s Team, Enterprise, or Business Critical edition.
- You have administrative access to the cloud account or organization you want to connect: the ability to authorize applications and create IAM resources in AWS, grant admin consent in Microsoft Entra ID, or grant organization-level roles in Google Cloud.
If you’re new to Pulumi you can click here to start a free trial.
How authentication works
You don’t need to create credentials or ESC environments ahead of time. The Connect cloud accounts wizard authenticates to AWS, Azure, and Google Cloud with a browser-based sign-in using OpenID Connect (OIDC), then creates the trust roles and ESC environments each account needs. With these recommended flows, no long-lived cloud secrets are stored in Pulumi Cloud.
Oracle Cloud and Kubernetes accounts connect through an ESC environment that you configure yourself. If you’re connecting one of those providers, set up the environment first by following Create and manage Insights accounts.
Next, you’ll connect a cloud account and kick off your first discovery scan.