1. Docs
  2. Integrations
  3. Clouds
  4. AWS

AWS

    Build, deploy, and manage AWS infrastructure with Pulumi. This page links to every Pulumi capability for AWS: Infrastructure as Code, Environments, Secrets, and Configuration (ESC), Insights account scanning, and policy packs.

    To start from scratch, follow the AWS get-started guide.

    Infrastructure as Code

    Pulumi IaC lets you define cloud infrastructure using TypeScript, Python, Go, C#, Java, or YAML — with deterministic deployments, a state backend, and a rich ecosystem of packages.

    Pulumi provides several packages for working with AWS. Most projects combine more than one. For a deeper comparison, see Choosing a Pulumi AWS provider.

    • AWS provider — the default AWS provider. Uses the AWS SDK to manage all AWS services.
    • AWS Cloud Control provider — full coverage of resources available in the AWS Cloud Control API.
    • AWSx — higher-level components that encapsulate AWS best practices.
    • AWS API Gateway — simplified construction of AWS API Gateway REST APIs.
    • Amazon EKS — create and manage Amazon Elastic Kubernetes Service clusters with sensible defaults.
    • Docker — build and push Docker images to Amazon ECR or other registries.
    • Kubernetes — deploy application workloads to Amazon EKS or any Kubernetes cluster.

    Architecture templates

    Pulumi templates are ready-to-deploy starting points for common architectures. Run pulumi new <template> to bootstrap a new project.

    Start new AWS projects from a pre-built template:

    Guides

    Hands-on Infrastructure as Code guides for building on AWS with Pulumi.

    Secrets & configuration (ESC)

    Pulumi ESC (Environments, Secrets, and Configuration) is a centralized service for managing secrets, configuration, and short-lived credentials. It composes values from many sources — including AWS — into environments that Pulumi programs, CLIs, and CI/CD workflows can consume.

    ESC integrates directly with AWS for short-lived credentials and secret retrieval:

    Insights

    Pulumi Insights continuously scans your clouds to build a searchable inventory of every resource — whether created by Pulumi or not — so you can find, audit, and govern cloud infrastructure across accounts, regions, and providers.

    For AWS, Insights connects AWS accounts (including AWS Partitions) to inventory existing resources, search across accounts, and export data. See Add an AWS account for a step-by-step setup guide and Insights discovery overview for background.

    Policy packs

    Pulumi Policies lets you enforce rules on infrastructure at preview and update time, rejecting stacks that violate security, cost, or compliance standards. Pre-built policy packs are maintained by Pulumi and cover common regulatory and best-practice frameworks.

    For AWS:

    Migration

    Migrate existing AWS infrastructure from another IaC tool to Pulumi. The guides below walk through converting or coexisting with each source format.