Skip to main content
Sign in Dashboard Get started
  1. Docs
  2. Secrets & Configuration
  3. Providers

Providers

    Reference catalog of the login and secrets/configuration provider plugins shipped with Pulumi ESC. All providers are invoked through fn::open::<name>. For an introduction to how providers work — when they run and how they fit into the evaluation flow — see Providers.

    Login providers

    Issue short-lived credentials for downstream services. Prefer OpenID Connect over static keys where supported; see OIDC setup for per-provider trust configuration.

    ProviderDescription
    aws-loginLog in to AWS using OIDC or static credentials.
    azure-loginLog in to Azure using OIDC or static credentials.
    doppler-loginLog in to Doppler using OIDC.
    gcp-loginLog in to Google Cloud using OIDC or static credentials.
    gh-loginLog in to GitHub using app credentials.
    infisical-loginLog in to Infisical using OIDC or static credentials.
    snowflake-loginAuthenticate to Snowflake using OIDC.
    vault-loginLog in to HashiCorp Vault using OIDC or static credentials.

    Secrets and configuration providers

    Dynamically import values from an external system of record into your environment.

    ProviderDescription
    1password-secretsImport secrets from 1Password.
    aws-parameter-storeImport parameters from AWS Systems Manager Parameter Store.
    aws-secretsImport secrets from AWS Secrets Manager.
    azure-secretsImport secrets from Azure Key Vault.
    doppler-secretsImport secrets from Doppler.
    gcp-secretsImport secrets from Google Cloud Secret Manager.
    infisical-secretsImport secrets from Infisical.
    vault-secretsImport secrets from HashiCorp Vault.
    externalImport secrets from a custom service adapter.

    Infrastructure as code providers

    Import the outputs of an existing Pulumi stack or Terraform state file into your environment.

    ProviderDescription
    pulumi-stacksImport outputs from a Pulumi stack (includes Terraform state stored in Pulumi Cloud).
    terraform-stateImport outputs from a Terraform state file in S3 or Terraform Cloud.