Neo in a Docker Sandbox: Using Pulumi’s Coding Agent for All Things Infra Safely and Securely
workshop
·
October 2026
Date
Oct 14, 2026
Time
Duration
60 minutes
Coding agents changed how software gets written, but almost nobody lets one near their infrastructure. The reason is simple: an agent that breaks your laptop is annoying, while an agent that breaks production comes with a postmortem. This joint session from Docker and Pulumi is about letting the agent in anyway, safely.
Pulumi Neo is a coding agent for all things infra. It sits in your terminal like any other agent; the difference is that the code it writes runs your cloud. You’ll put Neo in a Docker Sandbox, so whatever it installs or breaks stays inside its own sealed workspace. In the workshop, you’ll watch a plain-English request turn into running infrastructure in a real cloud account.
What you'll learn
- What changes when a coding agent’s target is your cloud instead of your codebase.
- What’s inside a Docker Sandbox, and how to set up the perfect one for your projects.
- How Docker Sandboxes give Neo a sealed workspace where it can work without supervision.
- How Pulumi ESC replaces static API keys with short-lived credentials for AWS, Azure, or Google Cloud.
This workshop uses Pulumi Cloud. Sign up to follow along.
Register today
Speakers

Engin Diri
Principal Solutions Architect, Pulumi

Adam Gordon Bell
Community Engineer, Pulumi

Mike Coleman
Staff Solutions Architect, Docker