Landing Zone

Build a AWS landing zone with Pulumi

Stand up the foundational AWS network, identity, key, and audit-logging resources downstream Pulumi projects share. Ships a reusable component, a single stack, and a Pulumi ESC environment other projects import by name.

Audit-Logs AWS Foundation Go IAM KMS Landing Zone Pulumi ESC Python TypeScript VPC

Build a Azure landing zone with Pulumi

Stand up the foundational Azure network, identity, key, and audit-logging resources downstream Pulumi projects share. Ships a reusable component, a single stack, and a Pulumi ESC environment other projects import by name.

Audit-Logs Azure Foundation Go IAM KMS Landing Zone Pulumi ESC Python TypeScript VPC

Build a Cloud Landing Zone

Give every other Pulumi project in your cloud account a consistent, pre-built foundation (shared network, identity, key store, audit logs) so downstream stacks adopt it by name instead of rebuilding it every time.

Audit-Logs Foundation IAM KMS Landing Zone Pulumi ESC VPC

Build a GCP landing zone with Pulumi

Stand up the foundational GCP network, identity, key, and audit-logging resources downstream Pulumi projects share. Ships a reusable component, a single stack, and a Pulumi ESC environment other projects import by name.

Audit-Logs Foundation GCP Go Google-Cloud IAM KMS Landing Zone Pulumi ESC Python TypeScript VPC

Deploy a serverless React + Postgres blueprint on AWS with Pulumi

Ship a React SPA plus a serverless API that queries Aurora Serverless v2 for PostgreSQL behind Amazon CloudFront on AWS. Consumes the Pulumi landing-zone stack for network and secret wiring, and exports the public site URL downstream projects can reuse.

Api Aurora-Serverless-V2 AWS Cloudfront Full-Stack Go Lambda Landing Zone Postgres Pulumi ESC Python React Secrets-Manager Serverless TypeScript Vite

Deploy a serverless React + Postgres blueprint on Azure with Pulumi

Ship a React SPA plus a serverless API that queries Azure Database for PostgreSQL Flexible Server behind Azure Front Door Standard on Azure. Consumes the Pulumi landing-zone stack for network and secret wiring, and exports the public site URL downstream projects can reuse.

Api Azure Azure-Functions Front-Door Full-Stack Go Key-Vault Landing Zone Postgres Postgresql-Flexible-Server Pulumi ESC Python React Serverless TypeScript Vite

Deploy a serverless React + Postgres blueprint on GCP with Pulumi

Ship a React SPA plus a serverless API that queries Cloud SQL for PostgreSQL behind Google Cloud CDN in front of a global external HTTPS load balancer on GCP. Consumes the Pulumi landing-zone stack for network and secret wiring, and exports the public site URL downstream projects can reuse.

Api Cloud-Cdn Cloud-Run-Functions Cloud-Sql Full-Stack GCP Go Landing Zone Postgres Pulumi ESC Python React Secret-Manager Serverless TypeScript Vite

Run an opinionated AKS cluster with Pulumi

Provision an opinionated AKS cluster on the Pulumi landing-zone network, preinstall External Secrets Operator plus Application Gateway for Containers and Node Auto Provisioning (NAP) through a reusable component, and export a kubeconfig downstream workloads can consume.

AKS Application Gateway for Containers Azure External Secrets Operator Go Kubernetes Landing Zone Managed Kubernetes Node Auto Provisioning Pulumi ESC Python TypeScript Workload Identity

Run an opinionated Amazon EKS cluster with Pulumi

Provision an opinionated Amazon EKS cluster on the Pulumi landing-zone network, preinstall External Secrets Operator plus AWS Load Balancer Controller and Karpenter through a reusable component, and export a kubeconfig downstream workloads can consume.

AWS AWS Load Balancer Controller EKS External Secrets Operator Go Karpenter Kubernetes Landing Zone Managed Kubernetes Pulumi ESC Python TypeScript Workload Identity

Run an opinionated Google Kubernetes Engine cluster with Pulumi

Provision an opinionated Google Kubernetes Engine cluster on the Pulumi landing-zone network, preinstall External Secrets Operator plus GKE Gateway API and Node Auto Provisioning (NAP) through a reusable component, and export a kubeconfig downstream workloads can consume.

External Secrets Operator GCP GKE GKE Gateway API Go Kubernetes Landing Zone Managed Kubernetes Pulumi ESC Python TypeScript Workload Identity Workload Identity Federation

Run Managed Kubernetes

Give every team a production-ready Kubernetes cluster they can deploy workloads to in minutes, with the platform plumbing (ingress, secrets, autoscaling, and workload identity) already wired up so nobody has to stitch it together by hand.

External Secrets Operator Kubernetes Landing Zone Managed Kubernetes Pulumi ESC Workload Identity

Serverless React + Postgres

Ship a small full-stack web app in one `pulumi up`, with a React UI, a serverless backend, and a managed PostgreSQL database the backend queries. Scale-to-zero compute where the cloud supports it, and no CORS setup in the browser.

Api Full-Stack Landing Zone Postgres Pulumi ESC React Serverless Vite