---
title: Infrastructure as code in Any Language – Pulumi IaC
description: Write infrastructure code using TypeScript, Python, Go, .NET, Java, or YAML. Deploy to any cloud with built-in previews and testing.
url: /product/infrastructure-as-code/
---


## Infrastructure as code in any language.

Use the programming languages you already know to build infrastructure on AWS, Azure, Google Cloud, Kubernetes, and hundreds more providers.


## Write infrastructure code in your favorite language

TypeScript/JavaScript, Python, Go, C#, Java, and YAML. Get autocomplete, type checking, and all your favorite IDE features.

Build on AWS, Azure, Google Cloud, Kubernetes, and hundreds of other providers. Our open source engine is Apache 2.0 licensed and will always be free.

- **Use real code, not DSLs** — Write infrastructure with loops, conditionals, functions, and classes. Reuse code, catch errors at compile time, and refactor with confidence.
- **Build on any cloud** — Access AWS, Azure, Google Cloud, Kubernetes, and hundreds of providers through a unified, consistent API. Same-day updates for new cloud features.
- **Test before you ship** — Preview changes before deploying them. Write unit tests for your infrastructure. Run integration tests against ephemeral environments.


## Open source core. Pulumi Cloud built-in.

Get started with Pulumi Cloud for free, state management and secrets included. Our [open source engine](https://github.com/pulumi/pulumi) powers everything underneath. Scale to enterprise features when you need them, or self-host if required.

- **350,000+** engineers building with Pulumi
- **4,000+** companies in production
- **300+** cloud and service providers

> Our developers needed a fast, modular, and testable platform for managing cloud infrastructure. Nothing is better than having standard programming languages for building and managing infrastructure.
>
> — Austin Byers, Principal Platform Engineer, Panther Labs


## Ship faster with reusable components

Create reusable infrastructure components that can be used in any language. Package common patterns once and use them everywhere. Publish your components to the Pulumi Registry, npm, PyPI, NuGet, or any package manager.


### Production-ready patterns
Ship EKS clusters, serverless apps, or entire platforms with one line of code using well-architected components.

### Hundreds of providers
Full API coverage for AWS, Azure, Google Cloud, Kubernetes, plus Cloudflare, Datadog, GitHub, and hundreds more.

### From VMs to Kubernetes
Manage traditional infrastructure, containers, serverless, and Kubernetes with one tool, one workflow.

## Ship infrastructure like software

Infrastructure as code means infrastructure in Git. Review changes in pull requests. Run tests in CI. Ship through GitHub Actions, GitLab, Jenkins, or any CI/CD system.


### Git-native workflow
Every infrastructure change is a pull request. Review, comment, approve. Full audit trail built in.

### Catch bugs before production
Run [unit tests](/docs/iac/guides/testing/unit/) in milliseconds. Spin up ephemeral environments for [integration tests](/docs/iac/guides/testing/integration/). Fail fast, fix fast.

### Works with your CI/CD
Integrates with [any CI/CD system](/docs/iac/packages-and-automation/continuous-delivery/). GitHub Actions, GitLab, Jenkins, CircleCI – your choice. Or use the [Kubernetes operator](/docs/iac/packages-and-automation/continuous-delivery/pulumi-kubernetes-operator/) for GitOps.

## Scale confidently with Pulumi Cloud

Encrypted state storage, secrets management, and collaboration built in. When you scale, enterprise features like RBAC, policy enforcement, and SSO are ready. All powered by our open source engine.


### Encrypted state management
Never lose state again. Automatic versioning and encryption at rest. Pulumi Cloud handles it all, or self-host with S3/Azure Blob.

### Built-in secrets management
No more secrets in plaintext. Automatic encryption for sensitive values. Integrate with AWS Secrets Manager, Azure Key Vault, or use [Pulumi ESC](/product/secrets-management/) for centralized secrets.

### Ship with confidence
Review every change before it ships. Full history and audit logs. Roll back to any previous state when needed.

### See everything, everywhere
Unified view across all your clouds. Search across AWS, Azure, and GCP. Find that rogue EC2 instance in seconds.

### Automation API
Infrastructure as code as a library. Embed Pulumi in your app. Build custom CLIs, portals, or platforms. Full programmatic control.

### Self-service infrastructure
Let engineers provision their own infrastructure safely. Templates, guardrails, and approval workflows. Works with Backstage or build your own.

### Enterprise SSO & RBAC
SAML, SCIM, GitHub, GitLab, Atlassian. Fine-grained permissions. Temporary access tokens. SOC 2 Type II compliant.

### Policy as code
Enforce security and compliance automatically. Hundreds of built-in policies or write your own. Block non-compliant infrastructure before it ships.

### Complete audit trail
Every action logged. Who changed what, when, and why. Export to SIEM. Compliance reports at your fingertips.
