Try Self-Hosted Pulumi
Maintain complete control over your hosting, network isolation, identity, and data ownership to satisfy compliance requirements, including FedRAMP. Request a Proof of Concept to evaluate self-hosted Pulumi.
Want Pulumi Cloud delivered as SaaS? Start Using Pulumi Cloud for free.
Hosting Options
Install Self-Hosted Pulumi Cloud in any on-premises or cloud provider environment, in air-gapped networks, and inside FedRAMP authorization boundaries.
Talk to a Pulumi team member if you don’t see your desired deployment option.
Capabilities of Self-Hosted Pulumi
Cloud Engineering Platform
All the capabilities of Pulumi Cloud: state management, role-based access controls, policy and compliance guardrails.
Full Control of Data
All data in Self-Hosted Pulumi is stored in a MySQL database and an encrypted object store within your own network.
Air-gapped Communications
No communication outside of your private network, eliminating all communication over the public internet.
Federated Identity & Group Management
Integrate with your preferred identity provider and manage permissions across your organization.
Identity providers include Azure Active Directory, Bitbucket, GitHub, GitLab, and SAML SSO.
Deploy within your FedRAMP boundary
Self-hosted Pulumi Cloud runs inside your FedRAMP authorization boundary, assessed as a component of your own system. Pulumi supports a FIPS-enabled self-hosted image. Teams pursuing a government authority to operate (ATO) run it this way today. Talk to us about the security documentation to support your package.
Everything within your boundary
Your resource state, configuration, and secrets all live in the Pulumi Cloud instance you deploy — optionally fully air-gapped, with no connection to the hosted Pulumi Cloud service. See Capabilities above for the full list.
Controls your assessor can read
Pulumi Policies enforce security controls on every deployment and give your assessors actual code to review, rather than just documents. Spear AI gave auditors its Pulumi policies and cut its government ATO timeline from 18 months to three.
Pricing
Self-Hosted Pulumi is available as an additional license for the Pulumi Enterprise edition and provided as part of a guided Proof of Concept.
Request a Proof of Concept
Fill out the form to connect with a solutions architect and start your evaluation.
Talk to a Human
If you have any questions about Self-Hosted Pulumi, please contact us or visit the self-hosted docs.