1. Packages
  2. Cisco Catalyst SD-WAN Provider
  3. API Docs
  4. getCiscoSecurityFeatureTemplate
Viewing docs for Cisco Catalyst SD-WAN v0.7.0
published on Tuesday, Feb 24, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-sdwan

sdwan.getCiscoSecurityFeatureTemplate

sdwan logo
Viewing docs for Cisco Catalyst SD-WAN v0.7.0
published on Tuesday, Feb 24, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-sdwan

    This data source can read the Cisco Security feature template.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";

const example = sdwan.getCiscoSecurityFeatureTemplate({
    id: "f6b2c44c-693c-4763-b010-895aa3d236bd",
});

    import pulumi
import pulumi_sdwan as sdwan

example = sdwan.get_cisco_security_feature_template(id="f6b2c44c-693c-4763-b010-895aa3d236bd")

    package main

import (
	"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdwan.LookupCiscoSecurityFeatureTemplate(ctx, &sdwan.LookupCiscoSecurityFeatureTemplateArgs{
			Id: pulumi.StringRef("f6b2c44c-693c-4763-b010-895aa3d236bd"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;

return await Deployment.RunAsync(() => 
{
    var example = Sdwan.GetCiscoSecurityFeatureTemplate.Invoke(new()
    {
        Id = "f6b2c44c-693c-4763-b010-895aa3d236bd",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.SdwanFunctions;
import com.pulumi.sdwan.inputs.GetCiscoSecurityFeatureTemplateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = SdwanFunctions.getCiscoSecurityFeatureTemplate(GetCiscoSecurityFeatureTemplateArgs.builder()
            .id("f6b2c44c-693c-4763-b010-895aa3d236bd")
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: sdwan:getCiscoSecurityFeatureTemplate
      arguments:
        id: f6b2c44c-693c-4763-b010-895aa3d236bd

    Using getCiscoSecurityFeatureTemplate

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCiscoSecurityFeatureTemplate(args: GetCiscoSecurityFeatureTemplateArgs, opts?: InvokeOptions): Promise<GetCiscoSecurityFeatureTemplateResult>
function getCiscoSecurityFeatureTemplateOutput(args: GetCiscoSecurityFeatureTemplateOutputArgs, opts?: InvokeOptions): Output<GetCiscoSecurityFeatureTemplateResult>
    def get_cisco_security_feature_template(id: Optional[str] = None,
                                        name: Optional[str] = None,
                                        opts: Optional[InvokeOptions] = None) -> GetCiscoSecurityFeatureTemplateResult
def get_cisco_security_feature_template_output(id: Optional[pulumi.Input[str]] = None,
                                        name: Optional[pulumi.Input[str]] = None,
                                        opts: Optional[InvokeOptions] = None) -> Output[GetCiscoSecurityFeatureTemplateResult]
    func LookupCiscoSecurityFeatureTemplate(ctx *Context, args *LookupCiscoSecurityFeatureTemplateArgs, opts ...InvokeOption) (*LookupCiscoSecurityFeatureTemplateResult, error)
func LookupCiscoSecurityFeatureTemplateOutput(ctx *Context, args *LookupCiscoSecurityFeatureTemplateOutputArgs, opts ...InvokeOption) LookupCiscoSecurityFeatureTemplateResultOutput

    > Note: This function is named LookupCiscoSecurityFeatureTemplate in the Go SDK.

    public static class GetCiscoSecurityFeatureTemplate 
{
    public static Task<GetCiscoSecurityFeatureTemplateResult> InvokeAsync(GetCiscoSecurityFeatureTemplateArgs args, InvokeOptions? opts = null)
    public static Output<GetCiscoSecurityFeatureTemplateResult> Invoke(GetCiscoSecurityFeatureTemplateInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCiscoSecurityFeatureTemplateResult> getCiscoSecurityFeatureTemplate(GetCiscoSecurityFeatureTemplateArgs args, InvokeOptions options)
public static Output<GetCiscoSecurityFeatureTemplateResult> getCiscoSecurityFeatureTemplate(GetCiscoSecurityFeatureTemplateArgs args, InvokeOptions options)

    fn::invoke:
  function: sdwan:index/getCiscoSecurityFeatureTemplate:getCiscoSecurityFeatureTemplate
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Id string
    The id of the feature template
    Name string
    The name of the feature template
    Id string
    The id of the feature template
    Name string
    The name of the feature template
    id String
    The id of the feature template
    name String
    The name of the feature template
    id string
    The id of the feature template
    name string
    The name of the feature template
    id str
    The id of the feature template
    name str
    The name of the feature template
    id String
    The id of the feature template
    name String
    The name of the feature template

    getCiscoSecurityFeatureTemplate Result

    The following output properties are available:

    AuthenticationTypeVariable string
    Variable name
    AuthenticationTypes List<string>
    Set the authentication type for DTLS connections
    Description string
    The description of the feature template
    DeviceTypes List<string>
    List of supported device types
    ExtendedArWindow int
    Extended Anti-Replay Window
    ExtendedArWindowVariable string
    Variable name
    Id string
    The id of the feature template
    IntegrityTypeVariable string
    Variable name
    IntegrityTypes List<string>
    Set the authentication type for DTLS connections
    Keychains List<GetCiscoSecurityFeatureTemplateKeychain>
    Configure a Keychain
    Keys List<GetCiscoSecurityFeatureTemplateKey>
    Configure a Key
    Name string
    The name of the feature template
    PairwiseKeying bool
    Enable or disable IPsec pairwise-keying
    PairwiseKeyingVariable string
    Variable name
    RekeyInterval int
    Set how often to change the AES key for DTLS connections
    RekeyIntervalVariable string
    Variable name
    ReplayWindow string
    Set the sliding replay window size
    ReplayWindowVariable string
    Variable name
    TemplateType string
    The template type
    Version int
    The version of the feature template
    AuthenticationTypeVariable string
    Variable name
    AuthenticationTypes []string
    Set the authentication type for DTLS connections
    Description string
    The description of the feature template
    DeviceTypes []string
    List of supported device types
    ExtendedArWindow int
    Extended Anti-Replay Window
    ExtendedArWindowVariable string
    Variable name
    Id string
    The id of the feature template
    IntegrityTypeVariable string
    Variable name
    IntegrityTypes []string
    Set the authentication type for DTLS connections
    Keychains []GetCiscoSecurityFeatureTemplateKeychain
    Configure a Keychain
    Keys []GetCiscoSecurityFeatureTemplateKey
    Configure a Key
    Name string
    The name of the feature template
    PairwiseKeying bool
    Enable or disable IPsec pairwise-keying
    PairwiseKeyingVariable string
    Variable name
    RekeyInterval int
    Set how often to change the AES key for DTLS connections
    RekeyIntervalVariable string
    Variable name
    ReplayWindow string
    Set the sliding replay window size
    ReplayWindowVariable string
    Variable name
    TemplateType string
    The template type
    Version int
    The version of the feature template
    authenticationTypeVariable String
    Variable name
    authenticationTypes List<String>
    Set the authentication type for DTLS connections
    description String
    The description of the feature template
    deviceTypes List<String>
    List of supported device types
    extendedArWindow Integer
    Extended Anti-Replay Window
    extendedArWindowVariable String
    Variable name
    id String
    The id of the feature template
    integrityTypeVariable String
    Variable name
    integrityTypes List<String>
    Set the authentication type for DTLS connections
    keychains List<GetCiscoSecurityFeatureTemplateKeychain>
    Configure a Keychain
    keys List<GetCiscoSecurityFeatureTemplateKey>
    Configure a Key
    name String
    The name of the feature template
    pairwiseKeying Boolean
    Enable or disable IPsec pairwise-keying
    pairwiseKeyingVariable String
    Variable name
    rekeyInterval Integer
    Set how often to change the AES key for DTLS connections
    rekeyIntervalVariable String
    Variable name
    replayWindow String
    Set the sliding replay window size
    replayWindowVariable String
    Variable name
    templateType String
    The template type
    version Integer
    The version of the feature template
    authenticationTypeVariable string
    Variable name
    authenticationTypes string[]
    Set the authentication type for DTLS connections
    description string
    The description of the feature template
    deviceTypes string[]
    List of supported device types
    extendedArWindow number
    Extended Anti-Replay Window
    extendedArWindowVariable string
    Variable name
    id string
    The id of the feature template
    integrityTypeVariable string
    Variable name
    integrityTypes string[]
    Set the authentication type for DTLS connections
    keychains GetCiscoSecurityFeatureTemplateKeychain[]
    Configure a Keychain
    keys GetCiscoSecurityFeatureTemplateKey[]
    Configure a Key
    name string
    The name of the feature template
    pairwiseKeying boolean
    Enable or disable IPsec pairwise-keying
    pairwiseKeyingVariable string
    Variable name
    rekeyInterval number
    Set how often to change the AES key for DTLS connections
    rekeyIntervalVariable string
    Variable name
    replayWindow string
    Set the sliding replay window size
    replayWindowVariable string
    Variable name
    templateType string
    The template type
    version number
    The version of the feature template
    authentication_type_variable str
    Variable name
    authentication_types Sequence[str]
    Set the authentication type for DTLS connections
    description str
    The description of the feature template
    device_types Sequence[str]
    List of supported device types
    extended_ar_window int
    Extended Anti-Replay Window
    extended_ar_window_variable str
    Variable name
    id str
    The id of the feature template
    integrity_type_variable str
    Variable name
    integrity_types Sequence[str]
    Set the authentication type for DTLS connections
    keychains Sequence[GetCiscoSecurityFeatureTemplateKeychain]
    Configure a Keychain
    keys Sequence[GetCiscoSecurityFeatureTemplateKey]
    Configure a Key
    name str
    The name of the feature template
    pairwise_keying bool
    Enable or disable IPsec pairwise-keying
    pairwise_keying_variable str
    Variable name
    rekey_interval int
    Set how often to change the AES key for DTLS connections
    rekey_interval_variable str
    Variable name
    replay_window str
    Set the sliding replay window size
    replay_window_variable str
    Variable name
    template_type str
    The template type
    version int
    The version of the feature template
    authenticationTypeVariable String
    Variable name
    authenticationTypes List<String>
    Set the authentication type for DTLS connections
    description String
    The description of the feature template
    deviceTypes List<String>
    List of supported device types
    extendedArWindow Number
    Extended Anti-Replay Window
    extendedArWindowVariable String
    Variable name
    id String
    The id of the feature template
    integrityTypeVariable String
    Variable name
    integrityTypes List<String>
    Set the authentication type for DTLS connections
    keychains List<Property Map>
    Configure a Keychain
    keys List<Property Map>
    Configure a Key
    name String
    The name of the feature template
    pairwiseKeying Boolean
    Enable or disable IPsec pairwise-keying
    pairwiseKeyingVariable String
    Variable name
    rekeyInterval Number
    Set how often to change the AES key for DTLS connections
    rekeyIntervalVariable String
    Variable name
    replayWindow String
    Set the sliding replay window size
    replayWindowVariable String
    Variable name
    templateType String
    The template type
    version Number
    The version of the feature template

    Supporting Types

    GetCiscoSecurityFeatureTemplateKey

    AcceptAoMismatch bool
    Configure Accept AO Mismatch
    AcceptAoMismatchVariable string
    Variable name
    AcceptLifetimeDuration int
    Configure Accept lifetime Duration
    AcceptLifetimeDurationVariable string
    Variable name
    AcceptLifetimeEndTime string
    Configure Key lifetime end time
    AcceptLifetimeEndTimeFormat string
    Configure Key lifetime end time
    AcceptLifetimeInfinite bool
    Configure Key lifetime end time
    AcceptLifetimeInfiniteVariable string
    Variable name
    AcceptLifetimeLocal bool
    Configure Accept Lifetime Local
    AcceptLifetimeLocalVariable string
    Variable name
    AcceptLifetimeStartTime string
    Configure Key lifetime start time
    ChainName string
    Select the chain name
    CryptoAlgorithm string
    Crypto Algorithm
    Id string
    Select the Key ID
    IncludeTcpOptions bool
    Configure Include TCP Options
    IncludeTcpOptionsVariable string
    Variable name
    KeyString string
    Specify the Key String
    KeyStringVariable string
    Variable name
    Optional bool
    Indicates if list item is considered optional.
    ReceiveId int
    Specify the Receiver ID
    ReceiveIdVariable string
    Variable name
    SendId int
    Specify the Send ID
    SendIdVariable string
    Variable name
    SendLifetimeDuration int
    Configure Send lifetime Duration
    SendLifetimeDurationVariable string
    Variable name
    SendLifetimeEndTime string
    Configure Key lifetime end time
    SendLifetimeEndTimeFormat string
    Configure Key lifetime end time
    SendLifetimeInfinite bool
    Configure Key lifetime end time
    SendLifetimeInfiniteVariable string
    Variable name
    SendLifetimeLocal bool
    Configure Send lifetime Local
    SendLifetimeLocalVariable string
    Variable name
    SendLifetimeStartTime string
    Configure Key lifetime start time
    AcceptAoMismatch bool
    Configure Accept AO Mismatch
    AcceptAoMismatchVariable string
    Variable name
    AcceptLifetimeDuration int
    Configure Accept lifetime Duration
    AcceptLifetimeDurationVariable string
    Variable name
    AcceptLifetimeEndTime string
    Configure Key lifetime end time
    AcceptLifetimeEndTimeFormat string
    Configure Key lifetime end time
    AcceptLifetimeInfinite bool
    Configure Key lifetime end time
    AcceptLifetimeInfiniteVariable string
    Variable name
    AcceptLifetimeLocal bool
    Configure Accept Lifetime Local
    AcceptLifetimeLocalVariable string
    Variable name
    AcceptLifetimeStartTime string
    Configure Key lifetime start time
    ChainName string
    Select the chain name
    CryptoAlgorithm string
    Crypto Algorithm
    Id string
    Select the Key ID
    IncludeTcpOptions bool
    Configure Include TCP Options
    IncludeTcpOptionsVariable string
    Variable name
    KeyString string
    Specify the Key String
    KeyStringVariable string
    Variable name
    Optional bool
    Indicates if list item is considered optional.
    ReceiveId int
    Specify the Receiver ID
    ReceiveIdVariable string
    Variable name
    SendId int
    Specify the Send ID
    SendIdVariable string
    Variable name
    SendLifetimeDuration int
    Configure Send lifetime Duration
    SendLifetimeDurationVariable string
    Variable name
    SendLifetimeEndTime string
    Configure Key lifetime end time
    SendLifetimeEndTimeFormat string
    Configure Key lifetime end time
    SendLifetimeInfinite bool
    Configure Key lifetime end time
    SendLifetimeInfiniteVariable string
    Variable name
    SendLifetimeLocal bool
    Configure Send lifetime Local
    SendLifetimeLocalVariable string
    Variable name
    SendLifetimeStartTime string
    Configure Key lifetime start time
    acceptAoMismatch Boolean
    Configure Accept AO Mismatch
    acceptAoMismatchVariable String
    Variable name
    acceptLifetimeDuration Integer
    Configure Accept lifetime Duration
    acceptLifetimeDurationVariable String
    Variable name
    acceptLifetimeEndTime String
    Configure Key lifetime end time
    acceptLifetimeEndTimeFormat String
    Configure Key lifetime end time
    acceptLifetimeInfinite Boolean
    Configure Key lifetime end time
    acceptLifetimeInfiniteVariable String
    Variable name
    acceptLifetimeLocal Boolean
    Configure Accept Lifetime Local
    acceptLifetimeLocalVariable String
    Variable name
    acceptLifetimeStartTime String
    Configure Key lifetime start time
    chainName String
    Select the chain name
    cryptoAlgorithm String
    Crypto Algorithm
    id String
    Select the Key ID
    includeTcpOptions Boolean
    Configure Include TCP Options
    includeTcpOptionsVariable String
    Variable name
    keyString String
    Specify the Key String
    keyStringVariable String
    Variable name
    optional Boolean
    Indicates if list item is considered optional.
    receiveId Integer
    Specify the Receiver ID
    receiveIdVariable String
    Variable name
    sendId Integer
    Specify the Send ID
    sendIdVariable String
    Variable name
    sendLifetimeDuration Integer
    Configure Send lifetime Duration
    sendLifetimeDurationVariable String
    Variable name
    sendLifetimeEndTime String
    Configure Key lifetime end time
    sendLifetimeEndTimeFormat String
    Configure Key lifetime end time
    sendLifetimeInfinite Boolean
    Configure Key lifetime end time
    sendLifetimeInfiniteVariable String
    Variable name
    sendLifetimeLocal Boolean
    Configure Send lifetime Local
    sendLifetimeLocalVariable String
    Variable name
    sendLifetimeStartTime String
    Configure Key lifetime start time
    acceptAoMismatch boolean
    Configure Accept AO Mismatch
    acceptAoMismatchVariable string
    Variable name
    acceptLifetimeDuration number
    Configure Accept lifetime Duration
    acceptLifetimeDurationVariable string
    Variable name
    acceptLifetimeEndTime string
    Configure Key lifetime end time
    acceptLifetimeEndTimeFormat string
    Configure Key lifetime end time
    acceptLifetimeInfinite boolean
    Configure Key lifetime end time
    acceptLifetimeInfiniteVariable string
    Variable name
    acceptLifetimeLocal boolean
    Configure Accept Lifetime Local
    acceptLifetimeLocalVariable string
    Variable name
    acceptLifetimeStartTime string
    Configure Key lifetime start time
    chainName string
    Select the chain name
    cryptoAlgorithm string
    Crypto Algorithm
    id string
    Select the Key ID
    includeTcpOptions boolean
    Configure Include TCP Options
    includeTcpOptionsVariable string
    Variable name
    keyString string
    Specify the Key String
    keyStringVariable string
    Variable name
    optional boolean
    Indicates if list item is considered optional.
    receiveId number
    Specify the Receiver ID
    receiveIdVariable string
    Variable name
    sendId number
    Specify the Send ID
    sendIdVariable string
    Variable name
    sendLifetimeDuration number
    Configure Send lifetime Duration
    sendLifetimeDurationVariable string
    Variable name
    sendLifetimeEndTime string
    Configure Key lifetime end time
    sendLifetimeEndTimeFormat string
    Configure Key lifetime end time
    sendLifetimeInfinite boolean
    Configure Key lifetime end time
    sendLifetimeInfiniteVariable string
    Variable name
    sendLifetimeLocal boolean
    Configure Send lifetime Local
    sendLifetimeLocalVariable string
    Variable name
    sendLifetimeStartTime string
    Configure Key lifetime start time
    accept_ao_mismatch bool
    Configure Accept AO Mismatch
    accept_ao_mismatch_variable str
    Variable name
    accept_lifetime_duration int
    Configure Accept lifetime Duration
    accept_lifetime_duration_variable str
    Variable name
    accept_lifetime_end_time str
    Configure Key lifetime end time
    accept_lifetime_end_time_format str
    Configure Key lifetime end time
    accept_lifetime_infinite bool
    Configure Key lifetime end time
    accept_lifetime_infinite_variable str
    Variable name
    accept_lifetime_local bool
    Configure Accept Lifetime Local
    accept_lifetime_local_variable str
    Variable name
    accept_lifetime_start_time str
    Configure Key lifetime start time
    chain_name str
    Select the chain name
    crypto_algorithm str
    Crypto Algorithm
    id str
    Select the Key ID
    include_tcp_options bool
    Configure Include TCP Options
    include_tcp_options_variable str
    Variable name
    key_string str
    Specify the Key String
    key_string_variable str
    Variable name
    optional bool
    Indicates if list item is considered optional.
    receive_id int
    Specify the Receiver ID
    receive_id_variable str
    Variable name
    send_id int
    Specify the Send ID
    send_id_variable str
    Variable name
    send_lifetime_duration int
    Configure Send lifetime Duration
    send_lifetime_duration_variable str
    Variable name
    send_lifetime_end_time str
    Configure Key lifetime end time
    send_lifetime_end_time_format str
    Configure Key lifetime end time
    send_lifetime_infinite bool
    Configure Key lifetime end time
    send_lifetime_infinite_variable str
    Variable name
    send_lifetime_local bool
    Configure Send lifetime Local
    send_lifetime_local_variable str
    Variable name
    send_lifetime_start_time str
    Configure Key lifetime start time
    acceptAoMismatch Boolean
    Configure Accept AO Mismatch
    acceptAoMismatchVariable String
    Variable name
    acceptLifetimeDuration Number
    Configure Accept lifetime Duration
    acceptLifetimeDurationVariable String
    Variable name
    acceptLifetimeEndTime String
    Configure Key lifetime end time
    acceptLifetimeEndTimeFormat String
    Configure Key lifetime end time
    acceptLifetimeInfinite Boolean
    Configure Key lifetime end time
    acceptLifetimeInfiniteVariable String
    Variable name
    acceptLifetimeLocal Boolean
    Configure Accept Lifetime Local
    acceptLifetimeLocalVariable String
    Variable name
    acceptLifetimeStartTime String
    Configure Key lifetime start time
    chainName String
    Select the chain name
    cryptoAlgorithm String
    Crypto Algorithm
    id String
    Select the Key ID
    includeTcpOptions Boolean
    Configure Include TCP Options
    includeTcpOptionsVariable String
    Variable name
    keyString String
    Specify the Key String
    keyStringVariable String
    Variable name
    optional Boolean
    Indicates if list item is considered optional.
    receiveId Number
    Specify the Receiver ID
    receiveIdVariable String
    Variable name
    sendId Number
    Specify the Send ID
    sendIdVariable String
    Variable name
    sendLifetimeDuration Number
    Configure Send lifetime Duration
    sendLifetimeDurationVariable String
    Variable name
    sendLifetimeEndTime String
    Configure Key lifetime end time
    sendLifetimeEndTimeFormat String
    Configure Key lifetime end time
    sendLifetimeInfinite Boolean
    Configure Key lifetime end time
    sendLifetimeInfiniteVariable String
    Variable name
    sendLifetimeLocal Boolean
    Configure Send lifetime Local
    sendLifetimeLocalVariable String
    Variable name
    sendLifetimeStartTime String
    Configure Key lifetime start time

    GetCiscoSecurityFeatureTemplateKeychain

    KeyId int
    Specify the Key ID
    Name string
    Specify the name of the Keychain
    Optional bool
    Indicates if list item is considered optional.
    KeyId int
    Specify the Key ID
    Name string
    Specify the name of the Keychain
    Optional bool
    Indicates if list item is considered optional.
    keyId Integer
    Specify the Key ID
    name String
    Specify the name of the Keychain
    optional Boolean
    Indicates if list item is considered optional.
    keyId number
    Specify the Key ID
    name string
    Specify the name of the Keychain
    optional boolean
    Indicates if list item is considered optional.
    key_id int
    Specify the Key ID
    name str
    Specify the name of the Keychain
    optional bool
    Indicates if list item is considered optional.
    keyId Number
    Specify the Key ID
    name String
    Specify the name of the Keychain
    optional Boolean
    Indicates if list item is considered optional.

    Package Details

    Repository
    sdwan pulumi/pulumi-sdwan
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sdwan Terraform Provider.
    sdwan logo
    Viewing docs for Cisco Catalyst SD-WAN v0.7.0
    published on Tuesday, Feb 24, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-sdwan
      Try Pulumi Cloud free. Your team will thank you.