Pulumi ESC now issues OIDC tokens for any service

Pulumi ESC can now sign short-lived OIDC tokens for any service, not just the clouds it already integrates with. Set the audience you need, and ESC issues a token with a stable subject you can pin in that service’s trust policy — so you can authenticate to any OIDC-aware system with a credential that expires instead of a long-lived secret.

To learn more, read the announcement post or the custom audience documentation.