Skip to main content
Pulumi logo

Cloud Engineering Concepts Explained

Plain-English explainers of infrastructure as code, DevOps, CI/CD, Kubernetes, platform engineering, secrets management, and other cloud engineering topics.

Amazon DynamoDB vs Google Cloud Bigtable

Compare Amazon DynamoDB vs Google Cloud Bigtable, plus other DynamoDB alternatives like Cassandra, MongoDB, and Cosmos DB, to pick the right NoSQL database.

Kat Cosgrove Kat Cosgrove 4 min read

An error occurred (ExpiredToken) when calling the ListBuckets operation

Use Pulumi ESC and dynamic credentials to run commands like aws ListBuckets in a more secure and seamless way.

Torian Crane Torian Crane 5 min read

An error occurred (InvalidAccessKeyId) when calling the ListBuckets operation

Use Pulumi ESC and dynamic credentials to run commands like aws ListBuckets in a more secure and seamless way.

Torian Crane Torian Crane 5 min read

An error occurred (InvalidClientTokenId) when calling the ListBuckets operation

Use Pulumi ESC and dynamic credentials to run commands like aws ListBuckets in a more secure and seamless way.

Torian Crane Torian Crane 4 min read

An error occurred (SignatureDoesNotMatch) when calling the ListBuckets operation

Use Pulumi ESC and dynamic credentials to run commands like aws ListBuckets in a more secure and seamless way.

Torian Crane Torian Crane 5 min read

Automating AWS S3 File Expiration with Pulumi

A comprehensive guide to automate file expiration in AWS S3 using Pulumi.

James Denyer James Denyer 4 min read

Cosmos DB vs MongoDB, Know The Differences?

Compare Cosmos DB and MongoDB strengths and limitations to determine the best database option.

Kat Cosgrove Kat Cosgrove 2 min read

Database Comparison: Cosmos DB vs DynamoDB

Compare NoSQL databases Cosmos DB vs DynamoDB. See the similarities and differences between these databases to determine which is best for you.

Kat Cosgrove Kat Cosgrove 3 min read

How to Step Up Cloud Infrastructure Testing

Learn how to test cloud infrastructure as code: unit, property, integration, and security tests, where each fits in CI/CD, and the tools to use.

Cam Soper Cam Soper 10 min read

Infrastructure as Code for DevOps

Infrastructure as code is what makes DevOps work past the app boundary: CI/CD, shift-left testing, policy as code, and AI agents for the platform itself.

Cam Soper Cam Soper 14 min read

JavaScript and TypeScript Infrastructure as Code

Define cloud infrastructure as code in TypeScript or JavaScript: real types, npm packages, IDE tooling, and Jest tests for VPCs and clusters.

Pablo Seibelt Pablo Seibelt 12 min read

Kubernetes Infrastructure as Code: Tools and Best Practices

Kubernetes infrastructure as code defines the cluster, its workloads, and the cloud resources around them in version-controlled code. Tools and best practices.

Cam Soper Cam Soper 15 min read

Python for DevOps

Python is the lingua franca of DevOps and MLOps automation. Learn where Python fits in IaC, CI/CD, observability, and machine-learning operations.

Pablo Seibelt Pablo Seibelt 11 min read

Run 'aws cloudwatch get-metric-data' w/ Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws cloudwatch get-metric-data' more securely and efficiently.

Diana Esteves Diana Esteves 6 min read

Run 'aws dynamodb list-tables' with Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws dynamodb list-tables' more securely and efficiently.

Diana Esteves Diana Esteves 5 min read

Run 'aws ec2 describe-instances' using Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws ec2 describe-instances' in a more secure and efficient manner.

Diana Esteves Diana Esteves 5 min read

Run 'aws ec2 start-instances' using Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws ec2 start-instances' in a more secure and efficient manner.

Diana Esteves Diana Esteves 5 min read

Run 'aws ec2 stop-instances' using Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws ec2 stop-instances' in a more secure and efficient manner.

Diana Esteves Diana Esteves 5 min read

Run 'aws iam list-users' using Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws iam list-users' in a more secure and efficient manner.

Diana Esteves Diana Esteves 5 min read

Run 'aws lambda list-functions' with Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws lambda list-functions' more securely and efficiently.

Diana Esteves Diana Esteves 5 min read

Run 'aws s3 cp' using Dynamic Credentials

Learn more about using dynamic credentials in Pulumi ESC to run commands like aws s3 cp in a more secure and seamless way.

Diana Esteves Diana Esteves 6 min read

Run 'aws s3 ls' using Dynamic Credentials

Learn more about using dynamic credentials in Pulumi ESC to run commands like aws s3 ls in a more secure and seamless way.

Diana Esteves Diana Esteves 5 min read

Run 'aws s3 sync' with Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws s3 sync' more securely and efficiently.

Diana Esteves Diana Esteves 5 min read

Run 'aws sts get-caller-identity' using Dynamic Credentials

Learn how to use dynamic credentials in Pulumi ESC for executing commands like 'aws sts get-caller-identity' in a more secure and efficient manner.

Diana Esteves Diana Esteves 5 min read

Top Infrastructure as Code Tools

Compare the top infrastructure as code (IaC) tools — Pulumi, Terraform, OpenTofu, CloudFormation, and more — on multi-cloud support, state, and ecosystem.

Adam Gordon Bell Adam Gordon Bell 9 min read

Unable to locate credentials

Use Pulumi ESC and dynamic credentials to run commands like aws ListBuckets in a more secure and seamless way.

Torian Crane Torian Crane 5 min read

What are Docker Configs?

Learn more about what Docker Configs are and how to use them.

Torian Crane Torian Crane 5 min read

What are Docker Secrets?

Learn more about what Docker Secrets are and how to use them.

Torian Crane Torian Crane 5 min read

What are Kubernetes Secrets?

Learn about Kubernetes Secrets and how to manage sensitive information securely in your Kubernetes clusters.

Diana Esteves Diana Esteves 7 min read

What is a CircleCI Secret?

Learn more about CircleCI secrets and how to use them.

Diana Esteves Diana Esteves 7 min read

What is a Cloudflare Secret?

Learn more about Cloudflare secrets and how to use them.

Diana Esteves Diana Esteves 6 min read

What is a GitHub Actions Secret?

Learn more about GitHub Actions secrets and how to use them.

Diana Esteves Diana Esteves 4 min read

What Is Agentic Infrastructure?

Agentic infrastructure is cloud infrastructure that AI agents provision, govern, and operate through code. Learn what it is, how it works, and how to build it.

Alex Leventer Alex Leventer 13 min read

What is an Internal Developer Platform (IDP)?

Understand what an Internal Developer Platform (IDP) is, its benefits, key components, and how it streamlines development workflows.

Sarah Hughes Sarah Hughes 5 min read

What is AWS Secrets Manager?

Learn more about what AWS Secrets Manager is and how to use it.

Torian Crane Torian Crane 5 min read

What is Azure Key Vault?

Learn more about what Azure Key Vault is and how to use it.

Torian Crane Torian Crane 5 min read

What Is Cloud Infrastructure Autoscaling?

Autoscaling adds and removes cloud capacity automatically. Learn horizontal vs vertical, reactive vs predictive, the major cloud services, and common pitfalls.

Cam Soper Cam Soper 10 min read

What is Cloud Security?

Cloud security is the practice of protecting cloud workloads, data, and identities. Learn the shared responsibility model, key risks, and proven controls.

Cam Soper Cam Soper 10 min read

What is Configuration Management?

Learn about what configuration management is and why configuration management is instrumental in maintaining the health and consistency of software systems.

Scott Lowe Scott Lowe 5 min read

What is Continuous Integration/Continuous Delivery (CI/CD)?

Learn about CI/CD practices that improve dev process with automation for effective, rapid software delivery.

James Denyer James Denyer 6 min read

What Is DevOps Automation?

DevOps automation can be key to consistent and scalable workflows. Learn how engineering teams can ship faster and more reliably with DevOps automation.

James Denyer James Denyer 10 min read

What is DevOps?

DevOps combines software development and IT operations to ship faster and more reliably. Learn lifecycle, CI/CD, automation, testing, and security.

James Denyer James Denyer 15 min read

What is Google Cloud Secret Manager?

Learn more about what Google Cloud Secret Manager is and how to use it.

Torian Crane Torian Crane 4 min read

What is HashiCorp Vault?

HashiCorp Vault is a tool for securing, storing, and tightly controlling access to tokens, passwords, certificates, and encryption keys.

James Denyer James Denyer 5 min read

What is HIPAA?

HIPAA is the US law that sets national standards for protecting health information. Learn its rules, who it covers, penalties, and how to comply.

Alex Leventer Alex Leventer 12 min read

What is HITRUST?

HITRUST CSF is a certifiable security framework that harmonizes HIPAA, NIST, ISO 27001, and more into one assessment. Learn the levels, scope, and process.

Asaf Ashirov Asaf Ashirov 11 min read

What is Infrastructure as Code (IaC)?

Infrastructure as code (IaC) provisions cloud infrastructure with code instead of consoles. Learn how IaC works, declarative vs. imperative, and top tools.

Zack Chase Zack Chase 20 min read

What Is Infrastructure as Software?

Infrastructure as Software is IaC written in general-purpose programming languages. Learn how it differs from DSL-based IaC and where it fits in practice.

Cam Soper Cam Soper 11 min read

What is Platform Engineering?

Understand what platform engineering is, along with the main benefits and importance for modern application development.

Christian Nunciato Christian Nunciato 13 min read

What Is Policy as Code?

Policy as code applies software engineering practices to infrastructure governance. Learn what it is, how it works, the top tools, and how to enforce it.

Alex Leventer Alex Leventer 18 min read

What is Pulumi?

Discover what Pulumi is, how it works, and why it's revolutionizing infrastructure as code with familiar programming languages.

Asaf Ashirov Asaf Ashirov 15 min read

What is Secrets Management?

Understand secrets management, the importance of secrets management, and how secrets management relates to infrastructure as code and configuration management

Scott Lowe Scott Lowe 44 min read

What is Serverless?

Understand serverless architectures, along with some of the benefits of using serverless architectures for modern application development

Scott Lowe Scott Lowe 5 min read

What is SOC 2?

SOC 2 is an AICPA attestation that proves a service provider's controls meet the Trust Services Criteria. Learn Type I vs Type II, scope, and the audit process.

Alex Leventer Alex Leventer 12 min read

What is YAML?

YAML is a data serialization language that has steadily increased in popularity. Discover how to use YAML with Pulumi today.

Kat Cosgrove Kat Cosgrove 4 min read

Why is Python So Popular?

Why is Python so popular? Take a brief look at nine factors that have helped make Python one of the world’s leading programming languages.

Zack Chase Zack Chase 6 min read

The infrastructure as code platform for any cloud.