Pulumi Cloud IaC Core
Pulumi Infrastructure Studio
Deploy modern infrastructure-as-code securely. Design public-private subnet topologies, RDS datastores, and compute VMs using TypeScript, Python, or Go SDKs.
☁️ Cloud Provider & Runtime
⚡ Core Resources Checklist
Select target components to automatically compile into SDK deployment classes.
⚠️ SRE Enterprise Security & State Backend
Enforce stack concurrency safety, custom encryption keys, and SRE audit metadata.
Stores `.json` state mapping inside secure private buckets instead of default Pulumi SaaS Service. Supports custom locking and IAM restrictions.
Uses cloud envelope keys (AWS KMS / Azure Vault / GCP KMS) to encrypt sensitive configuration values before writing state maps.
SRE Infrastructure Billing Tags
.yaml
⚡ Pulumi CLI Cheat Sheet
# Login to self-hosted state backends:
pulumi login s3://my-tfstate-bucket
# Initialize new workspace stacks:
pulumi stack init dev
# Run dry-run predictions:
pulumi preview
# Apply changes securely:
pulumi up --yes