pulumi/pulumi

Features

• Infrastructure as Code Frameworks - Provides a platform for defining, deploying, and managing cloud infrastructure using general-purpose programming languages.
• Cloud Provisioning - Deploys and manages resources across major cloud providers and container orchestration platforms using standard programming languages.
• Cloud Resource Orchestrators - Orchestrates container clusters and cloud infrastructure within a unified programmatic interface.
• Deployment Environment Management - Provides isolated infrastructure environments for development, staging, and production stages.
• Deployment Orchestrators - Coordinates the lifecycle of heterogeneous infrastructure by executing code to construct dependency graphs and reconcile state.
• Infrastructure Lifecycle Management - Governs the full lifecycle of cloud resources including drift detection and ephemeral environment cleanup.
• Infrastructure as Code - Defines and manages cloud resources using general-purpose programming languages to enable versioning, testing, and repeatable deployment workflows.
• Language-Specific Provisioning - Enables infrastructure provisioning using standard programming languages and build tools like Maven or Gradle.
• Infrastructure Orchestration - Executes infrastructure lifecycle operations like creation, updates, and destruction directly from application code using a strongly typed software development kit.
• Infrastructure Policy Enforcement - Validates infrastructure deployments against security and compliance rules as code before resources are provisioned.
• Update Preview Utilities - Generates diffs of planned infrastructure changes to preview impacts before deployment.
• Environment Isolation - Maintains independent configuration, secrets, and state for distinct infrastructure stacks.
• Cloud Provider Integrations - Connects to and manages resources across major cloud platforms and third-party services through a unified interface and extensive provider ecosystem.
• Multi-Cloud Orchestrators - Provisions and governs resources across diverse public clouds and private data centers through a unified management interface.
• Policy-As-Code Engines - Evaluates infrastructure definitions against programmable security and compliance rules during the deployment preview phase.
• Secret and Credential Managers - Centralizes the retrieval and injection of secrets and configuration values from external providers into infrastructure workflows.
• Drift Detection - Identifies discrepancies between the actual state of deployed cloud resources and the desired state defined in code.
• Multi-Language Support - Allows infrastructure management using multiple general-purpose programming languages.
• Cloud Infrastructure Automation - Integrates infrastructure provisioning capabilities into custom applications or external platforms via programmatic interfaces.
• Cloud Infrastructure Management - Imports and governs existing cloud resources to bring them under centralized management.
• Compliance Governance Tools - Monitors resources across multiple clouds to enforce policies, track compliance status, and identify security vulnerabilities in real-time.
• Continuous Integration & Deployment - Integrates infrastructure updates directly into continuous integration and delivery pipelines.
• Resource Declarations - Instantiates resource types from provider packages to declare cloud infrastructure and manage dependencies.
• Dependency Graph Engines - Constructs a directed acyclic graph of cloud resources by executing general-purpose code to define dependencies.
• Dependency Graph Orchestrators - Calculates the order of operations and parallelism required to deploy resources automatically based on their defined relationships.
• Deployment Orchestration - Coordinates complex dependencies across multiple stacks by chaining outputs and sequential provisioning.
• GitOps Workflows - Synchronizes infrastructure state directly from version control repositories to automate deployment workflows.
• Drift Detection - Identifies and alerts on discrepancies between defined infrastructure code and the actual state of cloud environments.
• Infrastructure Governance Policies - Enforces security, compliance, and cost-control rules automatically during the deployment process to ensure organizational standards are met.
• Infrastructure State Management - Controls deployment targets, update plans, and state file storage to maintain consistency across environments.
• Inline Definition Frameworks - Enables defining infrastructure logic directly within application code as functions or closures.
• Kubernetes Cluster Management - Deploys containerized applications and services into local or remote Kubernetes clusters using standard programming languages.
• Provider Plugin Architectures - Uses a language-agnostic RPC interface to load external provider binaries that translate resource definitions into cloud-specific API calls.
• Language-Host Runtime Bridges - Provides a language-specific SDK that serializes resource declarations and configuration data across a process boundary.
• Centralized Secrets Management - Aggregates secrets from multiple cloud providers and vaults into a single control plane with unified access controls.
• Credential Security Managers - Encrypts configuration values by default and integrates with external secret managers to inject credentials dynamically.
• Dynamic Credential Provisioning - Issues short-lived, just-in-time credentials via OIDC that automatically expire to eliminate risks associated with static access keys.
• Identity Authentication - Supports single sign-on and authentication using standard protocols like SAML, OIDC, and SCIM.
• Role-Based Access Control - Integrates with identity providers to manage user permissions and team access through role-based controls.
• Secrets Management - Aggregates configuration data and secrets from multiple vaults and cloud providers into a single, unified management interface.
• State Reconciliation - Maintains a persistent record of deployed infrastructure to calculate the delta between current cloud reality and desired state.
• Automated Infrastructure Testing - Validates cloud configurations through unit, property, and security tests before deployment.
• Build and CI/CD - Infrastructure as code platform for cloud resources.
• Infrastructure and Automation - Infrastructure as code using general-purpose languages.
• Infrastructure and Containers - Infrastructure as Code in any programming language.
• Infrastructure and DevOps - Infrastructure as Code framework supporting multiple languages.
• Infrastructure as Code - Manages infrastructure using general-purpose programming languages.
• Platform as a Service - Universal infrastructure-as-code platform.
• Cloud Service Configuration - Translates complex cloud provider settings into declarative code to manage infrastructure as software.
• Declarative Infrastructure Definitions - Declares cloud resources and configurations using a declarative YAML syntax for multi-cloud infrastructure management.
• Extensible Provider Frameworks - Builds custom components, providers, and packages to encapsulate reusable logic and support specialized resource types.
• Component Abstractions - Encapsulates complex resource patterns into reusable modules to simplify infrastructure architecture definition.
• State Isolation - Maintains independent state files for different environments to ensure isolation between infrastructure stacks.
• Infrastructure Validation Tools - Validates infrastructure code using static analysis to ensure correctness before execution.
• Infrastructure API Management - Generates resource providers from standard specifications to automate the deployment and configuration of cloud services.
• Ephemeral Environments - Provisions isolated, on-demand infrastructure instances within a shared host cluster to reduce provisioning time and resource costs.
• Kubernetes Application Deployments - Deploys containerized applications and Helm charts into Kubernetes clusters using automated infrastructure workflows.
• Developer Portals - Allows teams to provision approved cloud resources independently using standardized, reusable templates.
• Stack Output Referencing - Shares data between independent deployment units by exporting and consuming values across stacks.
• Dynamic Secret Management - Injects secrets dynamically into application processes at runtime for secure credential management.
• Access Control - Defines identity, permissions, and audit logging policies within infrastructure definitions to manage security through version-controlled code.
• Identity Federation - Exchanges external identity tokens for short-lived access credentials to eliminate long-lived secrets.
• Least Privilege Enforcement - Configures cloud credentials with restricted permissions to ensure infrastructure operations adhere to security best practices.
• Personal Access Tokens - Manages personal and organization-level access tokens to secure API requests and authorize automated workflows.
• Policy-Based Access Control - Defines organization roles, team memberships, and permission assignments as versioned infrastructure code.
• Security Guardrails - Applies explicit safety guardrails to prevent accidental deletion or replacement of stateful resources during deployment updates.
• Organization Management - Organizes users into groups to control access to infrastructure projects and manage administrative settings.
• Developer Portals - Creates internal developer platforms using templates and guardrails that allow teams to provision approved infrastructure independently.
• Plugin Orchestration - Detects and installs required cloud provider plugins by analyzing project dependencies during the build process.
• Project Scaffolding - Enforces organizational best practices by providing pre-configured templates that developers use to initialize new infrastructure projects.
• Pull Request Processes - Generates infrastructure modifications as pull requests to ensure human oversight and review before applying changes to the environment.
• Identity Preservation - Maintains continuity of cloud objects during refactoring or reorganization by mapping old resource identifiers to new ones.
• Git-Triggered Deployment Pipelines - Triggers automated infrastructure updates when version tags are pushed to repositories.
• Helm Chart Deployment - Manages the installation and lifecycle of third-party software packages using Helm releases within clusters.
• Resource Imports - Captures manually created cloud infrastructure into managed state files for ongoing code-based maintenance.
• Provider Registries - Provides a centralized registry of pre-built packages to integrate third-party cloud services and infrastructure components.
• Self-Hosted Infrastructure - Installs the management platform within private infrastructure to maintain full control over data residency and security configurations.
• Serverless Provisioning - Deploys event-driven functions and serverless architectures across cloud providers using standardized templates.
• Virtual Machine Deployment - Deploys virtual machine instances across major cloud providers using repeatable infrastructure definitions.
• External Secret Resolution - Imports sensitive data from third-party secret managers and vaults to make them available for use within infrastructure environments.
• Workflow Approval Gates - Requires human verification for infrastructure changes by configuring customizable controls that gate actions before deployment.
• Cloud API Request Execution - Sends authenticated HTTP requests to cloud service endpoints using existing credentials and automatic path-template resolution.
• Multi-Tenant Data Management - Provisions and maintains isolated cloud environments for individual customers at scale to support multi-tenant software architectures.
• API Operations Automation - Scripts cloud operations by handling pagination, content negotiation, and request formatting through a command-line interface.
• Pipeline Failure Recovery - Identifies and resolves infrastructure errors such as update conflicts, resource destruction failures, and pipeline integration issues.
• Cloud Deployment Templates - Initializes new projects from pre-built, ready-to-deploy configurations for common cloud services.
• Provisioning Diagnostics - Analyzes infrastructure deployment errors using full stack context to provide actionable remediation steps.
• Operational Monitoring and Governance - Tracks infrastructure updates and deployments through scheduled or event-driven operations.
• Cloud Service Integrations - Connects to cloud management platforms via REST APIs to automate workflows and synchronize data across external systems.
• Reusable Configuration Blocks - Builds complex environment settings by inheriting common values and overriding specific parameters through modular, version-controlled components.
• Incremental Migrations - Imports existing cloud resources incrementally to enable gradual adoption of infrastructure-as-code practices.
• Infrastructure Debugging Utilities - Captures logs, traces performance, and attaches debuggers to diagnose issues during the resource provisioning process.
• Infrastructure Interface Builders - Creates specialized portals, command-line tools, or web services that allow end users to provision and manage cloud resources.
• Resource Querying - Provides programmatic functions to query and retrieve state from existing cloud infrastructure resources.
• Private Infrastructure Management - Maintains a centralized repository for organization-specific templates and building blocks to ensure consistent infrastructure definitions across teams.
• Remote Execution Interfaces - Triggers infrastructure deployments from remote Git repositories using managed services to decouple execution from the local environment.
• Resource Cost Management - Identifies underutilized or expensive infrastructure components to provide actionable recommendations for reducing cloud spending.
• Workflow Event Triggers - Initiates downstream processes via webhooks based on infrastructure events like drift or policy violations.
• Host Networking Services - Connects internal cluster services to external host resources to enable communication between containerized applications and local hardware.
• Access Auditing - Maintains a comprehensive history of secret access and infrastructure changes to ensure security and compliance.
• Cloud Auditing Tools - Scans and indexes existing cloud resources across accounts and regions for governance and compliance monitoring.
• Secret Management Integrations - Connects to custom or third-party secret management systems through a plugin architecture to integrate with existing infrastructure workflows.
• Audit Logs - Exports records of user actions and system events to support security monitoring and compliance requirements.
• Stack Information Retrieval - Exposes specific resource properties or computed values from a deployment so they can be accessed by the command line or referenced by other programs.

Star history