Pulumi Blog
Infrastructure as Code for AWS, Azure, Google Cloud, including Kubernetes, Serverless, Containers, for Developers and DevOps.
- Website
- pulumi.com · all feeds from this site
- Feed URL
https://www.pulumi.com/blog/rss.xml
Read it in your FeedListing reader
Or add to: Feedly Inoreader Raw feed
Latest posts
-
Manage Pulumi ESC change requests from the CLI
With ESC Approvals , changes to a protected environment go through a change request. Teammates can review and approve the change before it’s applied. Today we’re introducing the pulumi env change-request command to work with change requests from the CLI. Review changes without…
-
Running Pulumi Neo in a Docker Sandbox: workshop recap
The more an agent can do on its own, the more infrastructure work you can hand it, as long as its limits hold when it gets something wrong. In April, they didn’t hold for PocketOS. A coding agent on a routine staging task deleted the company’s production volume in 9 seconds.…
-
AI infrastructure on tap with the Pulumi AICR provider
Recently, some members of the Pulumi team spent time in San Francisco attending the CoreWeave: Fully Connected 2026 conference, where we had a chance to talk to everyone from solo developers to engineering leaders at Fortune 500 organizations and learn more about how they are…
-
Assign policy groups by stack and account tags
Policy groups decide which policy packs apply to which stacks and cloud accounts. Until now, stacks and accounts were added to policy groups individually, so every new stack required opting into their correct group by hand. Policy groups membership can now be managed by tags, so…
-
Pulumi ESC now issues OIDC tokens for any service
A Pulumi ESC environment can now mint a short-lived OpenID Connect (OIDC) token for any service that accepts one. Every pipeline and agent that touches your infrastructure eventually needs credentials for services beyond your cloud: a package registry such as Cloudsmith or JFrog…
-
Scale your team's use of AWS IAM account access manager with Pulumi
In September 2026, AWS launched AWS IAM account access manager (AAM) , which lets administrators assign IAM roles to workforce users and groups in AWS IAM Identity Center. AAM combines IAM Identity Center’s single federation point and user awareness with the flexibility of IAM…
-
Concurrent change requests in Pulumi ESC
With ESC Approvals , you can propose, review, and apply environment changes with change requests. Until now, an environment could only have one open change request at a time. If a teammate’s change was waiting for review, others were blocked from opening change requests. Today,…
-
Pulumi Google Cloud Provider Version 10.0.0
TL;DR: we are releasing a new major version of the Google Cloud provider. To migrate, ask Neo or your coding agent to run the Pulumi provider-upgrade skill ( how to use it ) or follow the v10 migration guide . We are happy to announce the next major version of the Pulumi Google…
-
Building Kubernetes PR Previews with Shared Pulumi Components
My team develops a microservices application on Kubernetes, with hundreds of PRs opened each day. To let engineers test and review those changes in isolation before they’re merged, we give every pull request its own ephemeral environment. We use Pulumi to define those…
-
Self-driving infrastructure with Pulumi and Jev
It’s been a weirdly great time to be building software. We’ve never had so many tools that help us get things done: endless cloud providers, regions, deployment frameworks, and now AI agents that can actually build and manage infrastructure for us. That’s part of what made this…
-
Route every Claude Code message to the right model with Jev
Not every message you send to Claude Code needs the most capable model. A quick question about a Git command runs on the same model as a refactor across three services, unless you remember to switch models first. Jev, a new model from TypeSafe AI, can make that decision for you…
-
AI agents need continuity, not just context
Pulumi Neo works on infrastructure the way an engineer does: it clones repositories, edits files, installs dependencies, runs previews, and produces intermediate work along the way. A task is not only a conversation with a model. It is also a working directory that has to…
-
Change your components, keep your infrastructure
Components let you turn a group of resources into a reusable building block. You can define a network, a database, or an application service once and share it across projects and teams. People using the component work with its inputs and outputs without needing to understand…
-
10 tips to improve your coding agent game
In May I told you to trim the root instruction file until it fits on one screen . I also said anything that needs a hard guarantee belongs in a hook. In June I argued that the model that wrote the code shouldn’t be the one grading it . Several papers published this summer tested…
-
Beyond the Hyperscalers: What Actually Protects You
Recorded September 3, 2026. Quotes are lightly edited for clarity. Maybe this sounds familiar. You run infrastructure at a company that isn’t American. Your workloads are on AWS, Azure, or Google Cloud, probably more than one, because that is what everyone picked. Until recently…
-
Set Up Cloud OIDC From the Pulumi CLI
Pulumi ESC can act as an OpenID Connect (OIDC) provider for AWS, Azure, and Google Cloud, issuing short-lived, signed tokens that these clouds exchange for temporary credentials. This eliminates hard-coded credentials and improves your security posture. Last year, we introduced…
-
Pulumi Kubernetes v4.34.0: CRDs as provider extensions
We’re really excited to bring you v4.34.0, the newest version of the Pulumi Kubernetes provider , which includes improved support for Kubernetes Custom Resource Definitions (CRDs). As with any release, we’ve also shipped standard dependency updates and bug fixes. This provider…
-
Neo Security: Securing Infrastructure in the Agentic Era
Recently, AI systems have started turning up exploitable flaws in code that survived decades of human review. The frontier labs have released useful tools to help uncover many of these flaws through agent-led static code analysis. This is a huge leap ahead, but cloud…
-
Best Policy as Code Tools in 2026
Policy as code means writing infrastructure rules as version-controlled code, then having a policy engine evaluate every proposed change against those rules before it takes effect. It matters more as AI agents start proposing infrastructure changes alongside engineers, because a…
-
Pulumi Context API: query your infrastructure as a graph
Every platform team fields the same questions: What is running? What breaks if we change this? What can we safely delete? The answers exist, but they’re scattered across state files, cloud consoles, and the memories of whoever set things up. Today we’re launching the Pulumi…