도구

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

Pulumi's official skills: Pulumi program best practices, components and the Automation API, ESC secrets and config, debugging failed pulumi up runs, and migrating from Terraform, CDK, CloudFormation or ARM to Pulumi.

Pulumi's official plugin marketplace: write infrastructure as code in TypeScript, Python, Go and more, migrate from Terraform, CDK, CloudFormation or ARM, and manage ESC secrets and config. Works with both Claude Code and Codex.