DEV Community

Cover image for How I Used Pulumi ESC to Securely Manage Secrets and Configs in My Infrastructure
Rajeshwari Vakharia
Rajeshwari Vakharia

Posted on

2 2 1 3

How I Used Pulumi ESC to Securely Manage Secrets and Configs in My Infrastructure

This is a submission for the Pulumi Deploy and Document Challenge: Shhh, It's a Secret!

What I Built💯

The project deploys an AWS Lambda function that fetches weather data from weatherstack.com and stores the current temperature in AWS Systems Manager (SSM) under the parameter path:
/weather/temperature_value

Project Repo🗃️

You can check out my project at
Pulumi-Dev-Challenge.🔗

My Journey🚀

This is my very first time to participate in a Dev Challenge and I loved the experience. The whole journey was filled with a lot of learning new things and also finding out the best practices to use Pulumi.

Using Pulumi ESC🔐

I used Pulumi ESC to store the API key.
Pulumi ESC made it extremely easy to manage secrets like API keys without hardcoding them or using environment variables. The integration into Pulumi's configuration system was seamless and secure.It was really easy to setup the whole thing.

I really found Pulumi ESC to be really helpful. As first time using it, the documentation made it really quick and easy to navigate me on how to use Pulumi ESC effectively.

But sadly, I couldn't use ESC SDK as the documentation was not quite easy to understand. I tried to ask Pulumi AI too but couldn't get any help.

I wanted to use the configuration values set in esc environment in my lambda code (lambda.py file) but was not able to find a correct approach to it.
It wiuld be really great if someone could help me out of this.

But overall experience was good and I genuinely think that Pulumi ESC is really helpful as a Secrets Manager.

Next, I will use this to create esc environment to store values for my Localstack configurations:)

Top comments (0)