pulumi-best-practices

Document Pulumi best practices for dependency management, secret encryption, and refactoring.

1|Updated Mar 26, 2026
One-click install
npx skills add https://github.com/jdiegosierra/enterprise-agent-plugins --skill pulumi-best-practices-jdiegosierra
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pulumi-best-practices
Source: https://github.com/jdiegosierra/enterprise-agent-plugins/tree/main/plugins/acme-engineering/src/skills/pulumi-best-practices
Command: npx skills add https://github.com/jdiegosierra/enterprise-agent-plugins --skill pulumi-best-practices-jdiegosierra

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides best practices for writing and maintaining dependable Pulumi programs, preventing common pitfalls and increasing reliability.

Core Features & Use Cases

  • Best Practice Guidance: Offers detailed instructions on resource management, dependency handling, secrets management, refactoring, and validation.
  • Use Cases: Ideal for infrastructure engineers aiming to improve deployment consistency, safety, and maintainability of Pulumi projects.
  • Technical Guidance: Emphasizes proper dependency passing, component creation, alias usage, and security measures, helping with complex multi-resource scenarios.

Quick Start

Review the core recommendations and apply the outlined practices in your Pulumi projects to avoid resource creation issues and ensure smooth refactoring.

Frequently Asked Questions about pulumi-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent resource recreation when refactoring Pulumi infrastructure code?

Prevent Pulumi resource recreation during refactors by applying proper alias usage and dependency passing. This maintains a clear resource hierarchy, ensuring consistent resource tracking and avoiding unintended destruction of existing cloud components.

What is the best way to manage dependencies in Pulumi components?

Manage Pulumi component dependencies by explicitly passing resource outputs rather than relying on implicit ordering. This safe and efficient infrastructure code design ensures correct deployment sequences and maintains a clear resource hierarchy during complex updates.

How do I handle secrets encryption in Pulumi IaC projects?

Handle Pulumi secrets encryption by following security compliance guidelines for infrastructure code. Implementing proper secret management measures protects sensitive deployment data and increases the reliability of your cloud automation workflows.

Does Pulumi best practice guidance work for infrastructure deployment at scale?

Pulumi best practices are designed explicitly for developers creating infrastructure at scale. The guidelines ensure deployment consistency, safety, and maintainability across complex multi-resource cloud scenarios and large IaC projects.

Why does my Pulumi deployment fail during complex multi-resource updates?

Pulumi deployments fail during multi-resource updates due to improper dependency handling and component design. Establishing correct dependency passing and applying validation strategies prevents these errors and ensures smooth refactoring.

When do I need to use aliases in Pulumi refactoring?

Use Pulumi aliases during refactoring when you modify resource properties or names to maintain a clear resource hierarchy. Aliases prevent resource recreation by ensuring the infrastructure code tracks existing cloud resources consistently.