What problem does it solve?
Setting up Pulumi Python projects, wiring provider authentication, managing secrets, and authoring reusable components is repetitive and error-prone; this Skill consolidates project scaffolding, ESC-based secrets management, OIDC authentication, and deployment patterns into a single reference and workflow to reduce mistakes and speed delivery.
Core Features & Use Cases
- Project scaffolding: Guidance for pulumi new python and toolchain choices (pip, poetry, uv) plus recommended Pulumi.yaml settings.
- Secrets & auth integration: Instructions to link Pulumi ESC environments and configure OIDC logins for AWS, Azure, and GCP.
- Multi-cloud resource patterns: Examples and patterns for AWS (S3, VPC, Lambda, Step Functions), Azure (Functions, CosmosDB, Service Bus), and GCP (Cloud Functions, Firestore, Cloud Tasks, BigQuery).
- Reusable component guidance: How to author multi-language component resources and use component_provider_host for cross-language consumption.
- Deployment workflow & best practices: Preview, deploy, validate outputs, IAM least-privilege guidance, and ESC-driven run commands.
Quick Start
Create a new Pulumi Python project, link an ESC environment, set the Pulumi.yaml toolchain, and implement resources in main.py to provision and export cloud infrastructure.