Pulumi 2025: Neo, Next-Gen Policies, and Platform Engineering at Scale
Pulumi 2025 launches: Neo AI agent for platform engineers, next-gen policy management, IDP, ESC integrations, and IaC enhancements.
Arun Loganathan
Page 7 of 23
Pulumi 2025 launches: Neo AI agent for platform engineers, next-gen policy management, IDP, ESC integrations, and IaC enhancements.
Arun Loganathan
The Pulumi CLI now supports native OIDC token exchange, enabling secure authentication without long-lived credentials in automated workflows.
Boris Schlosser
You can now use the `replaceWith` resource option to inform Pulumi of extra dependencies
Tom Harding
ESC Connect enables you to integrate any custom or proprietary secret source with Pulumi ESC through simple HTTPS adapters, without waiting for native support.
Claire Gaestel
You can now configure all Pulumi CLI flags via environment variables, and use tools like direnv to define project-wide settings
Tom Harding
Pulumi partners with AWS to bring AWS Organizations Tag Policies validation to infrastructure as code, enforcing mandatory tagging requirements.
Alejandro Cotroneo
Launching the governance lifecycle: AI-powered remediation, pre-built compliance packs, continuous auditing, and a new Policy Findings hub.


3 authors
Pulumi pre-built policy packs for CIS v8.1, NIST 800-53 Rev. 5, and PCI DSS v4.0 help teams achieve and maintain cloud compliance in minutes, not months.

2 authors
Prevent accidental deletion of critical environments with the new deletion protection feature for Pulumi ESC.
Fausto Núñez Alberro
Track which stacks use components from your private registry to understand version sprawl, plan deprecations, and respond to security issues.
Pulumi IDP Team
Page 7 of 23