Product
Joe Duffy
7 min read
Neo Security: Securing Infrastructure in the Agentic Era
Pulumi Neo Security threat models and traces attack paths across your entire cloud estate. Find and fix problems before the bad actors do.
Joe Duffy
7 min readWhat's new
- Query Your Infrastructure with the Pulumi Context API
- Release Full support for Terraform state, cross-language modules, and HCL
- Migrate CloudFormation and ARM with Discovered Stacks
- Pulumi Kubernetes Operator v2.8.0
- Async Python program entrypoints with pulumi.run
- Bulk cloud account onboarding for Insights
- Improved pnpm support for Node.js projects
- Usage limits for Pulumi Neo
- Passkey support in Pulumi Cloud
- Versioned CLI and SDK docs
- ESC webhooks for secret rotations
- CLI and SDK rollup: New commands, richer output, and more
Pulumi Context API: query your infrastructure as a graph
Levi Blackstone
Pulumi Kubernetes v4.34.0: CRDs as provider extensions
Guinevere Saenger
Compatibility Testing Pulumi HCL
Ian Wahbe
General
Pulumi Content Team
Best Kubernetes Infrastructure as Code Tools in 2026
The best Kubernetes IaC tools in 2026: Pulumi, Terraform, Helm, Kustomize, Crossplane, Argo CD, Flux, cdk8s, and kro, compared honestly on fit.
Pulumi Content Team
Product
Tom King
Never Miss What Your Infrastructure Is Telling You
The Notification Center brings Neo task updates, ESC change requests, and billing alerts into a single real-time inbox in the Pulumi Cloud console.
Tom King
Product
Thomas Gummerer
Automatic Logging for Faster, Secure Debugging
Pulumi now writes encrypted logs for every operation automatically
Thomas Gummerer
GeneralPulumi Content Team
Terraform and Kubernetes: A Practical Guide for 2026
How teams manage Kubernetes infrastructure as code in 2026: what Terraform's Kubernetes provider does well, where it strains, and how Pulumi compares.
Pulumi Content Team
Best Practices
Engin Diri
YOLO Mode Is the Right Default. Your Laptop Is the Wrong Place for It.
Prompt guardrails fail right when coding agents get dangerous. How Docker Sandboxes make YOLO mode safe, plus a ready-made kit for infrastructure work.
Engin Diri
Emulating Terraform on Pulumi's Engine
Engineering
EngineeringIan Wahbe
Emulating Terraform on Pulumi's Engine
How we map Terraform's data model onto Pulumi's execution semantics to seamlessly run your Terraform modules against the Pulumi engine.
Ian Wahbe
Product
Daniel Perlovsky
Bring Your Terraform Estate Into the Agentic Era
Pulumi Cloud as a Terraform backend and HCL in Pulumi IaC are now GA, plus native Terraform module support — bring the IaC you already have.
Daniel Perlovsky
Tutorials
Christian Nunciato
A guided tour of Terraform state, hosted modules, and HCL in Pulumi
A hands-on walkthrough of our new support for Terraform and OpenTofu, including state, remote execution, module interop, and first-class support for HCL.
Christian Nunciato
Tutorials
Alejandro Cotroneo
Migrate CloudFormation to Pulumi with Discovered Stacks
Migrate a CloudFormation stack to Pulumi with Discovered Stacks: verify every resource, import with a zero-diff preview, and track it all in Pulumi Cloud.
Alejandro Cotroneo
ProductAlejandro Cotroneo
Discovered Stacks: One Place for All Your Infrastructure
Discovered Stacks: Pulumi Cloud now models your CloudFormation and ARM deployments as Pulumi IaC stacks, with a built-in migration path.
Alejandro Cotroneo
Page 1 of 82
Popular series
See all →
2 part series
Things You Can Do With Neo
Real workflows platform teams are handing to Pulumi Neo: one-off deploys, incident triage, IAM audits, drift checks, runtime upgrades, and compliance fixes that run on a schedule.
7 part series
IaC Best Practices Series
Master Infrastructure as Code through a real-world case study: code organization, stack management, developer workflows, security patterns, and automation strategies for containerized applications on Kubernetes.
7 part series
Platform Engineering Pillars Series
Six essential pillars for transforming infrastructure chaos into streamlined developer platforms: provisioning, self-service, workflows, security, observability, and governance.
6 part series
Getting Started with Kubernetes Series
Build Kubernetes clusters on AWS, Azure, GCP and deploy applications using Infrastructure as Code. Learn core objects like pods, services, volumes, deployments and move from basic setups to complex microservices.