The unified platform for infrastructure teams.

Infrastructure as code with modern languages, centralized secrets and governance, and AI built for infrastructure — all in one platform. Everything teams need to move fast and scale with confidence.

Pulumi platform overview diagram

Open source foundation, enterprise scale

Build infrastructure like you build software.

Compose your infrastructure code with the languages and tools your team already uses — TypeScript, Python, Go, C#, or Java. Our Apache 2.0-licensed engine gives you a foundation to scale from small project to large organization.

Explore Pulumi IaC

Real programming languages

Use loops, conditionals, functions, and classes, catch errors at compile time, reuse code across projects, and refactor with confidence.

Hundreds of providers

Full API coverage for all major clouds: AWS, Azure, Google Cloud, and Kubernetes — plus service providers like Cloudflare, Datadog, GitHub.

Test before you ship

Write unit tests for your infra code, integration tests for pre-prod environments, smoke tests for releases — all with industry standard tools.

Infrastructure AI

Meet Neo, your AI platform engineer

The industry’s first AI agent purpose-built for infrastructure. Neo handles complex tasks, debugs deployments, and generates code for new and existing cloud resources.
Meet Pulumi Neo
Pulumi Neo AI assistant

End-to-end automation

Describe what you need in plain English. Neo breaks it into steps, makes a plan, executes the changes, and keeps everything compliant.

Instant cloud insights

Ask questions, get answers. Identify cost savings, failure patterns, and compliance violations with an AI agent that understands your infrastructure.

Enterprise controls

Neo respects your RBAC roles and policies, and human-in-the-loop approvals keep you in control — with full audit trails from prompt to deployment.
Centralized secrets & configuration

One interface for all your secrets and config

Pulumi ESC brings secrets and configuration from every major vault and cloud provider into a single interface. Use it with Pulumi IaC or on its own.

Explore Pulumi ESC
Pulumi ESC centralizing secrets from multiple providers

Eliminate secrets sprawl

Fetch secret values from any supported store with a single Pulumi Cloud access token. No more juggling multiple credentials manually.

Dynamic credentials

Generate short-lived credentials with OpenID Connect (OIDC). Credentials are automatically revoked when their leases expire.

Meets you where you are

Use it at the command line, in app code, or in CI/CD pipelines. Our CLI, APIs, SDKs, and Kubernetes operator ensure your config is always accessible.

Insights & governance

See everything, control everything

Search across all clouds from a single pane of glass in Pulumi Cloud. Enforce policies automatically, track compliance, and get AI-powered insights. Know exactly what’s running where and why.
Explore Pulumi Insights & Governance
Pulumi Insights resource search across clouds

Multi-cloud visibility

Run resource queries across AWS, Azure, and Google Cloud with AI-powered insights. Find what you’re looking for in seconds.

Policy as code

Enforce security and compliance rules automatically with over 150 built-in policies — or write your own in your language of choice.

Complete audit trail

Track every change, every action, and every user. Export to security and event management systems (SIEMs) for compliance reports.
Internal developer platform

Enable self-service infrastructure at scale

Give your engineers the ability to provision infrastructure through templates, components, and developer portals, while platform teams maintain control through guardrails and governance.

Explore Pulumi IDP
Internal developer platform dashboard

Golden paths

Platform engineers define reusable components and templates once, and every team gets proven, compliant patterns out of the box.

Self-service options

Code, low-code YAML, or no-code portals. Engineers can work the way they prefer with consistent governance.

Day-two operations

Drift detection, dependency management, and enterprise RBAC give you visibility and control across the full infrastructure lifecycle.

Get started in 5 minutes

Deploy your first infrastructure with Pulumi. Choose your language, pick your cloud, ship your code.

Migrating to Pulumi?

Our tools can help you migrate your code and resource state from Terraform, AWS CloudFormation, Azure Resource Manager, and others to Pulumi. Use Neo to make the process even easier.