Infrastructure as code in any language.
Use the programming languages you already know to build infrastructure on AWS, Azure, Google Cloud, Kubernetes, and hundreds more providers.
Write infrastructure code in your favorite language
TypeScript/JavaScript, Python, Go, C#, Java, and YAML. Get autocomplete, type checking, and all your favorite IDE features.
Build on AWS, Azure, Google Cloud, Kubernetes, and hundreds of other providers. Our open source engine is Apache 2.0 licensed and will always be free.
Use real code, not DSLs
Build on any cloud
Test before you ship
Open source core. Pulumi Cloud built-in.
Get started with Pulumi Cloud for free, state management and secrets included. Our open source engine powers everything underneath. Scale to enterprise features when you need them, or self-host if required.
engineers building with Pulumi
companies in production
cloud and service providers
"Our developers needed a fast, modular, and testable platform for managing cloud infrastructure. Nothing is better than having standard programming languages for building and managing infrastructure."
Principal Platform Engineer
Infrastructure building blocks
Ship faster with
reusable components
Production-ready patterns
Ship EKS clusters, serverless apps, or entire platforms with one line of code using well-architected components.
Hundreds of providers
Full API coverage for AWS, Azure, Google Cloud, Kubernetes, plus Cloudflare, Datadog, GitHub, and hundreds more.
From VMs to Kubernetes
Manage traditional infrastructure, containers, serverless, and Kubernetes with one tool, one workflow.
Ship infrastructure like software
Infrastructure as code means infrastructure in Git. Review changes in pull requests. Run tests in CI. Ship through GitHub Actions, GitLab, Jenkins, or any CI/CD system.
Git-native workflow
Every infrastructure change is a pull request. Review, comment, approve. Full audit trail built in.
Catch bugs before production
Run unit tests in milliseconds. Spin up ephemeral environments for integration tests. Fail fast, fix fast.
Works with your CI/CD
Integrates with any CI/CD system. GitHub Actions, GitLab, Jenkins, CircleCI – your choice. Or use the Kubernetes operator for GitOps.
Scale confidently with Pulumi Cloud
Encrypted state storage, secrets management, and collaboration built in. When you scale, enterprise features like RBAC, policy enforcement, and SSO are ready. All powered by our open source engine.
Encrypted state management
Never lose state again. Automatic versioning and encryption at rest. Pulumi Cloud handles it all, or self-host with S3/Azure Blob.
Built-in secrets management
No more secrets in plaintext. Automatic encryption for sensitive values. Integrate with AWS Secrets Manager, Azure Key Vault, or use Pulumi ESC for centralized secrets.
Ship with confidence
Review every change before it ships. Full history and audit logs. Roll back to any previous state when needed.
See everything, everywhere
Unified view across all your clouds. Search across AWS, Azure, and GCP. Find that rogue EC2 instance in seconds.
Automation API
Infrastructure as code as a library. Embed Pulumi in your app. Build custom CLIs, portals, or platforms. Full programmatic control.
Self-service infrastructure
Let engineers provision their own infrastructure safely. Templates, guardrails, and approval workflows. Works with Backstage or build your own.
Enterprise SSO & RBAC
SAML, SCIM, GitHub, GitLab, Atlassian. Fine-grained permissions. Temporary access tokens. SOC 2 Type II compliant.
Policy as code
Enforce security and compliance automatically. Hundreds of built-in policies or write your own. Block non-compliant infrastructure before it ships.
Complete audit trail
Every action logged. Who changed what, when, and why. Export to SIEM. Compliance reports at your fingertips.