Coding agents will write your infrastructure as code. Whether it's correct and consistent comes down to how you configure them. Aug 12, free workshop: set up Claude Code + opencode from scratch so they get Pulumi right. 👇 https://www.pulumi.com/events/getting-started-with-devops-ai-skills-2/?ut...

Teams running Terraform don't have to rip it out to move into the agentic infrastructure era. Pulumi Cloud is now GA as a Terraform state backend, HCL is GA as a native Pulumi language, and Terraform modules import without changes. Here's what shipped today.

Bring Your Terraform Estate Into the Agentic Era

Pulumi Cloud as a Terraform backend and HCL in Pulumi IaC are now GA, plus native Terraform module support — bring the IaC you already have.

pulumi.com

Every coding agent has a YOLO mode. You're probably running it daily, and prompt guardrails fail right when it matters. Engin Diri on sandboxing agents with Docker Sandboxes, plus an open-source kit preloaded with Pulumi, Terraform, and cloud CLIs for infra work.

YOLO Mode Is the Right Default. Your Laptop Is the Wrong Place for It.

Prompt guardrails fail right when coding agents get dangerous. How Docker Sandboxes make YOLO mode safe, plus a ready-made kit for infrastructure work.

pulumi.com

Tomorrow: a free hour on Pulumi ESC, from the basics up. What an environment is, how it pulls from the secret stores you already run, and how your IaC, CI/CD, and local dev consume it without scattered copies. 12 PM ET. https://www.pulumi.com/events/intro-to-pulumi-esc-managing-secrets/?utm_sou...

Your secrets are in environment variables, a CI system, two cloud secret stores, and a .env file on somebody's laptop. Aug 5, free intro workshop: pull them into one Pulumi ESC environment everything reads from. https://www.pulumi.com/events/intro-to-pulumi-esc-managing-secrets/?utm_source=blue...

Six months into a migration, can you say which of 800 resources actually made it to IaC — and which were quietly forgotten? The spreadsheet tracking it went stale the day it was written. The spreadsheet is retired for good.

Discovered Stacks: One Place for All Your Infrastructure

Discovered Stacks: Pulumi Cloud now models your CloudFormation and ARM deployments as Pulumi IaC stacks, with a built-in migration path.

pulumi.com

We migrated a 61-resource CloudFormation stack to Pulumi — payments API, database, the works — and never ran pulumi up once. A zero-diff preview proved every resource was in sync. The full step-by-step is up.

Migrate CloudFormation to Pulumi with Discovered Stacks

Migrate a CloudFormation stack to Pulumi with Discovered Stacks: verify every resource, import with a zero-diff preview, and track it all in Pulumi Cloud.

pulumi.com

An AI agent on Kubernetes isn't just another Deployment: GPUs, long-lived sessions, and a much bigger credential blast radius. Here's how to provision and govern that infrastructure with Pulumi, in TypeScript and Python.

How to Run AI Agents on Kubernetes with Pulumi

How to provision and govern Kubernetes infrastructure for AI agents with Pulumi, in TypeScript and Python, and where kagent, KServe, Kueue, and Neo fit in.

pulumi.com

Token rotation policies are easy to write and hard to enforce. Pulumi Cloud now enforces them for you: org admins can cap the max expiry of personal, organization, and team access tokens used against their organization, checked on every request.

Enforce Access Token Expiry Policies in Pulumi Cloud

Organization admins can now cap the maximum expiry of personal, organization, and team access tokens, so no credential outlives your rotation policy.

pulumi.com

esc v0.26.0 is the last standalone ESC CLI release. The repo is archived, and every command now lives under pulumi env in the Pulumi CLI. Swapping esc for pulumi env covers most of them. The ones it doesn't cover are the ones worth knowing. We documented all of them.

The Standalone ESC CLI Retired: Use pulumi env

The standalone esc CLI is archived as of v0.26.0. Every ESC command is available in the Pulumi CLI under pulumi env: one binary to install and upgrade.

pulumi.com

A container isn't much of a security boundary: every one on a host shares the same kernel. Kubernetes Agent Sandbox gives AI agents a kernel-isolated, disposable box instead. Adam Gordon Bell deployed it on GKE with Pulumi, one sandbox per developer. Here's how it's wired together.

Kubernetes Agent Sandbox: What It Is and How to Deploy It with Pulumi

Agent Sandbox gives AI agents kernel-isolated, disposable environments as Kubernetes resources. Here's what it is and how to deploy it on GKE with Pulumi.

pulumi.com

Terraform alternatives in 2026 split into three camps: general-purpose-language platforms, HCL-compatible forks, and cloud-specific tools. The one that fits your team increasingly depends on something most comparisons skip: how well it works with an AI coding agent in the loop.

Best Terraform Alternatives in 2026

The best Terraform alternatives for 2026: Pulumi, OpenTofu, AWS CDK, Crossplane, and Bicep, compared on multi-cloud reach, governance, and AI-agent readiness.

pulumi.com

Next San Antonio/Austin DNUG is in 10 days! Learn to build your infrastructure in C# with Pulumi! #dotnet #azure 🎤What: Serverless Dad Jokes: What If Everything Was Just C#? 👨‍🏫Who: Adam Gordon Bell ⌚When: July 30 @ Noon CST 🌐Where: Zoom Signup: www.meetup.com/sadnug/event...

Your infra is code. Your on-call setup is forty clicks in a web UI, done once. Engin Diri wires PagerDuty + AWS in one Pulumi program: teams, schedules, escalation policies, and the alarm that pages you. Integration keys flow as dependencies, nothing gets forgotten.

Incident Response as Code: Managing PagerDuty with Pulumi

Manage PagerDuty teams, schedules, escalation policies, and services with Pulumi, and wire alerting to the AWS infrastructure in the same program.

pulumi.com

Connect your AWS, Azure, and Google Cloud accounts to Pulumi Insights in about three minutes. The same setup used to take hours to days of per-account OIDC and ESC configuration. We built a wizard that handles all of it. Here's how it works.

Connect Your Cloud Accounts to Pulumi in Minutes

Onboard your AWS, Azure, and Google Cloud accounts to Pulumi Insights in bulk with the new Connect cloud accounts wizard. OIDC-based, no long-lived secrets.

pulumi.com

Now Pulumi Neo supports monthly usage limits, putting your Neo spend under control so you can hand it more and more infrastructure work.

Introducing Usage Limits for Pulumi Neo

Set monthly organization or per-member Pulumi Neo dollar limits and get alerts via email.

pulumi.com

The LLM wiki everyone built after Karpathy's gist is a dialect only your own agent can read. Google's Open Knowledge Format pins it down: markdown, frontmatter, one required field. Knowledge as code.

Knowledge as Code: The Memory File Just Got a Spec

Google's Open Knowledge Format: a one-page spec for the LLM wiki. Markdown, one required field, git. Why knowledge as code is your agent loop's missing layer.

pulumi.com

Phishing kits replicate the page. They cannot replicate the origin a passkey is bound to. Passkey sign-in is now live in Pulumi Cloud for users who sign in with email and password. Phishing-resistant, synced across devices. Here's how to enroll.

Sign in to Pulumi Cloud with Passkeys

Pulumi Cloud now supports passkeys: a phishing-resistant alternative to typing your password, for users who sign in with email and password.

pulumi.com

Roey Zalta gave an AI agent its own Mac mini and full system access. His pitch: "give it an environment, tools, autonomy — and see what it builds." His warning: "it's 100% not secure." So how do you run an AI employee safely? Live panel, Jul 14

Securing Personal AI Agents: Guardrails and Infrastructure for OpenClaw

A live panel on securing OpenClaw and autonomous agents before they touch production cloud — the guardrails, identity, and verifiable state they need.

pulumi.com

For a while, running an older Pulumi release meant the docs on the site described a newer one. We closed that gap. You no longer have to guess which parts of the reference still apply to your version. Here's what we shipped.

New: Versioned CLI and SDK Docs

The Pulumi CLI command reference and SDK API docs now include a version selector, so you can browse the docs that match the release you're running.

pulumi.com

ISO 27001 compliance on AWS has meant months of mapping governance controls to actual cloud resources, interpreting each one for S3, RDS, CloudTrail. We built 238 policies to handle that mapping. Live today in Pulumi Cloud.

Enforce ISO 27001 Across Your AWS Infrastructure

Align your AWS infrastructure to ISO/IEC 27001:2022 with a pre-built Pulumi policy pack of 238 ready-to-run security policies.

pulumi.com

A GPU box that pulls a model and serves Ollama the second pulumi up finishes, same program on AWS, Azure, and Google Cloud. No static keys (OIDC from one Pulumi ESC environment), no wait loops. Engin Diri shows how.

Fully Automated AI Inference on AWS, Azure, and Google Cloud with Pulumi

A zero-touch Ollama GPU inference server on AWS, Azure, or Google Cloud as one Pulumi program, with OIDC credentials from Pulumi ESC and no static keys.

pulumi.com

Joe Duffy, Founder and CEO of @pulumi.com, closed out Day 1 of CascadiaJS 2026 with a look at what happens when AI agents move beyond writing code and start handling the messy world of infrastructure, deployment, and operations. youtu.be/SOMEfFNPsew

Thinking of giving an AI agent shell access and your cloud creds? OpenClaw, Hermes, Claude CoWork — they turn useful fast, and risky just as fast. Live panel with Microsoft on running them safely, Jul 14 👇

Securing Personal AI Agents: Guardrails and Infrastructure for OpenClaw

A live panel on securing OpenClaw and autonomous agents before they touch production cloud — the guardrails, identity, and verifiable state they need.

pulumi.com

Hermes is a self-improving agent that writes and runs its own code — which is why you don't want it on the public internet. Here's how to deploy one as a single Pulumi program with no front door: Render, Modal, and Tailscale.

Deploy a Private Hermes Agent on Render Securely with Pulumi, Modal, and Tailscale

Deploy a self-hosted Hermes agent as one Pulumi program across Render, Modal, and Tailscale — a code-executing AI agent with nothing on the public internet.

pulumi.com

This week in New York, three ways to get into deploying AI agents with Pulumi. Wed June 17: AWS Summit, then our hands-on AI Camp workshop at GA Flatiron, 5:30 PM. Thu June 18, 6 PM: NY Pulumi User Group kicks off with Pinecone. Workshop: https://www.aicamp.ai/event/eventdetails/W2026061714

Developer Workshop (NYC) - Deploying AI Agents with Pulumi and AWS

Join over half million developers learning how to use and build AI through expert-led tech talks, workshops, bootcamps and crash courses. Level up your skills, and stay ahead of the industry | AICamp

aicamp.ai

Have you ever been rate limited by Docker Hub? Haven't we all. It happened to Adam Gordon Bell mid-demo at a live AKS workshop. Azure had refused the first region before that. Here are the six Kubernetes recommendations that came out of what happened next.

The unit of work moved from the prompt to the loop. You stop prompting the agent and start designing the thing that prompts it. The pieces already ship in your tools. The part that makes a loop worth running doesn't.

Stop Prompting. Design the Loop.

The unit of work moved from the prompt to the loop. The five pieces of loop engineering, the memory that makes it compound, and what it won't do for you.

pulumi.com

Cloudflare edge config does not need to live in clickops. Build DNS, WAF, Workers, and Access policies as a Pulumi baseline.

Pulumi is in New York June 17 and 18, with three ways to get into deploying AI agents: a hallway chat at AWS Summit, a hands-on workshop, and the New York Pulumi User Group kickoff. Workshop seats are limited: https://www.aicamp.ai/event/eventdetails/W2026061714

Developer Workshop (NYC) - Deploying AI Agents with Pulumi and AWS

Join over half million developers learning how to use and build AI through expert-led tech talks, workshops, bootcamps and crash courses. Level up your skills, and stay ahead of the industry | AICamp

aicamp.ai