Best Practices for Managing Secrets - An Introduction to ESC
Most teams end up with secrets scattered everywhere: environment variables, CI systems, cloud secret stores, .env files on someone's laptop. That sprawl is hard to audit, harder to rotate, and a security incident waiting to happen.
This introductory session is about Pulumi ESC (Environments, Secrets, and Configuration), a configuration-as-code product that pulls secrets and configuration from many sources into hierarchical environments, so you can consume them safely across your infrastructure and dev workflows. No prior ESC experience needed. We start from the basics and build up.
What you'll learn:
What Pulumi ESC is, and how environments organize secrets and configuration
How to pull secrets from sources like AWS Secrets Manager, 1Password, and others into one consistent place
How to consume those secrets safely at runtime, in your IaC, CI/CD, and local dev
Bring your questions, we'll leave plenty of time for live Q&A.
🗓️ Wed Aug 5, 2026 · 12 PM ET / 9 AM PT · 60 min