A context-aware secret injection system

This is a submission for the Pulumi Deploy and Document Challenge: Shhh, It's a Secret! What I Built A context-aware secret injection system that: Uses Pulumi ESC to bridge secrets between hybrid environments (on-prem + cloud) Implements policy-as-code for dynamic secret access controls Auto-generates temporary credentials with TTL using AWS STS Enforces secrets masking in all CLI outputs Project Repo

Apr 3, 2025 - 20:06
 0
A context-aware secret injection system

This is a submission for the Pulumi Deploy and Document Challenge: Shhh, It's a Secret!

What I Built

A context-aware secret injection system that:

  1. Uses Pulumi ESC to bridge secrets between hybrid environments (on-prem + cloud)
  2. Implements policy-as-code for dynamic secret access controls
  3. Auto-generates temporary credentials with TTL using AWS STS
  4. Enforces secrets masking in all CLI outputs

Project Repo