AWS prescriptive-guidance documentation change
Summary
Reformatted Pulumi capabilities table into a bulleted list for improved readability
Security assessment
The change is purely presentational - converting table rows to bullet points without altering security-related content. Existing security mentions (secrets management, RBAC) were already present and remain unchanged. No new security features or vulnerabilities are addressed.
Diff
diff --git a/prescriptive-guidance/latest/eks-gitops-tools/pulumi.md b/prescriptive-guidance/latest/eks-gitops-tools/pulumi.md index e654e4a07..907f1aa27 100644 --- a//prescriptive-guidance/latest/eks-gitops-tools/pulumi.md +++ b//prescriptive-guidance/latest/eks-gitops-tools/pulumi.md @@ -15,22 +15,42 @@ Pulumi is an IaC platform that isn't exclusively designed for GitOps. However, i -Area | Tool capabilities ----|--- -IaC | Pulumi lets you define your infrastructure by using general-purpose programming languages such as Python, TypeScript, and Go. This code-based approach aligns with the GitOps emphasis on versioned, declarative configurations. -Git as the single source of truth | Infrastructure code in Pulumi can be stored and version-controlled in Git repositories. This ensures that Git serves as the single source of truth for infrastructure definitions. -Declarative desired state | Although Pulumi uses programming languages, it still describes the desired state of infrastructure declaratively. The code defines what the infrastructure should look like, not the step-by-step process to create it. -Automated synchronization | Pulumi can be integrated with CI/CD pipelines to automatically apply changes when code is updated in Git. This enables continuous deployment of infrastructure changes, which is a key GitOps principle. -Multi-cloud and Kubernetes support | Pulumi supports a wide range of cloud providers and Kubernetes, so you can follow GitOps practices across diverse environments. The tool enables consistent management of resources across different platforms. -State management | Pulumi manages the state of infrastructure, which can be stored remotely and securely. This state management is crucial for GitOps practices, and ensures consistency between the defined state and the actual state of your infrastructure. -Drift detection and reconciliation | Pulumi can detect differences between the desired state (in code) and the actual state of infrastructure. It reconciles these differences in alignment with the GitOps principle for continuous reconciliation. -Policy as code | You can define and enforce policies as code by using Pulumi CrossGuard. This enables version-controlled, GitOps-style management of compliance and security policies. -Secrets management | Pulumi provides secure ways to manage sensitive information within infrastructure code. It supports integration with external secrets management systems, which is crucial for GitOps security practices. -Modular and reusable components | Pulumi supports the creation of reusable components and modules. This modularity aligns with GitOps practices for managing complex, multi-environment deployments. -Preview and plan | Pulumi offers the ability to preview changes before applying them. This supports the GitOps principle of safe, predictable changes to infrastructure. -Rollbacks and history | Pulumi maintains a history of deployments and supports rollbacks to previous states. This aligns with GitOps principles of traceability and reversibility. -Continuous delivery for infrastructure | Pulumi can be integrated into CI/CD pipelines for continuous delivery of infrastructure changes. It supports automated testing and validation of infrastructure code. -RBAC and access control | Pulumi provides role-based access control for managing who can make changes to infrastructure. This supports GitOps security and governance practices. -Observability and logging | Pulumi offers logging and monitoring capabilities for infrastructure changes. These capabilities support the observability aspect of GitOps practices. -Integration with other tools | Pulumi can integrate with various tools in the cloud. This flexibility allows for comprehensive GitOps workflows. -Environment management | Pulumi supports the management of multiple environments (development, staging, production) by using the same codebase with different configurations. This aligns with GitOps practices for consistent multi-environment management. -Dependency management | Pulumi handles dependencies between resources, and ensures the correct order of operations. This is crucial for complex GitOps deployments that involve interdependent components. -Custom resource providers | Pulumi lets you create custom providers to manage any API-driven service. This extends GitOps practices to a wide range of resources beyond standard cloud offerings. -Collaboration features | Pulumi supports team collaboration through shared state and access controls. This facilitates GitOps workflows in team environments. + * **IaC** : Pulumi lets you define your infrastructure by using general-purpose programming languages such as Python, TypeScript, and Go. This code-based approach aligns with the GitOps emphasis on versioned, declarative configurations. + + * **Git as the single source of truth** : Infrastructure code in Pulumi can be stored and version-controlled in Git repositories. This ensures that Git serves as the single source of truth for infrastructure definitions. + + * **Declarative desired state** : Although Pulumi uses programming languages, it still describes the desired state of infrastructure declaratively. The code defines what the infrastructure should look like, not the step-by-step process to create it. + + * **Automated synchronization** : Pulumi can be integrated with CI/CD pipelines to automatically apply changes when code is updated in Git. This enables continuous deployment of infrastructure changes, which is a key GitOps principle. + + * **Multi-cloud and Kubernetes support** : Pulumi supports a wide range of cloud providers and Kubernetes, so you can follow GitOps practices across diverse environments. The tool enables consistent management of resources across different platforms. + + * **State management** : Pulumi manages the state of infrastructure, which can be stored remotely and securely. This state management is crucial for GitOps practices, and ensures consistency between the defined state and the actual state of your infrastructure. + + * **Drift detection and reconciliation** : Pulumi can detect differences between the desired state (in code) and the actual state of infrastructure. It reconciles these differences in alignment with the GitOps principle for continuous reconciliation. + + * **Policy as code** : You can define and enforce policies as code by using Pulumi CrossGuard. This enables version-controlled, GitOps-style management of compliance and security policies. + + * **Secrets management** : Pulumi provides secure ways to manage sensitive information within infrastructure code. It supports integration with external secrets management systems, which is crucial for GitOps security practices. + + * **Modular and reusable components** : Pulumi supports the creation of reusable components and modules. This modularity aligns with GitOps practices for managing complex, multi-environment deployments. + + * **Preview and plan** : Pulumi offers the ability to preview changes before applying them. This supports the GitOps principle of safe, predictable changes to infrastructure. + + * **Rollbacks and history** : Pulumi maintains a history of deployments and supports rollbacks to previous states. This aligns with GitOps principles of traceability and reversibility. + + * **Continuous delivery for infrastructure** : Pulumi can be integrated into CI/CD pipelines for continuous delivery of infrastructure changes. It supports automated testing and validation of infrastructure code. + + * **RBAC and access control** : Pulumi provides role-based access control for managing who can make changes to infrastructure. This supports GitOps security and governance practices. + + * **Observability and logging** : Pulumi offers logging and monitoring capabilities for infrastructure changes. These capabilities support the observability aspect of GitOps practices. + + * **Integration with other tools** : Pulumi can integrate with various tools in the cloud. This flexibility allows for comprehensive GitOps workflows. + + * **Environment management** : Pulumi supports the management of multiple environments (development, staging, production) by using the same codebase with different configurations. This aligns with GitOps practices for consistent multi-environment management. + + * **Dependency management** : Pulumi handles dependencies between resources, and ensures the correct order of operations. This is crucial for complex GitOps deployments that involve interdependent components. + + * **Custom resource providers** : Pulumi lets you create custom providers to manage any API-driven service. This extends GitOps practices to a wide range of resources beyond standard cloud offerings. + + * **Collaboration features** : Pulumi supports team collaboration through shared state and access controls. This facilitates GitOps workflows in team environments. + + +