Skills Pulumi

Convert, migrate, or import AWS CloudFormation stacks or templates into Pulumi programs. Load this skill whenever a user wants to move from CloudFormation to…

Track which stacks across a Pulumi organization use a specific package and at what versions. Use for cross-stack audits, identifying outdated or unmaintained…

A provider upgrade is a translation, not a change request.

Convert ARM templates, Bicep, or existing Azure resources to Pulumi infrastructure code. Handles complete ARM template conversion to Pulumi (TypeScript, Python, Go, C#, Java, or YAML) with support for parameters, variables, loops, conditionals, and nested templates Supports both azure-native (full API coverage) and azure (classic, simplified) providers; automatically selects the right provider for each resource Imports existing deployed Azure resources into Pulumi with zero-diff validation...

Programmatic orchestration of Pulumi infrastructure operations across multiple stacks and applications. Supports both local source (existing Pulumi projects) and inline source (embedded programs) architectures, enabling flexible deployment patterns from simple to complex multi-stack scenarios Handles multi-stack orchestration with dependency sequencing, parallel independent deployments, and cross-stack output passing for coordinated infrastructure provisioning Provides programmatic...

Comprehensive best practices for writing reliable, maintainable Pulumi infrastructure code. Avoid creating resources inside apply() callbacks; pass Output objects directly as inputs to preserve dependency tracking and preview visibility Use ComponentResource classes to group related resources into reusable logical units with proper parent-child hierarchy via parent: this Encrypt secrets from the start with --secret flag or config.requireSecret() to prevent credential leakage in state files...

Load this skill when a user wants to migrate, convert, port, translate, or move an AWS CDK application (including CDK stacks, constructs, or…

Reusable infrastructure components with multi-language support, sensible defaults, and composition patterns. Requires four core elements: extend ComponentResource , accept standard parameters, set parent: this on all children, and call registerOutputs() at the end of the constructor Args interfaces must use Input<T> wrappers, avoid union types and functions, and keep structures flat to support multi-language SDK generation Expose only essential outputs as public properties; hide...

Centralized secrets, configuration, and dynamic credentials management for Pulumi infrastructure and applications. Supports environment composition through imports and layering, with reserved keys for environmentVariables , pulumiConfig , and files Generates short-term credentials via OIDC for AWS, Azure, and GCP; integrates with AWS Secrets Manager, Azure Key Vault, HashiCorp Vault, and 1Password Core CLI commands include pulumi env init , pulumi env edit , pulumi env open (reveals...

Migrate Terraform/OpenTofu projects to Pulumi, including translating HCL source code and/or importing Terraform state into a Pulumi stack. Use when a user…

Automate Pulumi provider repo upgrades with the `upgrade-provider` tool. Use when upgrading a pulumi provider repository to a new upstream version, running…

Create, amend, remove, and rebase patches for Terraform provider submodules using `./scripts/upstream.sh`. Use when `upgrade-provider` or manual patch work…