Pulumi policy packs can now reference Pulumi ESC (Environments, Secrets, and Configuration) environments, eliminating the need to hardcode credentials or configuration values in policy group configs. This enables centralized secrets management, environment-specific configuration (e.g., different thresholds for staging vs. production), dynamic credentials from cloud providers, and audit trails for credential access. The integration works by attaching an ESC environment to a policy pack within a policy group, making resolved values available at runtime via policyConfig or environment variables.
Sort: