Guidance for working with Pulumi ESC (Environments, Secrets, and Configuration).
pulumi-pulumi-esc/SKILL.md
---
name: pulumi-esc
description: Guidance for working with Pulumi ESC (Environments, Secrets, and Configuration). Use when users ask about managing secrets, configuration, environments, short-term credentials, configuring OIDC for AWS, Azure, GCP, integrating with secret stores (AWS Secrets Manager, Azure Key Vault, HashiCorp Vault, 1Password), or using ESC with Pulumi stacks.
---
# Pulumi ESC (Environments, Secrets, and Configuration)
Pulumi ESC is a centralized service for managing environments, secrets, and configuration across cloud infrastructure and applications.
## What is ESC?
ESC enables teams to:
- **Centralize secrets and configuration** in one secure location
- **Compose environments** by importing and layering configuration
- **Generate dynamic credentials** via OIDC for AWS, Azure, GCP
- **Integrate external secret stores** (AWS Secrets Manager, Azure Key Vault, Vault, 1Password)
- **Version and audit** all configuration changes
- **Control access** with fine-grained RBAC
## Essential CLI Commands
```bash
# Create a new environment
pulumi env init <org>/<project-name>/<environment-name>… load the full skill through Skill MeIn any connected conversation, say:
Install the Pulumi Esc skill
If full content is available, it applies in this conversation and stays installed for future sessions.
Not connected yet? It takes about a minute.
Connect your AIOr add it to a project with the CLI
npx @skillme/cli add pulumi-pulumi-escMCP endpoint
https://skillme.dev/api/mcpUse it across a team
Pin this skill in a team library and every member's AI loads this exact version until an admin updates it.
How Teams works