August 2022 Summaries

Pulumi has announced significant updates to its Service, enhancing the user experience of its infrastructure as code platform. The improvements include increased organizational insights on the Service Dashboard, a new Stack Favorites feature for quick access to frequently used stacks, and a revamped left navigation pane for easier navigation. These changes aim to provide a more intuitive interface, allowing users to manage infrastructure more effectively. The updates result from user consultations and feedback, with testimonies like that of Jordan Rinke from dutchie, who praised the improved user experience. Users are encouraged to explore the new features by signing into their accounts or creating a free account, with Pulumi welcoming further feedback through its community channels.

The blog post provides a comprehensive guide on building and deploying a static website for a fictional café, the Pulumi Café, using the Angular framework and Pulumi's AWS Static Website component. It explains the basics of Angular, an open-source UI framework based on the Model-View-Controller design pattern, highlighting the use of reusable components for constructing web pages. The deployment process is simplified by Pulumi, a tool that automates the setup of AWS S3 static websites, potentially integrating with CloudFront CDN. The post includes detailed instructions on setting up the project environment, modifying necessary configuration files, and deploying the site using minimal code. It emphasizes Pulumi's capability to manage deployment efficiently, including tasks like taking down the site and tracking changes, while providing links for further learning about Pulumi, AWS Static Website components, and Angular.

Pulumi has introduced Team Access Tokens, expanding on the previously launched Organization Access Tokens, to meet customer demand and feedback for more refined access control. These new tokens allow Organization and Team Admins to create access tokens specifically scoped to a Pulumi Team, enhancing role-based access controls for stacks. The feature is available to customers using the Enterprise and Business Critical editions of the Pulumi Service, enabling fine-grained permissions through identity provider integrations. Team Access Tokens are designed for more precise access management, offering less privilege than Organization Access Tokens and more specific access than Personal Access Tokens. Snowflake, a Pulumi customer, has expressed enthusiasm for the new feature, indicating it will aid in managing Pulumi stacks at scale by adhering to the principle of least privilege. The tokens facilitate secure programmatic access for CI/CD tools and automated processes, offering an efficient solution for enterprise customers using SSO/SAML/SCIM. The feature is now available for all eligible customers, including those on a 14-day trial.

Pulumi has introduced a Billing Manager role for its service, designed to streamline billing processes for organizations by allowing designated users to manage billing operations without accessing other sensitive areas, such as stacks. Accessible only to those added by Organization Admins, the Billing Manager can update credit card information, view invoices, and manage seat numbers depending on the Pulumi Service Edition in use. The Team Growth Edition allows one Billing Manager per organization, while the Enterprise Growth and Business Critical Editions permit unlimited Billing Managers. This role aims to alleviate reported customer pain points by providing specific permissions that cater to the organization's billing needs. Pulumi encourages feedback on this feature through its GitHub repository or Community Slack.

Pulumi's approach to addressing data challenges involves using Metabase, a Business Intelligence tool that aids in visualizing and collaborating on data from multiple databases without requiring deep knowledge of query languages like SQL. Initially struggling with disparate data systems, Pulumi consolidated its data into AWS Redshift and sought a scalable solution for organizational data collaboration, opting for the free, self-hosted Metabase due to cost constraints. Deploying Metabase involved using Docker on AWS ECS, requiring the development of a Pulumi Component to manage resource provisioning, which has since evolved into an open-source Pulumi Package. This package facilitates running Metabase on AWS ECS, offering configurations from basic setups to those involving custom VPCs, subnets, and domains, thereby enabling organizations to quickly adopt a data-driven approach without complex infrastructure concerns.

Pulumi simplifies the deployment of cloud infrastructure through code, enabling flexible configurations that can span multiple regions, accounts, or clusters for improved performance, scalability, and resilience. While typically deployments involve a single stack and region, Pulumi allows for a more dynamic setup, as illustrated by the deployment of an AWS RDS primary database in one region and a read replica in another, all managed from a single Pulumi program. This approach uses both implicit configuration via the CLI and explicit provider configuration set programmatically, which allows for precise and flexible control over resource deployment. The example highlights the capability to manage infrastructure across regions, showcasing Pulumi’s adaptability in handling complex, multi-regional architectures while leveraging the full power of programming languages to orchestrate deployments effectively.