Pulumi

Pulumi is an infrastructure-as-code CLI and engine for defining cloud resources in general-purpose languages, previewing planned changes, and applying them to named stacks. It also manages stack configuration, secrets, imports, plugins, and Pulumi Cloud workflows from the shell.

• Define cloud and Kubernetes infrastructure in TypeScript, Python, Go, .NET, Java, or YAML, preview the diff, and apply or destroy stack changes.
• Import existing resources, refresh drifted state, inspect stack outputs or identity, and edit stack state when recovery or migration work is needed.
• Manage stack config, secrets, plugins, templates, environments, policy packs, and Pulumi Cloud deployment or org/project workflows from scripts or CI.

• Real --json support on preview, up, import, stack output, whoami, and logs makes plan, output, and metadata parsing practical.
• It fits inspect-change-verify loops well once project code, stack selection, backend access, and cloud credentials are already in place.
• Default workflows still lean on previews and confirmations; unattended runs usually need --non-interactive plus flags like --yes or --skip-preview, and --remote currently disables --json.

• Many operations execute the Pulumi program and provider plugins before planning, so results depend on the local project, language runtime, and credentials being set up correctly.
• Some commands are tied to Pulumi Cloud or experimental features, so not every useful workflow is purely local or fully headless.