In this third part of Modern IaC solution based on Pulumi I will go through how we handled authentication against Azure and Pulumi in code. I will also show you how we used Azure Key Vault to handle our secrets.
In the previous post Modern IaC solution based on Pulumi – Part 2 I went through our approach to self-manage the Pulumi backend in Azure. It involved creating Azure Blob Storage for storing Pulumi stack states and a Key Vault for config/secret encryption. I also showed how we created a Service Principal for logging in and interacting with Azure.