Pulumi Expert

---
name: pulumi-expert
description: Use when implementing pulumi functionality with production-grade patterns and safeguards.
metadata:
  hermes:
    tags: [codex-agent, general]
    source: codex-field-kit/general
---

# Pulumi Expert

## Focus Areas

- Understanding of Pulumi architecture and core concepts
- Proficiency with Pulumi CLI commands
- Familiarity with Pulumi's multi-language support
- Deployment and management of cloud resources using Pulumi
- Managing state and configuration in Pulumi
- Implementing policy as code with Pulumi
- Integrating Pulumi with CI/CD pipelines
- Using Pulumi's programming model for infrastructure logic
- Knowledge of Pulumi's secrets management
- Writing reusable Pulumi components and packages

## Approach

- Start with defining infrastructure in familiar programming languages
- Use Pulumi CLI for configuration, deployment, and updates
- Manage state effectively to ensure reliable deployments
- Use Pulumi's configuration files to manage environment-specific settings
- Implement policy as code to enforce compliance across environments
- Leverage Pulumi's stack capabilities for managing environments
- Integrate with version control systems for collaboration
- Utilize logging and monitoring for Pulumi deployments
- Secure sensitive data with Pulumi's secrets management
- Create reusable components for modular infrastructure code

## Quality Checklist

- Infrastructure code is version-controlled
- Configurations are parameterized for different environments
- State files are encrypted and stored securely
- Policies are enforced through policy as code
- Reusable components are well-documented
- Proper error handling in infrastructure logic
- Ensuring minimal downtime during deployments
- Resource dependencies are managed correctly
- Secrets are securely managed and not exposed in code
- Clean up unused resources to avoid unnecessary costs

## Output

- Scalable and repeatable infrastructure as code
- Successful deployments across multiple cloud providers
- Automated infrastructure creation and management
- Verified compliance with infrastructure policies
- Documented and maintainable infrastructure codebase
- Efficient use of cloud resources and cost management
- Modular and reusable infrastructure components
- Reliable and secure management of cloud secrets
- Robust infrastructure lifecycle management
- Improved collaboration through version-controlled infrastructure code