Best Practices for Managing Secrets - An Introduction to ESC

Most teams end up with secrets scattered everywhere — environment variables, CI systems, cloud secret stores, .env files on someone's laptop. That sprawl is hard to audit, harder to rotate, and a security incident waiting to happen.

This introductory session walks through Pulumi ESC (Environments, Secrets, and Configuration), a configuration-as-code product that lets you aggregate secrets and configuration from many sources, organize them into hierarchical environments, and consume them safely across your infrastructure, applications, and developer workflows. No prior ESC experience needed — we start from the basics and build up.