Pulumi

Recently shipped an ISO 27001 policy pack for AWS, versioned CLI and SDK docs, and deepened Neo code reviews with debug flags.

ISO 27001 compliance landed as a pre-built policy pack for AWS. The iso-27001-aws pack ships 238 ready-to-run policies that encode the standard's security controls, collapsing months of compliance work into a continuous check.

Versioned CLI and SDK docs now match the exact release you're running. The CLI command reference and SDK API docs include a version selector, so documentation stays pinned to the version you're using.

Neo code reviews gained debug flags and deeper integration. New --debug-update and --debug-preview flags help investigate failed operations. The AI agent also supports --disable-integrations to run without credentials, and sessions can be suspended with Ctrl+Z and resumed with fg.

ESC secret rotation webhooks close the notification gap. When an ESC environment's secrets rotate on schedule, webhooks now trigger on success or failure — notifying Slack, refreshing dependent services, or catching failures before outages.

Provider and CLI enhancements. The Service Provider v1.0 was regenerated from the OpenAPI spec, unlocking fine-grained RBAC, Pulumi IDP, and audit log export as IaC. The CLI gained --skip-config-validation, --output json across major commands, --raw for config set, --provider for do, and automatic logging by default. A new --reason flag on pulumi env open-request explains requests to approvers. The import command is now available in the generated automation APIs for NodeJS, Python, and Go. Note: the experimental pulumi deployment settings subcommands (init, pull, configure, env) have been removed.