Pulumi Cloud Infrastructure Automation Training Course
| Course code | SD-CC-025 |
|---|---|
| Duration | 5 days |
| Level | Intermediate |
| Category | Cloud Computing |
| Delivery | Classroom or live online |
| Language | English |
| Certificate | Certificate of completion |
Course overview
Cloud teams often inherit manually created environments, inconsistent naming, undocumented access settings and deployment scripts that cannot be safely repeated. This course addresses the practical need to define, deploy and govern cloud infrastructure as version-controlled software using Pulumi. Participants learn how to replace console-driven provisioning with reusable infrastructure code, promote approved changes across development, test and production stacks, and give engineering teams a reliable audit trail for cloud changes.
The course develops hands-on capability with Pulumi’s programming model, the Pulumi CLI, Pulumi Cloud and TypeScript. Participants build cloud resources, organise projects and stacks, manage configuration and encrypted secrets, create reusable component resources, and model dependencies between services. They also apply previews, refresh operations, imports and stack outputs to control existing environments; write automated tests; configure policy checks; and integrate Pulumi deployments into GitHub Actions pipelines. AWS examples are used to make resource provisioning, identity controls and network configuration concrete.
Instruction combines guided demonstrations with structured labs based on a realistic application platform. Each participant works through a progressive repository that evolves from a basic cloud environment into a deployable, governed infrastructure project. The final deliverable is a Pulumi project containing reusable components, environment-specific stack configuration, encrypted secrets handling, automated validation and a CI deployment workflow. Participants leave with code patterns, review checklists and an implementation plan they can adapt to their own cloud estate.
The course is best suited to engineers and technical leads who already work with cloud services and need a disciplined way to automate infrastructure delivery across teams.
Course objectives
By the end of this course, participants will be able to:
- Create Pulumi projects and stacks in TypeScript using the Pulumi CLI
- Provision AWS networking, compute and storage resources through declarative Pulumi programs
- Manage stack configuration, encrypted secrets and environment-specific values in Pulumi Cloud
- Build reusable component resources with clear inputs, outputs and dependency handling
- Apply previews, refreshes, imports and stack outputs to safely manage existing infrastructure
- Write automated unit tests for Pulumi infrastructure code using mocked cloud resources
- Configure Pulumi CrossGuard policy packs to enforce infrastructure guardrails
- Implement a GitHub Actions workflow that validates and deploys approved Pulumi stack changes
Benefits of attending
For you
- Build production-oriented infrastructure automation in TypeScript rather than relying on manual cloud console steps
- Demonstrate practical Pulumi Cloud experience through a completed multi-stack infrastructure repository
- Gain confidence reviewing infrastructure pull requests using previews, diffs, policy results and deployment logs
- Expand eligibility for cloud engineering, platform engineering and DevOps roles that require infrastructure-as-code delivery
- Develop reusable component patterns that reduce repeated implementation work across future cloud projects
For your organisation
- Reduce configuration drift by moving repeatable cloud provisioning from manual console activity into version-controlled code
- Improve change control through Pulumi previews, pull-request review and recorded deployment history in Pulumi Cloud
- Standardise environment setup with shared components, stack configuration and consistent naming conventions
- Lower security and compliance risk by applying encrypted secret management and policy-as-code guardrails before deployment
- Shorten delivery time for new application environments through tested infrastructure templates and CI automation
Target competencies
Who should attend
- Cloud Engineers — who need repeatable, code-reviewed provisioning across cloud environments
- DevOps Engineers — who build CI/CD workflows and want infrastructure changes deployed through the same controls as application code
- Site Reliability Engineers — who need predictable environments, traceable changes and recoverable infrastructure definitions
- Platform Engineers — who create reusable self-service infrastructure patterns for development teams
- Software Engineers — who provision application dependencies and prefer using familiar programming languages for infrastructure
- Technical Leads — who must establish practical infrastructure-as-code standards, review practices and delivery guardrails
Requirements and prerequisites
Participants should be comfortable using a command line, Git branches and pull requests, and a code editor such as Visual Studio Code. They need working knowledge of core cloud concepts including IAM permissions, virtual networks, subnets, compute, storage and environment separation; AWS familiarity is helpful because lab resources use AWS. Basic programming ability in TypeScript, JavaScript, Python, C# or Go is assumed, with TypeScript used in demonstrations and labs. Prior Pulumi or Terraform experience is not required, and participants do not need advanced software engineering, Kubernetes or CI/CD expertise.
Training methodology
The five-day programme alternates short instructor-led explanations with guided Pulumi CLI demonstrations and individual coding labs. Participants work in a shared AWS-based case study, progressively building a TypeScript infrastructure repository rather than completing isolated commands. Pair reviews are used for stack design, component interfaces and policy decisions, while troubleshooting sessions examine preview failures, dependency issues and state differences. On the final day, participants complete a deployment workflow and produce a prioritised plan for introducing Pulumi into their own team’s delivery process.
Course outline
Day 1: Pulumi foundations and infrastructure project structure
- Infrastructure as code principles and Pulumi’s declarative programming model
- Pulumi CLI installation, authentication and local project workflow
- Pulumi project files, stack files and program entry points
- TypeScript resource declarations and asynchronous Output values
- Resource options, parent-child relationships and explicit dependencies
- Pulumi Cloud stack history, deployment records and team access concepts
- Preview, update, destroy and refresh operations
Workshop: Create and deploy a TypeScript Pulumi project that provisions a tagged AWS resource group baseline and records the first stack update in Pulumi Cloud.
Day 2: Cloud resource modelling, configuration and secrets
- AWS provider configuration and region-specific stack settings
- Virtual private cloud, subnet and security group resource definitions
- Stack configuration values and configuration schema design
- Pulumi secret encryption and secure retrieval of sensitive values
- Stack references and cross-stack output consumption
- Resource naming, tagging and environment parameter conventions
- Imports and aliases for bringing existing cloud resources under management
Workshop: Build separate development and production network stacks with encrypted configuration, exported outputs and an imported existing resource.
Day 3: Reusable components and application platform automation
- ComponentResource design for reusable infrastructure building blocks
- Input and output interfaces for TypeScript component resources
- Packaging shared components and versioning internal infrastructure libraries
- Provisioning compute, IAM roles and object storage dependencies
- Dependency graphs and implicit versus explicit resource ordering
- Provider inheritance and multi-region deployment patterns
- Pulumi transformations for consistent tags and resource settings
Workshop: Develop a reusable application-environment component that deploys network, IAM, compute and storage resources from a defined interface.
Day 4: Testing, policy controls and deployment automation
- Pulumi unit testing with runtime mocks
- Testing resource properties, outputs and component behaviour
- Pulumi CrossGuard policy pack structure and enforcement levels
- Writing policies for tags, encryption and public network exposure
- Policy evaluation during preview and update operations
- GitHub Actions workflow triggers, authentication and Pulumi commands
- Pull-request previews and protected production deployment approvals
Workshop: Add mocked unit tests, a CrossGuard policy pack and a GitHub Actions pull-request workflow to the application infrastructure repository.
Day 5: Operationalising Pulumi across teams
- Stack lifecycle strategy for development, test, production and shared services
- Pulumi Cloud organisations, teams, permissions and deployment settings
- Drift detection with refresh operations and operational response procedures
- State recovery considerations, exports and controlled rollback approaches
- Infrastructure code review criteria and pull-request quality gates
- Migration planning from manual environments and existing infrastructure-as-code tools
- Measuring automation adoption through deployment lead time, failure rate and drift findings
Workshop: Complete a capstone deployment of the governed application platform and produce a Pulumi adoption plan covering stacks, repositories, controls and rollout priorities.
Tools & standards covered
Pulumi CLI, Pulumi Cloud, TypeScript, GitHub Actions
A typical training day
| 08:30 – 10:30 | First session |
| 10:30 – 10:45 | Refreshment break |
| 10:45 – 12:30 | Second session |
| 12:30 – 13:30 | Lunch and networking |
| 13:30 – 15:00 | Third session |
| 15:00 – 15:15 | Refreshment break |
| 15:15 – 16:30 | Workshop and daily review |
Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.
What the fee includes
- Instruction by a practitioner facilitator
- Full course workbook and materials
- Exercise files, templates and case studies
- Certificate of completion
- Refreshments and lunch (classroom deliveries)
- Post-course application plan
- Facilitator follow-up on request
- Group rates from five participants
How you can take this course
Classroom
Scheduled sessions in Nairobi, Mombasa, Kigali, Dar es Salaam, Dubai and Cape Town.
Live online
The same facilitator and materials, delivered live for distributed teams and individuals.
In-house
Delivered privately for your team, at your offices or a venue of your choice, tailored to your context. Request a proposal.
Certification
Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.
Frequently asked questions
Upcoming sessions
New dates are being scheduled. Ask us about the next session or an in-house delivery for your team.
Ask about datesGroup of 5+?
Request in-house delivery or group rates →Related courses in Cloud Computing
Datadog Cloud Monitoring and Observability Training Course
Cloud teams often have metrics in one dashboard, logs in another, incomplete service ownership, and alerts that fire without identifying the…
Cloud Services for Public Sector Digital Teams Training Course
Public-sector digital teams must modernise citizen-facing services while protecting sensitive data, sustaining continuity, meeting procureme…
Cloud Security Alliance CCM Controls Implementation Training Course
Cloud security programmes often contain sound policies but lack a consistent way to translate cloud risks, provider assurances and technical…
Kubernetes Cloud Deployment and Operations Training Course
Kubernetes teams are expected to release services reliably while controlling cloud spend, maintaining secure configurations and resolving in…