Consolidation and streamlining of config/secrets

What I like best about Pulumi ESC is its flexibility and scalability. It offers a solution that can grow with your project's needs. The best parts are that it's a configuration and secrets manager that integrates with things like 1Password, Vault, AWS Secrets Manager and Google Secret Manager. It is easy to scale with, starting small and giving you the options as you grow. One key feature that helps you when you grow is support for hiearchical configuration, making it easy to organize complex sets of variables. I also really like it because it works seamlessly with Pulumi's ecosystem, and way it's built follows the same way their Infrastructure as Code software is built, which is great.

ESC is not just some vault to store secrets , it's a place to centralize your environment configuration and that can get secrets and settings from different sources (vaults and other tools). I like the fact it can integrate with many things. Being able to retrieve from your ESC environment short cloud access tokens using OpenID Connect is awesome. Combined with Pulumi IaC, managing stack configuration becomes as simple as importing an ESC Environment. One thing to mention is that we can manage an ESC environment using the new Pulumi vscode extension. I have recently tried it and it's my favorite way to add a secret or edit a configuration entry on ESC.