Skip to content

Integrating SailPoint with Pulumi

Pulumi is a modern infrastructure as code (IaC) platform that lets teams provision and manage cloud resources using familiar programming languages. The Pulumi Cloud organization model groups members and assigns them fine-grained access (FGA) roles that control what they can do inside an organization. This document provides instructions to configure a new direct connection to a Pulumi source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Pulumi connector supports the following:

Account Management

  • Aggregate Accounts

Entitlement Management

  • Aggregate Roles

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • You have a Pulumi Cloud account with administrative access to the target organization.
  • You have access to the Pulumi Cloud console and can manage organization access tokens.
  • You have the Organization Name of the Pulumi organization you want to manage.
  • To create an access token, complete the following steps:
    1. Sign in to the Pulumi Cloud console.
    2. Go to Personal settings > Access Tokens (or Organization settings > Access Tokens for an organization token).
    3. Select Create token and provide a description.
    4. Securely copy the generated token value.
  • For more information about access tokens, refer to the Pulumi Cloud Access Tokens guide.
  • The organization name is the slug shown in your Pulumi Cloud URLs (for example, https://app.pulumi.com/<organization>). You can also find it under Organization settings > General in the Pulumi Cloud console.

Required Permissions

  • The access token used for the connector must be issued by an Admin user:
    • Members can fetch users/org members.
    • Admins are required to fetch roles - elevated access is necessary as role data is restricted to admin-level tokens only.
  • For more information about access management, refer to the Pulumi Cloud Access Management documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.