ESC is not just some vault to store secrets, it's a place to centralize your environment configuration and that can get secrets and settings from different sources (vaults and other tools). I like the fact it can integrate with many things.

Being able to retrieve from your ESC environment short cloud access tokens using OpenID Connect is awesome. Combined with Pulumi IaC, managing stack configuration becomes as simple as importing an ESC Environment.

One thing to mention is that we can manage an ESC environment using the new Pulumi vscode extension. I have recently tried it and it's my favorite way to add a secret or edit a configuration entry on ESC. Review collected by and hosted on G2.com.

Configuring OpenId Connect for Pulumi ESC to retrieve short cloud access tokens could be easier. Review collected by and hosted on G2.com.