PULUMI ESC NOW ISSUES OIDC TOKENS FOR ANY SERVICE

Summary from the TLDR DevOps newsletter

Pulumi ESC environments can now mint short-lived OpenID Connect (OIDC) tokens for any service that accepts one. The new fn::open::oidc provider generates tokens that expire within one hour, eliminating the security risks associated with storing long-lived API keys. Developers can use these tokens to authenticate with services like Anthropic, Cloudsmith, JFrog Artifactory, and Aembit without storing static credentials. The feature is available now in every Pulumi Cloud organization.