rewindex

CompaniesPulumiIncidents

Pulumi: Elevated errors when decrypting ESC environments

No impact listedStatus: resolvedStarted Resolved (-23555 min)1 updatestspg.io (opens in new tab)

Timeline of updates

  1. resolved

    Some Pulumi Cloud organizations experienced elevated errors when decrypting ESC environments. A subset of environment revisions were affected, and those revisions failed to decrypt 100% of the time during the window. Overall, 3.32% of decrypt-attempt requests across Pulumi Cloud failed due to this issue.

    At the start of the window, we rolled out a change that prevented secret ciphertext copied from an ESC environment from being decrypted in other environments. Customers who had previously copied ciphertext between environments were affected. Users saw a message: “decryption failed. If this secret's ciphertext was copied from a different environment, copy and paste the plaintext instead.” This change was intended as a security improvement, but the customer impact was higher than expected, so the change was rolled back.

    The ESC team has conducted an internal postmortem to understand the misjudged customer impact, improve our responsiveness to scenarios like this, and created a plan to launch this security improvement without customer disruption.

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).

Cite this

Status incident (vendor impact label: none) posted by Pulumi, started 2026-05-06 19:05 UTC, resolved after -23555 min, 1 update(s).

Title
Elevated errors when decrypting ESC environments
Vendor
Pulumi
Date
URL
https://rewindex.com/company/pulumi/incidents/xt4d22bv4jdw

Pulumi profileRecent Pulumi incidentsAll outages on May 6, 2026Pulumi in May 2026MarkdownJSON