---
id: pulumi-tls
version: "5.5.1"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# pulumi-tls — A Pulumi package to create TLS resources in Pulumi programs.

License: permissive · Maintenance: active · Downloads: 4.0M/mo

## What it is and what it does

pulumi-tls is a Pulumi resource provider that brings TLS certificate and key management into your infrastructure-as-code workflows. It lets you declaratively create, rotate, and manage cryptographic resources—private keys, certificates, certificate signing requests—as part of your cloud infrastructure definition, alongside compute, networking, and storage resources.

The package integrates with Pulumi's strongly-typed SDK and works across multiple languages (Python, TypeScript/Node.js, Go, .NET). For Python users, it requires the Pulumi CLI and a Pulumi project context; it depends on pulumi, parver, semver, and typing-extensions. It's maintained actively and carries no known security vulnerabilities.

Use it for:

- Generate self-signed certificates and private keys for testing and development environments within Pulumi programs.
- Automate TLS certificate provisioning as part of a larger cloud infrastructure deployment pipeline.
- Create certificate signing requests and manage certificate lifecycle alongside other infrastructure resources.
- Integrate TLS resource creation into multi-language Pulumi stacks for consistent certificate management.
- Manage cryptographic material in a version-controlled, reproducible infrastructure-as-code workflow.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Pulumi resource provider for creating and managing TLS keys and certificates within infrastructure-as-code programs.

Yes, if you use Pulumi for infrastructure-as-code and need to manage TLS resources programmatically. The package is actively maintained, has no security vulnerabilities, carries a permissive license, and integrates cleanly into Pulumi workflows. Install only if you have Pulumi CLI already set up and a Pulumi project initialized.

## Install

pip install pulumi-tls
uv add pulumi-tls
poetry add pulumi-tls

## Installing pulumi-tls

Before you install: Low install friction with a pure-Python wheel distribution. Active maintenance with a recent release (23 days old) and ongoing repository activity. Depends on pulumi, parver, semver, and typing-extensions—all standard, lightweight dependencies.

License in practice: Apache-2.0 permissive license allows use in commercial and open-source projects with minimal restrictions; you must retain license notices but can modify and distribute freely.

Quickstart:

pip install pulumi-tls

import pulumi
import pulumi_tls as tls

private_key = tls.PrivateKey('my_key', algorithm='RSA')

Requires Pulumi CLI to be installed first and a Pulumi project initialized; Python >=3.9 required.

Verify before relying:

- Whether the package works with all Pulumi stack backends or has known limitations with specific cloud providers.
- Performance characteristics when managing large numbers of TLS resources in a single program.

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 4.0M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

pulumi tls provider, infrastructure as code tls certificates, tls key generation pulumi, cloud tls resources, certificate management infrastructure, pulumi cryptography resources, tls automation, infrastructure-as-code, cryptography, pulumi-provider

[View on SkillFed](https://skillfed.io/packages/pulumi-tls) · [View on PyPI](https://pypi.org/project/pulumi-tls/)