{ "opencollection": "1.0.0", "info": { "name": "Pulumi APIs AccessTokens Environments API", "version": "1.0.0" }, "items": [ { "info": { "name": "Environments", "type": "folder" }, "items": [ { "info": { "name": "ListEnvironments", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments", "params": [ { "name": "continuationToken", "value": "", "type": "query", "description": "Continuation token for paginated results" }, { "name": "includeReferrerMetadata", "value": "", "type": "query", "description": "Whether to include referrer metadata. Defaults to false." }, { "name": "maxResults", "value": "", "type": "query", "description": "Maximum number of results for pagination" }, { "name": "organization", "value": "", "type": "query", "description": "Filter results to this organization name" } ] }, "docs": "Returns a paginated list of all Pulumi ESC environments accessible to the authenticated user across all organizations they belong to. Each entry includes the organization, project, environment name, and creation/modification timestamps. Use the organization query parameter to filter results to a specific organization. Use continuationToken for pagination through large result sets." }, { "info": { "name": "ListOrgEnvironments", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "continuationToken", "value": "", "type": "query", "description": "Continuation token for paginated results" }, { "name": "includeReferrerMetadata", "value": "", "type": "query", "description": "Whether to include referrer metadata. Defaults to false." }, { "name": "maxResults", "value": "", "type": "query", "description": "Maximum number of results for pagination" }, { "name": "roleID", "value": "", "type": "query", "description": "The custom role to use for listing environments" } ] }, "docs": "Returns a paginated list of all Pulumi ESC environments within a specific organization. Each entry includes the project, environment name, and creation/modification timestamps. Results are scoped to the organization specified in the URL path. Use continuationToken for pagination through large result sets." }, { "info": { "name": "CreateEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a new Pulumi ESC (Environments, Secrets, and Configuration) environment within the specified organization. The request body must include the project name and the environment name. Environment names must be unique within a project and may only contain alphanumeric characters, hyphens, underscores, and periods. The newly created environment starts with an empty YAML definition that can be updated via the UpdateEnvironment endpoint." }, { "info": { "name": "ListDeletedEnvironments", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/restore", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "continuationToken", "value": "", "type": "query", "description": "Continuation token for paginated results" } ] }, "docs": "Returns a paginated list of soft-deleted Pulumi ESC environments within an organization that are still within the retention window and eligible for restoration. Use the continuationToken query parameter for pagination. Deleted environments can be restored via the RestoreEnvironment endpoint." }, { "info": { "name": "RestoreEnvironment", "type": "http" }, "http": { "method": "PUT", "url": "{{baseUrl}}/api/esc/environments/:orgName/restore", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Restores a previously deleted Pulumi ESC environment within an organization. The request body specifies the environment to restore by its project and name. The environment must have been deleted within the retention window and not yet permanently purged. Returns 204 on success with no response body. Returns 404 if the deleted environment cannot be found." }, { "info": { "name": "ListAllEnvironmentTags", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" } ] }, "docs": "Returns a map of all unique tag names and their distinct values across all Pulumi ESC environments in the organization. The response is a map where each key is a tag name and the value is a list of all distinct values for that tag across all environments. This is useful for building tag-based filtering or discovery UIs." }, { "info": { "name": "CheckYAML", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/yaml/check", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "showSecrets", "value": "", "type": "query", "description": "Whether to show secret values in plaintext" } ] }, "docs": "Checks a raw YAML environment definition for errors without creating or modifying any environment. The YAML definition is provided in the request body and validated for correctness, including imports, provider configurations, function invocations, and interpolation expressions. When the showSecrets query parameter is set to true, secret values are returned in plaintext in the response. This is useful for validating environment definitions before applying them." }, { "info": { "name": "OpenYAML", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/yaml/open", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "duration", "value": "", "type": "query", "description": "The session duration, using Go time units: ns, us, ms, s, m, h (e.g. '2h')" } ] }, "docs": "Opens an anonymous Pulumi ESC environment from a raw YAML definition provided in the request body, fully resolving all dynamic values, provider integrations, and secrets. Unlike OpenEnvironment, this does not require a pre-existing environment to be stored. The duration parameter specifies how long the session remains valid using Go duration format. Returns an OpenEnvironmentResponse containing the session ID. Use the session ID with ReadAnonymousOpenEnvironment to retrieve the resolved values." }, { "info": { "name": "ReadAnonymousOpenEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/yaml/open/:openSessionID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "openSessionID", "value": "", "type": "path", "description": "The session ID returned from the open environment operation" }, { "name": "property", "value": "", "type": "query", "description": "A dot-separated path to a specific property to retrieve from the environment" } ] }, "docs": "Reads the fully resolved values from an anonymous open environment session that was created via the OpenYAML endpoint. The openSessionID path parameter must match a valid, non-expired session. The optional property query parameter accepts a dot-separated path to retrieve a specific nested value instead of the entire resolved environment (e.g., 'aws.credentials.accessKeyId'). The response contains the resolved configuration values with secrets decrypted." }, { "info": { "name": "ReadEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns the YAML definition of a Pulumi ESC environment. The response is in application/x-yaml format and includes the environment's imports, values, provider configurations, and function invocations. Secrets remain in their encrypted form (use DecryptEnvironment to see plaintext secrets, or OpenEnvironment to fully resolve all dynamic values). When a version path parameter is provided, returns the definition for that specific revision." }, { "info": { "name": "UpdateEnvironment", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Validates and updates the YAML definition of a Pulumi ESC environment. The request body must contain the complete environment definition in application/x-yaml format, including imports, values, provider configurations, and function invocations. Each successful update creates a new immutable revision in the environment's version history. Supports optimistic concurrency control via ETag/If-Match headers; returns 409 if the environment has been modified since it was last read." }, { "info": { "name": "DeleteEnvironment", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Permanently deletes a Pulumi ESC environment and all of its revision history, tags, and associated configuration. This operation is blocked if deletion protection is enabled on the environment (see PatchEnvironmentSettings). Enterprise and Business Critical edition organizations may be able to restore deleted environments within a retention window. Returns 409 if the environment is deletion-protected or has been modified since it was last read." }, { "info": { "name": "HeadEnvironment", "type": "http" }, "http": { "method": "HEAD", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns the ETag header for a Pulumi ESC environment without returning the full definition body. This is used for lightweight existence checks and for obtaining the current ETag value for optimistic concurrency control. The ETag should be included in subsequent update requests via the If-Match header to prevent concurrent modification conflicts. Returns 404 if the environment does not exist." }, { "info": { "name": "CheckEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/check", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "showSecrets", "value": "", "type": "query", "description": "Whether to show secret values in plaintext" } ] }, "docs": "Checks a Pulumi ESC environment definition for errors without applying changes. This validates the YAML definition including imports, provider configurations, function invocations (fn::open, fn::secret, etc.), and interpolation expressions. When the showSecrets query parameter is set to true, secret values are returned in plaintext in the response. The response includes any diagnostics or validation errors found in the environment definition. Supports optimistic concurrency control via ETag head" }, { "info": { "name": "CloneEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/clone", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a duplicate of a Pulumi ESC environment in a new project and/or under a new name. The request body specifies the destination project and environment name, along with options to control what is preserved during the clone: preserveAccess retains permission settings, preserveHistory retains the full revision history, preserveEnvironmentTags retains environment-level tags, and preserveRevisionTags retains version-specific tags. Environments cannot be renamed directly, so cloning is the mecha" }, { "info": { "name": "DecryptEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/decrypt", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Reads the YAML definition for a Pulumi ESC environment with all static secrets decrypted and shown in plaintext. Unlike the standard ReadEnvironment endpoint which returns secrets in their encrypted form, this endpoint resolves fn::secret values to their plaintext representations. The response is returned in application/x-yaml format. This does not resolve dynamic provider values (fn::open); use OpenEnvironment for full resolution. Requires environment open permission." }, { "info": { "name": "DecryptEnvironmentSecrets", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/decrypt-secrets", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Decrypts encrypted secret values in a Pulumi ESC environment definition. Takes an environment definition containing encrypted secrets and returns the same definition with those values decrypted to plaintext. This is useful for inspecting or migrating environment definitions that contain fn::secret values. Requires environment open permission. Returns 413 if the request content exceeds the maximum allowed size." }, { "info": { "name": "CreateEnvironmentDraft", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/drafts", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Creates a new draft change request for a Pulumi ESC environment. Drafts allow proposing changes to an environment definition that can be reviewed and approved before being applied. This is part of the approvals workflow for environments. Returns a ChangeRequestRef containing the draft identifier. Requires the Approvals feature to be enabled for the organization." }, { "info": { "name": "ReadEnvironmentDraft", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/drafts/:changeRequestID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "changeRequestID", "value": "", "type": "path", "description": "The change request ID" }, { "name": "revision", "value": "", "type": "query", "description": "The environment revision number to target" } ] }, "docs": "Reads the YAML definition for a draft version of a Pulumi ESC environment. Drafts are proposed changes created as part of the approvals workflow. The draft is identified by the changeRequestID path parameter. An optional revision query parameter can target a specific base revision. The response is returned in application/x-yaml format. Requires the Approvals feature to be enabled." }, { "info": { "name": "UpdateEnvironmentDraft", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/drafts/:changeRequestID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "changeRequestID", "value": "", "type": "path", "description": "The change request ID" } ] }, "docs": "Updates the YAML definition of an existing draft change request for a Pulumi ESC environment. The draft is identified by the changeRequestID path parameter. The request body contains the updated YAML definition. Returns a ChangeRequestRef on success. Requires the Approvals feature to be enabled for the organization." }, { "info": { "name": "OpenEnvironmentDraft", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/drafts/:changeRequestID/open", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "changeRequestID", "value": "", "type": "path", "description": "The change request ID" }, { "name": "duration", "value": "", "type": "query", "description": "The session duration, using Go time units: ns, us, ms, s, m, h (e.g. '2h')" }, { "name": "revision", "value": "", "type": "query", "description": "The environment revision number to target" } ] }, "docs": "Opens a draft version of a Pulumi ESC environment, fully resolving all dynamic values, provider integrations, and secrets for the proposed changes. The duration parameter specifies how long the open session remains valid using Go duration format (e.g., '2h', '30m'). An optional revision parameter can target a specific base revision. Returns an OpenEnvironmentResponse containing the session ID for subsequent reads. Requires the Approvals feature." }, { "info": { "name": "EncryptEnvironmentSecrets", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/encrypt-secrets", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Encrypts plaintext secret values in a Pulumi ESC environment definition. Takes an environment definition containing plaintext secrets and returns the same definition with those values encrypted using the environment's encryption key. This is useful for preparing environment definitions that contain sensitive values before storing or updating them. Returns 413 if the request content exceeds the maximum allowed size." }, { "info": { "name": "ListWebhooks", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/hooks", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns a list of all webhooks configured for a Pulumi ESC environment. Each webhook entry includes its name, destination URL, event filters, format, and active status. Webhooks enable external services to be notified of environment events such as updates and opens." }, { "info": { "name": "CreateWebhook", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/hooks", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a new webhook for a Pulumi ESC environment. Webhooks allow external services to be notified when environment events occur, such as updates or opens. The request body specifies the webhook configuration including the destination URL, event filters, and format. Returns 400 if the organization name in the request body does not match the URL path parameter. Returns 409 if a webhook with the same name already exists." }, { "info": { "name": "GetWebhook", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/hooks/:hookName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ] }, "docs": "Returns the configuration and status of a single webhook for a Pulumi ESC environment. The webhook is identified by its name in the URL path. The response includes the webhook's destination URL, event filters, format, and active status. Returns 404 if the webhook does not exist." }, { "info": { "name": "UpdateWebhook", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/hooks/:hookName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Updates the configuration of an existing webhook on a Pulumi ESC environment. The webhook is identified by its name in the URL path. The request body contains the updated webhook configuration including destination URL, event filters, format, and active status. Returns the updated WebhookResponse on success. Returns 400 if an invalid format is specified." }, { "info": { "name": "DeleteWebhook", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/hooks/:hookName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ] }, "docs": "Deletes a webhook from a Pulumi ESC environment. The webhook is identified by its name in the URL path. After deletion, the external service will no longer receive notifications for environment events. Returns 204 on success with no response body." }, { "info": { "name": "GetWebhookDeliveries", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/hooks/:hookName/deliveries", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ] }, "docs": "Returns a list of recent delivery attempts for a specific webhook on a Pulumi ESC environment. Each delivery record includes the HTTP status code, response body, timestamp, and whether the delivery was successful. This is useful for debugging webhook integration issues and verifying that events are being received." }, { "info": { "name": "RedeliverWebhookEvent", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/hooks/:hookName/deliveries/:event/redeliver", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" }, { "name": "event", "value": "", "type": "path", "description": "The webhook delivery event ID to redeliver" } ] }, "docs": "Triggers the Pulumi Service to redeliver a specific event to a webhook on a Pulumi ESC environment. This is useful for resending events that the webhook endpoint failed to process on the initial delivery attempt (e.g., due to temporary downtime or errors). The event is identified by its delivery event ID in the URL path. Returns the new WebhookDelivery record for the redelivery." }, { "info": { "name": "PingWebhook", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/hooks/:hookName/ping", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ] }, "docs": "Sends a test ping event to a webhook on a Pulumi ESC environment to verify that the webhook endpoint is reachable and functioning correctly. This bypasses the normal message queue and issues the request directly to the webhook URL. Returns the WebhookDelivery record containing the HTTP status code and response from the target endpoint." }, { "info": { "name": "GetEnvironmentMetadata", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/metadata", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns metadata for a Pulumi ESC environment, including the calling user's effective permission level (read, open, write, admin), creation and modification timestamps, the environment's project, and other administrative information. This is useful for determining what actions the current user can perform on the environment before attempting those operations." }, { "info": { "name": "OpenEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/open", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "duration", "value": "", "type": "query", "description": "The session duration, using Go time units: ns, us, ms, s, m, h (e.g. '2h')" } ] }, "docs": "Opens a Pulumi ESC environment, fully resolving all dynamic values, provider integrations (fn::open), interpolation expressions, and secrets. This initiates an access session that evaluates the complete environment definition including all imports. The duration parameter specifies how long the session remains valid using Go duration format (e.g., '2h45m', '300ms'). Returns an OpenEnvironmentResponse containing the session ID and any diagnostics. Use the session ID with ReadOpenEnvironment to ret" }, { "info": { "name": "CreateOpenEnvironmentRequest", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/open/request", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates an open request for a Pulumi ESC environment that has gated opens enabled. When an environment has open gates configured, opening the environment requires an approval workflow. This endpoint initiates that process by creating an open request, and also creates corresponding open requests for each imported environment that has open gates. Requires the Approvals feature to be enabled for the organization. Returns 400 if the environment does not have gated opens." }, { "info": { "name": "ReadOpenEnvironmentRequest", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/open/request/:changeRequestID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "changeRequestID", "value": "", "type": "path", "description": "The change request ID" }, { "name": "revision", "value": "", "type": "query", "description": "The environment revision number to target" } ] }, "docs": "Reads the details of an open environment request that was created as part of the gated opens approval workflow. The request is identified by the changeRequestID path parameter. The response includes the request's status, the requesting user, and approval details. An optional revision query parameter can target a specific environment revision. Requires the Approvals feature to be enabled." }, { "info": { "name": "UpdateOpenEnvironmentRequest", "type": "http" }, "http": { "method": "PUT", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/open/request/:changeRequestID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "changeRequestID", "value": "", "type": "path", "description": "The change request ID" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Updates an existing open environment request that was created as part of the gated opens approval workflow. The request is identified by the changeRequestID path parameter. The request body contains the updated open request details, such as approval status. Returns a ChangeRequestRef on success. Requires the Approvals feature to be enabled for the organization." }, { "info": { "name": "ReadOpenEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/open/:openSessionID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "openSessionID", "value": "", "type": "path", "description": "The session ID returned from the open environment operation" }, { "name": "property", "value": "", "type": "query", "description": "A dot-separated path to a specific property to retrieve from the environment" } ] }, "docs": "Reads the fully resolved values from an open environment session that was created via the OpenEnvironment endpoint. The openSessionID path parameter must match a valid, non-expired session. The optional property query parameter accepts a dot-separated path to retrieve a specific nested value instead of the entire resolved environment (e.g., 'aws.credentials.accessKeyId'). The response contains all resolved configuration values with secrets decrypted and provider-sourced values fully evaluated." }, { "info": { "name": "ReassignEnvironmentOwnership", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/ownership", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Changes the ownership of the specified environment to the provided user. Returns the identity of the previous owner." }, { "info": { "name": "ListEnvironmentReferrers", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/referrers", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "allRevisions", "value": "", "type": "query", "description": "Whether to include all revisions" }, { "name": "continuationToken", "value": "", "type": "query", "description": "Continuation token for paginated results" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" }, { "name": "latestStackVersionOnly", "value": "", "type": "query", "description": "Whether to return only the latest stack version" } ] }, "docs": "Returns a paginated list of entities that reference a Pulumi ESC environment, including other environments that import it and Pulumi stacks that use it in their configuration. The count parameter limits results (range 1-500). Set allRevisions to true to include references across all revisions, and latestStackVersionOnly to true to return only the latest stack version for each referring stack. Use continuationToken for pagination." }, { "info": { "name": "RotateEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/rotate", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Triggers secret rotation for a Pulumi ESC environment. This evaluates all fn::rotate declarations in the environment definition and rotates the corresponding secrets in their external systems (e.g., rotating database passwords, API keys, or cloud credentials). Requires the secret rotation feature to be enabled for the organization. Returns 409 if the environment has been modified since it was last read." }, { "info": { "name": "ListEnvironmentSecretRotationHistory", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/rotate/history", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns the secret rotation history for a Pulumi ESC environment. Each entry represents a rotation event where secrets defined with fn::rotate were cycled to new values in their external systems. The response includes timestamps, outcomes, and the rotators involved. Requires the secret rotation feature to be enabled for the organization." }, { "info": { "name": "ListEnvironmentSchedule", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/schedules", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns all scheduled actions configured for a Pulumi ESC environment. Schedules automate recurring operations such as secret rotation. The response includes each schedule's timing configuration, action type, and current status (active or paused)." }, { "info": { "name": "CreateEnvironmentSchedule", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/schedules", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a new scheduled action for a Pulumi ESC environment. Schedules can be used to automate recurring operations on environments, such as secret rotation. The request body specifies the schedule timing and the action to perform. Returns the created ScheduledAction on success. Requires the secret rotation feature to be enabled for the organization." }, { "info": { "name": "ReadEnvironmentSchedule", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/schedules/:scheduleID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "scheduleID", "value": "", "type": "path", "description": "The schedule ID" } ] }, "docs": "Returns the details of a specific scheduled action for a Pulumi ESC environment. The schedule is identified by the scheduleID path parameter. The response includes the schedule's timing configuration (cron expression or one-time), the action to perform, and the current status (active or paused)." }, { "info": { "name": "UpdateEnvironmentSchedule", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/schedules/:scheduleID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "scheduleID", "value": "", "type": "path", "description": "The schedule ID" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Updates the configuration of a scheduled action for a Pulumi ESC environment. The schedule is identified by the scheduleID path parameter. The request body specifies the updated timing and action configuration. Changes take effect for future executions only; any currently running execution is not affected. Returns the updated ScheduledAction on success." }, { "info": { "name": "DeleteEnvironmentSchedule", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/schedules/:scheduleID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "scheduleID", "value": "", "type": "path", "description": "The schedule ID" } ] }, "docs": "Permanently deletes a scheduled action from a Pulumi ESC environment. This removes the schedule and cancels any future executions. The schedule is identified by its scheduleID. Requires the secret rotation feature to be enabled for the organization." }, { "info": { "name": "ListEnvironmentScheduleHistory", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/schedules/:scheduleID/history", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "scheduleID", "value": "", "type": "path", "description": "The schedule ID" } ] }, "docs": "Returns the execution history for a specific scheduled action on a Pulumi ESC environment. Each history entry includes the execution timestamp, outcome (success or failure), and any error details. This is useful for monitoring the reliability of automated operations like secret rotation." }, { "info": { "name": "PauseEnvironmentSchedule", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/schedules/:scheduleID/pause", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "scheduleID", "value": "", "type": "path", "description": "The schedule ID" } ] }, "docs": "Pauses a scheduled action on a Pulumi ESC environment, preventing any future executions until the schedule is resumed. The schedule's configuration is preserved and can be reactivated via the ResumeEnvironmentSchedule endpoint. This is useful for temporarily disabling automated operations like secret rotation without deleting the schedule." }, { "info": { "name": "ResumeEnvironmentSchedule", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/schedules/:scheduleID/resume", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "scheduleID", "value": "", "type": "path", "description": "The schedule ID" } ] }, "docs": "Resumes a previously paused scheduled action on a Pulumi ESC environment, re-enabling future executions. The schedule will continue from its next scheduled time according to its configured timing (cron expression or one-time schedule). The schedule is identified by the scheduleID path parameter." }, { "info": { "name": "GetEnvironmentSettings", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/settings", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns the current settings for a Pulumi ESC environment, including whether deletion protection is enabled. Deletion protection prevents the environment from being deleted until the setting is explicitly disabled. Settings can be modified via the PatchEnvironmentSettings endpoint." }, { "info": { "name": "PatchEnvironmentSettings", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/settings", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Updates settings for a Pulumi ESC environment using a partial update (patch) approach. Currently supports toggling deletion protection via the deletionProtected field. When deletionProtected is set to true, the environment cannot be deleted until the setting is explicitly disabled. Only the fields included in the request body are modified; omitted fields retain their current values." }, { "info": { "name": "ListEnvironmentTags", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "after", "value": "", "type": "query", "description": "Only return results after this value" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" } ] }, "docs": "Returns a paginated list of user-defined tags for a Pulumi ESC environment. Tags are key-value pairs used for organizing and categorizing environments. Use the after parameter for cursor-based pagination and count to limit the number of results returned." }, { "info": { "name": "CreateEnvironmentTag", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Adds a new user-defined tag to a Pulumi ESC environment. Tags are key-value pairs that provide contextual metadata for organizing and searching environments (e.g., region=us-east-1, team=platform). The tag name and value are provided in the request body. Returns the created EnvironmentTag on success. Returns 409 if a tag with the same name already exists on the environment." }, { "info": { "name": "GetEnvironmentTag", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The environment tag name" } ] }, "docs": "Returns a single user-defined tag for a Pulumi ESC environment, identified by the tag name in the URL path. The response includes the tag name, value, and metadata. Returns 404 if the tag does not exist on the environment." }, { "info": { "name": "UpdateEnvironmentTag", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The environment tag name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Modifies the value of an existing user-defined tag on a Pulumi ESC environment. The tag is identified by its name in the URL path. The request body contains the new value for the tag. Returns the updated EnvironmentTag on success. Returns 404 if the tag does not exist on the environment." }, { "info": { "name": "DeleteEnvironmentTag", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The environment tag name" } ] }, "docs": "Removes a user-defined tag from a Pulumi ESC environment. The tag is identified by its name in the URL path. Returns 204 on success with no response body. Returns 404 if the tag does not exist on the environment." }, { "info": { "name": "ListEnvironmentRevisions", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "before", "value": "", "type": "query", "description": "Only return results before this revision" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" } ] }, "docs": "Returns a paginated list of revisions for a Pulumi ESC environment. Each revision represents an immutable snapshot of the environment definition created when the environment is updated. The response includes revision numbers, timestamps, and the identity of the user who made each change. Use the before parameter to fetch revisions before a specific revision number, and count to limit the number of results returned." }, { "info": { "name": "ListRevisionTags", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "after", "value": "", "type": "query", "description": "Only return results after this value" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" } ] }, "docs": "Returns a paginated list of revision tags for a Pulumi ESC environment. Revision tags are named references pointing to specific revision numbers (e.g., 'latest', 'prod', 'stable'). They can be used in environment imports and Pulumi stack configuration to pin to a specific version. Use the after parameter for cursor-based pagination and count to limit results." }, { "info": { "name": "CreateRevisionTag", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a new revision tag for a Pulumi ESC environment. Revision tags are named references that point to specific revision numbers, similar to Git tags. They allow pinning a stable reference to a known-good version of an environment. Tagged versions can be used in imports and Pulumi stack configuration (e.g., myproject/env@prod) to ensure stable references unaffected by subsequent changes. The built-in 'latest' tag always points to the most recent revision." }, { "info": { "name": "ReadRevisionTag", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The revision tag name" } ] }, "docs": "Returns the details of a specific revision tag for a Pulumi ESC environment. The tag is identified by its name in the URL path. The response includes the tag name and the revision number it points to. Returns 404 if the tag does not exist." }, { "info": { "name": "UpdateRevisionTag", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The revision tag name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Updates an existing revision tag for a Pulumi ESC environment to point to a different revision number. The tag is identified by its name in the URL path. The request body specifies the new revision number. This allows advancing or rolling back a named reference (e.g., moving the 'prod' tag to a newer or older revision). Returns 204 on success with no response body." }, { "info": { "name": "DeleteRevisionTag", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The revision tag name" } ] }, "docs": "Deletes a named revision tag from a Pulumi ESC environment. The tag is identified by its name in the URL path. After deletion, any imports or stack configurations referencing this tag will fail to resolve. The built-in 'latest' tag cannot be deleted. Returns 204 on success with no response body." }, { "info": { "name": "ReadEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/:version", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" } ] }, "docs": "Returns the YAML definition of a Pulumi ESC environment. The response is in application/x-yaml format and includes the environment's imports, values, provider configurations, and function invocations. Secrets remain in their encrypted form (use DecryptEnvironment to see plaintext secrets, or OpenEnvironment to fully resolve all dynamic values). When a version path parameter is provided, returns the definition for that specific revision." }, { "info": { "name": "CheckEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/:version/check", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" }, { "name": "showSecrets", "value": "", "type": "query", "description": "Whether to show secret values in plaintext" } ] }, "docs": "Checks a Pulumi ESC environment definition for errors without applying changes. This validates the YAML definition including imports, provider configurations, function invocations (fn::open, fn::secret, etc.), and interpolation expressions. When the showSecrets query parameter is set to true, secret values are returned in plaintext in the response. The response includes any diagnostics or validation errors found in the environment definition. Supports optimistic concurrency control via ETag head" }, { "info": { "name": "DecryptEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/:version/decrypt", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" } ] }, "docs": "Reads the YAML definition for a Pulumi ESC environment with all static secrets decrypted and shown in plaintext. Unlike the standard ReadEnvironment endpoint which returns secrets in their encrypted form, this endpoint resolves fn::secret values to their plaintext representations. The response is returned in application/x-yaml format. This does not resolve dynamic provider values (fn::open); use OpenEnvironment for full resolution. Requires environment open permission." }, { "info": { "name": "OpenEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/:version/open", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" }, { "name": "duration", "value": "", "type": "query", "description": "The session duration, using Go time units: ns, us, ms, s, m, h (e.g. '2h')" } ] }, "docs": "Opens a Pulumi ESC environment, fully resolving all dynamic values, provider integrations (fn::open), interpolation expressions, and secrets. This initiates an access session that evaluates the complete environment definition including all imports. The duration parameter specifies how long the session remains valid using Go duration format (e.g., '2h45m', '300ms'). Returns an OpenEnvironmentResponse containing the session ID and any diagnostics. Use the session ID with ReadOpenEnvironment to ret" }, { "info": { "name": "ListEnvironmentReferrers", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/:version/referrers", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" }, { "name": "allRevisions", "value": "", "type": "query", "description": "Whether to include all revisions" }, { "name": "continuationToken", "value": "", "type": "query", "description": "Continuation token for paginated results" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" }, { "name": "latestStackVersionOnly", "value": "", "type": "query", "description": "Whether to return only the latest stack version" } ] }, "docs": "Returns a paginated list of entities that reference a Pulumi ESC environment, including other environments that import it and Pulumi stacks that use it in their configuration. The count parameter limits results (range 1-500). Set allRevisions to true to include references across all revisions, and latestStackVersionOnly to true to return only the latest stack version for each referring stack. Use continuationToken for pagination." }, { "info": { "name": "RetractEnvironmentRevision", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/:version/retract", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Retracts a specific revision of a Pulumi ESC environment, marking it as withdrawn. A retracted revision remains in the history but is no longer considered a valid version for use. The request body may include a reason for the retraction. The revision is identified by the version path parameter. Returns 204 on success with no response body." }, { "info": { "name": "ListRevisionTags", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/environments/:orgName/:projectName/:envName/versions/:version/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" }, { "name": "after", "value": "", "type": "query", "description": "Only return results after this value" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" } ] }, "docs": "Returns a paginated list of revision tags for a Pulumi ESC environment. Revision tags are named references pointing to specific revision numbers (e.g., 'latest', 'prod', 'stable'). They can be used in environment imports and Pulumi stack configuration to pin to a specific version. Use the after parameter for cursor-based pagination and count to limit results." }, { "info": { "name": "ListProviders", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/providers", "params": [ { "name": "orgName", "value": "", "type": "query", "description": "Filter providers available to this organization" } ] }, "docs": "Returns a list of all available Pulumi ESC providers. Providers are integrations that dynamically retrieve configuration and secrets from external sources (e.g., AWS, Azure, Google Cloud, HashiCorp Vault, 1Password) via the fn::open function in environment definitions. Optionally filter by organization using the orgName query parameter to see only providers available to that organization." }, { "info": { "name": "GetProviderSchema", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/providers/:providerName/schema", "params": [ { "name": "providerName", "value": "", "type": "path", "description": "The provider name" } ] }, "docs": "Returns the JSON schema for a Pulumi ESC provider. Providers are integrations that dynamically retrieve configuration and secrets from external sources such as AWS, Azure, Google Cloud, HashiCorp Vault, and others via fn::open. The schema describes the provider's input parameters, output structure, and configuration options. The provider is identified by name in the URL path." }, { "info": { "name": "ListRotators", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/rotators", "params": [ { "name": "orgName", "value": "", "type": "query", "description": "Filter rotators available to this organization" } ] }, "docs": "Returns a list of all available Pulumi ESC secret rotators. Rotators are integrations that automatically rotate secrets in external systems via the fn::rotate function in environment definitions. Optionally filter by organization using the orgName query parameter to see only rotators available to that organization." }, { "info": { "name": "GetRotatorSchema", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/esc/rotators/:rotatorName/schema", "params": [ { "name": "rotatorName", "value": "", "type": "path", "description": "The rotator name" } ] }, "docs": "Returns the JSON schema for a Pulumi ESC secret rotator. Rotators are integrations that automatically rotate secrets in external systems via fn::rotate. The schema describes the rotator's input parameters, output structure, and configuration options. The rotator is identified by name in the URL path." }, { "info": { "name": "ListEnvironments", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments", "params": [ { "name": "continuationToken", "value": "", "type": "query", "description": "Continuation token for paginated results" }, { "name": "includeReferrerMetadata", "value": "", "type": "query", "description": "Whether to include referrer metadata. Defaults to false." }, { "name": "maxResults", "value": "", "type": "query", "description": "Maximum number of results for pagination" }, { "name": "organization", "value": "", "type": "query", "description": "Filter results to this organization name" } ] }, "docs": "Returns a paginated list of all Pulumi ESC environments accessible to the authenticated user across all organizations they belong to. Each entry includes the organization, project, environment name, and creation/modification timestamps. Use the organization query parameter to filter results to a specific organization. Use continuationToken for pagination through large result sets." }, { "info": { "name": "ListProviders", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/providers", "params": [ { "name": "orgName", "value": "", "type": "query", "description": "Filter providers available to this organization" } ] }, "docs": "Returns a list of all available Pulumi ESC providers. Providers are integrations that dynamically retrieve configuration and secrets from external sources (e.g., AWS, Azure, Google Cloud, HashiCorp Vault, 1Password) via the fn::open function in environment definitions. Optionally filter by organization using the orgName query parameter to see only providers available to that organization." }, { "info": { "name": "GetProviderSchema", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/providers/:providerName/schema", "params": [ { "name": "providerName", "value": "", "type": "path", "description": "The provider name" } ] }, "docs": "Returns the JSON schema for a Pulumi ESC provider. Providers are integrations that dynamically retrieve configuration and secrets from external sources such as AWS, Azure, Google Cloud, HashiCorp Vault, and others via fn::open. The schema describes the provider's input parameters, output structure, and configuration options. The provider is identified by name in the URL path." }, { "info": { "name": "ListOrgEnvironments", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "continuationToken", "value": "", "type": "query", "description": "Continuation token for paginated results" }, { "name": "includeReferrerMetadata", "value": "", "type": "query", "description": "Whether to include referrer metadata. Defaults to false." }, { "name": "maxResults", "value": "", "type": "query", "description": "Maximum number of results for pagination" }, { "name": "roleID", "value": "", "type": "query", "description": "The custom role to use for listing environments" } ] }, "docs": "Returns a paginated list of all Pulumi ESC environments within a specific organization. Each entry includes the project, environment name, and creation/modification timestamps. Results are scoped to the organization specified in the URL path. Use continuationToken for pagination through large result sets." }, { "info": { "name": "ListAllEnvironmentTags", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" } ] }, "docs": "Returns a map of all unique tag names and their distinct values across all Pulumi ESC environments in the organization. The response is a map where each key is a tag name and the value is a list of all distinct values for that tag across all environments. This is useful for building tag-based filtering or discovery UIs." }, { "info": { "name": "CheckYAML", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/yaml/check", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "showSecrets", "value": "", "type": "query", "description": "Whether to show secret values in plaintext" } ] }, "docs": "Checks a raw YAML environment definition for errors without creating or modifying any environment. The YAML definition is provided in the request body and validated for correctness, including imports, provider configurations, function invocations, and interpolation expressions. When the showSecrets query parameter is set to true, secret values are returned in plaintext in the response. This is useful for validating environment definitions before applying them." }, { "info": { "name": "OpenYAML", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/yaml/open", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "duration", "value": "", "type": "query", "description": "The session duration, using Go time units: ns, us, ms, s, m, h (e.g. '2h')" } ] }, "docs": "Opens an anonymous Pulumi ESC environment from a raw YAML definition provided in the request body, fully resolving all dynamic values, provider integrations, and secrets. Unlike OpenEnvironment, this does not require a pre-existing environment to be stored. The duration parameter specifies how long the session remains valid using Go duration format. Returns an OpenEnvironmentResponse containing the session ID. Use the session ID with ReadAnonymousOpenEnvironment to retrieve the resolved values." }, { "info": { "name": "ReadAnonymousOpenEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/yaml/open/:openSessionID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "openSessionID", "value": "", "type": "path", "description": "The session ID returned from the open environment operation" }, { "name": "property", "value": "", "type": "query", "description": "A dot-separated path to a specific property to retrieve from the environment" } ] }, "docs": "Reads the fully resolved values from an anonymous open environment session that was created via the OpenYAML endpoint. The openSessionID path parameter must match a valid, non-expired session. The optional property query parameter accepts a dot-separated path to retrieve a specific nested value instead of the entire resolved environment (e.g., 'aws.credentials.accessKeyId'). The response contains the resolved configuration values with secrets decrypted." }, { "info": { "name": "ReadEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns the YAML definition of a Pulumi ESC environment. The response is in application/x-yaml format and includes the environment's imports, values, provider configurations, and function invocations. Secrets remain in their encrypted form (use DecryptEnvironment to see plaintext secrets, or OpenEnvironment to fully resolve all dynamic values). When a version path parameter is provided, returns the definition for that specific revision." }, { "info": { "name": "CreateEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a new Pulumi ESC (Environments, Secrets, and Configuration) environment within the specified organization. The request body must include the project name and the environment name. Environment names must be unique within a project and may only contain alphanumeric characters, hyphens, underscores, and periods. The newly created environment starts with an empty YAML definition that can be updated via the UpdateEnvironment endpoint." }, { "info": { "name": "UpdateEnvironment", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Validates and updates the YAML definition of a Pulumi ESC environment. The request body must contain the complete environment definition in application/x-yaml format, including imports, values, provider configurations, and function invocations. Each successful update creates a new immutable revision in the environment's version history. Supports optimistic concurrency control via ETag/If-Match headers; returns 409 if the environment has been modified since it was last read." }, { "info": { "name": "DeleteEnvironment", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Permanently deletes a Pulumi ESC environment and all of its revision history, tags, and associated configuration. This operation is blocked if deletion protection is enabled on the environment (see PatchEnvironmentSettings). Enterprise and Business Critical edition organizations may be able to restore deleted environments within a retention window. Returns 409 if the environment is deletion-protected or has been modified since it was last read." }, { "info": { "name": "HeadEnvironment", "type": "http" }, "http": { "method": "HEAD", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns the ETag header for a Pulumi ESC environment without returning the full definition body. This is used for lightweight existence checks and for obtaining the current ETag value for optimistic concurrency control. The ETag should be included in subsequent update requests via the If-Match header to prevent concurrent modification conflicts. Returns 404 if the environment does not exist." }, { "info": { "name": "CheckEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/check", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "showSecrets", "value": "", "type": "query", "description": "Whether to show secret values in plaintext" } ] }, "docs": "Checks a Pulumi ESC environment definition for errors without applying changes. This validates the YAML definition including imports, provider configurations, function invocations (fn::open, fn::secret, etc.), and interpolation expressions. When the showSecrets query parameter is set to true, secret values are returned in plaintext in the response. The response includes any diagnostics or validation errors found in the environment definition. Supports optimistic concurrency control via ETag head" }, { "info": { "name": "DecryptEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/decrypt", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Reads the YAML definition for a Pulumi ESC environment with all static secrets decrypted and shown in plaintext. Unlike the standard ReadEnvironment endpoint which returns secrets in their encrypted form, this endpoint resolves fn::secret values to their plaintext representations. The response is returned in application/x-yaml format. This does not resolve dynamic provider values (fn::open); use OpenEnvironment for full resolution. Requires environment open permission." }, { "info": { "name": "ListWebhooks", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/hooks", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns a list of all webhooks configured for a Pulumi ESC environment. Each webhook entry includes its name, destination URL, event filters, format, and active status. Webhooks enable external services to be notified of environment events such as updates and opens." }, { "info": { "name": "CreateWebhook", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/hooks", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a new webhook for a Pulumi ESC environment. Webhooks allow external services to be notified when environment events occur, such as updates or opens. The request body specifies the webhook configuration including the destination URL, event filters, and format. Returns 400 if the organization name in the request body does not match the URL path parameter. Returns 409 if a webhook with the same name already exists." }, { "info": { "name": "GetWebhook", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/hooks/:hookName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ] }, "docs": "Returns the configuration and status of a single webhook for a Pulumi ESC environment. The webhook is identified by its name in the URL path. The response includes the webhook's destination URL, event filters, format, and active status. Returns 404 if the webhook does not exist." }, { "info": { "name": "UpdateWebhook", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/hooks/:hookName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Updates the configuration of an existing webhook on a Pulumi ESC environment. The webhook is identified by its name in the URL path. The request body contains the updated webhook configuration including destination URL, event filters, format, and active status. Returns the updated WebhookResponse on success. Returns 400 if an invalid format is specified." }, { "info": { "name": "DeleteWebhook", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/hooks/:hookName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ] }, "docs": "Deletes a webhook from a Pulumi ESC environment. The webhook is identified by its name in the URL path. After deletion, the external service will no longer receive notifications for environment events. Returns 204 on success with no response body." }, { "info": { "name": "GetWebhookDeliveries", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/hooks/:hookName/deliveries", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ] }, "docs": "Returns a list of recent delivery attempts for a specific webhook on a Pulumi ESC environment. Each delivery record includes the HTTP status code, response body, timestamp, and whether the delivery was successful. This is useful for debugging webhook integration issues and verifying that events are being received." }, { "info": { "name": "RedeliverWebhookEvent", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/hooks/:hookName/deliveries/:event/redeliver", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" }, { "name": "event", "value": "", "type": "path", "description": "The webhook delivery event ID to redeliver" } ] }, "docs": "Triggers the Pulumi Service to redeliver a specific event to a webhook on a Pulumi ESC environment. This is useful for resending events that the webhook endpoint failed to process on the initial delivery attempt (e.g., due to temporary downtime or errors). The event is identified by its delivery event ID in the URL path. Returns the new WebhookDelivery record for the redelivery." }, { "info": { "name": "PingWebhook", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/hooks/:hookName/ping", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "hookName", "value": "", "type": "path", "description": "The webhook name" } ] }, "docs": "Sends a test ping event to a webhook on a Pulumi ESC environment to verify that the webhook endpoint is reachable and functioning correctly. This bypasses the normal message queue and issues the request directly to the webhook URL. Returns the WebhookDelivery record containing the HTTP status code and response from the target endpoint." }, { "info": { "name": "GetEnvironmentMetadata", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/metadata", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Returns metadata for a Pulumi ESC environment, including the calling user's effective permission level (read, open, write, admin), creation and modification timestamps, the environment's project, and other administrative information. This is useful for determining what actions the current user can perform on the environment before attempting those operations." }, { "info": { "name": "OpenEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/open", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "duration", "value": "", "type": "query", "description": "The session duration, using Go time units: ns, us, ms, s, m, h (e.g. '2h')" } ] }, "docs": "Opens a Pulumi ESC environment, fully resolving all dynamic values, provider integrations (fn::open), interpolation expressions, and secrets. This initiates an access session that evaluates the complete environment definition including all imports. The duration parameter specifies how long the session remains valid using Go duration format (e.g., '2h45m', '300ms'). Returns an OpenEnvironmentResponse containing the session ID and any diagnostics. Use the session ID with ReadOpenEnvironment to ret" }, { "info": { "name": "ReadOpenEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/open/:openSessionID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "openSessionID", "value": "", "type": "path", "description": "The session ID returned from the open environment operation" }, { "name": "property", "value": "", "type": "query", "description": "A dot-separated path to a specific property to retrieve from the environment" } ] }, "docs": "Reads the fully resolved values from an open environment session that was created via the OpenEnvironment endpoint. The openSessionID path parameter must match a valid, non-expired session. The optional property query parameter accepts a dot-separated path to retrieve a specific nested value instead of the entire resolved environment (e.g., 'aws.credentials.accessKeyId'). The response contains all resolved configuration values with secrets decrypted and provider-sourced values fully evaluated." }, { "info": { "name": "ListEnvironmentTags", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "after", "value": "", "type": "query", "description": "Only return results after this value" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" } ] }, "docs": "Returns a paginated list of user-defined tags for a Pulumi ESC environment. Tags are key-value pairs used for organizing and categorizing environments. Use the after parameter for cursor-based pagination and count to limit the number of results returned." }, { "info": { "name": "CreateEnvironmentTag", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Adds a new user-defined tag to a Pulumi ESC environment. Tags are key-value pairs that provide contextual metadata for organizing and searching environments (e.g., region=us-east-1, team=platform). The tag name and value are provided in the request body. Returns the created EnvironmentTag on success. Returns 409 if a tag with the same name already exists on the environment." }, { "info": { "name": "GetEnvironmentTag", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The environment tag name" } ] }, "docs": "Returns a single user-defined tag for a Pulumi ESC environment, identified by the tag name in the URL path. The response includes the tag name, value, and metadata. Returns 404 if the tag does not exist on the environment." }, { "info": { "name": "UpdateEnvironmentTag", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The environment tag name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Modifies the value of an existing user-defined tag on a Pulumi ESC environment. The tag is identified by its name in the URL path. The request body contains the new value for the tag. Returns the updated EnvironmentTag on success. Returns 404 if the tag does not exist on the environment." }, { "info": { "name": "DeleteEnvironmentTag", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The environment tag name" } ] }, "docs": "Removes a user-defined tag from a Pulumi ESC environment. The tag is identified by its name in the URL path. Returns 204 on success with no response body. Returns 404 if the tag does not exist on the environment." }, { "info": { "name": "ListEnvironmentRevisions", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "before", "value": "", "type": "query", "description": "Only return results before this revision" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" } ] }, "docs": "Returns a paginated list of revisions for a Pulumi ESC environment. Each revision represents an immutable snapshot of the environment definition created when the environment is updated. The response includes revision numbers, timestamps, and the identity of the user who made each change. Use the before parameter to fetch revisions before a specific revision number, and count to limit the number of results returned." }, { "info": { "name": "ListRevisionTags", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "after", "value": "", "type": "query", "description": "Only return results after this value" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" } ] }, "docs": "Returns a paginated list of revision tags for a Pulumi ESC environment. Revision tags are named references pointing to specific revision numbers (e.g., 'latest', 'prod', 'stable'). They can be used in environment imports and Pulumi stack configuration to pin to a specific version. Use the after parameter for cursor-based pagination and count to limit results." }, { "info": { "name": "ReadRevisionTag", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The revision tag name" } ] }, "docs": "Returns the details of a specific revision tag for a Pulumi ESC environment. The tag is identified by its name in the URL path. The response includes the tag name and the revision number it points to. Returns 404 if the tag does not exist." }, { "info": { "name": "CreateRevisionTag", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The revision tag name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Creates a new revision tag for a Pulumi ESC environment. Revision tags are named references that point to specific revision numbers, similar to Git tags. They allow pinning a stable reference to a known-good version of an environment. Tagged versions can be used in imports and Pulumi stack configuration (e.g., myproject/env@prod) to ensure stable references unaffected by subsequent changes. The built-in 'latest' tag always points to the most recent revision." }, { "info": { "name": "UpdateRevisionTag", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The revision tag name" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Updates an existing revision tag for a Pulumi ESC environment to point to a different revision number. The tag is identified by its name in the URL path. The request body specifies the new revision number. This allows advancing or rolling back a named reference (e.g., moving the 'prod' tag to a newer or older revision). Returns 204 on success with no response body." }, { "info": { "name": "DeleteRevisionTag", "type": "http" }, "http": { "method": "DELETE", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/tags/:tagName", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "tagName", "value": "", "type": "path", "description": "The revision tag name" } ] }, "docs": "Deletes a named revision tag from a Pulumi ESC environment. The tag is identified by its name in the URL path. After deletion, any imports or stack configurations referencing this tag will fail to resolve. The built-in 'latest' tag cannot be deleted. Returns 204 on success with no response body." }, { "info": { "name": "ReadEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/:version", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" } ] }, "docs": "Returns the YAML definition of a Pulumi ESC environment. The response is in application/x-yaml format and includes the environment's imports, values, provider configurations, and function invocations. Secrets remain in their encrypted form (use DecryptEnvironment to see plaintext secrets, or OpenEnvironment to fully resolve all dynamic values). When a version path parameter is provided, returns the definition for that specific revision." }, { "info": { "name": "CheckEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/:version/check", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" }, { "name": "showSecrets", "value": "", "type": "query", "description": "Whether to show secret values in plaintext" } ] }, "docs": "Checks a Pulumi ESC environment definition for errors without applying changes. This validates the YAML definition including imports, provider configurations, function invocations (fn::open, fn::secret, etc.), and interpolation expressions. When the showSecrets query parameter is set to true, secret values are returned in plaintext in the response. The response includes any diagnostics or validation errors found in the environment definition. Supports optimistic concurrency control via ETag head" }, { "info": { "name": "DecryptEnvironment", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/:version/decrypt", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" } ] }, "docs": "Reads the YAML definition for a Pulumi ESC environment with all static secrets decrypted and shown in plaintext. Unlike the standard ReadEnvironment endpoint which returns secrets in their encrypted form, this endpoint resolves fn::secret values to their plaintext representations. The response is returned in application/x-yaml format. This does not resolve dynamic provider values (fn::open); use OpenEnvironment for full resolution. Requires environment open permission." }, { "info": { "name": "OpenEnvironment", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/:version/open", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" }, { "name": "duration", "value": "", "type": "query", "description": "The session duration, using Go time units: ns, us, ms, s, m, h (e.g. '2h')" } ] }, "docs": "Opens a Pulumi ESC environment, fully resolving all dynamic values, provider integrations (fn::open), interpolation expressions, and secrets. This initiates an access session that evaluates the complete environment definition including all imports. The duration parameter specifies how long the session remains valid using Go duration format (e.g., '2h45m', '300ms'). Returns an OpenEnvironmentResponse containing the session ID and any diagnostics. Use the session ID with ReadOpenEnvironment to ret" }, { "info": { "name": "ListEnvironmentReferrers", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/:version/referrers", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" }, { "name": "allRevisions", "value": "", "type": "query", "description": "Whether to include all revisions" }, { "name": "continuationToken", "value": "", "type": "query", "description": "Continuation token for paginated results" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" }, { "name": "latestStackVersionOnly", "value": "", "type": "query", "description": "Whether to return only the latest stack version" } ] }, "docs": "Returns a paginated list of entities that reference a Pulumi ESC environment, including other environments that import it and Pulumi stacks that use it in their configuration. The count parameter limits results (range 1-500). Set allRevisions to true to include references across all revisions, and latestStackVersionOnly to true to return only the latest stack version for each referring stack. Use continuationToken for pagination." }, { "info": { "name": "RetractEnvironmentRevision", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/:version/retract", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Retracts a specific revision of a Pulumi ESC environment, marking it as withdrawn. A retracted revision remains in the history but is no longer considered a valid version for use. The request body may include a reason for the retraction. The revision is identified by the version path parameter. Returns 204 on success with no response body." }, { "info": { "name": "ListRevisionTags", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/environments/:orgName/:envName/versions/:version/tags", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "version", "value": "", "type": "path", "description": "The revision version number" }, { "name": "after", "value": "", "type": "query", "description": "Only return results after this value" }, { "name": "count", "value": "", "type": "query", "description": "Maximum number of results to return" } ] }, "docs": "Returns a paginated list of revision tags for a Pulumi ESC environment. Revision tags are named references pointing to specific revision numbers (e.g., 'latest', 'prod', 'stable'). They can be used in environment imports and Pulumi stack configuration to pin to a specific version. Use the after parameter for cursor-based pagination and count to limit results." }, { "info": { "name": "CreateEnvironmentDraft", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/esc/environments/:orgName/:projectName/:envName/drafts", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" } ] }, "docs": "Creates a new draft change request for a Pulumi ESC environment. Drafts allow proposing changes to an environment definition that can be reviewed and approved before being applied. This is part of the approvals workflow for environments. Returns a ChangeRequestRef containing the draft identifier. Requires the Approvals feature to be enabled for the organization." }, { "info": { "name": "ReadEnvironmentDraft", "type": "http" }, "http": { "method": "GET", "url": "{{baseUrl}}/api/preview/esc/environments/:orgName/:projectName/:envName/drafts/:changeRequestID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "changeRequestID", "value": "", "type": "path", "description": "The change request ID" }, { "name": "revision", "value": "", "type": "query", "description": "The environment revision number to target" } ] }, "docs": "Reads the YAML definition for a draft version of a Pulumi ESC environment. Drafts are proposed changes created as part of the approvals workflow. The draft is identified by the changeRequestID path parameter. An optional revision query parameter can target a specific base revision. The response is returned in application/x-yaml format. Requires the Approvals feature to be enabled." }, { "info": { "name": "UpdateEnvironmentDraft", "type": "http" }, "http": { "method": "PATCH", "url": "{{baseUrl}}/api/preview/esc/environments/:orgName/:projectName/:envName/drafts/:changeRequestID", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "changeRequestID", "value": "", "type": "path", "description": "The change request ID" } ] }, "docs": "Updates the YAML definition of an existing draft change request for a Pulumi ESC environment. The draft is identified by the changeRequestID path parameter. The request body contains the updated YAML definition. Returns a ChangeRequestRef on success. Requires the Approvals feature to be enabled for the organization." }, { "info": { "name": "OpenEnvironmentDraft", "type": "http" }, "http": { "method": "POST", "url": "{{baseUrl}}/api/preview/esc/environments/:orgName/:projectName/:envName/drafts/:changeRequestID/open", "params": [ { "name": "orgName", "value": "", "type": "path", "description": "The organization name" }, { "name": "projectName", "value": "", "type": "path", "description": "The project name" }, { "name": "envName", "value": "", "type": "path", "description": "The environment name" }, { "name": "changeRequestID", "value": "", "type": "path", "description": "The change request ID" }, { "name": "duration", "value": "", "type": "query", "description": "The session duration, using Go time units: ns, us, ms, s, m, h (e.g. '2h')" }, { "name": "revision", "value": "", "type": "query", "description": "The environment revision number to target" } ] }, "docs": "Opens a draft version of a Pulumi ESC environment, fully resolving all dynamic values, provider integrations, and secrets for the proposed changes. The duration parameter specifies how long the open session remains valid using Go duration format (e.g., '2h', '30m'). An optional revision parameter can target a specific base revision. Returns an OpenEnvironmentResponse containing the session ID for subsequent reads. Requires the Approvals feature." } ] } ], "bundled": true }