Side by side
AWS CDK Nag vs Pulumi
Both stand on iac security scanners. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxMacWindows
Visit AWS CDK Nag 
Free plan APILinuxMac+3
Pulumi brings infrastructure definitions, deployment integrations, and secrets management into one platform. Its free plan has user and workflow-minute limits; listed paid plans start at $40 a month.
Visit PulumiThe facts
| AWS CDK Nag | Pulumi | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Mac, Windows | API, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Not published | Essentials: $40 a month |
| Plans published | None | 4 |
| Maker | Not published | Not published |
| Website | github.com | pulumi.com |
| On iac security scanners | #12 of 16 | #8 of 16 |
AWS CDK Nag: what it does well
Pulumi: what it does well
- Supports eight languages, including Python, Go, and HCL.
- Integrates with major cloud providers and CI/CD services.
- Pulumi ESC centralizes secrets and supports short-lived OIDC credentials.
- Lists policy as code, drift detection, and resource import.
What to know first
- Free plan is limited to one user.
- Free plan allows up to 500 workflow minutes.
- Essentials costs $40 a month.
- Enterprise costs $2,000 a month.
Alternatives to AWS CDK Nag Alternatives to Pulumi The whole list