$ brew install pulumi
Updating Homebrew...

================================================省略================================================

==> Downloading https://homebrew.bintray.com/bottles/pulumi-1.5.1.mojave.bottle.tar.gz

######################################################################## 100.0%
==> Pouring pulumi-1.5.1.mojave.bottle.tar.gz
==> Caveats
Bash completion has been installed to:
  /usr/local/etc/bash_completion.d

zsh completions have been installed to:
  /usr/local/share/zsh/site-functions
==> Summary
🍺  /usr/local/Cellar/pulumi/1.5.1: 16 files, 124MB
$ 
$ 
$ pulumi version
v1.5.1

$ cat ~/.aws/credentials
[default]
aws_access_key_id = AKIAABCDEFG123456789
aws_secret_access_key = xooc3KameeChureethaiS3keephooqui5exuW0sh

[hogehoge]
aws_access_key_id = AKIAHIJKLMN098765432
aws_secret_access_key = vuf7aing9thohngu9naeR5Dahl9aM9aiGheum8Ae

[fugafuga]
aws_access_key_id = AKIAOPQRSTU102938475
aws_secret_access_key = eePh1ohgooph1ateaj9Aif7heixei6zieW9Viequ

[hogefuga]
aws_access_key_id = AKIAVWXYZ65748392012
aws_secret_access_key = aLiv6eMe0Ohr5jeiW2eeph0zoo2haR8pae1thoox

# profile hogehogeを使う場合
$ export AWS_ACCESS_KEY_ID=AKIAHIJKLMN098765432
$ export AWS_SECRET_ACCESS_KEY=vuf7aing9thohngu9naeR5Dahl9aM9aiGheum8Ae

# 次のステップ前にやると怒られる
$ pulumi config set aws:profile hogehoge
error: no Pulumi.yaml project file found (searching upwards from /Users/user/Documents/GitHub/hands-on). If you have not created a project yet, use `pulumi new` to do so

Finished installing dependencies

Your new project is ready to go! ✨

To perform an initial deployment, run 'pulumi up'

$ pulumi config set aws:profile hogehoge
$

$ pulumi new aws-typescript  # pulumi new aws-typescript -n hands-on -d "Getting start hands on" -s sandbox でもOK
Manage your Pulumi stacks by logging in.
Run `pulumi login --help` for alternative login options.
Enter your access token from https://app.pulumi.com/account/tokens  #このURLにアクセスしてSign upを選択するとWelocome画面が表示されてCLIが進む
    or hit <ENTER> to log in using your browser                   : 
We've launched your web browser to complete the login process.

Waiting for login to complete...


  Welcome to Pulumi!

  Pulumi helps you create, deploy, and manage infrastructure on any cloud using
  your favorite language. You can get started today with Pulumi at:

      https://www.pulumi.com/docs/get-started/

  Tip of the day: Resources you create with Pulumi are given unique names (a randomly
  generated suffix) by default. To learn more about auto-naming or customizing resource
  names see https://www.pulumi.com/docs/intro/concepts/programming-model/#autonaming.


This command will walk you through creating a new Pulumi project.

Enter a value or leave blank to accept the (default), and press <ENTER>.
Press ^C at any time to quit.

project name: hands-on
project description: (A minimal AWS TypeScript Pulumi program) Getting start hands on
Created project 'hands-on'

Please enter your desired stack name.
To create a stack in an organization, use the format <org-name>/<stack-name> (e.g. `acmecorp/dev`).
stack name: (dev) sandbox
Created stack 'sandbox'

aws:region: The AWS region to deploy into: (us-east-1) 
Saved config

Installing dependencies...


> deasync@0.1.15 install /Users/user/Documents/GitHub/hands-on/node_modules/deasync
> node ./build.js

`darwin-x64-node-12` exists; testing
Binary is fine; exiting

> grpc@1.21.1 install /Users/user/Documents/GitHub/hands-on/node_modules/grpc
> node-pre-gyp install --fallback-to-build --library=static_library

[grpc] Success: "/Users/user/Documents/GitHub/hands-on/node_modules/grpc/src/node/extension_binary/node-v72-darwin-x64-unknown/grpc_node.node" is installed via remote

> @pulumi/aws@1.8.0 install /Users/user/Documents/GitHub/hands-on/node_modules/@pulumi/aws
> node scripts/install-pulumi-plugin.js resource aws v1.8.0

[resource plugin aws-1.8.0] installing
> @pulumi/docker@0.17.4 install /Users/user/Documents/GitHub/hands-on/node_modules/@pulumi/docker
> node scripts/install-pulumi-plugin.js resource docker v0.17.4

[resource plugin docker-0.17.4] installing
> protobufjs@6.8.8 postinstall /Users/user/Documents/GitHub/hands-on/node_modules/protobufjs
> node scripts/postinstall

added 198 packages from 297 contributors and audited 1626 packages in 16.563s

3 packages are looking for funding.
Run "npm fund" to find out more.
Finished installing dependencies

Your new project is ready to go! ✨

To perform an initial deployment, run 'pulumi up'

$ ls -la
total 160
drwxr-xr-x   10 user  staff    320 11 16 03:05 .
drwx------+  19 user  staff    608 11 16 02:57 ..
-rw-------    1 user  staff     21 11 16 03:05 .gitignore
-rw-r--r--    1 user  staff     32 11 16 03:05 Pulumi.sandbox.yaml
-rw-------    1 user  staff     67 11 16 03:05 Pulumi.yaml
-rw-------    1 user  staff    273 11 16 03:05 index.ts
drwxr-xr-x  112 user  staff   3584 11 16 03:05 node_modules
-rw-r--r--    1 user  staff  57291 11 16 03:05 package-lock.json
-rw-------    1 user  staff    230 11 16 03:05 package.json
-rw-------    1 user  staff    438 11 16 03:05 tsconfig.json

config:
  aws:profile: hogehoge
  aws:region: us-east-1

name: hands-on
runtime: nodejs
description: Getting start hands on

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as awsx from "@pulumi/awsx";

// Create an AWS resource (S3 Bucket)
const bucket = new aws.s3.Bucket("hands-on"); //デフォルトは "my-bucket"

// Export the name of the bucket
export const bucketName = bucket.id;

$ pulumi up
Previewing update (sandbox):

     Type                 Name              Plan       
 +   pulumi:pulumi:Stack  hands-on-sandbox  create     
 +   └─ aws:s3:Bucket     hands-on          create     

Resources:
    + 2 to create

Do you want to perform this update?
  yes
> no
  details

# no を選択した場合
Do you want to perform this update? no
confirmation declined, not proceeding with the update

# details を選択した場合
Do you want to perform this update? details
+ pulumi:pulumi:Stack: (create)
    [urn=urn:pulumi:sandbox::hands-on::pulumi:pulumi:Stack::hands-on-sandbox]
    + aws:s3/bucket:Bucket: (create)
        [urn=urn:pulumi:sandbox::hands-on::aws:s3/bucket:Bucket::hands-on]
        [provider=urn:pulumi:sandbox::hands-on::pulumi:providers:aws::default_1_8_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        acl         : "private"
        bucket      : "hands-on-4099361"
        forceDestroy: false

Do you want to perform this update?
  yes
> no
  details

# yes を選択した場合
Do you want to perform this update? yes
Updating (sandbox):

     Type                 Name              Status      
 +   pulumi:pulumi:Stack  hands-on-sandbox  created     
 +   └─ aws:s3:Bucket     hands-on          created     

Outputs:
    bucketName: "hands-on-17e4f57"

Resources:
    + 2 created

Duration: 20s

Permalink: https://app.pulumi.com/[USER_NAME]/quickstart/dev/updates/1

$ aws s3 ls
2019-11-16 03:14:44 hands-on-17e4f57

$ pulumi preview
Previewing update (dev):

     Type                 Name              Plan       
 +   pulumi:pulumi:Stack  hands-on-sandbox  create     
 +   └─ aws:s3:Bucket     hands-on          create     

Resources:
    + 2 to create

Permalink: https://app.pulumi.com/[USER_NAME]/quickstart/dev/previews/efa6381b-4837-40bc-ad54-ebe050eea1f4

$ date
2019年 11月16日 土曜日 03時12分31秒 JST
$ aws cloudformation list-stacks --query 'StackSummaries[].StackId' --output text | tr "\t" "\n" | wc -l
       3
$ date
2019年 11月16日 土曜日 03時22分49秒 JST
$ aws cloudformation list-stacks --query 'StackSummaries[].StackId' --output text | tr "\t" "\n" | wc -l
       3

$ $ diff index.ts index.ts_bk
5,7d4
< // Create a KMS Key for S3 server-side encryption
< const key = new aws.kms.Key("sandbox-hands-on-key");
< 
9,18c6
< const bucket = new aws.s3.Bucket("sandbox-hands-on", {
<     serverSideEncryptionConfiguration: {
<         rule: {
<             applyServerSideEncryptionByDefault: {
<                 sseAlgorithm: "aws:kms",
<                 kmsMasterKeyId: key.id,
<             }
<         }
<     }
< });
---
> const bucket = new aws.s3.Bucket("sandbox-hands-on");

$ $ pulumi up
Previewing update (sandbox):

     Type                 Name              Plan       Info
     pulumi:pulumi:Stack  hands-on-sandbox             
 +   ├─ aws:kms:Key       hands-on-key      create                                                   # KMSキーが作成されることがわかる
 ~   └─ aws:s3:Bucket     hands-on          update     [diff: +serverSideEncryptionConfiguration]    # S3バケットがSSE差分があり、更新かかるのがわかる

Resources:
    + 1 to create
    ~ 1 to update
    2 changes. 1 unchanged

Do you want to perform this update? yes
Updating (sandbox):

     Type                 Name              Status      Info
     pulumi:pulumi:Stack  hands-on-sandbox              
 +   ├─ aws:kms:Key       hands-on-key      created     
 ~   └─ aws:s3:Bucket     hands-on          updated     [diff: +serverSideEncryptionConfiguration]

Outputs:
    bucketName: "hands-on-17e4f57"

Resources:
    + 1 created
    ~ 1 updated
    2 changes. 1 unchanged

Duration: 26s

Permalink: https://app.pulumi.com/[USER_NAME]/quickstart/dev/updates/2

$ aws s3api get-bucket-encryption --bucket hands-on-17e4f57
{
    "ServerSideEncryptionConfiguration": {
        "Rules": [
            {
                "ApplyServerSideEncryptionByDefault": {
                    "SSEAlgorithm": "aws:kms",
                    "KMSMasterKeyID": "bcee6948-af72-47b4-bd68-dd327cce7d19"
                }
            }
        ]
    }
}

$ pulumi destroy
Previewing destroy (sandbox):

     Type                 Name              Plan       
 -   pulumi:pulumi:Stack  hands-on-sandbox  delete     
 -   ├─ aws:s3:Bucket     hands-on          delete     
 -   └─ aws:kms:Key       hands-on-key      delete     

Outputs:
  - bucketName: "hands-on-17e4f57"

Resources:
    - 3 to delete

Do you want to perform this destroy?
  yes
> no
  details

Do you want to perform this destroy? yes
Destroying (sandbox):

     Type                 Name              Status      
 -   pulumi:pulumi:Stack  hands-on-sandbox  deleted     
 -   ├─ aws:s3:Bucket     hands-on          deleted     
 -   └─ aws:kms:Key       hands-on-key      deleted     

Outputs:
  - bucketName: "hands-on-17e4f57"

Resources:
    - 3 deleted

Duration: 37s

Permalink: https://app.pulumi.com/uluru-kinoshitat/hands-on/sandbox/updates/3
The resources in the stack have been deleted, but the history and configuration associated with the stack are still maintained. 
If you want to remove the stack completely, run 'pulumi stack rm sandbox'.

$ pulumi stack rm sandbox
This will permanently remove the 'sandbox' stack!
Please confirm that this is what you'd like to do by typing ("sandbox"): dev
Stack 'sandbox' has been removed!

$ pulumi stack rm [USER_NAME]/hands-on/sandbox --force
This will permanently remove the '[USER_NAME]/hands-on/sandbox' stack!
Please confirm that this is what you'd like to do by typing ("[USER_NAME]/hands-on/sandbox"): [USER_NAME]/hands-on/sandbox
Stack '[USER_NAME]/hands-on/sandbox' has been removed!

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const publicAz1a = new aws.ec2.DefaultSubnet("publicAz1a", {
    availabilityZone: "us-east-1",
    tags: {
        Name: "hands-on-public-sub",
        ENV: "sandbox",
    },
});

const amzn2 = aws.getAmi({
    filters: [
        {
            name: "name",
            values: ["amzn-ami-hvm-????.??.?.????????-x86_64-gp2"],
        },
        {
            name: "state",
            values: ["available"],
        },
    ],
    mostRecent: true,
    owners: ["amazon"],
});

const hands_on = new aws.ec2.Instance("hands-on", {
    ami: amzn2.id,
    instanceType: "t2.micro",
    subnetId: publicAz1a.id,
    tags: {
        Name: "hands-on",
        ENV: "sandbox",
    },
});

export const instanceId = hands_on.hostId;