It was important for us to use IaC from the very beginning, since we'll be deploying multiple components to multiple environments, and we want those environments to be easily replicated.

While the pragmatic choice would have been the widely used Terraform, we decided to go with Pulumi, which offers a more familiar syntax to describe your infrastructure (the language of your choice, in our case, Typescript). It also has an interesting built-in way of hiding your secrets for you, which makes managing secrets securely a breeze compared to Terraform.