# Infrastructure as Code

Infrastructure as Code using real programming languages — TypeScript, Python, Go, C#, Java.

Pulumi is a modern Infrastructure as Code platform that lets teams define cloud infrastructure using familiar programming languages instead of DSLs. Supports TypeScript, Python, Go, C#, Java, and YAML across major clouds, Kubernetes, and a broad Pulumi Registry with Terraform-derived provider coverage. Offers testing, IDE autocomplete, reusable components, and Pulumi Cloud state/governance features.

Infrastructure as Code

HashiCorp's infrastructure-as-code tool for provisioning and managing cloud resources declaratively using HCL (HashiCorp Configuration Language). Write infrastructure definitions once and deploy to AWS, GCP, Azure, DigitalOcean, and 4,000+ providers. Features state management for tracking resources, plan/apply workflow for safe changes, modules for reusability, and workspaces for environment isolation. The industry standard for multi-cloud IaC with 48K+ GitHub stars.

Open-source Terraform fork — community-driven Infrastructure as Code.

OpenTofu is an open-source fork of Terraform created by the Linux Foundation after HashiCorp switched Terraform to the BSL license. Designed to preserve existing Terraform workflows and configurations, it offers state encryption, early variable evaluation, and a community-driven development model. Backed by major cloud providers and companies.

AWS's fully managed machine learning service for building, training, and deploying ML models.

Amazon SageMaker is AWS's comprehensive ML platform covering data labeling, notebook environments, model training, hyperparameter tuning, model hosting, and MLOps pipelines. Supports all major ML frameworks. Offers SageMaker Studio as an integrated IDE. Used by enterprises for production-scale ML workloads.

HashiCorp's Cloud Development Kit for defining Terraform with code

CDKTF (Cloud Development Kit for Terraform) lets developers define infrastructure using TypeScript, Python, Java, C#, or Go instead of HCL. It synthesizes familiar programming language constructs into standard Terraform JSON configuration. Developed by HashiCorp, it brings software engineering patterns like loops, conditionals, and abstractions to infrastructure definition with full IDE support.

Agentic IaC platform with AI-powered Terraform code generation

ControlMonkey is an agentic Infrastructure as Code platform that uses AI to automatically generate Terraform code from existing cloud resources. It detects infrastructure drift, converts ClickOps changes into version-controlled Terraform, and enforces IaC-first governance. Raised $7M seed funding to build AI-powered infrastructure management for cloud-native teams.

Kubernetes-native cloud infrastructure control plane

Crossplane is a CNCF Graduated open-source project that extends Kubernetes to manage cloud infrastructure through declarative APIs. Platform teams compose custom infrastructure abstractions as Compositions and publish them as self-service APIs. It provisions resources across AWS, Azure, GCP, and 200+ providers directly from kubectl. Used by 450+ organizations with 11,000+ GitHub stars.

Open-source IaC orchestration that runs Terraform plans and applies from pull request comments

Digger is an open-source infrastructure-as-code orchestration tool for running Terraform and OpenTofu plan/apply workflows from pull request comments. It uses the team’s existing VCS and CI runners instead of adding a separate runner fleet, supports GitHub, GitLab, and Azure DevOps style workflows, and stores PR-level locks and plan cache in the user’s cloud account.

Open-source microVMs for secure serverless and AI agent sandboxing

Firecracker is an open-source virtual machine monitor that creates lightweight microVMs with sub-150ms cold starts, originally built by AWS for Lambda and Fargate. With 28,000+ GitHub stars, it provides kernel-level isolation for running untrusted code safely and powers the sandboxing infrastructure behind AI coding agents like Devin and E2B.

Production-grade Terraform modules and infrastructure library

Gruntwork provides a library of battle-tested, production-grade Terraform modules covering AWS, GCP, and Azure infrastructure patterns. Modules handle networking, compute, databases, security, monitoring, and compliance with best practices built in. Terragrunt, their open-source Terraform wrapper with 15k+ stars, adds DRY configuration, remote state management, and multi-account orchestration.

AI-powered Infrastructure as Code management platform

IaC orchestration platform with AI-powered policy suggestions, drift detection, and automated remediation. Supports Terraform, OpenTofu, Pulumi, CloudFormation, Ansible, and Kubernetes. Centralizes infrastructure management with approval workflows, cost estimation, and compliance guardrails for teams running multi-cloud environments at scale.

Cloud-native CI/CD framework for Kubernetes-native pipelines.

Tekton is a cloud-native CI/CD framework that provides Kubernetes-native pipeline resources. A Linux Foundation / CD Foundation project, it offers reusable, composable building blocks for creating CI/CD systems. Used by Google Cloud Build, Red Hat OpenShift Pipelines, and other platforms as their underlying pipeline engine.

Open-source GitOps automation for Terraform and OpenTofu pull requests

Terrateam is open-source GitOps infrastructure orchestration for Terraform and OpenTofu pull requests. It automates plans and applies in GitHub workflows, supports monorepos and many workspaces, and adds apply-only locks, OPA/Rego policy checks, cost and drift signals, and approval controls without forcing teams into a separate IaC platform.

Infrastructure as Code orchestration and governance platform

env0 is an IaC orchestration platform that manages Terraform, OpenTofu, Pulumi, and CloudFormation workflows with built-in governance, cost estimation, and drift detection. It provides self-service infrastructure provisioning with policy guardrails, automated plan approvals, and budget controls. Supports custom deployment flows with OPA-based policy enforcement and RBAC.