A curated list of resources on HashiCorp's Terraform.
Your contributions are welcome!
Terraform enables you to safely and predictably create, change, and improve production infrastructure. It is an open source tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
Weekly newsletter covering Terraform news, open-source projects, announcements, and discussions.
Claude Code skill for Terraform and OpenTofu — testing, module design, CI/CD workflows, and production patterns.
Curated list of tools, frameworks, and resources for Terraform compliance and security.
[open-source ebook](https://github.com/antonbabenko/terraform-best-practices)
Interactive Terraform / IaC learning platform with hands-on labs, certification prep (HashiCorp, AWS, GCP, Azure, Docker, Kubernetes, GitOps), AI coaching, and progress tracking. See also the [SRE Pro Tips blog](https://www.terraformacademy.app/protips/?cat=sre-pro-tips) and the mobile/PWA apps below.
Free Terraform implementations of SOC 2, PCI DSS, HIPAA, NIST 800-53, and 35+ other compliance controls — open reference for writing compliant infrastructure code.
Native iOS app for the Terraform Academy interactive learning platform. Hands-on labs, certification prep (HashiCorp, AWS, GCP, Azure, Docker, Kubernetes, GitOps), AI coaching, and progress sync across devices.
Native Android app for the Terraform Academy learning platform with the same labs, cert prep, and AI coaching as the iOS and web versions.
Installable Progressive Web App version of Terraform Academy. Works offline, installs to home screen on any platform, and syncs progress with the mobile apps.
Mobile, desktop, and PWA apps for learning and working with Terraform on the go.
Series of blog posts from the author of "Terraform: Up & Running" that guide the reader from beginning with Terraform to using it in the real world.
Provisioning an EC2 instance.
Blog post describing setting up an ECS Fargate cluster from scratch
Blog post describing security best practices when working with Terraform
Why you should write a terraform provider
Guide for creating custom providers.
Guide for creating custom providers.
Official documentation for creating custom providers.
Guide to generating a terraform provider from an OpenAPI specification (Vendor Supported)
How to use Open Policy Agent to evaluate and enforce policy on your Terraform plans
Shows how Terraform can create a running instance of Discourse on DigitalOcean in one command.
Looks at how to use Terraform to spin up the required AWS infrastructure for running a Django app on ECS.
Terraform code to deploy a highly available VPN between AWS and Azure.
How 1Password migrated from CloudFormation to Terraform.
Illustrates how easy it is to use the OpenStack Terraform provider to deploy a web server.
Ensuring zero downtime of your infrastructure.
Shows how to use terraform to create a secure Google Kubernetes Cluster, Google Cloud Run Services and other infrastructure elements for less than [10$](https://nufailtd.github.io/budget-gcp/) a month.
How to use Infracost as the guardrail to manage cloud cost during Terraform development.
Making your terraform provider pulumi-ready
Automated, self-service AWS account lifecycle management using Terraform stacks orchestrated by StackGuardian, with SSM-based allocation, EventBridge cleanup triggers, and Tirith policy enforcement.
Managing Terraform modules and their versions within Terraform projects with Terrafile.
Some gotchas surrounding using Terraform in large projects with multiple environments and how to avoid them.
Explains different approaches for building a pipeline to handle infrastructure changes moving from one environment to the next.
Guide for Azure.
Azure Automation.
Deploy PaaS Resources on Azure.
Understand AWS Lambda in-depth, beyond executing functions, using Terraform. Also includes guides for integration with S3, API Gateway, DynamoDB, Kinesis, SQS.
What is AWS Lambda used for and how to use Terraform to manage AWS Lambda functions?
Setup and manage infrastructure as code with Terraform, Cloud Build, and GitOps.
Using Terraform to create a VM in Google Cloud and Starting a basic Python Flask server.
Deploy Kubernetes Load Balancer Service with Terraform, HTTPS Content-Based Load Balancer with Terraform, Modular Load Balancing with Terraform - Regional Load Balancer, Custom Providers with Terraform, Cloud SQL with Terraform, Building a VPN Between Google Cloud and AWS with Terraform.
Get started with Terraform on Google Cloud.
Open source MIT Licensed course about creating infrastructure on Google Cloud using Terraform/OpenTofu and Terragrunt
Terraform configuration and guide for deploying n8n workflow automation on Cloud Run with Cloud SQL, Secret Manager, and optional Queue Mode via Redis.
Illustrates how to use remote state to share data between Terraform configurations.
Shows the behind the scenes of the infrastructure powered by Terraform that solved [The Million Dollar Engineering Problem](https://segment.com/blog/the-million-dollar-eng-problem/) at [Segment](https://segment.com/).
Some hard-earned experience from using Terraform in the wild, and some operational wisdom.
Explanation of a demo using Terraform to provision a sample AWS architecture.
Anonymized, free cost estimation from a Terraform plan (0.12+) or state file. Also available in the browser at [terraform-cost-estimation.com](https://terraform-cost-estimation.com).
Terraform modules for automated NIS2 compliance and secure infrastructure deployment.
Rancher server on digitalocean.
Configures production infrastructure with AWS, Docker, and ECS. :skull:
This Terraform module allows querying AWS accounts and outputs the accounts in various mappings or as a complete list, with the ability to apply a search filter to the account list and group the accounts by existing tags using a submodule.
Creates Application load-balancer on AWS (verified module).
Creates AWS AppConfig resources on AWS.
Creates Terraform configurations for running [Atlantis](https://runatlantis.io) on AWS Fargate. Github, Gitlab, and BitBucket are supported.
Creates Auto-Scaling Groups and Launch Configurations (verified module).
Creates Customer Gateway on AWS.
Creates resources on AWS to forward logs/metrics to Datadog.
Creates AWS DMS (Database Migration Service) resources on AWS.
Creates DynamoDB table on AWS.
Creates EC2 instances on AWS.
Manages Docker container registries on AWS ECR.
Creates AWS ECS resources on AWS.
Defines an EFS Filesystem.
Creates Elastic Kubernetes Service on AWS (very popular module).
Creates Elastic load-balancer on AWS (verified module).
Creates EventBridge resources on AWS.
EC2 Based Jenkins deployment with HA (spot) agents. Runs on EFS for immutability. Fully customizable, with sensible defaults.
Build a Docker image with Jenkins, saves it to an ECR repo, and deploys it to Elastic Beanstalk running a Docker stack. :skull:
Automatically Generate SSH Key Pairs (Public/Private Keys).
A terraform module to define a lambda function which source files are automatically built and packaged for lambda deployment.
Terraform module, which builds dependencies and packages, and also creates AWS Lambda resources in countless combinations.
Creates AWS Managed Service for Prometheus (AMP) resources on AWS.
Collection of Terraform AWS modules supported by the community (includes official AWS modules).
Creates AWS MSK (Managed Streaming for Kafka) resources on AWS.
Creates SNS topic and Lambda function, which sends notifications to Slack.
Creates PostgreSQL on RDS.
Creates RDS Aurora cluster resources on AWS (verified module).
Creates AWS RDS Proxy resources on AWS.
Creates RDS resources on AWS (verified module).
Creates Redshift resources on AWS.
Creates Route53 resources on AWS.
Creates S3 bucket resources on AWS.
Set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
Creates EC2-VPC security groups on AWS (verified module).
Terraform plan to deploy ssh bastion as a stateless service on AWS.
Creates Transit Gateway resources on AWS.
Creates VPC resources on AWS (verified and very popular module).
Creates VPN gateway resources on AWS.
Official Microsoft-owned collection of verified Terraform modules for Azure, codifying WAF best practices for consistent infrastructure deployment.
Create AKS resources on Azure.
Install IIS Server on Azure VM instance.
Create MySql Database on Azure.
Create Redis on Azure.
Create SQl Server Database on Azure.
Module to create a Maintenance Page using Cloudflare Workers.
Terraform module for managing DigitalOcean Droplets and related resources.
Provisions Jenkins on AWS ECS using Terraform.
Creates Terraform configurations for running [Atlantis](https://runatlantis.io) on Google Compute Engine.
Opinionated Google Cloud Platform project creation and configuration with Shared VPC, IAM, APIs, etc.
Kubestack is a framework for Kubernetes platform engineering teams to define the entire cloud native stack in one Terraform code base and continuously evolve the platform safely through GitOps.
Installs Kubernetes on Linode Instances.
A set of Terraform modules that are designed to deploy NixOS.
Creates static websites on AWS S3 & Cloudfront based on variables.
Creates bastion hosts on AWS EC2.
Minimal and free Kubernetes distribution with Terraform.
For more Community Modules not listed here please see the Terraform Module Registry.
Private Terraform registry implementation as an alternative to the official registry.
Private Terraform Module/Provider Registry with API key authentication and blob storage support
Private Terraform Module/Provider Registry
A private Terraform registry with modular store backends.
Private Terraform Registry Manager
Terraform registry to serve arbitrary Terraform provider releases hosted on Github
Private Terraform Registry.
Simple implementation of the Terraform registry protocols.
A registry that focuses on module & state insights, tackling dependency management
Terraform module registry.
Open Source terraform provider registry acting as a proxy for gitlab or github releases.
Terraform Private Registry for modules and providers manageable from a REST API.
Official Microsoft initiative providing verified, standards-compliant Terraform (and Bicep) modules for Azure resources and architectural patterns, aligned with the Well-Architected Framework.
Managed package hoster for internal and external clients. :heavy_dollar_sign:
A private Terraform/OpenTofu registry with deep module insights, dependency mapping, and state visibility.
Provider for Amazon Web Services.
Provider for Azure.
Provider for Docker. :skull:
Provider for Google Cloud Platform.
Provider for Helm.
Provider for Kubernetes.
Provider for VMware vSphere.
Provider for Alibaba Cloud.
Provider for [JFrog Artifactory](https://jfrog.com/artifactory/).
Provider for [Atlas](https://atlasgo.io/).
Provider for Azure Resource Manager Rest API
Provider for Azure DevOps (VSTS).
Provider for Buildkite.
Manage [Checkly](https://www.checklyhq.com) resources for API & E2E monitoring.
Provider for [Coder](https://coder.com)
Provider for Confluent.
Provider for Datadog.
Provider for [DevHelm](https://devhelm.io) uptime monitoring — manage monitors, alert channels, and status pages as code.
Provider for DigitalOcean.
Provider for Dominos Pizza.
Provider for Elasticsearch and Kibana.
Provider for [env0](https://www.env0.com/)
Provider for GitHub.
Provider for GitLab.
Provider for GraphQL queries and mutations.
Provider for Hetzner Cloud.
Provider to manage healthchecks.io resources.
Provider for Heroku.
Provider for IBM Cloud.
Terraform plugin built with machine learning in mind.
Simple Kubernetes Provider, works with any manifest.
Provider to manage the settings of your [Keycloak](https://www.keycloak.org/) identity provider server.
Provider for Linode.
Plugin for OpenStack.
Provider for [Palo Alto Networks next-generation firewalls](https://www.paloaltonetworks.com/network-security).
Terraform provider for [Phare](https://phare.io).
Terraform provider for [PlanetScale](https://planetscale.com) (Vitess & Postgres).
Provider for [Qovery](https://www.qovery.com/) — manage Kubernetes deployments, environments, applications, databases, Helm charts, and Terraform services on AWS, GCP, Azure, and Scaleway.
Provider to manage Pingdom resources. :skull:
Provider for Rancher v2.
Provider for [Scalr](https://www.scalr.com/)
Provider for SecretHub. :skull:
Provider for Signal Sciences.
Provider for Snowflake data warehouse.
Provider for [Spinnaker](https://spinnaker.io/).
Provider for spotinst.
Provider for Stripe.
Provider to manage UCloud resources.
Provider to manage uptimerobot resources. :skull:
Encrypted HashiCorp Vault secrets via Terraform that can be stored in SCM such as Git.
Provider for Splunk Cloud Platform.
Terraform Docker provider.
Terraform provider for managing MinIO S3 buckets and IAM Users.
Terraform Proxmox provider.
Provider to make managed and unmanaged API calls to your target endpoint.
Uname Provider for Terraform.
Value Provider for Terraform.
Terraform provider for Multipass.
Manage OpenRouter as code: workspaces, guardrails, spend-limited API keys, and org members. Terraform + OpenTofu.
Terraform provider for Azure cost estimation and cost guardrails.
Terraform provider for Coolify.
A declarative test framework for Terraform for unit testing. :skull:
Provides a set of Test Kitchen plugins which enable a system to use Test Kitchen to converge a Terraform configuration and verify the resulting Terraform state with InSpec controls. :skull:
RSpec tests for your Terraform modules. :skull:
Assists in the enforcement of user-defined standards in Terraform. :skull:
BDD Testing for Terraform Files.
Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.
Artificial Intelligence Infrastructure-as-Code Generator
AirIAM is a tool for AWS IAM to least privilege Terraform execution framework.
HashiCorp plugin for the [asdf](https://github.com/asdf-vm/asdf) version manager
Astro is a tool for managing multiple Terraform executions as a single command. :ghost:
Unified workflow for collaborating on Terraform through GitHub.
A universal tool that converts deep merged YAML to module inputs.
automates the importing of existing AWS resources into Terraform and outputs the Terraform HCL code.
A tool to bring existing Azure resources under Terraform's management.
CLI tool for easy AWS API reads. Also generates Terraform import-blocks, and actual Terraform Resource code.
Interactive visualizations of Terraform dependency graphs. :skull:
A command line utility to facilitate terraforming your existing Cloudflare resources.
Cfnctl brings the Terraform cli experience to AWS Cloudformation.
Terraform static analysis tool for terraform>=0.12
AWS security auditing CLI with remediation engine that generates Terraform code for fixing misconfigurations.
Coder provisions software development environments on your infrastructure via Terraform.
Systematically manage external modules from Github for use in Terraform (written in Go). :skull:
Detect, track, and alert on infrastructure drift :skull:
Continuous infrastructure drift detection with historical tracking and notifications.
Systematically manage external modules from Github for use in Terraform (written in Ruby).
Terraform version manager.
A tool for eliminating toil in managing terraform repositories.
Generate terraform configuration from your existing resources within your AWS account.
A fuzzy-finder command-line tool for removing resources from terraform state.
Gaia is a Terraform 🌍 UI for your modules, and self-service infrastructure 👨💻. :skull:
Convert hcl2 to json.
Dump the HCL (v2) abstract syntax tree.
Go package to edit HCL configuration
A command line editor for HCL.
Syntax based grep for HCL(v2).
command-line HCL processor
Small tool to convert an IAM Policy in JSON format into a Terraform aws_iam_policy_document
Cloud cost estimates for Terraform in your CLI and pull requests.
Read your tfstate or HCL to generate a graph specific for each provider, showing only the resources that are most important/relevant.
Advanced Infrastructure Auditor for cost and security analysis of Terraform, AWS, and Kubernetes.
Free browser-based tool to visualize Terraform HCL and Docker Compose as architecture diagrams. Supports AWS & Azure. No signup, no credentials needed.
Convert JSON to HCL and vice versa. :ghost:
Kubernetes YAML to Terraform HCL converter.
Generates Terraform/OpenTofu JSON and other infrastructure configuration from inventory-driven templates.
Scans IaC projects for security vulnerabilities, compliance issues, and infrastructure misconfiguration. Currently working with Terraform projects, Kubernetes manifests, Dockerfiles, AWS CloudFormation Templates, and Ansible playbooks.
Layerform helps engineers create reusable environment stacks using plain .tf files. Ideal for multiple "staging" environments. :skull:
Library.tf is built and designed to not just provide you with all of the registry information for Terraform and OpenTofu but to provide all of the insights you need to make decisions. Quickly find modules or providers that are supported and maintained and not full of bugs.
Infrastructure as code generator from visual diagrams created with [Cloudcraft.co](https://cloudcraft.co) to Terraform.
The missing 3rd-party plugin manager and a "Swiss army knife" for Terraform/Terragrunt - just 1 tool to facilitate all workflows. :skull:
Pike calculates the permissions or IAM policy required to build your Terraform.
Terraform runtime TUI
AI-assisted field handbook for Terraform: IAM least privilege review, blast radius analysis, state impact, provider constraints, and rollback planning. Works as a Claude, Codex, Cursor, and Copilot plugin.
Terraform state visualization and automated generation of infrastructure documentation. :heavy_dollar_sign:
pre-commit git hooks for Terraform and Terragrunt: auto-format, validate, update docs, run security checks, estimate costs, and more.
drop-in Terraform wrapper that generates Terraform configuration with Python. See [pretf documentation](https://pretf.readthedocs.io/en/latest/) :skull:
Prettyplan for TF 0.12+ ([available online here](https://cloudandthings.github.io/terraform-pretty-plan/)) is a small tool to help you view large Terraform plans with ease.
Prettyplan ([available online here](https://chrislewisdev.github.io/prettyplan/)) is a small tool to help you view large Terraform plans with ease. :ghost:
The terminal user interface for terraform power users.
pytest terraform plugin with fixtures and offline replay support.
Systematically manage external modules from Github for use in Terraform.
Evaluates Terraform infrastructure-as-code for potential AWS, Azure, and Google Cloud security misconfigurations and compliance violations prior to deployment.
Next-generation red team infrastructure automation tool built on Terraform, supporting multi-cloud deployment (Alibaba Cloud, Tencent Cloud, AWS, etc.) with one-command deployment for creating, configuring, and destroying red team environments.
Sharable Config Presets for Renovatebot, especially useful for DevOps folks.
Cross-repo dependency and change impact engine that scans multi-repo infrastructure across Terraform, Docker, Helm, and more to visualize what depends on what and what breaks when something changes.
Interactive Terraform state and configuration explorer.
Simple Ruby wrapper for invoking terraform commands.
Free browser tool to check Terraform provider version compatibility across Terraform and OpenTofu versions.
Sato helps you convert your legacy Cloudformation into Terraform.
Another Terraform plan output prettifier. :ghost: :skull:
Simple Python tool to help with module development - extract vars from `main.tf` to generate `variables.tf` and make module usage stub from `variables.tf`.
serverless.tf is an opinionated open-source framework for developing, building, deploying, and securing serverless applications and infrastructures on AWS using Terraform. [Read more](https://github.com/antonbabenko/serverless.tf).
Free browser-based scanner for `.tf` files. Checks hardcoded credentials, open ports to 0.0.0.0/0, public S3/RDS, unencrypted storage, missing deletion_protection. A-F grade. No install required.
AI-powered security analysis for Terraform-generated IAM policies and CloudFormation, explaining why a permission is risky and how to fix it. Free tier, CLI and GitHub Action.
Lightweight static analyzer for Terraform.
Generate a terraform provider from an OpenAPI specification.
Stacks, the Terraform code pre-processor
The power of Ansible and Terraform + the simplicity of Docker Swarm = Infrastructure as Code and DevOps best practices.
Tau is a thin wrapper on top of terraform to manage multiple deployments, dependencies, and secrets. :skull:
OpenTofu/Terraform/Terragrunt version manager.
Web dashboard to inspect Terraform States.
DSL to generate a terraform configuration and run it.
Reads from existing Cloud Providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration.
Cloud cost estimation for Terraform in your CLI.
Recursively test a directory tree for Terraform diffs and coverage.
Terraform state repository, based on the default http remote backend. Allows the central administration of tfstates on AWS S3.
Terraform destroy without configuration files.
Easy Terraform wrapper
AI-powered skill for GitHub Copilot, Claude, and ChatGPT that automates bulk Terraform module management — provider upgrades, workflow standardization, and releases across 10–200+ repositories on AWS, GCP, Azure, and DigitalOcean.
Get notified when actions are taken in the AWS Console.
Easily builds bundles containing a Terraform binary as well as provider binaries. Useful for CI and air-gapped Terraform Enterprise.
CDK (Cloud Development Kit) for Terraform allows developers to use familiar programming languages to define cloud infrastructure and provision it through HashiCorp Terraform.
Tiny utility which detects unused variables in your terraform modules.
A Terraform "credentials helper" plugin that allows providing credentials for Terraform-native services (private module registries, Terraform Cloud, etc) via environment variables.
Always know where you need to run Terraform plan & apply!
Quick utility to generate docs from terraform modules.
Command line tool allowing to convert the barely usable output of the terraform graph command to something more meaningful and explanatory.
CLI validates AWS IAM Policies in a Terraform template against AWS IAM best practices.
*(only 0.11 and earlier)* Improve Terraform's plan output to be easier to read and understand.
A Kubernetes CRD to handle Terraform operations.
Command line utility and JavaScript API for parsing stdout from `terraform plan` and converting it to JSON. :ghost:
Tool for managing multiple provisions of the same Terraform scripts.
Shared Rake tasks for managing terraform plans.
A terraform console wrapper for a better interactive console experience.
A simple but powerful tool to visualize Terraform plan.
Generates professional cloud architecture diagrams from Terraform code using official AWS/Azure/GCP icons and design standards. Runs 100% client-side with CI/CD integration.
Ansible dynamic inventory script for parsing Terraform state files. :skull:
CLI tool to generate terraform files from existing infrastructure. Infrastructure to Code. Supported many providers.
Export existing AWS resources to Terraform style (tf, tfstate). Similar to `terraformer`. :skull:
Apply\Destroy Terraform modules via a simple REST API endpoint. :skull:
A wrapper in Bash for easier CLI UX and DRY hierarchical configs
Generate Atlantis config for Terragrunt projects.
Terragrunt is a thin wrapper for Terraform that provides extra tools for keeping your Terraform configurations DRY, working with multiple Terraform modules, and managing remote state.
Command line utility aimed at providing supplementary functionality which can sometimes prove useful when working with Terraform.
TerraHub is terraform automation and orchestration tool. Seamlessly integrated into console.terrahub.io, enterprise friendly GUI to show realtime terraform executions, as well as auditing and reporting capabilities for historical terraform runs. :heavy_dollar_sign:
Wizard tool for create folders and terraform files automated, written in Python !
Tool for managing multiple Terraform stacks that comes with support for change detection and code generation
Terrap - a powerful CLI tool that scans your infrastructure and identifies any required changes.
Terrars is a tool for building Terraform stacks in Rust. This is an alternative to the CDK.
Collection of security and best practice test for static code analysis of terraform templates
Build orchestrator for terraform monorepos.
Terrashine is a terraform provider mirror1 implementation that works by automatically caching dependencies as providers are requested.
The Terraform Framework
Visual Studio Code extension to monitor/deploy/destroy Terraform resources in your workspace
Terratag is a CLI tool that enables users of Terraform to automatically create and maintain tags across their entire set of AWS, Azure, and GCP resources.
A Pre-terraform routine that speedups terraform modules download for bulky blueprints.
Profiler for Terraform runs. Generate global stats, resource-level stats or visualizations.
A command-line utility to print the summary of the terraform plan
CLI tool that attributes Terraform drift to the AWS actor who caused it, via CloudTrail lookup.
GitHub Actions collection for Opinionated Terraform Workflow
Generate Terraform `moved` blocks automatically for painless refactoring
CLI to notify the result of plan and apply as Pull Request comment.
A refactoring tool for Terraform.
Terraform version manager inspired by rbenv.
Terraform code generator for consistent codebase and DRY.
A CLI tool that integrates Terraform with OpenAI's GPT-3.5 Turbo to provide explanations for Terraform commands and concepts.
CLI tool to automate importing existing infrastructure innto tfstate.
Utility to read in a Terraform plan file and dump it out in JSON. :skull:
A tool for converting Kubernetes YAML manifests to Terraform HCL
Terraform linter for detecting errors that can not be detected by `terraform plan`
Automating Terraform with the power of make.
Terraform utility to mask select output from `terraform plan` and `terraform apply` :skull:
A Terraform state migration tool for GitOps.
Go library and CLI to migrate Terraform Configuration and State
Rename Terraform resources and generate moved blocks
tfocus is a super interactive tool for selecting and executing Terraform plan/apply on specific resources. Think of it as an "emergency tool" - not for everyday use.
CLI to prevent malicious Terraform Providers from being executed
Terraform Provider Lint Tool.
A Terraform REPL, giving you a full shell experience. Readline based. No dependencies. Save config changes. History.
A Terraform utility to show Terraform plans with all the secret (sensitive) values revealed.
Framework for controlling multi-environment multi-component terraform-managed AWS infrastructure.
Schema inspector for Terraform providers.
Terraform static analysis tool that supports terraform <0.12 & >=0.12 & directly integrates with HCL parser for better results.
CLI utility to sort Terraform variables and outputs.
CLI Tool to do `terraform xxx -target={...}` interactively.
Display your Terraform module call stack in your terminal.
A textual user interface for Terraform state.
Update version constraints in your Terraform configurations.
tfvar scans your Terraform configurations or modules and extracts the variables into formats of your choice (tfvar, environment variables, etc.) for editing.
tfvaultenv reads secrets from HashiCorp Vault and outputs environment variables for various Terraform providers with those secrets.
Rubygem providing rake tasks for running Hashicorp Terraform sanely.
A CLI tool that helps you interact with Terraform via the Model Context Protocol (MCP), allowing AI assistants like Claude to manage and operate Terraform environments.
Terragrunt frontend for executing Terragrunt/Terraform through Docker.
Documenting your Threat Models with HCL
OpenTofu version manager inspired by tfenv
A package manager for Terraform providers.
cd inside [mono]repos without fatigue!
Zero-config wrapper that automatically injects Git metadata (commit SHA, branch, repo) into all Terraform-managed resources.
ValidIaC combines the best open-source tools to help ensure Terraform best practices, hygiene & security.
Systematically manage external modules from the module registry, git, or local directories for use in Terraform (written in Go). :skull:
CLI - Convert between YAML, TOML, JSON, and HCL. Preserves map order.
Automatically tag and trace infrastructure as code frameworks (Terraform, Cloudformation, and Serverless).
Compare Azure resources deployed in a subscription against resources managed by Terraform Enterprise (HCP & Selfhosted) workspaces *when your cloud's resource tagging strategy is insufficient*.
Sets up Terraform CLI in your GitHub Actions workflow.
GitHub Action to run Terraform plan and add a comment with the changes.
GitHub Action that analyses Terraform plan changes with AI and comments a risk assessment on pull requests.
Terraform Live Graph Extension for Visual Studio Code is a plugin that allows you to generate a live Terraform graph as you code.
Terraform Navigation Extension to created an index of resources by type of file with an easy to navigate treeview.
HCL parsing and encoding libraries for rust with serde support
HCL parser in Java
HCL parser plugin for [Nushell](https://github.com/nushell/nushell)
HCL parser in Python
HCL2 parser in Python
Pure Ruby HCL parser :skull:
HCL grammar for tree-sitter
Single Terraform repo wiring up Vercel + Supabase + Cloudflare + DigitalOcean as the indie-SaaS platform. One `terraform apply` provisions a Next.js project, a Supabase project with env vars piped to Vercel, a Cloudflare zone with R2 and Workers KV, and a DigitalOcean droplet with monitoring.
Scaffolding for a new terraform module or project with support of test frameworks (terratest and kitchen-terraform)
Everything you need to build reliable automation for AKS, EKS, and GKE Kubernetes clusters in one free and open-source framework.
Fast, Secure and Reliable Terraform Backend. It has a user-friendly dashboard, project and environment management, state versioning, locking and snapshots support.
Open Terraforming Framework, an open source alternative to Terraform Enterprise with full Terraform CLI integration.
Open Source alternative to Terraform Enterprise with private registry, remote state, custom flows, scheduled workspaces, and visual states.
Open Source Alternative to Terraform Cloud - Run Terraform plan & apply jobs in your CI.
Open Source, codify unmanaged resources as Terraform, detect drift, and cloud cost and security analysis, delivered as a Pull Request.
OpenSource solution that defines and manages the complete lifecycle of resources used and provisioned into a cloud.
TACoS Kubernetes Operator - "ArgoCD for Terraform"
Open-source alternative to Terraform Cloud/Enterprise, GitOps-first with native GitHub integration and designed for scale, security, and reliability.
Terraform modules with SOC 2, PCI DSS, HIPAA, NIST 800-53, and 35+ other frameworks built in. Non-compliant configs fail at `terraform plan` before anything applies. :heavy_dollar_sign:
Alternative to Terraform Cloud with Terraform/OpenTofu code generation, cloud inventory and IaC coverage. Includes out-of-the-box policies, drift remediation, and a ClickOps activity scanner. :heavy_dollar_sign:
Alternative to Terraform Cloud by leveraging your CI tool. Firefly platform also scans your cloud to asses the IaC coverage & drift detection. :heavy_dollar_sign:
Alternative to Terraform Enterprise with OPA integration, organizational structure, custom hooks, native integrations with other DevOps platforms, and centralized reporting. :heavy_dollar_sign:
Terraform and OpenTofu without the state file bottleneck. Replace the flat state file with a real database. Teams plan in parallel, state is queryable via SQL, and plans run in seconds instead of minutes. :heavy_dollar_sign:
Alternative to Terraform Cloud/Enterprise with OPA integration, custom flows and Terragrunt support :heavy_dollar_sign:
Visually Design, Deploy & Manage modern cloud infrastructures starting from any Cloud Provider - AWS, GCP, Azure :heavy_dollar_sign:
Alternative to Terraform Cloud/Enterprise. Collaborative Infrastructure Delivery Platform for Terraform :heavy_dollar_sign:
Infrastructure codification and orchestration platform that converts existing cloud resources into IaC, featuring policy-driven workflows with Tirith, OPA, and Checkov, with support for private runtimes and no-code templates. :heavy_dollar_sign:
Terraform Enterprise Command Line Interface.
Terraform Enterprise API Ruby Client and Command Line tool.
Script for migrating Terraform Enterprise environments from Legacy to new version of Terraform Enterprise.
YouTube channel with weekly live streams covering Terraform news, reviews, interviews, Q&A, live coding, and some hacking with Terraform.
Terraform explained in 15 mins.
Automate your AWS cloud infrastructure.
Yevgeniy Brikman talks about how to write Terraform code so that it is reusable, composable and testable. The presentation focuses on Terraform modules but also provides a brief and clear explanation of what problem Terraform was created to solve and a short demo of Terraform basics (~39 min, October 2017).
Demonstrates how Terraform enables the practice of Infrastructure as Code by deploying TeamCity in AWS using a hosted PostgreSQL.
Example of creating a Google Compute Instance with Terraform code.
Learn how to contribute to a Terraform provider or create your own from this walkthrough.
CTO of OpenCredo provides an extensive look at using Terraform in the real-world with the help of some interesting use-cases.
In this talk, Paul will walk through the creation of a terraform provider.
Mitchell Hashimoto shows how Terraform can be used to deploy and scale containerized workloads.
How DigitalOcean uses Terraform to run production integration tests.
Running Terraform at scale with hundreds of AWS accounts.
Example of using CI with Kitchen-Terraform to test, tag and publish our Terraform module, which creates a Google Compute Instance.
How Terraform providers work and how to write one.
How Segment uses Terraform.
Focuses on development patterns and how to effectively structure Terraform code.
Integrating Terraform with an on-premise bare metal provisioning.
Example of using Kitchen-Terraform to test our Terraform code that creates a Google Compute.
How to refactor your Terraform code in a careful way with minimum risk.
Complete course from beginner to pro, with no cloud provider focus, with a general approach
Syntax highlighting for HCL