Terraform
Tool for building, changing, and versioning infrastructure.
Contents
Community
Tutorials and Blog Posts
AWS
Community Modules
Terraform modules for automated NIS2 compliance and secure infrastructure deployment.
This Terraform module allows querying AWS accounts and outputs the accounts in various mappings or as a complete list, with the ability to apply a search filter to the account list and group the accounts by existing tags using a submodule.
Creates Terraform configurations for running Atlantis on AWS Fargate. Github, Gitlab, and BitBucket are supported.
Creates Auto-Scaling Groups and Launch Configurations (verified module).
Creates resources on AWS to forward logs/metrics to Datadog.
Creates Elastic Kubernetes Service on AWS (very popular module).
EC2 Based Jenkins deployment with HA (spot) agents. Runs on EFS for immutability. Fully customizable, with sensible defaults.
Build a Docker image with Jenkins, saves it to an ECR repo, and deploys it to Elastic Beanstalk running a Docker stack.
Automatically Generate SSH Key Pairs (Public/Private Keys).
A terraform module to define a lambda function which source files are automatically built and packaged for lambda deployment.
Terraform module, which builds dependencies and packages, and also creates AWS Lambda resources in countless combinations.
Creates AWS Managed Service for Prometheus (AMP) resources on AWS.
Creates AWS MSK (Managed Streaming for Kafka) resources on AWS.
Creates SNS topic and Lambda function, which sends notifications to Slack.
Creates RDS Aurora cluster resources on AWS (verified module).
Set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
Creates EC2-VPC security groups on AWS (verified module).
Terraform plan to deploy ssh bastion as a stateless service on AWS.
Creates VPC resources on AWS (verified and very popular module).
Module to create a Maintenance Page using Cloudflare Workers.
Creates Terraform configurations for running Atlantis on Google Compute Engine.
Opinionated Google Cloud Platform project creation and configuration with Shared VPC, IAM, APIs, etc.
Kubestack is a framework for Kubernetes platform engineering teams to define the entire cloud native stack in one Terraform code base and continuously evolve the platform safely through GitOps.
Creates static websites on AWS S3 & Cloudfront based on variables.
Self-Hosted Registries
Private Terraform registry implementation as an alternative to the official registry.
Private Terraform Module/Provider Registry with API key authentication and blob storage support
A private Terraform registry with modular store backends.
Terraform registry to serve arbitrary Terraform provider releases hosted on Github
Simple implementation of the Terraform registry protocols.
Open Source terraform provider registry acting as a proxy for gitlab or github releases.
Providers
Vendor supported providers
Terraform plugin built with machine learning in mind.
Provider to manage the settings of your Keycloak identity provider server.
Provider for Palo Alto Networks next-generation firewalls.
Encrypted HashiCorp Vault secrets via Terraform that can be stored in SCM such as Git.
Testing
Provides a set of Test Kitchen plugins which enable a system to use Test Kitchen to converge a Terraform configuration and verify the resulting Terraform state with InSpec controls.
Tools
AirIAM is a tool for AWS IAM to least privilege Terraform execution framework.
Astro is a tool for managing multiple Terraform executions as a single command.
automates the importing of existing AWS resources into Terraform and outputs the Terraform HCL code.
A tool to bring existing Azure resources under Terraform's management.
A command line utility to facilitate terraforming your existing Cloudflare resources.
AWS security auditing CLI with remediation engine that generates Terraform code for fixing misconfigurations.
Systematically manage external modules from Github for use in Terraform (written in Go).
Continuous infrastructure drift detection with historical tracking and notifications.
Systematically manage external modules from Github for use in Terraform (written in Ruby).
Generate terraform configuration from your existing resources within your AWS account.
A fuzzy-finder command-line tool for removing resources from terraform state.
Gaia is a Terraform UI for your modules, and self-service infrastructure .
Small tool to convert an IAM Policy in JSON format into a Terraform awsiampolicy_document
Read your tfstate or HCL to generate a graph specific for each provider, showing only the resources that are most important/relevant.
Scans IaC projects for security vulnerabilities, compliance issues, and infrastructure misconfiguration. Currently working with Terraform projects, Kubernetes manifests, Dockerfiles, AWS CloudFormation Templates, and Ansible playbooks.
Layerform helps engineers create reusable environment stacks using plain .tf files. Ideal for multiple "staging" environments.
Infrastructure as code generator from visual diagrams created with Cloudcraft.co to Terraform.
The missing 3rd-party plugin manager and a "Swiss army knife" for Terraform/Terragrunt - just 1 tool to facilitate all workflows.
Pike calculates the permissions or IAM policy required to build your Terraform.
pre-commit git hooks for Terraform and Terragrunt: auto-format, validate, update docs, run security checks, estimate costs, and more.
drop-in Terraform wrapper that generates Terraform configuration with Python. See pretf documentation
Prettyplan for TF 0.12+ (available online here) is a small tool to help you view large Terraform plans with ease.
Prettyplan (available online here) is a small tool to help you view large Terraform plans with ease.
pytest terraform plugin with fixtures and offline replay support.
Systematically manage external modules from Github for use in Terraform.
Evaluates Terraform infrastructure-as-code for potential AWS, Azure, and Google Cloud security misconfigurations and compliance violations prior to deployment.
Next-generation red team infrastructure automation tool built on Terraform, supporting multi-cloud deployment (Alibaba Cloud, Tencent Cloud, AWS, etc.) with one-command deployment for creating, configuring, and destroying red team environments.
Sharable Config Presets for Renovatebot, especially useful for DevOps folks.
Simple Python tool to help with module development - extract vars from main.tf to generate variables.tf and make module usage stub from variables.tf.
The power of Ansible and Terraform + the simplicity of Docker Swarm = Infrastructure as Code and DevOps best practices.
Tau is a thin wrapper on top of terraform to manage multiple deployments, dependencies, and secrets.
Reads from existing Cloud Providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration.
Terraform state repository, based on the default http remote backend. Allows the central administration of tfstates on AWS S3.
AI-powered skill for GitHub Copilot, Claude, and ChatGPT that automates bulk Terraform module management — provider upgrades, workflow standardization, and releases across 10–200+ repositories on AWS, GCP, Azure, and DigitalOcean.
Get notified when actions are taken in the AWS Console.
CDK (Cloud Development Kit) for Terraform allows developers to use familiar programming languages to define cloud infrastructure and provision it through HashiCorp Terraform.
Tiny utility which detects unused variables in your terraform modules.
A Terraform "credentials helper" plugin that allows providing credentials for Terraform-native services (private module registries, Terraform Cloud, etc) via environment variables.
Command line tool allowing to convert the barely usable output of the terraform graph command to something more meaningful and explanatory.
CLI validates AWS IAM Policies in a Terraform template against AWS IAM best practices.
(only 0.11 and earlier) Improve Terraform's plan output to be easier to read and understand.
Command line utility and JavaScript API for parsing stdout from terraform plan and converting it to JSON.
Tool for managing multiple provisions of the same Terraform scripts.
A terraform console wrapper for a better interactive console experience.
CLI tool to generate terraform files from existing infrastructure. Infrastructure to Code. Supported many providers.
Export existing AWS resources to Terraform style (tf, tfstate). Similar to terraformer.
Terragrunt is a thin wrapper for Terraform that provides extra tools for keeping your Terraform configurations DRY, working with multiple Terraform modules, and managing remote state.
Command line utility aimed at providing supplementary functionality which can sometimes prove useful when working with Terraform.
TerraHub is terraform automation and orchestration tool. Seamlessly integrated into console.terrahub.io, enterprise friendly GUI to show realtime terraform executions, as well as auditing and reporting capabilities for historical terraform runs.
Wizard tool for create folders and terraform files automated, written in Python !
Tool for managing multiple Terraform stacks that comes with support for change detection and code generation
Terrap - a powerful CLI tool that scans your infrastructure and identifies any required changes.
Terrars is a tool for building Terraform stacks in Rust. This is an alternative to the CDK.
Collection of security and best practice test for static code analysis of terraform templates
Visual Studio Code extension to monitor/deploy/destroy Terraform resources in your workspace
Terratag is a CLI tool that enables users of Terraform to automatically create and maintain tags across their entire set of AWS, Azure, and GCP resources.
A Pre-terraform routine that speedups terraform modules download for bulky blueprints.
Profiler for Terraform runs. Generate global stats, resource-level stats or visualizations.
A CLI tool that integrates Terraform with OpenAI's GPT-3.5 Turbo to provide explanations for Terraform commands and concepts.
Terraform linter for detecting errors that can not be detected by terraform plan
Terraform utility to mask select output from terraform plan and terraform apply
tfocus is a super interactive tool for selecting and executing Terraform plan/apply on specific resources. Think of it as an "emergency tool" - not for everyday use.
A Terraform REPL, giving you a full shell experience. Readline based. No dependencies. Save config changes. History.
A Terraform utility to show Terraform plans with all the secret (sensitive) values revealed.
Framework for controlling multi-environment multi-component terraform-managed AWS infrastructure.
Terraform static analysis tool that supports terraform <0.12 & >=0.12 & directly integrates with HCL parser for better results.
tfvar scans your Terraform configurations or modules and extracts the variables into formats of your choice (tfvar, environment variables, etc.) for editing.
tfvaultenv reads secrets from HashiCorp Vault and outputs environment variables for various Terraform providers with those secrets.
A CLI tool that helps you interact with Terraform via the Model Context Protocol (MCP), allowing AI assistants like Claude to manage and operate Terraform environments.
Zero-config wrapper that automatically injects Git metadata (commit SHA, branch, repo) into all Terraform-managed resources.
ValidIaC combines the best open-source tools to help ensure Terraform best practices, hygiene & security.
Systematically manage external modules from the module registry, git, or local directories for use in Terraform (written in Go).
Automatically tag and trace infrastructure as code frameworks (Terraform, Cloudformation, and Serverless).
Compare Azure resources deployed in a subscription against resources managed by Terraform Enterprise (HCP & Selfhosted) workspaces when your cloud's resource tagging strategy is insufficient.
serverless.tf is an opinionated open-source framework for developing, building, deploying, and securing serverless applications and infrastructures on AWS using Terraform. Read more.
Terrashine is a terraform provider mirror1 implementation that works by automatically caching dependencies as providers are requested.
Generates professional cloud architecture diagrams from Terraform code using official AWS/Azure/GCP icons and design standards. Runs 100% client-side with CI/CD integration.
Easily builds bundles containing a Terraform binary as well as provider binaries. Useful for CI and air-gapped Terraform Enterprise.
HashiCorp plugin for the [asdf](https://github.com/asdf-vm/asdf) version manager
CI
Libraries
Boilerplates
Self-hosted Terraform Platforms
Fast, Secure and Reliable Terraform Backend. It has a user-friendly dashboard, project and environment management, state versioning, locking and snapshots support.
Open Terraforming Framework, an open source alternative to Terraform Enterprise with full Terraform CLI integration.
Open Source, codify unmanaged resources as Terraform, detect drift, and cloud cost and security analysis, delivered as a Pull Request.