Awesome Terraform
by shuaibiyy · shuaibiyy/awesome-tf
Curated list of resources on HashiCorp Terraform and Terragrunt.
AUnderstand AWS Lambda in-depth, beyond executing functions, using Terraform. Also includes guides for integration with S3, API Gateway, DynamoDB, Kinesis, SQS.
What is AWS Lambda used for and how to use Terraform to manage AWS Lambda functions?
Native Android app for the Terraform Academy learning platform with the same labs, cert prep, and AI coaching as the iOS and web versions.
Native iOS app for the Terraform Academy interactive learning platform. Hands-on labs, certification prep (HashiCorp, AWS, GCP, Azure, Docker, Kubernetes, GitOps), AI coaching, and progress sync across devices.
Installable Progressive Web App version of Terraform Academy. Works offline, installs to home screen on any platform, and syncs progress with the mobile apps.
Series of blog posts from the author of "Terraform: Up & Running" that guide the reader from beginning with Terraform to using it in the real world.
A comprehensive and free course in French to master Terraform, from beginner to advanced usage, with hands-on examples and best practices.
Blog post describing security best practices when working with Terraform
SSingle Terraform repo wiring up Vercel + Supabase + Cloudflare + DigitalOcean as the indie-SaaS platform. One terraform apply provisions a Next.js project, a Supabase project with env vars piped to Vercel, a Cloudflare zone with R2 and Workers KV, and a DigitalOcean droplet with monitoring.
TScaffolding for a new terraform module or project with support of test frameworks (terratest and kitchen-terraform)
Everything you need to build reliable automation for AKS, EKS, and GKE Kubernetes clusters in one free and open-source framework.
B
T
TGitHub Action that analyses Terraform plan changes with AI and comments a risk assessment on pull requests.
ACurated list of tools, frameworks, and resources for Terraform compliance and security.
T
TTClaude Code skill for Terraform and OpenTofu — testing, module design, CI/CD workflows, and production patterns.
Official Microsoft-owned collection of verified Terraform modules for Azure, codifying WAF best practices for consistent infrastructure deployment.
NTerraform modules for automated NIS2 compliance and secure infrastructure deployment.
R
SConfigures production infrastructure with AWS, Docker, and ECS. :skull:
TThis Terraform module allows querying AWS accounts and outputs the accounts in various mappings or as a complete list, with the ability to apply a search filter to the account list and group the accounts by existing tags using a submodule.
TCreates Terraform configurations for running Atlantis on AWS Fargate. Github, Gitlab, and BitBucket are supported.
TCreates Auto-Scaling Groups and Launch Configurations (verified module).
TCreates resources on AWS to forward logs/metrics to Datadog.
T
TBuild a Docker image with Jenkins, saves it to an ECR repo, and deploys it to Elastic Beanstalk running a Docker stack. :skull:
TEC2 Based Jenkins deployment with HA (spot) agents. Runs on EFS for immutability. Fully customizable, with sensible defaults.
TTerraform module, which builds dependencies and packages, and also creates AWS Lambda resources in countless combinations.
TA terraform module to define a lambda function which source files are automatically built and packaged for lambda deployment.
TCreates AWS Managed Service for Prometheus (AMP) resources on AWS.
TCollection of Terraform AWS modules supported by the community (includes official AWS modules).
TCreates AWS MSK (Managed Streaming for Kafka) resources on AWS.
TCreates SNS topic and Lambda function, which sends notifications to Slack.
TTCreates RDS Aurora cluster resources on AWS (verified module).
TSet up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
TTerraform plan to deploy ssh bastion as a stateless service on AWS.
T
T
T
T
T
TModule to create a Maintenance Page using Cloudflare Workers.
Terraform module for managing DigitalOcean Droplets and related resources.
TCreates Terraform configurations for running Atlantis on Google Compute Engine.
TOpinionated Google Cloud Platform project creation and configuration with Shared VPC, IAM, APIs, etc.
TKubestack is a framework for Kubernetes platform engineering teams to define the entire cloud native stack in one Terraform code base and continuously evolve the platform safely through GitOps.
T
TCreates static websites on AWS S3 & Cloudfront based on variables.
T
T
T
TTerraform provider for managing MinIO S3 buckets and IAM Users.
T
TManage OpenRouter as code: workspaces, guardrails, spend-limited API keys, and org members. Terraform + OpenTofu.
TTerraform provider for Azure cost estimation and cost guardrails.
T
TProvider to make managed and unmanaged API calls to your target endpoint.
T
T
E
T
V
VUsing Terraform to create a VM in Google Cloud and Starting a basic Python Flask server.
Get started with Terraform on Google Cloud.
Open source MIT Licensed course about creating infrastructure on Google Cloud using Terraform/OpenTofu and Terragrunt
Deploy Kubernetes Load Balancer Service with Terraform, HTTPS Content-Based Load Balancer with Terraform, Modular Load Balancing with Terraform - Regional Load Balancer, Custom Providers with Terraform, Cloud SQL with Terraform, Building a VPN Between Google Cloud and AWS with Terraform.
Setup and manage infrastructure as code with Terraform, Cloud Build, and GitOps.
STerraform configuration and guide for deploying n8n workflow automation on Cloud Run with Cloud SQL, Secret Manager, and optional Queue Mode via Redis.
TShows how Terraform can create a running instance of Discourse on DigitalOcean in one command.
Looks at how to use Terraform to spin up the required AWS infrastructure for running a Django app on ECS.
, II & III - Illustrates how Terraform can be incorporated into a microservice deployment pipeline.
GShows how to use terraform to create a secure Google Kubernetes Cluster, Google Cloud Run Services and other infrastructure elements for less than 10$ a month.
Automated, self-service AWS account lifecycle management using Terraform stacks orchestrated by StackGuardian, with SSM-based allocation, EventBridge cleanup triggers, and Tirith policy enforcement.
Making your terraform provider pulumi-ready
How to use Open Policy Agent to evaluate and enforce policy on your Terraform plans
Terraform code to deploy a highly available VPN between AWS and Azure.
Illustrates how easy it is to use the OpenStack Terraform provider to deploy a web server.
Ensuring zero downtime of your infrastructure.
Free Terraform implementations of SOC 2, PCI DSS, HIPAA, NIST 800-53, and 35+ other compliance controls — open reference for writing compliant infrastructure code.
Interactive Terraform / IaC learning platform with hands-on labs, certification prep (HashiCorp, AWS, GCP, Azure, Docker, Kubernetes, GitOps), AI coaching, and progress tracking. See also the SRE Pro Tips blog and the mobile/PWA apps below.
H
H
N
P
P
R
TManaged package hoster for internal and external clients. :heavydollarsign:
A private Terraform/OpenTofu registry with deep module insights, dependency mapping, and state visibility.
Visually Design, Deploy & Manage modern cloud infrastructures starting from any Cloud Provider - AWS, GCP, Azure :heavydollarsign:
Terraform modules with SOC 2, PCI DSS, HIPAA, NIST 800-53, and 35+ other frameworks built in. Non-compliant configs fail at terraform plan before anything applies. :heavydollarsign:
Alternative to Terraform Cloud with Terraform/OpenTofu code generation, cloud inventory and IaC coverage. Includes out-of-the-box policies, drift remediation, and a ClickOps activity scanner. :heavydollarsign:
Alternative to Terraform Cloud/Enterprise with OPA integration, custom flows and Terragrunt support :heavydollarsign:
Alternative to Terraform Cloud by leveraging your CI tool. Firefly platform also scans your cloud to asses the IaC coverage & drift detection. :heavydollarsign:
Alternative to Terraform Enterprise with OPA integration, organizational structure, custom hooks, native integrations with other DevOps platforms, and centralized reporting. :heavydollarsign:
Alternative to Terraform Cloud/Enterprise. Collaborative Infrastructure Delivery Platform for Terraform :heavydollarsign:
Infrastructure codification and orchestration platform that converts existing cloud resources into IaC, featuring policy-driven workflows with Tirith, OPA, and Checkov, with support for private runtimes and no-code templates. :heavydollarsign:
Terraform and OpenTofu without the state file bottleneck. Replace the flat state file with a real database. Teams plan in parallel, state is queryable via SQL, and plans run in seconds instead of minutes. :heavydollarsign:
Illustrates how to use remote state to share data between Terraform configurations.
TAnonymized, free cost estimation from a Terraform plan (0.12+) or state file. Also available in the browser at terraform-cost-estimation.com.
TExplanation of a demo using Terraform to provision a sample AWS architecture.
Shows the behind the scenes of the infrastructure powered by Terraform that solved The Million Dollar Engineering Problem at Segment.
Some hard-earned experience from using Terraform in the wild, and some operational wisdom.
Managing Terraform modules and their versions within Terraform projects with Terrafile.
Some gotchas surrounding using Terraform in large projects with multiple environments and how to avoid them.
Explains different approaches for building a pipeline to handle infrastructure changes moving from one environment to the next.
APrivate Terraform registry implementation as an alternative to the official registry.
BPrivate Terraform Module/Provider Registry with API key authentication and blob storage support
C
N
P
PTerraform registry to serve arbitrary Terraform provider releases hosted on Github
T
T
TTerraform Private Registry for modules and providers manageable from a REST API.
A registry that focuses on module & state insights, tackling dependency management
T
TOpen Source terraform provider registry acting as a proxy for gitlab or github releases.
B
COpen Source, codify unmanaged resources as Terraform, detect drift, and cloud cost and security analysis, delivered as a Pull Request.
Open Source Alternative to Terraform Cloud - Run Terraform plan & apply jobs in your CI.
LFast, Secure and Reliable Terraform Backend. It has a user-friendly dashboard, project and environment management, state versioning, locking and snapshots support.
OOpen Terraforming Framework, an open source alternative to Terraform Enterprise with full Terraform CLI integration.
SOpenSource solution that defines and manages the complete lifecycle of resources used and provisioned into a cloud.
Open Source alternative to Terraform Enterprise with private registry, remote state, custom flows, scheduled workspaces, and visual states.
Open-source alternative to Terraform Cloud/Enterprise, GitOps-first with native GitHub integration and designed for scale, security, and reliability.
TTerraform Enterprise API Ruby Client and Command Line tool.
TScript for migrating Terraform Enterprise environments from Legacy to new version of Terraform Enterprise.
C
KProvides a set of Test Kitchen plugins which enable a system to use Test Kitchen to converge a Terraform configuration and verify the resulting Terraform state with InSpec controls. :skull:
R
T
TAssists in the enforcement of user-defined standards in Terraform. :skull:
TTerratest is a Go library that makes it easier to write automated tests for your infrastructure code.
A
AAstro is a tool for managing multiple Terraform executions as a single command. :ghost:
Aautomates the importing of existing AWS resources into Terraform and outputs the Terraform HCL code.
ACLI tool for easy AWS API reads. Also generates Terraform import-blocks, and actual Terraform Resource code.
B
CA command line utility to facilitate terraforming your existing Cloudflare resources.
C
CAWS security auditing CLI with remediation engine that generates Terraform code for fixing misconfigurations.
Coder provisions software development environments on your infrastructure via Terraform.
CSystematically manage external modules from Github for use in Terraform (written in Go). :skull:
D
DContinuous infrastructure drift detection with historical tracking and notifications.
DSystematically manage external modules from Github for use in Terraform (written in Ruby).
F
F
FGenerate terraform configuration from your existing resources within your AWS account.
FA fuzzy-finder command-line tool for removing resources from terraform state.
GGaia is a Terraform 🌍 UI for your modules, and self-service infrastructure 👨💻. :skull:
H
H
H
H
H
ISmall tool to convert an IAM Policy in JSON format into a Terraform awsiampolicydocument
I
IRead your tfstate or HCL to generate a graph specific for each provider, showing only the resources that are most important/relevant.
Advanced Infrastructure Auditor for cost and security analysis of Terraform, AWS, and Kubernetes.
Free browser-based tool to visualize Terraform HCL and Docker Compose as architecture diagrams. Supports AWS & Azure. No signup, no credentials needed.
J
K
KGenerates Terraform/OpenTofu JSON and other infrastructure configuration from inventory-driven templates.
KScans IaC projects for security vulnerabilities, compliance issues, and infrastructure misconfiguration. Currently working with Terraform projects, Kubernetes manifests, Dockerfiles, AWS CloudFormation Templates, and Ansible playbooks.
LLayerform helps engineers create reusable environment stacks using plain .tf files. Ideal for multiple "staging" environments. :skull:
Library.tf is built and designed to not just provide you with all of the registry information for Terraform and OpenTofu but to provide all of the insights you need to make decisions. Quickly find modules or providers that are supported and maintained and not full of bugs.
MInfrastructure as code generator from visual diagrams created with Cloudcraft.co to Terraform.
PThe missing 3rd-party plugin manager and a "Swiss army knife" for Terraform/Terragrunt - just 1 tool to facilitate all workflows. :skull:
P
PAI-assisted field handbook for Terraform: IAM least privilege review, blast radius analysis, state impact, provider constraints, and rollback planning. Works as a Claude, Codex, Cursor, and Copilot plugin.
Terraform state visualization and automated generation of infrastructure documentation. :heavydollarsign:
Ppre-commit git hooks for Terraform and Terragrunt: auto-format, validate, update docs, run security checks, estimate costs, and more.
Pdrop-in Terraform wrapper that generates Terraform configuration with Python. See pretf documentation :skull:
PPrettyplan (available online here) is a small tool to help you view large Terraform plans with ease. :ghost:
PPrettyplan for TF 0.12+ (available online here) is a small tool to help you view large Terraform plans with ease.
P
PSystematically manage external modules from Github for use in Terraform.
RNext-generation red team infrastructure automation tool built on Terraform, supporting multi-cloud deployment (Alibaba Cloud, Tencent Cloud, AWS, etc.) with one-command deployment for creating, configuring, and destroying red team environments.
REvaluates Terraform infrastructure-as-code for potential AWS, Azure, and Google Cloud security misconfigurations and compliance violations prior to deployment.
Free browser tool to check Terraform provider version compatibility across Terraform and OpenTofu versions.
Free browser-based scanner for .tf files. Checks hardcoded credentials, open ports to 0.0.0.0/0, public S3/RDS, unencrypted storage, missing deletionprotection. A-F grade. No install required.
RSharable Config Presets for Renovatebot, especially useful for DevOps folks.
Cross-repo dependency and change impact engine that scans multi-repo infrastructure across Terraform, Docker, Helm, and more to visualize what depends on what and what breaks when something changes.
R
R
S
S
SSimple Python tool to help with module development - extract vars from main.tf to generate variables.tf and make module usage stub from variables.tf.
serverless.tf is an opinionated open-source framework for developing, building, deploying, and securing serverless applications and infrastructures on AWS using Terraform. Read more.
SAI-powered security analysis for Terraform-generated IAM policies and CloudFormation, explaining why a permission is risky and how to fix it. Free tier, CLI and GitHub Action.
S
S
TThe power of Ansible and Terraform + the simplicity of Docker Swarm = Infrastructure as Code and DevOps best practices.
TTau is a thin wrapper on top of terraform to manage multiple deployments, dependencies, and secrets. :skull:
T
T
TTReads from existing Cloud Providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration.
Recursively test a directory tree for Terraform diffs and coverage.
TTerraform state repository, based on the default http remote backend. Allows the central administration of tfstates on AWS S3.
T
TAI-powered skill for GitHub Copilot, Claude, and ChatGPT that automates bulk Terraform module management — provider upgrades, workflow standardization, and releases across 10–200+ repositories on AWS, GCP, Azure, and DigitalOcean.
TGet notified when actions are taken in the AWS Console.
TEasily builds bundles containing a Terraform binary as well as provider binaries. Useful for CI and air-gapped Terraform Enterprise.
TCDK (Cloud Development Kit) for Terraform allows developers to use familiar programming languages to define cloud infrastructure and provision it through HashiCorp Terraform.
TTiny utility which detects unused variables in your terraform modules.
TA Terraform "credentials helper" plugin that allows providing credentials for Terraform-native services (private module registries, Terraform Cloud, etc) via environment variables.
T
T
TCommand line tool allowing to convert the barely usable output of the terraform graph command to something more meaningful and explanatory.
TCLI validates AWS IAM Policies in a Terraform template against AWS IAM best practices.
T(only 0.11 and earlier) Improve Terraform's plan output to be easier to read and understand.
T
TCommand line utility and JavaScript API for parsing stdout from terraform plan and converting it to JSON. :ghost:
TTool for managing multiple provisions of the same Terraform scripts.
TTA terraform console wrapper for a better interactive console experience.
T
TAnsible dynamic inventory script for parsing Terraform state files. :skull:
TCLI tool to generate terraform files from existing infrastructure. Infrastructure to Code. Supported many providers.
TExport existing AWS resources to Terraform style (tf, tfstate). Similar to terraformer. :skull:
T
TTTerragrunt is a thin wrapper for Terraform that provides extra tools for keeping your Terraform configurations DRY, working with multiple Terraform modules, and managing remote state.
T
TCommand line utility aimed at providing supplementary functionality which can sometimes prove useful when working with Terraform.
TTerraHub is terraform automation and orchestration tool. Seamlessly integrated into console.terrahub.io, enterprise friendly GUI to show realtime terraform executions, as well as auditing and reporting capabilities for historical terraform runs. :heavydollarsign:
TWizard tool for create folders and terraform files automated, written in Python !
TTool for managing multiple Terraform stacks that comes with support for change detection and code generation
TTerrap - a powerful CLI tool that scans your infrastructure and identifies any required changes.
TTerrars is a tool for building Terraform stacks in Rust. This is an alternative to the CDK.
TCollection of security and best practice test for static code analysis of terraform templates
TTerrashine is a terraform provider mirror1 implementation that works by automatically caching dependencies as providers are requested.
TVisual Studio Code extension to monitor/deploy/destroy Terraform resources in your workspace
TTerratag is a CLI tool that enables users of Terraform to automatically create and maintain tags across their entire set of AWS, Azure, and GCP resources.
TGenerates professional cloud architecture diagrams from Terraform code using official AWS/Azure/GCP icons and design standards. Runs 100% client-side with CI/CD integration.
TA Pre-terraform routine that speedups terraform modules download for bulky blueprints.
TProfiler for Terraform runs. Generate global stats, resource-level stats or visualizations.
T
TCLI tool that attributes Terraform drift to the AWS actor who caused it, via CloudTrail lookup.
T
T
T
TA CLI tool that integrates Terraform with OpenAI's GPT-3.5 Turbo to provide explanations for Terraform commands and concepts.
T
T
T
TTerraform linter for detecting errors that can not be detected by terraform plan
TTTerraform utility to mask select output from terraform plan and terraform apply :skull:
TA CLI tool that helps you interact with Terraform via the Model Context Protocol (MCP), allowing AI assistants like Claude to manage and operate Terraform environments.
TTtfocus is a super interactive tool for selecting and executing Terraform plan/apply on specific resources. Think of it as an "emergency tool" - not for everyday use.
T
TA Terraform REPL, giving you a full shell experience. Readline based. No dependencies. Save config changes. History.
TA Terraform utility to show Terraform plans with all the secret (sensitive) values revealed.
TFramework for controlling multi-environment multi-component terraform-managed AWS infrastructure.
TTerraform static analysis tool that supports terraform =0.12 & directly integrates with HCL parser for better results.
T
T
T
Ttfvar scans your Terraform configurations or modules and extracts the variables into formats of your choice (tfvar, environment variables, etc.) for editing.
Ttfvaultenv reads secrets from HashiCorp Vault and outputs environment variables for various Terraform providers with those secrets.
T
T
T
T
T
TZero-config wrapper that automatically injects Git metadata (commit SHA, branch, repo) into all Terraform-managed resources.
VValidIaC combines the best open-source tools to help ensure Terraform best practices, hygiene & security.
XSystematically manage external modules from the module registry, git, or local directories for use in Terraform (written in Go). :skull:
Y
YAutomatically tag and trace infrastructure as code frameworks (Terraform, Cloudformation, and Serverless).
ZCompare Azure resources deployed in a subscription against resources managed by Terraform Enterprise (HCP & Selfhosted) workspaces when your cloud's resource tagging strategy is insufficient.
Terraform Navigation Extension to created an index of resources by type of file with an easy to navigate treeview.
VTerraform Live Graph Extension for Visual Studio Code is a plugin that allows you to generate a live Terraform graph as you code.
T
T
T
T
T
T
T
T
T
TProvider for DevHelm uptime monitoring — manage monitors, alert channels, and status pages as code.
T
T
T
T
T
T
T
T
T
T
T
T
TProvider to manage the settings of your Keycloak identity provider server.
T
T
T
T
T
T
TProvider for Qovery — manage Kubernetes deployments, environments, applications, databases, Helm charts, and Terraform services on AWS, GCP, Azure, and Scaleway.
T
T
T
T
T
T
T
T
T
T
T
TEncrypted HashiCorp Vault secrets via Terraform that can be stored in SCM such as Git.
Demonstrates how Terraform enables the practice of Infrastructure as Code by deploying TeamCity in AWS using a hosted PostgreSQL.
CTO of OpenCredo provides an extensive look at using Terraform in the real-world with the help of some interesting use-cases.
Yevgeniy Brikman talks about how to write Terraform code so that it is reusable, composable and testable. The presentation focuses on Terraform modules but also provides a brief and clear explanation of what problem Terraform was created to solve and a short demo of Terraform basics (~39 min, October 2017).
In this talk, Paul will walk through the creation of a terraform provider.
How DigitalOcean uses Terraform to run production integration tests.
Running Terraform at scale with hundreds of AWS accounts.
Example of using CI with Kitchen-Terraform to test, tag and publish our Terraform module, which creates a Google Compute Instance.
Focuses on development patterns and how to effectively structure Terraform code.
Integrating Terraform with an on-premise bare metal provisioning.
How to refactor your Terraform code in a careful way with minimum risk.
YouTube channel with weekly live streams covering Terraform news, reviews, interviews, Q&A, live coding, and some hacking with Terraform.
Guide to generating a terraform provider from an OpenAPI specification (Vendor Supported)
Official documentation for creating custom providers.