Terraform

Overview

Terraform is infrastructure-as-code software for teams that want to define and manage cloud or on-premises resources in configuration rather than provision each change by hand. It is strongest for practitioners and organizations that value reviewable changes, reusable configurations and a choice between hosted collaboration and self-managed deployment. Its central trade-off is that the flexibility of providers and modules requires careful trust and access decisions.

Key features

Plan before applying

The workflow separates configuration from execution: write the desired changes, review an execution plan, then apply approved changes. That review step gives teams a chance to catch unintended infrastructure changes before applying them; Terraform also supports drift detection and importing existing resources.

Providers and modules

HCL is Terraform’s configuration language. Providers connect configurations to services through APIs, with Registry providers for AWS, Azure, Google Cloud, Kubernetes, GitHub and Splunk. Terraform also supports Oracle Cloud Infrastructure. Modules package reusable infrastructure configurations, which teams can find or publish through the Terraform Registry. This breadth suits mixed-service environments, but providers and modules should be treated as trusted code: they can access workspace variables and state.

Hosted collaboration and governance

HCP Terraform can run Terraform remotely, connect to GitHub, GitLab and Bitbucket, and trigger plans when repositories change; it also offers API integration. Remote state is encrypted at rest, and workspaces, single sign-on and role-based access controls support team administration. HCP Terraform and Terraform Enterprise support Sentinel policies for infrastructure standards and security rules. Those policies provide guardrails, not a security boundary, so they do not replace careful control of code and access.

Editor support

HashiCorp provides a Visual Studio Code extension and a language server for editors that support the Language Server Protocol. These integrations support configuration work without changing Terraform’s plan-and-apply workflow.

Pricing

Terraform combines a free downloadable command-line edition with hosted HCP Terraform plans and a self-managed enterprise option. HCP Terraform’s resource-based pricing makes resource count and concurrent runs central to choosing a tier.

The free command-line edition suits practitioners who want to run Terraform without a hosted service. HCP Terraform Free is a practical starting point for small teams, but its 500-resource cap and single concurrent run of each type constrain larger or busier workflows. Essentials removes the resource cap and raises remote concurrency to three, while keeping agent concurrency at one. Standard and Premium raise both run limits substantially; their per-resource starting prices and sales contact requirement make them better suited to organizations weighing higher concurrency and HCP Waypoint against cost. Terraform Enterprise is the fit for teams that need self-management and customizable limits, at custom pricing.

Platforms

Terraform supports API, Linux, macOS, self-hosted, web and Windows platforms. The command-line tool has official downloads and installation instructions for Linux, macOS and Windows; HCP Terraform provides remote execution and collaboration, while Terraform Enterprise can be self-hosted. Enterprise installation options include air-gapped and active-active architectures.

Who it's for

Practitioners can use Community Edition to provision across cloud providers, while small teams can start with HCP Terraform’s free features. Larger organizations have paid collaboration and governance tiers, and teams with deployment constraints or a need for customizable resource limits can consider Terraform Enterprise. It is less suitable when provider and module trust cannot be managed carefully, or when the free hosted resource and concurrency ceilings are too restrictive.

Pros and cons

Pros

• Changes have a review stage. The plan-before-apply workflow lets teams inspect proposed infrastructure changes before execution.
• Reusable configurations and broad provider options. Providers connect to many services, and modules help teams share infrastructure configurations.
• Several operating models. Users can choose a downloadable tool, hosted remote collaboration or a self-managed enterprise distribution.
• Hosted governance scales by tier. HCP Terraform offers remote state encryption, access controls and Sentinel policies, with higher concurrency on upper plans.

Cons

• Free hosted usage has firm ceilings. HCP Terraform Free caps managed resources at 500 and allows only one concurrent remote run and agent run.
• Higher hosted tiers can be harder to budget. Essentials, Standard and Premium charge per managed resource, and Standard and Premium require contacting sales for pricing details.
• Policies are not a security boundary. Sentinel provides guardrails, while providers and modules can access workspace variables and state, making trust and access controls important.

Alternatives

Pulumi is another freemium option with a free plan and free trial, and supports API, Linux, macOS, self-hosted, web and Windows. Its Free plan allows one user with unlimited projects, stacks, environments, updates and history, plus up to 500 workflow minutes; choose it if those stated free-plan allowances better match your workflow.

Terramate offers a free Community plan for up to two users and 1,000 resources, with 30-day data retention and community support; choose it if those user and resource limits fit your team. Its Teams plan is also offered.

Cloudify has a free Community plan with no time limit, but requires Docker or VM setup and access to a cloud provider to run workloads. Choose it if that setup suits your deployment needs.

Spacelift has a free plan for two users and one public worker, while Starter + costs 20000.00 USD per year for an annual subscription and includes unlimited users and two public workers. Choose it if those user and worker terms fit better.

AWS CloudFormation is a free service for CloudFormation itself, while underlying AWS resources are billed at their own rates; choose it if that distinction suits your cost model.

OpenTofu is a free, open-source infrastructure-as-code tool; choose it if a free tool is the priority.

Scalr offers up to 50 runs per month free, then business usage at $0.99 per run with volume discounts and annual plans available; choose it if a run-based allowance better fits your usage.

HashiCorp Nomad is another option in the infrastructure and workload software landscape.

For related categories, see Infrastructure as Code Tools, Infrastructure Policy as Code Tools, Platform Engineering Software, Cloud Orchestration Software, Cloud Management Software and IT Configuration Management Software.

Verdict

Terraform is a strong choice for practitioners and teams that need repeatable infrastructure changes, a reviewable plan, and a path from local configuration to hosted collaboration or self-hosting. Its provider and module ecosystem and flexible deployment options are compelling; look elsewhere if HCP Terraform’s resource or concurrency limits do not fit, or if the trust required for third-party code is unacceptable.