AWS CloudFormation vs Salt

AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code. YAML or JSON templates define AWS resources and their properties. StackSets deploy a common set of resources across multiple AWS accounts and Regions; Change Sets preview proposed stack updates, including possible deletion or replacement, and Drift Detection tracks changes made outside the service. For authoring, AWS CDK supports TypeScript, Python, Java, and .NET, while AWS SAM offers shorthand YAML for serverless resources that is converted during deployment. The CloudFormation Registry supports third-party resources and modules, and stacks can be updated from remote Git repositories. The service is available through API, Linux, macOS, web, and Windows, and manages state. CloudFormation itself has a free plan, with no additional charge for AWS and Alexa resource providers, but created AWS resources are billed at their standard rates. Third-party provider and custom hook operations may also incur charges. Access can be managed with IAM, and CloudTrail logs API calls.

Salt is a free, open-source framework for remote execution, configuration management, provisioning and infrastructure orchestration. A single execution can run commands across thousands of systems in seconds. A typical setup has a master managing minions, but Salt also supports agentless operation through salt-ssh or salt-proxy and stand-alone use. Salt states define configurations that can be extended and layered, while orchestration can order work by dependency, such as preparing a load balancer before a web-server cluster. Salt Cloud provisions systems on cloud hosts and hypervisors and can connect new virtual machines to a master. Its documented providers include Amazon EC2, Google Compute Engine, Azure, OpenStack, DigitalOcean, Linode, VMware and Proxmox. SaltStack Config adds a web interface, role-based access control, multi-master support, reporting and an enterprise API, along with LDAP, SAML, OIDC and Active Directory integrations. Salt uses RSA key authentication and encrypted master-minion communication. It is self-hosted and licensed under Apache 2.0.