AWS CloudFormation vs Spacelift

AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code. YAML or JSON templates define AWS resources and their properties. StackSets deploy a common set of resources across multiple AWS accounts and Regions; Change Sets preview proposed stack updates, including possible deletion or replacement, and Drift Detection tracks changes made outside the service. For authoring, AWS CDK supports TypeScript, Python, Java, and .NET, while AWS SAM offers shorthand YAML for serverless resources that is converted during deployment. The CloudFormation Registry supports third-party resources and modules, and stacks can be updated from remote Git repositories. The service is available through API, Linux, macOS, web, and Windows, and manages state. CloudFormation itself has a free plan, with no additional charge for AWS and Alexa resource providers, but created AWS resources are billed at their standard rates. Third-party provider and custom hook operations may also incur charges. Access can be managed with IAM, and CloudTrail logs API calls.

Spacelift is an infrastructure-as-code orchestration platform that automates plans, applies, policy checks, and drift detection, while recording actions for governance and security. It integrates with Terraform, OpenTofu, Pulumi, CloudFormation, Kubernetes, Ansible, AWS CDK, Serverless, and Terragrunt. Source control connections include Bitbucket, GitHub, GitLab, and Azure DevOps; cloud and notification integrations include AWS, Azure, Google Cloud, Slack, and Microsoft Teams. Governance features include OPA-based policies for plans, approvals, notifications, and security controls, along with Spaces, Contexts, and role-based access control. Deployment options include managed SaaS, self-hosting on a cloud provider, on-premises and air-gapped deployment, and FedRAMP-authorized SaaS. The Free plan costs nothing and includes 2 users and 1 public worker. Starter + costs $20,000 a year as an annual subscription. The pricing FAQ says Starter+, Business, and Enterprise subscriptions are annual and that features or workers cannot be removed from annual subscriptions. Spacelift says customer data is encrypted at rest and in transit and that it holds SOC 2 Type II certification.