Cloud Automation Tools
Six leading IaC/cloud automation tools split sharply on license and cost. Terraform (HashiCorp, IBM-owned since Feb 2025) is agentless, BSL 1.1-licensed, 6,800+ providers, widely cited as the most-adopted IaC tool by market share (precise figures vary by methodology); core CLI v1.15.8 (July 2026), HCP Terraform now bills ~$0.10/resource/month at its entry tier. OpenTofu, its Linux Foundation-governed fork, is MPL 2.0 and fully free at v1.12.2 (June 2026) — OCI registry support and native S3 state locking arrived earlier in the 1.10 line and remain standard. Pulumi (Apache 2.0) is agentless, spans 150+ providers via Python/Go/TS/Java, free tier plus paid Enterprise audit logs. Ansible (Red Hat/IBM, GPLv3) is the only agentless config-management entry, SSH-based, most-adopted for new 2026 projects. Puppet (Perforce, Apache 2.0 code) is agent-based, requiring a paid subscription beyond 25 nodes. AWS CloudFormation is free but AWS-only. License: Mixed by tool: BSL 1.1 (Terraform), MPL 2.0 (OpenTofu), Apache 2.0 (Pulumi core; also Puppet's code), GPLv3 (Ansible core), proprietary (AWS CloudFormation). Pricing: OpenTofu and CloudFormation are free; Terraform's HCP tier now bills roughly $0.10/resource/month at its entry Essentials tier (Standard and Premium run higher); Pulumi Cloud is free for individuals with paid Enterprise audit logs; Puppet requires a paid contract once you pass
Pick Terraform if you want the deepest provider catalog and don't mind IBM owning your build tool — its dominant install base isn't an accident. Multi-cloud shop wary of BSL fine print? Take OpenTofu instead: same HCL, zero license risk, genuinely free forever. Team fluent in Python or TypeScript and allergic to HCL? Pulumi. AWS-only and never leaving? Skip all three for CloudFormation — free and native. For config management, Ansible's agentless SSH model beats Puppet's agent sprawl unless you're already locked into Puppet at scale, since Perforce now gates anything past 25 nodes behind a paid contract. HashiCorp's own community has complained for years that Terraform state-file locking and drift detection remain fragile even on paid HCP Terraform. Known weakness: Every tool in this category still leaves state or inventory management partly on the user — even paid HCP Terraform doesn't eliminate manual state locking and drift reconciliation.