Awesome GitHub RepositoriesInfrastructure as Code

Terraform is a declarative infrastructure-as-code tool designed to manage the lifecycle of cloud and on-premises resources. It functions as a workflow engine that reconciles a defined desired state against real-world infrastructure, using a persistent state-tracking layer to maintain consistency and visibility across distributed environments. By mapping infrastructure components into a directed acyclic graph, the system calculates the optimal order for provisioning, updating, or destroying resources. The platform is distinguished by its extensible plugin-based architecture, which decouples co

OpenTofu is a declarative infrastructure orchestrator that automates the provisioning and management of cloud resources. It functions as a platform-agnostic interface, allowing users to define their desired environment state in configuration files, which the system then reconciles against live infrastructure to calculate and execute necessary updates. The project utilizes a graph-based execution engine to determine the optimal sequence for resource operations, enabling the parallel processing of independent components to reduce deployment times. To support complex, multi-platform environments

Pulumi is an infrastructure-as-code framework that enables the definition, deployment, and management of cloud resources using general-purpose programming languages. It functions as a cloud resource orchestrator that coordinates the lifecycle of heterogeneous infrastructure by executing code to construct dependency graphs and reconciling the desired state against actual cloud environments. The platform distinguishes itself through a language-host runtime bridge that allows developers to use standard programming languages to define infrastructure, rather than relying solely on domain-specific

tfsec is a static analysis tool and security scanner for infrastructure as code, specifically designed to detect misconfigurations and compliance violations in Terraform and cloud infrastructure definitions before deployment. It functions as a cloud security policy engine that identifies vulnerabilities across multiple cloud platforms. The tool provides capabilities for cloud compliance auditing and scanning of Cloud Development Kit code. It supports custom security policy enforcement and allows for the definition of organization-specific security requirements. The scanner includes features

cdk8s ist ein Framework für Infrastructure as Code (IaC) und ein Manifest-Generator für Kubernetes. Es bietet eine Cloud-native Entwicklungsumgebung zur Definition von Systemkomponenten und wiederverwendbaren Abstraktionen unter Verwendung allgemeiner Programmiersprachen, die anschließend in Standard-YAML-Manifeste synthetisiert werden. Das Framework verwendet eine deklarative API und objektorientierte Modellierung, um Code in reine Manifest-Dateien umzuwandeln. Diese Dateien werden für die Verwendung mit jedem Kubernetes-Cluster über bestehende Deployment-Tools generiert. Das Projekt ermöglicht die Erstellung hierarchischer Ressourcenmuster und wiederverwendbarer Abstraktionen. Es nutzt eine schema-gesteuerte API-Generierung basierend auf Kubernetes-OpenAPI-Spezifikationen, um gültige Ressourcendefinitionen sicherzustellen.

CloudFormation Linter

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

forks-shield: https://img.shields.io/github/forks/NotHarshhaa/AWS-Projects?style=for-the-badge&logo=github&logoColor=white&color=orange forks-url: https://github.com/NotHarshhaa/AWS-Projects/network/members

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

A Pluggable Terraform Linter