Terraform

Terraform is an open source infrastructure-as-code (IaC) tool created by HashiCorp that enables teams to define, provision, and manage cloud and on-premises infrastructure using a declarative configuration language. By expressing infrastructure requirements as code, Terraform makes infrastructure reproducible, versionable, and collaborative in the same way that application code is.

The HashiCorp Configuration Language (HCL) is the domain-specific language used to write Terraform configurations. HCL is designed to be human-readable and writable, with a syntax that balances readability for operators who may not be professional developers and expressiveness for those who need complex logic. Infrastructure resources are declared as blocks with named types and configuration attributes that correspond to the properties of the underlying resource in the target provider.

The provider ecosystem is one of Terraform's greatest strengths. Providers are plugins that expose the resources and data sources of a particular platform or service. There are official providers for AWS, Azure, Google Cloud, VMware, Kubernetes, GitHub, Datadog, PagerDuty, and hundreds of other platforms and services. The Terraform Registry hosts thousands of providers and modules contributed by both HashiCorp and the community, covering virtually every cloud service and infrastructure platform.

Terraform modules are reusable, composable infrastructure components that encapsulate a set of resources with a defined interface of input variables and output values. Modules allow teams to create internal libraries of standardized infrastructure patterns such as a VPC module, a database module, or a complete application stack module, and reuse them across multiple projects and environments. The Terraform Registry hosts thousands of community-contributed modules for common infrastructure patterns.

The Terraform state mechanism tracks the current state of managed infrastructure in a state file. The state maps the resources defined in configuration to their real-world counterparts and records their attributes. State can be stored locally or in a remote backend such as S3, Azure Blob Storage, Google Cloud Storage, or Terraform Cloud. Remote state enables team collaboration by providing a shared, consistent view of infrastructure state and supporting state locking to prevent concurrent modifications.

The plan and apply workflow is fundamental to Terraform operations. The terraform plan command compares the current state with the desired configuration and produces a detailed execution plan showing exactly what changes will be made. This allows operators to review and understand the impact of a change before it is applied. The terraform apply command executes the approved plan, making only the changes that were shown in the plan output.

Terraform Cloud and Terraform Enterprise provide collaborative, managed execution environments for Terraform with features such as remote plan and apply execution, private module registry, policy as code through Sentinel, cost estimation, audit logging, SSO, and Terraform version management. These managed offerings are particularly valuable for organizations running Terraform at scale across many teams and environments.

The drift detection capability in Terraform allows teams to identify when the actual state of infrastructure has diverged from the desired configuration, helping maintain consistency and compliance in production environments. Terraform is a foundational tool in the modern DevOps and platform engineering stack.