The best Terraform alternatives

CloudFormation may suit teams managing AWS infrastructure through templates, including CI/CD workflows and deployments spanning accounts or Regions.

Kyverno suits platform engineering teams that want to manage Kubernetes security, compliance, automation, or governance through policy as code.

Polaris suits Kubernetes teams that want to check configuration practices in local YAML files or cluster workloads.

It suits administrators configuring organization-wide constraints and teams or project owners seeking compliance guardrails for Google Cloud…

OPA suits developers and platform teams that need policy evaluation across services, infrastructure, or delivery pipelines.

Gatekeeper suits teams managing Kubernetes clusters that need policy checks during admission and periodic audits of existing resources.

Conftest suits teams that need to check structured configuration as part of CI, including users working with Kubernetes or Terraform.

It suits platform teams that want policy checks between Terraform planning and applying infrastructure changes.

Cloud Custodian may suit teams managing cloud resources who want policy-based filtering, enforcement, or cleanup.

KICS suits developers and security teams working with Infrastructure as Code across supported formats.

Checkov suits developers and teams scanning infrastructure-as-code for configuration issues, credentials, and compliance checks.

KubeLinter suits teams managing Kubernetes, Helm, or Kustomize files who want configurable policy checks and CI reporting.

Kubewarden suits Kubernetes operators who need policy enforcement and auditing, as well as teams writing or reusing workload policies.

Tirith suits DevSecOps engineers, infrastructure architects, cloud administrators, and others enforcing infrastructure guardrails.

Firefly suits enterprise cloud, platform engineering, CloudOps, security, and governance teams.

terraform-compliance suits developers and security teams writing readable Terraform policy checks.