Post

OpenTofu if you want Terraform minus the license drama. Agents write boring HCL well, and the plan output is the exact diff you want to read before a bucket gets destroyed.

I‘m using ansible, its ergonomics lack a bit, but its still the most flexible thing to date for me 😅

terraform works well for this since plan is a dry run, the agent can propose changes and you review the diff before apply. state file handling is the annoying part, keep it remote from day one

For one or two boxes I would skip Terraform. The state file becomes upkeep you keep paying, and it is the part an agent quietly corrupts. A bootstrap script in the repo is easier to hand to an agent than a plan.