> ## Documentation Index
> Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Types of IAC Tools
> This article explains the three main categories of Infrastructure as Code tools and their purposes in the automated infrastructure lifecycle.
Before diving into OpenTofu, it’s helpful to understand the three main categories of Infrastructure as Code (IaC) tools. Each category addresses a different stage of the automated infrastructure lifecycle:
| Category | Purpose | Examples |
| ---------------------------- | ------------------------------------------------- | ----------------------------------- |
| Configuration Management | Install and manage software on existing resources | Ansible, Puppet, SaltStack |
| Server Templating | Build immutable VM or container images | Packer, Vagrant, Docker |
| Provisioning & Orchestration | Declaratively provision and manage infrastructure | OpenTofu, Terraform, CloudFormation |
***
## Configuration Management Tools
Configuration management tools automate the installation and configuration of software on servers, databases, and network devices. They ensure a consistent state across multiple hosts by defining **idempotent** code that only applies necessary changes.
Idempotency guarantees that running the same playbook multiple times will not alter resources that are already in the desired state.
Example: An Ansible playbook checks for a package before installing:
```yaml theme={null}
- name: Ensure Nginx is installed
hosts: webservers
tasks:
- name: Install Nginx
apt:
name: nginx
state: present
```
***
## Server Templating Tools
Server templating tools create fully configured, **immutable images**—such as VM snapshots, AWS AMIs, or Docker containers—that bundle all necessary software and dependencies. By baking the environment beforehand, you eliminate runtime configuration drift.
Key benefits:
* Consistent deployment artifacts
* Faster boot times
* Simplified rollout of updates via new image versions
***
## Provisioning & Orchestration Tools
Provisioning tools—also called orchestration tools—allow you to **declare** the desired state of your entire infrastructure: servers, databases, networking, and more. The tool then computes and applies only the changes needed to reach that state.
For example, CloudFormation offers a native AWS experience, whereas OpenTofu (a Terraform fork) supports a broad ecosystem of provider plugins for multi-cloud and hybrid deployments.
### Procedural vs. Declarative Provisioning
Configuration management tools can provision resources procedurally. In Ansible, you might write:
```yaml theme={null}
- name: Provision AWS Resources
hosts: localhost
tasks:
- name: Launch EC2 instances
ec2:
key_name: appserver
instance_type: t2.micro
image: ami-0d8ad3ab25e7abc51
exact_count: 2
region: us-east-1
```
To remove instances, you need an explicit task:
```yaml theme={null}
- name: Terminate instances
ec2:
state: absent
instance_ids: '{{ ec2.instance_ids }}'
```
Procedural scripts may inadvertently create duplicate resources if you omit repeat protection (`exact_count`) or forget teardown tasks.
Orchestration tools use a declarative model. In OpenTofu, you simply define:
```hcl theme={null}
resource "aws_instance" "app" {
ami = "ami-0d8ad3ab25e7abc51"
instance_type = "t2.micro"
count = 2
key_name = "appserver"
tags = {
Name = "appserver"
}
}
```
Running `tofu apply` ensures the actual infrastructure matches this block:
```plaintext theme={null}
> tofu apply
No changes. Your infrastructure matches the configuration.
Apply complete! Resources: 0 added, 0 changed, 0 destroyed.
```
***
## Choosing the Right IaC Tool
There’s no single best IaC tool. Consider:
* **AWS-only environments**: AWS CloudFormation may offer deep native integration.
* **Multi-cloud or hybrid**: OpenTofu or Terraform provide vendor-agnostic provisioning.
* **Post-provisioning configuration**: Combine orchestration tools with configuration management (e.g., OpenTofu + Ansible).
## Links and References
* [Infrastructure as Code (IaC) Concepts](https://www.redhat.com/en/topics/automation/what-is-infrastructure-as-code)
* [Terraform Registry](https://registry.terraform.io/)
* [Ansible Documentation](https://docs.ansible.com/)
* [Packer by HashiCorp](https://www.packer.io/)