Selecting the right infrastructure as code (IaC) framework depends largely on your needs and the comfort levels of your team but can have a significant impact on your cloud-native tech stack. When looking at two common IaC frameworks—Terraform by HashiCorp and Amazon CloudFormation—there are a lot of opinions for and against each.

The goal with infrastructure as code (IaC) frameworks such as Terraform and CloudFormation is to make infrastructure provisioning more efficient. Through a combination of automation and either imperative or declarative configuration, IaC makes it easier to deploy the same environment consistently and repeatably.

IaC’s immutability and machine readability are huge advantages when it comes to building, deploying, and testing infrastructure. It allows for storing and versioning of infrastructure, making it easier to manage, collaborate, and audit. It also allows teams to test—and secure—infrastructure just as they would with any other code. But without the right approach, IaC can actually pose a disadvantage when it comes to security and compliance.