Adopt infrastructure without re-homing it
Lots of us are familiar with the set of decisions faced when inheriting a Terraform estate.
I build two infra toolchains that give you new choices in this situation.
Option 1) Keep your Terraform and move identity to the resource
choudoufu adopts a live Terraform estate without touching your resources. Simply use the live backend and you now can use IAM to gate your resources, and state files are demoted to a safely deleted cache.
choudoufu is AWS only and experimental.
Option 2) Move back to platform native
chant goes the other direction, out of Terraform and into the platform’s own spec.
It supports many providers and it has a carve feature for Terraform to help you get started.
Neither keeps a separate ownership record
choudoufu leaves your HCL alone and moves ownership onto the resource. chant takes the resource out to CloudFormation or a Kubernetes manifest, where the platform keeps the binding itself.
One goes a slice at a time and the other goes all at once, but the property is the same. Nothing of yours ends up in a store either tool owns, so neither can charge you rent on the way out.
Adoption is easier with tags. Give it a try.