Infrastructure as Code (IaC) Tools

AWS CloudFormation vs OpenTofu

Compare AWS CloudFormation and OpenTofu side-by-side. See feature differences and pricing in the Infrastructure as Code (IaC) Tools category.

AWS CloudFormation

by Amazon

No reviews yet

Pricing: No CloudFormation charge for AWS and Alexa resource providers; third-party extensions and custom Hooks cost $0.0009 per handler operation after 1,000 free a month.

AWS CloudFormation is Amazon Web Services' infrastructure as code service, provisioning AWS and third-party resources from templates for teams on AWS.

10 /17 features Full profile

OpenTofu

by The Linux Foundation

No reviews yet

Pricing: Free and open source under the Mozilla Public License 2.0, with no paid tiers or hosted plan.

OpenTofu is an open source infrastructure as code tool, Terraform-compatible and hosted by the Linux Foundation, for teams managing cloud resources in code.

7 /17 features Full profile

Feature Comparison

Infrastructure as Code (IaC) Tools features side-by-side

Feature	AWS CloudFormation 10/17 features	OpenTofu 7/17 features
Providers for AWS, Azure and Google Cloud Official providers cover the three major clouds, with more for SaaS and on-premise APIs.	No	Yes
Execution plan preview before apply Every create, update and destroy is listed for review before any change is made.	Yes	Yes
Remote state with locking State is stored centrally and locked during runs so two applies cannot collide.	No	Yes
Drift detection against deployed cloud state Scheduled checks compare live resources with the declared configuration and flag differences.	Yes	No
Private module registry Versioned modules are published to an organisation-private registry for reuse across teams.	Yes	No
Infrastructure in general-purpose languages Infrastructure can be written in TypeScript, Python, Go or similar instead of a dedicated DSL.	Yes	No
Policy-as-code checks at plan time Rules evaluated against the plan block non-compliant changes before they are applied.	Yes	No
Pull-request plans from version control Speculative plans are posted to pull requests and applies run when the change is merged.	Yes	No
Cost estimate on each plan The plan shows the estimated monthly cost change of the proposed resources.	No	No
Import of existing cloud resources Resources created outside the tool can be brought under management without recreation.	Yes	Yes
Encrypted workspace variables Sensitive variables are stored encrypted per workspace and never echoed in run logs.	No	No
Per-workspace access control Teams are granted read, plan or apply rights on individual workspaces or stacks.	Yes	No
Approval required before apply A run can be configured to wait for a reviewer's confirmation between plan and apply.	Yes	Yes
Auto-destroy of temporary environments Stacks can carry a time-to-live after which their resources are torn down automatically.	No	No
Cross-stack output references One stack can read the outputs of another to wire dependent infrastructure together.	Yes	Yes
Self-hosted agents for private networks Runs can execute on agents inside a private network that the hosted service cannot reach.	No	No
Open source IaC engine The core CLI and language are open source; the hosted platform adds collaboration features.	No	Yes
Overall Rating	No reviews yet	No reviews yet

AWS CloudFormation 10/17 features

Providers for AWS, Azure and Google Cloud: No
Execution plan preview before apply: Yes
Remote state with locking: No
Drift detection against deployed cloud state: Yes
Private module registry: Yes
Infrastructure in general-purpose languages: Yes
Policy-as-code checks at plan time: Yes
Pull-request plans from version control: Yes
Cost estimate on each plan: No
Import of existing cloud resources: Yes
Encrypted workspace variables: No
Per-workspace access control: Yes
Approval required before apply: Yes
Auto-destroy of temporary environments: No
Cross-stack output references: Yes
Self-hosted agents for private networks: No
Open source IaC engine: No

No reviews yet

OpenTofu 7/17 features

Providers for AWS, Azure and Google Cloud: Yes
Execution plan preview before apply: Yes
Remote state with locking: Yes
Drift detection against deployed cloud state: No
Private module registry: No
Infrastructure in general-purpose languages: No
Policy-as-code checks at plan time: No
Pull-request plans from version control: No
Cost estimate on each plan: No
Import of existing cloud resources: Yes
Encrypted workspace variables: No
Per-workspace access control: No
Approval required before apply: Yes
Auto-destroy of temporary environments: No
Cross-stack output references: Yes
Self-hosted agents for private networks: No
Open source IaC engine: Yes

No reviews yet

Pricing

AWS CloudFormation

No CloudFormation charge for AWS and Alexa resource providers; third-party extensions and custom Hooks cost $0.0009 per handler operation after 1,000 free a month.

See all plans

OpenTofu

Free and open source under the Mozilla Public License 2.0, with no paid tiers or hosted plan.

See all plans

Explore Each Product

AWS CloudFormation Read reviews, features & pricing

OpenTofu Read reviews, features & pricing

Looking for more options?

Browse all Infrastructure as Code (IaC) Tools