IaC provisioning

Automate IaC with Native Orchestration or Your Own CI/CD

Empower DevOps and Platform teams to provision and manage infrastructure using IaC tools, directly from Git. Choose native orchestration with Firefly or integrate seamlessly with your existing CI/CD pipelines, getting the flexibility to streamline code-to-apply execution and enforce policy-as-code guardrails before deployment. Gain real-time visibility into cost, tagging, and compliance, with detailed audit trails that ensure every step is transparent and rollback-ready.

Get started

Explore workflows

Trusted by the world’s leading cloud teams

How to Automate IaC Provisioning with Firefly Workflows Runners?

Workflows Runners allow you to:

Automate Lifecycle from Plan to Apply

Firefly Workflows automate every stage of the infrastructure lifecycle. Connect Firefly to your VCS to detect code changes and run secure IaC plans in isolated environments. Each plan is automatically checked for tagging coverage, cost, and policy compliance, giving teams immediate insight before deployment. Plans are evaluated against guardrails pre-merge. The apply step runs in the same environment, with every step logged and rollback-ready.

Enforce Policy and Compliance

With easily-configured, policy-as-code guardrails, Firefly automatically analyzes proposed changes against your organization’s policies before they reach production. Violations are flagged or blocked before the apply step, with options for overrides when appropriate, ensuring every deployment remains compliant with security and operational standards.

Gain Comprehensive Visibility and Insights

Workflows unify orchestration, compliance, and automation, giving you visual AI-powered insights into every infrastructure change, from code diff to cost estimate, guardrail violation to policy approval.

Support Every Terraform/OpenTofu-Compatible Provider

Firefly’s execution engine, powered by SaaS or self-hosted runners, supports any Terraform/OpenTofu-compatible provider, including cloud providers, vSphere, and SaaS providers such as Datadog, Databricks, and Snowflake.

Why Firefly Workflows?

Seamless IaC Automation, Your Way

Firefly offers native orchestration or integration with any CI/CD tool, so you can automate IaC deployments without changing your existing workflows, or you can leverage Firefly’s own automation engine for maximum simplicity and control.

Manage Access with Advanced RBAC

Workspaces can be grouped into projects and sub-projects, with hierarchical control over user roles, variable inheritance, and secrets. RBAC is built in, supporting multi-tenancy and enterprise-grade governance.

Get 100% IaC Coverage

Firefly Cloud Asset Management enables you to discover unmanaged resources across your environments, automatically import them into IaC, and continuously scan for drifts. This ensures your cloud is always up to code, with every resource governed, tracked, and DR-ready.

See a post-deployment rundown

After provisioning, view detailed insights into cloud activities, helping you to streamline debugging and manage your asset inventory effectively.

IaC provisioning

Automate IaC with Native Orchestration or Your Own CI/CD

The Evolution of IaC: Will OpenTofu Dethrone Terraform?

IaC Automation in Action - DIY CI Pipelines without the Pain

Watch: Ned in the Cloud Explains How to Optimize your Terraform Automation with Firefly Workflows