4 ms·
There are a lot of issues with both cfn and tf. As always,it comes down use-case. In my opinion, tf is terrible choice unless you're going to be using it for m
by dastx 6y ago
There are a lot of issues with both cfn and tf. As always,it comes down use-case.
In my opinion, tf is terrible choice unless you're going to be using it for more than AWS
- acdha 6y agoOr if you want to use AWS features on a deterministic timescale: CloudFormation frequently lags on support for new features - I’ve worked on multiple projects which used Terraform for months before the equivalent feature could be used in CloudFormation. For example, when ECS launched secrets support it took most of a year before CF was updated. This is a big deal with classic CloudFormation because there was no escape hatch. Terraform can run arbitrary code if needed but you had to split CF stacks apart so you could have something else run in between. That’s probably better with CDK, of course.
- synthc 6y agoCloudFormation has an escape hatch via custom resources, which can call Lambda functions do create/update/destroy resources. It's ugly, but it works.
- acdha 6y agoGood point: they added that feature after I stopped using it but it’s a good option for some cases, especially if you want to do things which the caller shouldn’t be allowed to directly perform.
- dastx 6y agoAt my old place we had some automation around this. Essentially our custom resources was mostly just the python scripts and then any deviations from the basic custom resource definition. Made life a lot easier.