IaC & automation (Terraform/OpenTofu, SDKs, APIs)

Why important?

Reproducibility, compliance as code and speed depend on stable APIs and providers. Missing IaC increases operating effort and error rates.

How measured?

• 0 = Hardly any automation/IaC, missing APIs
• 1 = Limited APIs, no IaC providers/modules
• 2 = IaC/SDKs only partial, important services missing
• 3 = Terraform/OpenTofu/SDKs available for the core scope
• 4 = Broad IaC/automation support + good docs/modules
• 5 = Very strong IaC/automation support + best practices/blueprints, broadly evidenced
• N/A = no reliable evidence

Sources / Evidence

• https://aws.amazon.com/cloudformation/
• https://aws.amazon.com/cdk/
• https://docs.ionos.com/cloud/reference/get-started
• https://docs.ionos.com/reference/api-specification-files/api-overview
• https://www.pulumi.com/registry/packages/ionoscloud/
• https://github.com/stackitcloud/terraform-provider-stackit
• https://docs.stackit.cloud/products/iaas-api/
• https://registry.terraform.io/providers/ovh/ovh/latest
• https://www.plusserver.com/en/product/pluscloud-open/
• https://upcloud.com/docs/tooling/terraform-with-upcloud/
• https://registry.terraform.io/providers/exoscale/exoscale/latest/docs
• https://registry.terraform.io/providers/hetznercloud/hcloud/latest/docs
• https://registry.terraform.io/providers/scaleway/scaleway/latest
• https://community.exoscale.com/reference/api/
• https://news.microsoft.com/de-de/erste-souveraene-cloud-plattform-fuer-die-deutsche-verwaltung-auf-der-zielgeraden/
• https://learn.microsoft.com/azure/developer/terraform/overview

Validation questions (RFP)

• Which providers/SDKs are first-party, and what is the release/support policy? Are there provider feature gaps? Is there state/drift handling and policy-as-code (OPA/Conftest) integration?

Scores comparison