Infrastructure-as-code tools must safely change existing resources, not just create a demo stack. For Pulumi alternatives, rehearse the full lifecycle in a temporary cloud account.
Change exercise
- Define two linked resources and deploy them with least-privilege credentials.
- Change one property; inspect the preview for replacements, deletions, and secret exposure.
- Import an existing resource and test drift detection after an out-of-band change.
- Simulate a failed update and verify recovery of state and locks.
- Destroy the test stack and reconcile actual resources and charges.
Compare language model, provider coverage, policy controls, state backend, and team review workflow. A readable plan is valuable only if it accurately predicts production changes.