Ansible vs AWS CloudFormation

Need advice about which tool to choose?Ask the StackShare community!

Ansible

18.7K
15.2K
+ 1
1.3K
AWS CloudFormation

1.5K
1.3K
+ 1
88
Add tool

AWS CloudFormation vs Ansible: What are the differences?

AWS CloudFormation and Ansible are two popular tools used for infrastructure automation. Let's explore the key differences between them.

  1. Orchestration vs Configuration Management: AWS CloudFormation primarily focuses on orchestrating and managing resources in the AWS ecosystem. It provides a declarative language, using which you can define the desired state of your infrastructure and let CloudFormation handle the provisioning and management of resources. On the other hand, Ansible is a configuration management tool that focuses on configuring and managing software and systems. It uses a procedural language to define the steps required for achieving a desired state.

  2. Scope: AWS CloudFormation is tailored specifically for managing AWS resources. It provides a wide range of resource types, such as EC2 instances, S3 buckets, RDS databases, etc., that can be provisioned, updated, or deleted using CloudFormation templates. In contrast, Ansible is agnostic to the cloud provider and can be used to manage resources on various platforms, including public clouds, private clouds, and even physical servers.

  3. Learning Curve and Complexity: AWS CloudFormation involves a steeper learning curve as it requires knowledge of the CloudFormation syntax and understanding of various AWS resource types and their configuration. Mastering CloudFormation templates and best practices can take time. On the other hand, Ansible has an easier learning curve, especially for those familiar with YAML syntax. Ansible playbooks are generally easier to understand and write, making it more accessible to beginners.

  4. Statefulness: CloudFormation has a concept of stacks, which represent the state of your infrastructure. Each time you update a CloudFormation stack, it compares the current state with the desired state declared in the template and applies the necessary changes. In contrast, Ansible does not have built-in state tracking. Each time you run an Ansible playbook, it executes all the defined tasks, even if they have been executed before. This can lead to unnecessary overhead, especially for large playbooks.

  5. Extensibility: Ansible offers a rich ecosystem of community-supported modules that allow you to extend its functionality and integrate with various tools and platforms. These modules can be easily shared, customized, and reused. CloudFormation, on the other hand, has limited extensibility options. It relies on AWS resource types and CloudFormation-specific constructs for provisioning and management tasks.

  6. Deployment and Execution: AWS CloudFormation templates are deployed and executed through the AWS Management Console, AWS CLI, or SDKs. It seamlessly integrates with other AWS services, such as AWS CodePipeline for continuous deployment. On the other hand, Ansible playbooks are executed through the Ansible command-line tool or Ansible Tower. Ansible supports various deployment methods, including ad-hoc execution, rolling updates, and integration with CI/CD pipelines.

In summary, AWS CloudFormation focuses on orchestrating and managing AWS resources using a declarative approach, whereas Ansible is a configuration management tool that can be used to manage resources on various platforms. CloudFormation has a steeper learning curve, is AWS-centric, and has built-in state tracking. Ansible, on the other hand, has an easier learning curve, is more extensible, and lacks built-in state tracking.

Advice on Ansible and AWS CloudFormation
Needs advice
on
AnsibleAnsibleChefChef
and
Puppet LabsPuppet Labs

I'm just getting started using Vagrant to help automate setting up local VMs to set up a Kubernetes cluster (development and experimentation only). (Yes, I do know about minikube)

I'm looking for a tool to help install software packages, setup users, etc..., on these VMs. I'm also fairly new to Ansible, Chef, and Puppet. What's a good one to start with to learn? I might decide to try all 3 at some point for my own curiosity.

The most important factors for me are simplicity, ease of use, shortest learning curve.

See more
Replies (2)
Recommends
on
AnsibleAnsible

I have been working with Puppet and Ansible. The reason why I prefer ansible is the distribution of it. Ansible is more lightweight and therefore more popular. This leads to situations, where you can get fully packaged applications for ansible (e.g. confluent) supported by the vendor, but only incomplete packages for Puppet.

The only advantage I would see with Puppet if someone wants to use Foreman. This is still better supported with Puppet.

See more
Gabriel Pa
Recommends
on
KubernetesKubernetes
at

If you are just starting out, might as well learn Kubernetes There's a lot of tools that come with Kube that make it easier to use and most importantly: you become cloud-agnostic. We use Ansible because it's a lot simpler than Chef or Puppet and if you use Docker Compose for your deployments you can re-use them with Kubernetes later when you migrate

See more
Decisions about Ansible and AWS CloudFormation
Kirill Shirinkin
Cloud and DevOps Consultant at mkdev · | 3 upvotes · 141.9K views

Ok, so first - AWS Copilot is CloudFormation under the hood, but the way it works results in you not thinking about CFN anymore. AWS found the right balance with Copilot - it's insanely simple to setup production-ready multi-account environment with many services inside, with CI/CD out of the box etc etc. It's pretty new, but even now it was enough to launch Transcripto, which uses may be a dozen of different AWS services, all bound together by Copilot.

See more

Because Pulumi uses real programming languages, you can actually write abstractions for your infrastructure code, which is incredibly empowering. You still 'describe' your desired state, but by having a programming language at your fingers, you can factor out patterns, and package it up for easier consumption.

See more
Sergey Ivanov
Overview

We use Terraform to manage AWS cloud environment for the project. It is pretty complex, largely static, security-focused, and constantly evolving.

Terraform provides descriptive (declarative) way of defining the target configuration, where it can work out the dependencies between configuration elements and apply differences without re-provisioning the entire cloud stack.

Advantages

Terraform is vendor-neutral in a way that it is using a common configuration language (HCL) with plugins (providers) for multiple cloud and service providers.

Terraform keeps track of the previous state of the deployment and applies incremental changes, resulting in faster deployment times.

Terraform allows us to share reusable modules between projects. We have built an impressive library of modules internally, which makes it very easy to assemble a new project from pre-fabricated building blocks.

Disadvantages

Software is imperfect, and Terraform is no exception. Occasionally we hit annoying bugs that we have to work around. The interaction with any underlying APIs is encapsulated inside 3rd party Terraform providers, and any bug fixes or new features require a provider release. Some providers have very poor coverage of the underlying APIs.

Terraform is not great for managing highly dynamic parts of cloud environments. That part is better delegated to other tools or scripts.

Terraform state may go out of sync with the target environment or with the source configuration, which often results in painful reconciliation.

See more

I personally am not a huge fan of vendor lock in for multiple reasons:

  • I've seen cost saving moves to the cloud end up costing a fortune and trapping companies due to over utilization of cloud specific features.
  • I've seen S3 failures nearly take down half the internet.
  • I've seen companies get stuck in the cloud because they aren't built cloud agnostic.

I choose to use terraform for my cloud provisioning for these reasons:

  • It's cloud agnostic so I can use it no matter where I am.
  • It isn't difficult to use and uses a relatively easy to read language.
  • It tests infrastructure before running it, and enables me to see and keep changes up to date.
  • It runs from the same CLI I do most of my CM work from.
See more
Get Advice from developers at your company using StackShare Enterprise. Sign up for StackShare Enterprise.
Learn More
Pros of Ansible
Pros of AWS CloudFormation
  • 284
    Agentless
  • 210
    Great configuration
  • 199
    Simple
  • 176
    Powerful
  • 155
    Easy to learn
  • 69
    Flexible
  • 55
    Doesn't get in the way of getting s--- done
  • 35
    Makes sense
  • 30
    Super efficient and flexible
  • 27
    Powerful
  • 11
    Dynamic Inventory
  • 9
    Backed by Red Hat
  • 7
    Works with AWS
  • 6
    Cloud Oriented
  • 6
    Easy to maintain
  • 4
    Vagrant provisioner
  • 4
    Simple and powerful
  • 4
    Multi language
  • 4
    Simple
  • 4
    Because SSH
  • 4
    Procedural or declarative, or both
  • 4
    Easy
  • 3
    Consistency
  • 2
    Well-documented
  • 2
    Masterless
  • 2
    Debugging is simple
  • 2
    Merge hash to get final configuration similar to hiera
  • 2
    Fast as hell
  • 1
    Manage any OS
  • 1
    Work on windows, but difficult to manage
  • 1
    Certified Content
  • 43
    Automates infrastructure deployments
  • 21
    Declarative infrastructure and deployment
  • 13
    No more clicking around
  • 3
    Any Operative System you want
  • 3
    Atomic
  • 3
    Infrastructure as code
  • 1
    CDK makes it truly infrastructure-as-code
  • 1
    Automates Infrastructure Deployment
  • 0
    K8s

Sign up to add or upvote prosMake informed product decisions

Cons of Ansible
Cons of AWS CloudFormation
  • 8
    Dangerous
  • 5
    Hard to install
  • 3
    Doesn't Run on Windows
  • 3
    Bloated
  • 3
    Backward compatibility
  • 2
    No immutable infrastructure
  • 4
    Brittle
  • 2
    No RBAC and policies in templates

Sign up to add or upvote consMake informed product decisions

- No public GitHub repository available -

What is Ansible?

Ansible is an IT automation tool. It can configure systems, deploy software, and orchestrate more advanced IT tasks such as continuous deployments or zero downtime rolling updates. Ansible’s goals are foremost those of simplicity and maximum ease of use.

What is AWS CloudFormation?

You can use AWS CloudFormation’s sample templates or create your own templates to describe the AWS resources, and any associated dependencies or runtime parameters, required to run your application. You don’t need to figure out the order in which AWS services need to be provisioned or the subtleties of how to make those dependencies work.

Need advice about which tool to choose?Ask the StackShare community!

Jobs that mention Ansible and AWS CloudFormation as a desired skillset
What companies use Ansible?
What companies use AWS CloudFormation?
See which teams inside your own company are using Ansible or AWS CloudFormation.
Sign up for StackShare EnterpriseLearn More

Sign up to get full access to all the companiesMake informed product decisions

What tools integrate with Ansible?
What tools integrate with AWS CloudFormation?

Sign up to get full access to all the tool integrationsMake informed product decisions

Blog Posts

PythonDockerKubernetes+14
12
2597
JavaScriptGitHubNode.js+29
14
13386
GitHubPythonReact+42
49
40682
GitHubPythonNode.js+47
54
72275
GitHubGitSlack+30
27
18251
JavaScriptGitHubGit+33
20
2078
What are some alternatives to Ansible and AWS CloudFormation?
Puppet Labs
Puppet is an automated administrative engine for your Linux, Unix, and Windows systems and performs administrative tasks (such as adding users, installing packages, and updating server configurations) based on a centralized specification.
Chef
Chef enables you to manage and scale cloud infrastructure with no downtime or interruptions. Freely move applications and configurations from one cloud to another. Chef is integrated with all major cloud providers including Amazon EC2, VMWare, IBM Smartcloud, Rackspace, OpenStack, Windows Azure, HP Cloud, Google Compute Engine, Joyent Cloud and others.
Salt
Salt is a new approach to infrastructure management. Easy enough to get running in minutes, scalable enough to manage tens of thousands of servers, and fast enough to communicate with them in seconds. Salt delivers a dynamic communication bus for infrastructures that can be used for orchestration, remote execution, configuration management and much more.
Terraform
With Terraform, you describe your complete infrastructure as code, even as it spans multiple service providers. Your servers may come from AWS, your DNS may come from CloudFlare, and your database may come from Heroku. Terraform will build all these resources across all these providers in parallel.
Jenkins
In a nutshell Jenkins CI is the leading open-source continuous integration server. Built with Java, it provides over 300 plugins to support building and testing virtually any project.
See all alternatives