Need advice about which tool to choose?Ask the StackShare community!
Azure Resource Manager vs Terraform: What are the differences?
Introduction
In this article, we will discuss the key differences between Azure Resource Manager (ARM) and Terraform. Both ARM and Terraform are widely used Infrastructure as Code (IaC) tools that enable the provisioning and management of cloud resources. However, there are several distinct differences between the two.
Management Framework: Azure Resource Manager is a native management framework provided by Microsoft Azure for deploying resources and managing infrastructure. It is tightly integrated with Azure services and provides a unified API and control plane for resource provisioning and orchestration. On the other hand, Terraform is a multi-cloud infrastructure provisioning tool that is independent of any specific cloud provider. It uses a declarative language to define infrastructure configurations and can deploy resources across different cloud platforms, including Azure.
Declarative vs. Imperative: Azure Resource Manager uses a declarative approach, where you define the desired state of the infrastructure and let the platform handle the implementation details. You specify the desired configuration in ARM templates, which are JSON files describing the resources and their properties. Terraform, on the other hand, takes an imperative approach. You define the sequence of steps required to reach the desired state, and Terraform handles the execution. It uses a declarative language called HashiCorp Configuration Language (HCL) to define infrastructure configurations.
Community and Ecosystem: Azure Resource Manager has a rich ecosystem and a vast collection of pre-built templates and artifacts available in the Azure Marketplace. It also integrates well with other Azure services and tools. Terraform, on the other hand, has an active and growing community with contributions from various cloud providers and users. It has a wide range of community-maintained providers and modules that extend its capabilities beyond just Azure, enabling users to provision and manage resources across different cloud platforms.
Versioning and State Management: Azure Resource Manager provides built-in version control for templates, allowing you to track and manage changes over time. It also integrates with Azure DevOps for continuous integration and delivery (CI/CD) pipelines. Terraform, on the other hand, uses its own state management system to keep track of the deployed resources and their dependencies. This state is stored locally by default, but it can also be stored remotely in a backend system, enabling collaboration and sharing of the infrastructure state across a team.
Resource Granularity and Customization: Azure Resource Manager allows you to manage resources at a high level of abstraction, such as virtual networks, storage accounts, or virtual machines. It provides a wide range of built-in resource types and properties that can be customized using ARM templates. Terraform, on the other hand, provides more granular control over resources. It supports a broad spectrum of resource types and allows you to define and manage resources with fine-grained configuration options.
Vendor Lock-In and Multi-Cloud Support: While Azure Resource Manager is tightly integrated with Azure and provides a seamless experience for managing Azure resources, it may introduce vendor lock-in if you want to switch to a different cloud provider. Terraform, being a multi-cloud tool, offers greater flexibility and portability. It allows you to provision and manage resources across different cloud providers, reducing the risk of vendor lock-in and enabling multi-cloud and hybrid cloud deployments.
In summary, Azure Resource Manager is a native management framework tightly integrated with Azure, providing a unified API for managing Azure resources using declarative ARM templates. Terraform, on the other hand, is an infrastructure provisioning tool that is cloud-agnostic and supports multiple cloud providers using a declarative language called HCL. Terraform offers more granular control, a vibrant community, and multi-cloud support, making it a popular choice for managing infrastructure-as-code across various cloud platforms.
Because Pulumi uses real programming languages, you can actually write abstractions for your infrastructure code, which is incredibly empowering. You still 'describe' your desired state, but by having a programming language at your fingers, you can factor out patterns, and package it up for easier consumption.
We use Terraform to manage AWS cloud environment for the project. It is pretty complex, largely static, security-focused, and constantly evolving.
Terraform provides descriptive (declarative) way of defining the target configuration, where it can work out the dependencies between configuration elements and apply differences without re-provisioning the entire cloud stack.
AdvantagesTerraform is vendor-neutral in a way that it is using a common configuration language (HCL) with plugins (providers) for multiple cloud and service providers.
Terraform keeps track of the previous state of the deployment and applies incremental changes, resulting in faster deployment times.
Terraform allows us to share reusable modules between projects. We have built an impressive library of modules internally, which makes it very easy to assemble a new project from pre-fabricated building blocks.
DisadvantagesSoftware is imperfect, and Terraform is no exception. Occasionally we hit annoying bugs that we have to work around. The interaction with any underlying APIs is encapsulated inside 3rd party Terraform providers, and any bug fixes or new features require a provider release. Some providers have very poor coverage of the underlying APIs.
Terraform is not great for managing highly dynamic parts of cloud environments. That part is better delegated to other tools or scripts.
Terraform state may go out of sync with the target environment or with the source configuration, which often results in painful reconciliation.
I personally am not a huge fan of vendor lock in for multiple reasons:
- I've seen cost saving moves to the cloud end up costing a fortune and trapping companies due to over utilization of cloud specific features.
- I've seen S3 failures nearly take down half the internet.
- I've seen companies get stuck in the cloud because they aren't built cloud agnostic.
I choose to use terraform for my cloud provisioning for these reasons:
- It's cloud agnostic so I can use it no matter where I am.
- It isn't difficult to use and uses a relatively easy to read language.
- It tests infrastructure before running it, and enables me to see and keep changes up to date.
- It runs from the same CLI I do most of my CM work from.
Context: I wanted to create an end to end IoT data pipeline simulation in Google Cloud IoT Core and other GCP services. I never touched Terraform meaningfully until working on this project, and it's one of the best explorations in my development career. The documentation and syntax is incredibly human-readable and friendly. I'm used to building infrastructure through the google apis via Python , but I'm so glad past Sung did not make that decision. I was tempted to use Google Cloud Deployment Manager, but the templates were a bit convoluted by first impression. I'm glad past Sung did not make this decision either.
Solution: Leveraging Google Cloud Build Google Cloud Run Google Cloud Bigtable Google BigQuery Google Cloud Storage Google Compute Engine along with some other fun tools, I can deploy over 40 GCP resources using Terraform!
Check Out My Architecture: CLICK ME
Check out the GitHub repo attached
Pros of Azure Resource Manager
- Bicep - Simple Declarative Language4
- RBAC and Policies in templates2
- Deep integration with Azure services like Azure Policy1
- Day 1 resource support1
- Versioned deployment via Blueprints1
- Over 1K samples the QuickStart repo1
- Infrastructure-as-Code1
Pros of Terraform
- Infrastructure as code121
- Declarative syntax73
- Planning45
- Simple28
- Parallelism24
- Well-documented8
- Cloud agnostic8
- It's like coding your infrastructure in simple English6
- Immutable infrastructure6
- Platform agnostic5
- Extendable4
- Automation4
- Automates infrastructure deployments4
- Portability4
- Lightweight2
- Scales to hundreds of hosts2
Sign up to add or upvote prosMake informed product decisions
Cons of Azure Resource Manager
Cons of Terraform
- Doesn't have full support to GKE1