# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Tagged `iac`, `terraform`: 11 items.

- [Terraform](https://hebbmind.com/ko/cli/terraform.md): [CLI] HashiCorp's infrastructure-as-code tool: manage multi-cloud and SaaS resources with declarative config, previewing changes with plan before running apply. Providers cover all major clouds. Licensed under BSL 1.1.
- [Terraform](https://hebbmind.com/ko/plugin/terraform.md): [Plugin] HashiCorp's official Terraform plugin: runs the Terraform MCP Server in Docker against the Terraform Registry and HCP Terraform API to look up provider and module docs and help write IaC. Needs Docker; TFE_TOKEN is optional.
- [OpenTofu](https://hebbmind.com/ko/cli/opentofu.md): [CLI] Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0.
- [Infracost](https://hebbmind.com/ko/cli/infracost.md): [CLI] Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available.
- [Checkov](https://hebbmind.com/ko/cli/checkov.md): [CLI] Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud.
- [Terraform Skill](https://hebbmind.com/ko/skill/terraform-skill.md): [Skill] Terraform and OpenTofu best practices from Anton Babenko: diagnoses the failure mode first, then guides testing, module structure, state management, CI/CD and security scanning. Works for AWS, Azure and GCP.
- [Terraform MCP Server](https://hebbmind.com/ko/mcp/terraform-mcp-server.md): [MCP] HashiCorp's official server: looks up provider, module and policy docs in the Terraform Registry to help write IaC; with an HCP Terraform token it can also manage workspaces, variables and runs. Runs in Docker by default.
- [HashiCorp Agent Skills](https://hebbmind.com/ko/skill/hashicorp-agent-skills.md): [Skill] HashiCorp's official Terraform and Packer skills: write HCL in the official style, refactor modules, terraform test, provider development, Stacks and policy, plus AWS and Azure image builds.
- [HashiCorp Agent Skills](https://hebbmind.com/ko/plugin/hashicorp-agent-skills.md): [Plugin] HashiCorp's official plugin marketplace: the terraform plugin has 16 skills (configuration, modules, provider development, testing, import, Stacks and policy), and the packer plugin has 4 image-build and HCP Packer skills.
- [Pulumi Agent Skills](https://hebbmind.com/ko/plugin/pulumi-agent-skills.md): [Plugin] Pulumi's official plugin marketplace: write infrastructure as code in TypeScript, Python, Go and more, migrate from Terraform, CDK, CloudFormation or ARM, and manage ESC secrets and config. Works with both Claude Code and Codex.
- [Pulumi Agent Skills](https://hebbmind.com/ko/skill/pulumi-agent-skills.md): [Skill] Pulumi's official skills: Pulumi program best practices, components and the Automation API, ESC secrets and config, debugging failed pulumi up runs, and migrating from Terraform, CDK, CloudFormation or ARM to Pulumi.