Infrastructure as Plain English • Multi-Cloud • HCL Exporter • Cost Estimator
🚧 Active Development Phase: TellIaC is currently under active development. If you face any issues, have feedback, or want to share suggestions, please feel free to reach out via our Support Portal or Contact Us!
TellIaC (Human Infrastructure as Code) - Plain English IaC engine with 1-click Terraform export | Product Hunt

Tell your cloud
what to build.

TellIaC is an all-in-one IaC engine where infrastructure is described in plain English — no YAML, no DSL, no special syntax. Provision across AWS, Azure, GCP, and Kubernetes, export to native Terraform HCL, estimate cloud spend, scan security vulnerabilities, and generate architecture graphs.

~/my-project
$ telliac init

Or install via pip: pip install "git+https://github.com/HARSHALJETHWA19/TellIaC.git#subdirectory=hiac&egg=hiac[all]"

LATEST STABLE RELEASE v2.5.0

TellIaC Official Releases & Binaries

All pre-compiled standalone executables, GitHub release assets, installer scripts, and source archives for Windows and Linux.

📦

Source Code (ZIP)

v2.5.0.zip • Release Asset

Complete v2.5.0 source code archive compressed in standard ZIP format.

Download Source (.zip)
🗜️

Source Code (TAR.GZ)

v2.5.0.tar.gz • Release Asset

Complete v2.5.0 source code archive compressed in Tarball format for Unix environments.

Download Source (.tar.gz)
🏷️ TellIaC Releases Repository & Tags
Browse release notes, tag history, commit hashes, and historical assets on GitHub.
⚡ View Release v2.5.0 Notes 🌐 View All Releases on GitHub

TellIaC Core Capabilities

Everything Terraform does — plus Plain English, HCL Export, Cost Estimation & Security Rules.

📝

Plain English Grammar

Write infrastructure as sentences. Deterministic grammar parser translates natural English into concrete cloud resources offline.

☁️

4 Clouds at Once

One file. Provision AWS, Azure, GCP, and Kubernetes resources simultaneously in a single telliac apply command.

🏗️

Reusable Human Modules

Encapsulate infrastructure into blueprints (Include module "vpc_stack" named "prod_net") with zero-collision namespacing.

Terraform HCL Exporter

Export `.hiac` configs into standard Terraform HCL files (main.tf, variables.tf, outputs.tf) for Terraform Cloud & OpenTofu.

💰

Cloud Cost Estimator

Calculate resource-level and total monthly cloud spend (telliac cost) before applying changes.

🔐

Remote Backend & Locking

CLI state management (telliac backend status/init/migrate) supporting local, S3, Azure Blob, and GCS with distributed locking.

📊

Architecture Visualizer

Export Mermaid.js diagrams, terminal ASCII trees, or standalone interactive HTML visualizers with telliac graph.

🛡️

Security Linter & Formatter

Scan for security vulnerabilities (telliac lint) and auto-align assignment formatting (telliac fmt).

🤖

AI Infrastructure Generator

Generate full valid `.hiac` configuration files directly from plain English prompt descriptions (telliac generate).

🌐 Supported Cloud Services & Resources (35+ Resources)

Browse supported infrastructure resources filtered by Cloud Provider.

aws_vpcAWS
Virtual Private Cloud isolated network infrastructure.
SDK: boto3Rate: Free
aws_subnetAWS
VPC Subnetwork partition for public or private subnets.
SDK: boto3Rate: Free
aws_security_groupAWS
Stateful virtual firewall controlling inbound/outbound traffic.
SDK: boto3Rate: Free
aws_instanceAWS
Elastic Compute Cloud (EC2) virtual machine instances (t2/t3/c5).
SDK: boto3Rate: $7.50/mo+
aws_s3_bucketAWS
Scalable S3 Object Storage Bucket for files and data.
SDK: boto3Rate: $1.50/mo
aws_dynamodb_tableAWS
Fully managed NoSQL Key-Value and Document database table.
SDK: boto3Rate: $2.50/mo
aws_sqs_queueAWS
Simple Queue Service message queuing for microservices.
SDK: boto3Rate: $0.50/mo
aws_sns_topicAWS
Simple Notification Service Pub/Sub messaging topics.
SDK: boto3Rate: $0.50/mo
aws_secretsmanager_secretAWS
Centralized encrypted secret storage for credentials and keys.
SDK: boto3Rate: $0.40/mo
aws_iam_roleAWS
Identity and Access Management (IAM) role for service execution.
SDK: boto3Rate: Free
aws_db_instanceAWS
Relational Database Service (RDS) for PostgreSQL/MySQL/MariaDB.
SDK: boto3Rate: $28.00/mo
aws_lambda_functionAWS
Serverless Lambda execution function with event triggers.
SDK: boto3Rate: Free Tier
aws_ecs_clusterAWS
Elastic Container Service cluster for Docker container tasks.
SDK: boto3Rate: Free
aws_kms_keyAWS
Key Management Service encryption key for data protection.
SDK: boto3Rate: $1.00/mo
aws_iam_policyAWS
IAM JSON permissions policy document.
SDK: boto3Rate: Free
azure_resource_groupAzure
Logical container holding related Azure resources for lifecycle.
SDK: azure-mgmtRate: Free
azure_storage_accountAzure
Blob, File, Queue, and Table storage account service.
SDK: azure-mgmtRate: $2.00/mo
azure_virtual_networkAzure
Isolated Virtual Network (VNet) infrastructure in Azure.
SDK: azure-mgmtRate: Free
azure_subnetAzure
Virtual Network Subnet partition in Azure VNet.
SDK: azure-mgmtRate: Free
azure_network_security_groupAzure
Network Security Group (NSG) firewall rules.
SDK: azure-mgmtRate: Free
azure_virtual_machineAzure
Linux and Windows Virtual Machines (Standard B/D series).
SDK: azure-mgmtRate: $7.50/mo+
azure_key_vaultAzure
Safeguard cryptographic keys and secrets used by cloud apps.
SDK: azure-mgmtRate: $3.00/mo
gcp_storage_bucketGCP
Unified Cloud Storage Bucket for unstructured object data.
SDK: google-cloudRate: $1.20/mo
gcp_compute_networkGCP
Global Virtual Private Cloud (VPC) network in Google Cloud.
SDK: google-cloudRate: Free
gcp_compute_subnetworkGCP
VPC Subnetwork partition in Google Cloud.
SDK: google-cloudRate: Free
gcp_compute_firewallGCP
VPC Firewall ingress and egress rules.
SDK: google-cloudRate: Free
gcp_compute_instanceGCP
Compute Engine Virtual Machines (e2-micro/n1-standard).
SDK: google-cloudRate: $7.50/mo+
gcp_secret_manager_secretGCP
Secret Manager key-value security store in GCP.
SDK: google-cloudRate: $0.60/mo
k8s_namespaceK8s
Virtual cluster isolation boundary inside Kubernetes.
SDK: kubernetesRate: Free
k8s_deploymentK8s
Multi-replica Pod workload manager with zero-downtime rolls.
SDK: kubernetesRate: Free
k8s_serviceK8s
ClusterIP, NodePort, or LoadBalancer internal network endpoint.
SDK: kubernetesRate: Free
k8s_configmapK8s
Key-value pair cluster configuration store.
SDK: kubernetesRate: Free
k8s_secretK8s
Encrypted base64 cluster secret store.
SDK: kubernetesRate: Free
k8s_ingressK8s
HTTP/HTTPS ingress router for cluster services.
SDK: kubernetesRate: Free
k8s_pvcK8s
PersistentVolumeClaim persistent storage allocation.
SDK: kubernetesRate: $1.50/mo

⚡ Live Interactive TellIaC Sandbox Playground

Edit plain English code below and click any TellIaC tool command to see real-time simulated CLI execution!

Input Plain English (.hiac) Code:
Live CLI Terminal Output:

🤖 AI HiAC Infrastructure Generator & Automated Testing Lab

Describe your desired cloud setup in plain English. Our engine generates complete working .hiac code files and internally tests them against syntax rules, dependency DAGs, security policies, and loop index calculations before presenting them to you.

Try Prompts:

⚔️ Strategic IaC Tool Comparison Matrix

Compare TellIaC (HiAC) with HashiCorp Terraform, Pulumi, AWS CloudFormation, Azure Bicep, ARM Templates, and Crossplane.

Feature / Dimension ⚡ TellIaC (HiAC) HashiCorp Terraform Pulumi AWS CloudFormation Azure Bicep ARM Templates Crossplane
Primary Syntax Plain English Sentences HCL Language TS / Python / Go JSON / YAML Bicep DSL Nested JSON K8s YAML CRDs
Learning Curve Zero (Human Read) Medium High (Code Skills) High (Verbose) Medium Very High High (K8s Skill)
Multi-Cloud Support AWS + Azure + GCP + K8s Native (1000+) Native (All Clouds) AWS Only Azure Only Azure Only K8s Control Plane
Built-in Cost Estimator Yes (telliac cost) Requires Infracost Requires Infracost AWS Cost Explorer Azure Cost API No No
Built-in Security Linter Yes (telliac lint) Requires Checkov / Tfsec Pulumi Crossguard CFN-Nag / Guard Requires PSRule Requires TTK Tool Kyverno / OPA
Graph Visualizer with Icons Yes (Service Icons) Requires Graphviz Pulumi Console CFN Designer VSCode Visualizer Resource Visualizer K8s Dashboard
Count & Loop Expressions count, count.index, for_each count, for_each Native for loops Fn::ForEach for loops copy loop index K8s Loop Controller
Native HCL Exporter Yes (telliac export) Native Target No No No No No
AI Code Generator + Testing Yes (Built-in Testing Lab) External Copilot Pulumi AI AWS Q Copilot No No

Quickstart

From zero to multi-cloud infrastructure in 4 commands.

1

Install TellIaC

Download the standalone binary or install via pip. telliac is ready instantly.

Terminal
telliac --help
2

Initialize Your Project

Run telliac init inside any directory to set up state tracking, starter template, and git configs.

Terminal
mkdir my-infra && cd my-infra
telliac init
3

Describe Infrastructure in Plain English

Write your multi-cloud architecture in main.hiac.

main.hiac
Use provider "aws" region "us-east-1" for environment "production".

Include module "vpc_stack" named "prod_net" with vpc_cidr "10.100.0.0/16" in environment "production".

Create 1 "aws_s3_bucket" resource named "app_bucket" with bucket "my-unique-storage" in environment "production".
Create 1 "aws_dynamodb_table" resource named "app_db" with table_name "app_items", hash_key "id" in environment "production".

Output "bucket_id" as the id of "app_bucket" in environment "production".
4

Estimate Cost, Lint & Apply

Terminal
telliac cost             # Calculate monthly spend estimate ($36.20/mo)
telliac lint             # Scan for open ports & plaintext secrets
telliac export --out-dir ./tf_export   # Convert to Terraform HCL
telliac apply            # Build infrastructure (with state locking)

Documentation & Developer Registry Reference

Complete official documentation for TellIaC syntax, multi-cloud providers, resource attributes, and CLI tooling.

1. Provider Declarations

Use provider "aws" region "us-east-1" for environment "production".
Use provider "azure" subscription "sub-123" location "eastus" for environment "production".
Use provider "gcp" project "my-cloud" region "us-central1" for environment "production".
Use provider "k8s" context "docker-desktop" namespace "default" for environment "production".

2. Variable Declarations (2 Valid Forms)

# Canonical Form 1: Direct Assignment
instance_count = 3
vpc_cidr       = "10.100.0.0/16"
my_buckets     = ["app-logs-2026", "app-assets-2026", "app-backups-2026"]

# Verbose Form 2: Sentence Declaration
Define variable "instance_count" as number with default 3.

3. Resource Creation Syntax

Create 1 "aws_s3_bucket" resource named "my_bucket"
  with bucket "prod-app-assets-2026"
  in environment "production".

Create 3 "aws_instance" resources named "web_server"
  with type "t3.micro", subnet "public_subnet", depending on "public_subnet"
  in environment "production".

4. Loops, Count Indexing & Array Lookups

# Array Lookup with count.index
Create 3 "aws_subnet" resources named "public_subnet" with
    cidr_block "${var.subnet_cidrs[count.index]}",
    name "subnet-${count.index + 1}",
    vpc "main_vpc"
    in environment "production".

# Natural Free-Form Loop Statement
Create 1 "aws_s3_bucket" resources named "storage"
  and loop in ${var.my_buckets} with bucket each value
  in environment "production".

5. Zero-Trust Secrets Vault Resolver

# Vault / AWS Secrets Manager / Azure Key Vault integration
Create 1 "aws_db_instance" resource named "prod_db" with
    master_username "admin",
    master_password "${secret.db_password}"
    in environment "production".

6. Conversational Environment Conditionals

If environment is "production" create 2 "aws_nat_gateway" resources named "nat_gw" with vpc "main_vpc".
If environment is "staging" create 1 "aws_nat_gateway" resource named "nat_gw" with vpc "main_vpc".

AWS Provider (Amazon Web Services)

Provisions AWS Cloud Resources across EC2, VPC, S3, DynamoDB, SQS, SNS, IAM, and Secrets Manager.

Use provider "aws" region "us-east-1" for environment "production".

aws_vpc

Virtual Private Cloud network container.

Create 1 "aws_vpc" resource named "main_vpc"
  with cidr_block "10.0.0.0/16"
  in environment "production".
AttributeStatusType
cidr_blockRequiredstring
enable_dns_hostnamesOptionalbool

aws_subnet

Subnetwork inside an AWS VPC.

Create 1 "aws_subnet" resource named "pub_sub"
  with cidr_block "10.0.1.0/24", vpc "main_vpc"
  in environment "production".
AttributeStatusType
cidr_blockRequiredstring
vpcRequiredreference

aws_instance

EC2 Compute Engine Virtual Machine Instance.

Create 3 "aws_instance" resources named "web"
  with type "t3.micro", subnet "pub_sub"
  in environment "production".
AttributeStatusType
typeRequiredstring
amiOptionalstring
subnetRequiredreference

aws_s3_bucket

S3 Object Storage Bucket.

Create 1 "aws_s3_bucket" resource named "bkt"
  with bucket "company-data-2026"
  in environment "production".
AttributeStatusType
bucketRequiredstring
aclOptionalstring

aws_dynamodb_table

NoSQL DynamoDB Key-Value Table.

Create 1 "aws_dynamodb_table" resource named "db"
  with table_name "app_users", hash_key "id"
  in environment "production".
AttributeStatusType
table_nameRequiredstring
hash_keyRequiredstring

aws_security_group

EC2 Security Group Firewall Rules.

Create 1 "aws_security_group" resource named "sg"
  with vpc "main_vpc", ingress_ports [80, 443]
  in environment "production".
AttributeStatusType
vpcRequiredreference
ingress_portsRequiredlist

Azure Provider (Microsoft Azure)

Provisions Azure Cloud Resources across Resource Groups, Storage Accounts, VNets, Subnets, VMs, and Key Vaults.

Use provider "azure" subscription "sub-123" location "eastus" for environment "production".

azure_resource_group

Resource Group logical container.

Create 1 "azure_resource_group" resource named "rg"
  with location "eastus"
  in environment "production".
AttributeStatusTypeDescription
locationRequiredstringAzure Region (e.g. eastus, westeurope)
nameOptionalstringResource Group Name override

azure_storage_account

Blob and Object Storage Account.

Create 1 "azure_storage_account" resource named "st"
  with resource_group "rg", sku "Standard_LRS"
  in environment "production".
AttributeStatusTypeDescription
resource_groupRequiredreferenceAzure Resource Group container
skuOptionalstringPerformance SKU (Standard_LRS, Standard_GRS)

azure_virtual_network

Virtual Network (VNet).

Create 1 "azure_virtual_network" resource named "vnet"
  with resource_group "rg", address_space "10.1.0.0/16"
  in environment "production".
AttributeStatusTypeDescription
resource_groupRequiredreferenceTarget Resource Group
address_spaceRequiredstringVNet IP Address CIDR block

azure_key_vault

Azure Key Vault Secrets Store.

Create 1 "azure_key_vault" resource named "kv"
  with resource_group "rg", sku_name "standard", secret_key "${secret.jwt_secret}"
  in environment "production".
AttributeStatusTypeDescription
resource_groupRequiredreferenceTarget Resource Group
secret_keyOptionalvault_secretEncrypted Key Vault secret payload

GCP Provider (Google Cloud Platform)

Provisions GCP Cloud Resources across Compute Engine Instances, VPC Networks, Subnetworks, Cloud Storage Buckets, and Secret Manager.

Use provider "gcp" project "cloud-proj-2026" region "us-central1" for environment "production".

gcp_storage_bucket

Google Cloud Storage (GCS) Bucket.

Create 1 "gcp_storage_bucket" resource named "bkt"
  with bucket "gcp-prod-data", location "US"
  in environment "production".
AttributeStatusTypeDescription
bucketRequiredstringGlobal unique bucket name
locationOptionalstringGCP Region / Multi-region (US, EU, ASIA)

gcp_compute_network

GCP VPC Network.

Create 1 "gcp_compute_network" resource named "vpc"
  with auto_create_subnetworks false
  in environment "production".
AttributeStatusTypeDescription
auto_create_subnetworksOptionalboolAuto-create regional subnets (default false)

gcp_compute_instance

Compute Engine VM Instance.

Create 1 "gcp_compute_instance" resource named "vm"
  with machine_type "e2-micro", zone "us-central1-a"
  in environment "production".
AttributeStatusTypeDescription
machine_typeRequiredstringCompute Instance Machine Type (e2-micro)
zoneRequiredstringGCP Availability Zone

Kubernetes Provider (K8s & Cloud K8s)

Provisions Kubernetes Resources across Namespaces, Deployments, Services, ConfigMaps, Secrets, Ingress, and PVC Storage.

Use provider "k8s" context "docker-desktop" namespace "default" for environment "production".

k8s_deployment

Kubernetes Workload Deployment.

Create 1 "k8s_deployment" resource named "web"
  with image "nginx:latest", replicas 3
  in environment "production".
AttributeStatusTypeDescription
imageRequiredstringContainer Image Registry URI
replicasOptionalnumberPod Replica Instance Count (default 1)

k8s_service

Kubernetes Service LoadBalancer/ClusterIP.

Create 1 "k8s_service" resource named "web_svc"
  with type "LoadBalancer", port 80, target_port 8080
  in environment "production".
AttributeStatusTypeDescription
typeRequiredstringService Type (LoadBalancer, ClusterIP, NodePort)
portRequirednumberExposed External Network Service Port

k8s_secret

Kubernetes Encrypted Secret.

Create 1 "k8s_secret" resource named "db_sec"
  with secret_type "Opaque", token "${secret.db_password}"
  in environment "production".
AttributeStatusTypeDescription
secret_typeOptionalstringSecret Category (Opaque, kubernetes.io/tls)
tokenRequiredvault_secretEncrypted Secret Token payload

Reusable Infrastructure Blueprints & Modules

Encapsulate multi-resource infrastructure blueprints and instantiate them in plain English with argument overrides and automatic resource namespacing.

Module Call Syntax
# Instantiate module "vpc_stack" for Production
Include module "vpc_stack" named "prod_net"
  with vpc_cidr "10.100.0.0/16", subnet_cidr "10.100.1.0/24"
  in environment "production".

# Instantiate the same blueprint for Staging (zero naming collisions)
Include module "vpc_stack" named "staging_net"
  with vpc_cidr "10.200.0.0/16", subnet_cidr "10.200.1.0/24"
  in environment "production".

Multi-Tool Code Exporter Engine (`telliac export --target `)

Export any TellIaC `.hiac` file directly into Terraform HCL, Pulumi TypeScript, AWS CloudFormation YAML, or Azure Bicep DSL!

Terraform HCL Export (`main.tf`)

resource "aws_s3_bucket" "bkt" {
  bucket = "prod-app-assets-2026"
}

Pulumi TypeScript Export (`index.ts`)

export const bkt = new aws.s3.Bucket("bkt", {
  bucket: "prod-app-assets-2026"
});

AWS CloudFormation Export (`cloudformation.yaml`)

Resources:
  Bkt:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: prod-app-assets-2026

Azure Bicep Export (`main.bicep`)

resource st 'Microsoft.Storage/storageAccounts@2023-01-01' = {
  name: 'prodstore'
}

Cloud Cost Estimator (`telliac cost`)

TellIaC Estimated Monthly Cloud Cost [production]
=====================================================
Resource                             Monthly (USD)
-----------------------------------------------------
aws_instance.prod_web_server         $7.50
aws_s3_bucket.prod_app_bucket        $1.50
aws_dynamodb_table.prod_app_table    $2.50
azure_storage_account.prod_az_storage $2.00
azure_virtual_machine.prod_az_vm     $7.50
gcp_storage_bucket.prod_gcp_bucket   $1.20
k8s_pvc.prod_k8s_pvc                 $1.50
-----------------------------------------------------
Total Estimated Cloud Spend : $36.20 / month

Security Scan & Best Practices (`telliac lint`)

TellIaC Security Scan Report
=====================================================
  [MEDIUM] SEC-03: aws_secretsmanager_secret.prod_app_secret
        Potential hardcoded secret in attribute 'secret_name'.

  [LOW] SEC-05: aws_iam_role.prod_iam_role
        Resource has no description specified.
-----------------------------------------------------
Summary: 0 High, 1 Medium, 1 Low (2 total issue(s))
Command Options / Arguments Description
telliac init--state-dir <dir>Initialize state store (`state/`), starter `main.hiac`, and `.gitignore`
telliac validatecheck, testParse and validate `.hiac` files and resource dependency trees
telliac rephrasefix (--write)Normalize informal human language into standard `.hiac` grammar
telliac planpreview, showShow infrastructure create/update/destroy diff without applying
telliac applydeploy (--auto-approve)Build or update cloud infrastructure to match desired state
telliac export--target <target>Convert `.hiac` configuration into Terraform HCL, Pulumi, CloudFormation, or Bicep
telliac import<type> <name> <id>Import existing live cloud resource into clean `.hiac` statement
telliac drift--remediateDetect configuration drift and auto-remediate live state back to desired config
telliac chatStart interactive AI REPL terminal shell to build infrastructure live
telliac cost--env <name>Calculate estimated monthly cloud spend (USD) breakdown
telliac backendstatus, init, migrateRemote state backend management (S3, Azure Blob, GCS) and state locking
telliac graph--format mermaid/ascii/htmlGenerate visual dependency architecture graphs with service icons
telliac lintScan configuration for security vulnerabilities and misconfigurations
telliac fmt--writeAuto-format `.hiac` variable assignment alignment and comments
telliac generate--out <file>Synthesize `.hiac` configuration from plain English prompt description
telliac statelist, show, unlockInspect state entries or force release environment state lock
telliac destroyremove, deleteTeardown all tracked resources in target environment

🚀 What's New in TellIaC (HiAC v2.5.0 Release Notes)

Explore the latest revolutionary features added to TellIaC for multi-cloud human infrastructure management.

v2.5.0 RELEASE Released August 2026 • 83/83 Tests Passed
🗣️ Interactive AI REPL Chat Console
Interactive CLI REPL (telliac chat) and web shell where engineers can build infrastructure live using plain English conversational commands.
🔄 Drift Auto-Remediation Engine
Automatically detect out-of-band cloud console changes and auto-remediate live resources (telliac drift --remediate) back to desired state.
🔀 Reverse Cloud Resource Importer
Import existing live cloud resources (telliac import) across AWS, Azure, GCP, and K8s into clean plain English .hiac code.
📦 Multi-Tool Exporter Engine
Export TellIaC configurations into 4 major IaC toolchains: Terraform (HCL), Pulumi (TypeScript/Python), AWS CloudFormation (YAML), and Azure Bicep (DSL).
🔒 Zero-Trust Secrets Vault Resolver
Secure secret placeholders (${secret.db_password}) resolved dynamically at apply time from HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or GCP.
⚡ Conversational Environment Conditionals
Support for natural conditional statements: If environment is "production" create 2 aws_nat_gateway else create 1...
ENTERPRISE SUPPORT

Open a Support Ticket

Our infrastructure specialists are ready to help. Submit a ticket and we'll respond within one business day.

Response Time
< 24 Hours
🔒
Ticket Privacy
End-to-End Encrypted
🌐
Coverage
AWS · Azure · GCP · K8s
📋
Categories
Bug · Feature · Enterprise
SLA GUARANTEED

All tickets are triaged, assigned a unique ID, and tracked to resolution.

telliac -- new-ticket

Build smarter infrastructure.
Get in touch.

Whether you're exploring TellIaC for your team, need a custom enterprise multi-cloud blueprint, or want to report an issue — we're here.

telliac -- contact
TellIaC (Human Infrastructure as Code) - Plain English IaC engine with 1-click Terraform export | Product Hunt