Tell your cloud
what to build.

aws_vpc

Virtual Private Cloud network container.

Create 1 "aws_vpc" resource named "main_vpc"
  with cidr_block "10.0.0.0/16"
  in environment "production".

aws_subnet

Subnetwork inside an AWS VPC.

Create 1 "aws_subnet" resource named "pub_sub"
  with cidr_block "10.0.1.0/24", vpc "main_vpc"
  in environment "production".

aws_instance

EC2 Compute Engine Virtual Machine Instance.

Create 3 "aws_instance" resources named "web"
  with type "t3.micro", subnet "pub_sub"
  in environment "production".

aws_s3_bucket

S3 Object Storage Bucket.

Create 1 "aws_s3_bucket" resource named "bkt"
  with bucket "company-data-2026"
  in environment "production".

aws_dynamodb_table

NoSQL DynamoDB Key-Value Table.

Create 1 "aws_dynamodb_table" resource named "db"
  with table_name "app_users", hash_key "id"
  in environment "production".

aws_security_group

EC2 Security Group Firewall Rules.

Create 1 "aws_security_group" resource named "sg"
  with vpc "main_vpc", ingress_ports [80, 443]
  in environment "production".

azure_resource_group

Resource Group logical container.

Create 1 "azure_resource_group" resource named "rg"
  with location "eastus"
  in environment "production".

azure_storage_account

Blob and Object Storage Account.

Create 1 "azure_storage_account" resource named "st"
  with resource_group "rg", sku "Standard_LRS"
  in environment "production".

azure_virtual_network

Virtual Network (VNet).

Create 1 "azure_virtual_network" resource named "vnet"
  with resource_group "rg", address_space "10.1.0.0/16"
  in environment "production".

azure_key_vault

Azure Key Vault Secrets Store.

Create 1 "azure_key_vault" resource named "kv"
  with resource_group "rg", sku_name "standard", secret_key "${secret.jwt_secret}"
  in environment "production".

gcp_storage_bucket

Google Cloud Storage (GCS) Bucket.

Create 1 "gcp_storage_bucket" resource named "bkt"
  with bucket "gcp-prod-data", location "US"
  in environment "production".

gcp_compute_network

GCP VPC Network.

Create 1 "gcp_compute_network" resource named "vpc"
  with auto_create_subnetworks false
  in environment "production".

gcp_compute_instance

Compute Engine VM Instance.

Create 1 "gcp_compute_instance" resource named "vm"
  with machine_type "e2-micro", zone "us-central1-a"
  in environment "production".

k8s_deployment

Kubernetes Workload Deployment.

Create 1 "k8s_deployment" resource named "web"
  with image "nginx:latest", replicas 3
  in environment "production".

k8s_service

Kubernetes Service LoadBalancer/ClusterIP.

Create 1 "k8s_service" resource named "web_svc"
  with type "LoadBalancer", port 80, target_port 8080
  in environment "production".

k8s_secret

Kubernetes Encrypted Secret.

Create 1 "k8s_secret" resource named "db_sec"
  with secret_type "Opaque", token "${secret.db_password}"
  in environment "production".

Terraform HCL Export (`main.tf`)

resource "aws_s3_bucket" "bkt" {
  bucket = "prod-app-assets-2026"
}

Pulumi TypeScript Export (`index.ts`)

export const bkt = new aws.s3.Bucket("bkt", {
  bucket: "prod-app-assets-2026"
});

AWS CloudFormation Export (`cloudformation.yaml`)

Resources:
  Bkt:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: prod-app-assets-2026

Azure Bicep Export (`main.bicep`)

resource st 'Microsoft.Storage/storageAccounts@2023-01-01' = {
  name: 'prodstore'
}

Cloud Cost Estimator (`telliac cost`)

TellIaC Estimated Monthly Cloud Cost [production]
=====================================================
Resource                             Monthly (USD)
-----------------------------------------------------
aws_instance.prod_web_server         $7.50
aws_s3_bucket.prod_app_bucket        $1.50
aws_dynamodb_table.prod_app_table    $2.50
azure_storage_account.prod_az_storage $2.00
azure_virtual_machine.prod_az_vm     $7.50
gcp_storage_bucket.prod_gcp_bucket   $1.20
k8s_pvc.prod_k8s_pvc                 $1.50
-----------------------------------------------------
Total Estimated Cloud Spend : $36.20 / month

Security Scan & Best Practices (`telliac lint`)

TellIaC Security Scan Report
=====================================================
  [MEDIUM] SEC-03: aws_secretsmanager_secret.prod_app_secret
        Potential hardcoded secret in attribute 'secret_name'.

  [LOW] SEC-05: aws_iam_role.prod_iam_role
        Resource has no description specified.
-----------------------------------------------------
Summary: 0 High, 1 Medium, 1 Low (2 total issue(s))