Carve up a large estate

A large estate gets choudoufu as its binary. Each resource gets its own lock and an owner tag, so splitting a team off becomes a tag rewrite and a permissions policy.

What I do

• Same HCL, same providers, same plan. choudoufu is a build of OpenTofu.
• Ownership moves out of the state file and onto each resource, where your IAM policies can read it.
• Runs on the three big clouds and Kubernetes. A read-only check reports anything it would refuse before you commit.

First step

Tell me what you run today and what you want to change. I will reply saying whether this is a fit.

Get in touch

What you can check now

All of it is open source, so you can read or run it before writing to me.

• The docs
• The source

Then read

Estate migration and carvingchoudoufu and the state file