Supported platforms

Deployment targets and IaC frameworks supported by env zero: AWS, Azure, GCP, OCI, Kubernetes, Terraform, OpenTofu, Terragrunt, Pulumi, Helm, and custom flows.

Deployment targets

env zero includes dedicated credential management for the platforms below, with secure storage and automatic credential injection at deploy time.

Platform	Credential type	Setup
Amazon Web Services (AWS)	Cross-account IAM role (recommended) or Access Keys	Connect AWS
Google Cloud (GCP)	Service Account key (JSON)	Connect GCP
Microsoft Azure	Service Principal (client credentials)	Connect Azure
Oracle Cloud Infrastructure (OCI)	API Key (RSA key pair + OCID)	Connect OCI
Kubernetes	kubeconfig	Connect Kubernetes

Any other provider with a Terraform, OpenTofu, or Pulumi provider is also supported. Pass credentials as environment variables at the organization, project, or environment scope and they will be injected at deployment time. See Other Cloud Providers for details.

Infrastructure-as-code frameworks

Framework	Notes
Terraform	Supported up to version 1.5.x. Versions 1.6 and later use the BSL license and are not supported — use OpenTofu instead.
OpenTofu	Fully supported. Drop-in replacement for Terraform 1.6 and later.
Terragrunt	Fully supported.
Pulumi	Fully supported.
CloudFormation	Fully supported.
Helm	Fully supported.
Kubernetes manifests	Fully supported.

Terraform version limit: env zero supports Terraform up to version 1.5.x. Terraform 1.6.0 and later are licensed under the Business Source License (BSL) and are not supported. If your IaC requires Terraform 1.6+ features, use OpenTofu, which env zero fully supports as a drop-in alternative.

For information on pinning or managing specific tool versions, see Managing IaC Binaries Versions.

Custom tools

The Custom Flows capability lets you run any other tool as part of your deployment process, including configuration management tools like Ansible, Chef, and Puppet, or plain bash scripts.