Terraform

219 officially supported providers (corresponds to Puppet modules), talking to APIs: 1Password, ngrok, …
desired state file *.tf, current state file *.tfstate
Provisioners are strongly discouraged