Enterprise tooling (aka a usable API) and it stays out if my way.

We’ve got it rigged up for aws sso. Each department can make any number of permissions sets (and link to any number of groups). The config for that is all stored in git (with code owners configured so you can only mess up your own stuff).

So I’m using it with Python. For me it’s able to do some stuff that terrafom never would be able to (Ive got a spot where resources are generated for each file/object on disk).

I for one am recommending pulumi for any of my teams new infrastructure needs.