Have you looked at Terraform?  I have <i>everything</i> defined (unless it doesn&#x27;t work very well... which still happens as it&#x27;s still under heavy development), and if it needs to be dealt with care (e.g.: core EC2 instances) I&#x27;m slowly filtering it into a separate set of units&#x2F;variables, and setting the &quot;static&quot; infrastructure (VPC) as a downstream group, and slurping the statefile upstream as to not potentially damage anything when playing nice with deploying&#x2F;redeploying EC2 instances.