Atlantis Terraform and OpenTofu PR Automation

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Why This AMI Instead of Self-Deploying?

Atlantis is a popular open source server that automates OpenTofu and Terraform pull request workflows: it listens for webhooks from your Git provider and runs plan and apply on your pull requests, posting the plan output back to the PR and locking the workspace so two changes cannot touch the same state at once. Deploying it yourself means installing the binary, choosing and installing an infrastructure-as-code engine, writing systemd units, hardening a reverse proxy, generating secure passwords, and maintaining the stack. This AMI eliminates that effort - a pre-hardened Atlantis server is running within minutes of launch, backed by 24/7 expert support with a one-hour average response for critical issues.

## OpenTofu Bundled, Not Terraform

This image ships the OpenTofu command-line engine (Mozilla Public License 2.0) and configures Atlantis to drive it. OpenTofu is a fully open source, drop-in replacement for Terraform. Terraform itself moved to the Business Source License in version 1.6, whose terms restrict competing hosted offerings, so this image deliberately bundles OpenTofu rather than a restrictively-licensed Terraform binary. If you prefer to run your own Terraform, you can install it and repoint the engine.

## Secure By Default

Many pre-built images ship with shared or default passwords - a common vulnerability that exposes instances immediately after launch. This image eliminates that risk:

• A unique web password is generated for every instance on its first boot
• It is stored in a root-only file, inaccessible to unprivileged users
• The web UI is refused without credentials and reached only through an authenticated reverse proxy on port 80
• The application listens on loopback and is never exposed directly
• No shared or default password ships in the image

A continuous-delivery server that can run apply against your cloud is a high-value target, so access to the web UI is gated behind HTTP Basic authentication with the per-instance password.

## You Connect Your Own Repositories

Atlantis orchestrates your infrastructure only after you connect it to your own version control. The image ships ready for you to add your GitHub, GitLab, Bitbucket or Azure DevOps credentials, webhook secret and repository allowlist in a single configuration file, then point a webhook from your repository at the instance. Until you do, the server runs and serves its dashboard but acts on no repository - nothing is automated behind your back. The user guide walks through connecting a repository step by step.

## Proven Plan Engine

Every instance ships with a self-test that runs a real OpenTofu plan through the same engine Atlantis drives, proving the plan machinery works end to end before you ever connect a repository - not merely that a web page loads.

## cloudimg Support

24/7 technical support by email and live chat with a one-hour average response for critical issues. Our engineers help with deployment, connecting Git providers and webhooks, repository allowlists, workflow customization, OpenTofu, TLS termination and upgrades.

## Use Cases

• GitOps pull request automation for infrastructure-as-code changes
• A self-hosted, in-your-own-VPC plan and apply approval gate for cloud infrastructure
• Team review of infrastructure changes with plan output posted directly on pull requests

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.