SPIKE: Research IAC alternatives
Some suggestions are terraform (or opentofu) or crossplane. It should be free and open source with permissive licensing. @andrew_vu needs to be kept in the loop of those selections for security research. After the research is done it should be presented to the team to make the final selection.
This should be an ADR.