shouldiuse.io

Categories

VERDICT

Terragrunt Review

Depends

Should I use Terragrunt?

Free Terragrunt-native CI/CD pipeline. Unlimited runs and resources. - terragrunt.gruntwork.io

· 19 hours ago

Use it if you run many Terraform/OpenTofu environments or accounts and vanilla Terraform genuinely hurts. Avoid if you manage a handful of modules — the extra config layer adds brittleness and lock-in.

Confidence

Medium. Based on 20+ public sources: Reddit/HN discussions, CVE trackers, and Gruntwork official pages.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo evidence in sources reviewed
  • Security posture

Pricing

Free

Terragrunt (open source)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Terragrunt ScaleFree tier

Best for

  • Multi-account AWS estates
  • Dozens of Terraform environments
  • Terraform Cloud free-tier refugees
  • OpenTofu adopters

Not for

  • Small projects with a few modules
  • Teams happy with vanilla Terraform or workspaces
  • Solo devs who don't want another config layer
  • Beginners still learning Terraform itself

Gotchas - check before you buy

high

2026 file-deletion CVE means scrutinize third-party modules before running.

medium

wrappers everywhere create lock-in; migrating back to vanilla Terraform is painful.

medium

Scale free tier launched December 2025; limits and terms could tighten later.

medium

Past vulnerable go-getter dependency (CVE-2024-3817) showed patching lag.

Pros and cons

Pros

  • Free, open-source orchestration for Terraform and OpenTofu
  • Proven with hundreds of AWS accounts in production
  • DRY configs, remote state, dependency orchestration
  • Scale CI/CD free tier: unlimited runs and resources
  • Reached 1.0 stability in March 2026

Cons

  • Recurring 'too brittle' complaints from large-scale users
  • Some say Terraform now solves many problems Terragrunt addressed
  • Some call the Terragrunt plus GitHub Actions combo a waste of time
  • Polarizing: dedicated 'why you should not use' posts exist

Sources & method

- 12 sources - One CVE (2026, arbitrary file deletion via malicious module manifest); keep versions current.

official x6review x4security x2
  • CVE-2026-45099 — arbitrary file deletion, Malicious module manifest can trigger arbitrary file deletion in Terragrunt.
  • Vulnerable go-getter dependency (CVE-2024-3817), Issue #3087 tracked a vulnerable go-getter v1.7.1 dependency.

Key stats

  • Value for money: 5/5

    Rating

  • Free

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 5/5. Free core; Scale free tier, unlimited runs
  • Ease of use: 2/5. Recurring brittle, extra-complexity complaints
  • Feature depth: 4/5. Runs across hundreds of AWS accounts; DRY, dependencies
  • Support quality. No evidence in sources reviewed
  • Security posture: 3/5. One 2026 CVE; dependency patch lag
  • Free Core tool price Open source
  • Free tier Terragrunt Scale Unlimited runs and resources
  • 1.0 Stability Released March 2026
  • Ended Terraform Cloud free tier Scale pitched as free alternative

Pricing

Terragrunt (open source)

Free

  • Terraform/OpenTofu orchestration wrapper
  • Remote state, dependencies, DRY configs

Terragrunt Scale

Free tier

  • Terragrunt-native CI/CD pipeline
  • Unlimited runs and resources

Security

One CVE (2026, arbitrary file deletion via malicious module manifest); keep versions current.

  • CVE-2026-45099 — arbitrary file deletionMalicious module manifest can trigger arbitrary file deletion in Terragrunt.⁹
  • Vulnerable go-getter dependency (CVE-2024-3817)Issue #3087 tracked a vulnerable go-getter v1.7.1 dependency.10

What users say

Users rely on it to tame large multi-account Terraform estates, but a vocal minority finds it brittle and unnecessary.

“Terragrunt + GH Action = waste of time?”
Reddit, r/Terraform
“Am I the only one who doesn't like Terragrunt?”
Reddit, r/Terraform
“Why you should not use Terragrunt”
LinkedIn post
Full analysis

Based on 20+ public sources: Reddit/HN discussions, CVE trackers, and Gruntwork official pages.

Free, battle-tested Terraform orchestrator for large multi-account estates; overkill and polarizing for small setups.

Methodology

Based on 20+ public sources: Reddit/HN discussions, CVE trackers, and Gruntwork official pages.

Read how a report is made.

Sources

  1. Terragrunt official siteterragrunt.gruntwork.io
    official
  2. Terragrunt Scaleterragrunt.gruntwork.io
    official
  3. Announcing the Terragrunt Scale Free Tiergruntwork.io
    official
  4. Terragrunt 1.0 Released!gruntwork.io
    official
  5. We're using Terragrunt with hundreds of AWS accounts (HN)news.ycombinator.com
    review
  6. Use Terragrunt or remain Vanilla tf? (Reddit)reddit.com
    review
  7. A lot of the problems Terragrunt solves have been... (Reddit)reddit.com
    review
  8. Why I Use Terragrunt Over Terraform/OpenTofu in 2025axelmendoza.com
    review
  9. CVE-2026-45099 (NVD)nvd.nist.gov
    security
  10. Vulnerable go-getter dependency issue #3087github.com
    security
  11. Terragrunt security pageterragrunt.gruntwork.io
    official
  12. Terragrunt GitHub repositorygithub.com
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.