Terragrunt Scale

Managing Infrastructure At Scale

2 min • Watch a terragrunt plan run in response to a pull request

Agentic GitOps Workflow

How it works

1. You or your agent writes the change

Ask your agent to make a change in your Terragrunt repo and submit a pull request. Terragrunt Scale picks it up automatically.

2. Scale runs it with guardrails

The change runs in your own CI runners under your existing access control, not on a machine the agent has access to and not on our servers. Smart change detection limits the run to the units actually affected, and the dependency graph sets the run order.

3. Your agent reads the result

Per-unit checks and plan output come back on the Pull Request itself, so the agent can correct its own work before anything is applied. Nothing reaches your infrastructure without your approval. Approve and merge when ready to ship.

Pipelines

Ship agent-authored infra without exposing your credentials

Secure Execution that Agents Can't Bypass

Plans run when a change is proposed and applies run on merge, inside your GitHub/GitLab runners rather than on our servers. Plan output and log summaries appear in comments for easy access by both humans and agents. Plans run using temporary credentials with read-only permissions, so you have the final say in how your infra changes.

Smart Dependency Management

Updates are applied while respecting the dependency graph (DAG) order so that adds, changes, and destroys all run successfully, even across environments with their own access control rules.

Minimize Your Blast Radius

Pipelines identifies the minimum set of infrastructure units affected by your changes, avoiding unnecessary operations and limiting risk.

Terragrunt plan shown in a pull request comment — Per-unit Terragrunt plan output is shown in a pull request comment.

Drift Detection

Detect and resolve drift

Scheduled Runs

Run drift detection as often as you like to ensure your live resources reflect your IaC. Identify and address shadow ops quickly.

Automatic Pull Requests

Pull Requests automatically report and resolve drift. Nothing changes in your infrastructure without review and approval.

Detect Drifted Stacks

Detect drift against Terragrunt Stacks to ensure nothing slips through the cracks.

A drift remediation pull request opened by Terragrunt Scale — Drift remediation pull requests are opened automatically.

Patcher

Update stacks, units, and modules automatically

Automatic Pull Requests

Get PRs for dependency updates on your chosen schedule, customized to include one or many dependency changes.

Promotion Workflows

Patcher is aware of your environments, and can sequentially promote your updates across them. You can promote version bumps from dev to prod on your schedule.

Update Terragrunt Stacks

Detect updates even for units or nested stacks within your terragrunt.stack.hcl files.