[jjmiv]

I typically use terraform and ansible. tf creates/manages the infrastructure and then ansible completes any configuration.

[whatsmyusername]

This is the approach we take. We don't track states or do continuous config management either as we're all in on cattle > pets (and we don't typically have the time to maintain terraforms properly enough to do anything but cut new environments). Something gets sick? Shoot it and stand up another one.