Pulumi, all day, every day.

Except when M$ goofs their own docs and kills virtual machine access in the api-spec-derived azure plugin.

But other than that, all day, every day.