I actually am a fan of the AWS CDK for this reason, and its concept of "constructs". My big application has a dozen packages, one of which defines generic clou

I actually am a fan of the AWS CDK for this reason, and its concept of "constructs". My big application has a dozen packages, one of which defines generic cloud constructs that host and deploy the other packages as a distributed service. If we wanted to switch clouds, we'd just have to re-implement the constructs we use for a new cloud; generic things like "ingress data pipeline", which contain dozens of AWS resources each, but have a semantic grouping and defined permissions boundaries. But we'll burn that bridge when we come to it.