2026-04-03

New feature: Apply access through Atlantis

#atlantis  #tofu  #terragrunt  #automation  #security 

We are excited to announce that customers can now apply infrastructure changes directly through Atlantis in GitHub Pull Requests. Until now, Atlantis was used to plan and review changes, but the actual apply step was handled by Skyscrapers engineers. With this update, approved customers can trigger atlantis apply themselves, giving you more autonomy over your infrastructure changes.

Why this matters

Some of our customers have been applying infrastructure changes manually through cloud consoles or ad-hoc local executions, leading to inconsistencies and limited traceability. By enabling apply access through Atlantis, we provide a structured, auditable, and collaborative workflow that improves both security and autonomy.

How it works

  • Plan and apply via PR comments: You can trigger both atlantis plan and atlantis apply directly from your Pull Request comments.
  • Access control: Apply permissions are granted on a per-customer basis, following a least-privilege model.
  • PR Review: Each apply will be reviewed by Skyscrapers, ensuring an additional layer of oversight and helping maintain platform reliability.
  • Audit trail: Every apply is logged with full visibility into who initiated it and what was applied.
  • Automated stacks excluded: Stacks that are managed through automation cannot be triggered via Atlantis, as they are controlled through other mechanisms.

How to get started

This feature is being rolled out in phases. If you are interested in getting apply access for your team, please reach out to your customer lead. We will walk you through the onboarding process, including the responsibilities and requirements involved.

For more details, check out the roadmap item.