Terraform explicitly doesn't want to deal with deployment of stuff that is inside VMs etc. and tries to tell you to use managed services or cloud-config yamls as the solution.

You can write your own providers, you can use the provisioned support, but TF doesn't like that and it shows.