Although if one already uses ansible for configuring the VMs, ansible would probably be my first choice for deployment as well.

Terraform can be done programatically? For example, i do start/stop a cloudformation for each $clientId, just as needed.