(as an aside I think the documentation around "immutable infrastructure" architecture is kind of misleading; most of these that I've found still use a CM tool--we use Chef Zero, but there are arguments for others--both for building that infrastructure and for performing last-mile configuration on a newly started machine.)