aws-terraform-infra

Provision and maintain AWS infrastructure using Terraform modules and CLI diagnostics.

2|Updated Aug 15, 2025
One-click install
npx skills add https://github.com/Grupo-6-ADS-B/FittNutri --skill aws-terraform-infra-grupo-6-ads-b
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-terraform-infra
Source: https://github.com/Grupo-6-ADS-B/FittNutri/tree/main/.claude/skills/aws-terraform-infra/references
Command: npx skills add https://github.com/Grupo-6-ADS-B/FittNutri --skill aws-terraform-infra-grupo-6-ads-b

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Managing AWS infrastructure manually through the console leads to inconsistent environments, configuration drift, and hard-to-reproduce setups. This Skill turns AWS provisioning into repeatable Terraform code with modular structure, state management, and CLI-based troubleshooting. ## Core Features & Use Cases - Modular Terraform Architecture: Pre-built module patterns for networking (VPC, subnets, VPC Endpoints), compute (ALB, ASG, Launch Templates), database (RDS MySQL), messaging (Amazon MQ RabbitMQ), security groups, and IAM roles. - Migration & Import Workflows: Import existing ClickOps or CLI-created resources into Terraform state and reconcile drift with plan cycles. - CI/CD Pipelines: GitHub Actions workflows for Terraform plan/apply and Docker image deployment to ECR with ASG instance refresh. - CLI Troubleshooting: Ready-to-use AWS CLI diagnostic commands for SSM connectivity, ECR pull failures, ALB health checks, and route table blackholes. - Use Case: You need to evolve a single EC2 deployment into a production architecture with ALB, Auto Scaling Group, RDS, and VPC Endpoints replacing a costly NAT Gateway, all managed as code with a remote S3 backend. ## Quick Start Ask the assistant to provision a complete AWS environment with VPC, ALB, Auto Scaling Group, and RDS using Terraform modules for the dev environment.

Frequently Asked Questions about aws-terraform-infra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate existing AWS resources into Terraform?

Write the Terraform resource block matching the existing resource, then run terraform import with the resource ID (for example, terraform import aws_vpc.main vpc-xxx). Run terraform plan and adjust the code until it shows no changes.

How to replace a NAT Gateway with VPC Endpoints in Terraform?

Create an S3 Gateway endpoint (free) plus Interface endpoints for services like ecr.api, ecr.dkr, secretsmanager, sts, and ssm. Each Interface endpoint needs a dedicated security group allowing TCP 443 from the VPC CIDR and private DNS enabled.

Why does SSM show TargetNotConnected for my EC2 instance?

The instance cannot reach SSM services because the required VPC Endpoints are missing. You need three Interface endpoints: ssm, ssmmessages, and ec2messages, each with a security group permitting HTTPS from the VPC CIDR.

Why is my ALB health check failing on targets?

Common causes are the app not responding on the configured path, the app security group missing an ingress rule from the ALB security group on port 8080, or the container failing to start. Check target health and security group rules via the AWS CLI.

Should Terraform state be stored locally or remotely?

Local state is acceptable for dev environments, but production should use an S3 backend with DynamoDB locking and encryption enabled. Never edit state files manually, and keep tfvars files with sensitive values out of version control.