Enforce declarative Infrastructure as Code to prevent infrastructure drift.
npx skills add https://github.com/prapanch/agent-coda --skill iac-discipline
Please help me install this Agent Skill. Skill: iac-discipline Source: https://github.com/prapanch/agent-coda/tree/main/infra/iac-discipline Command: npx skills add https://github.com/prapanch/agent-coda --skill iac-discipline
This Skill prevents infrastructure drift by enforcing that cloud resources are created, updated, and reconciled only through version-controlled Infrastructure as Code rather than ad-hoc console changes.
Use the iac-discipline skill to review your Terraform plan and identify anything that could cause unexpected destroys, drift risk, or unsafe state changes for your deployment.
High-intent search queries and answers about installing and using this skill.
Stop Terraform infrastructure drift by standardizing Infrastructure as Code practices that forbid manual console edits and enforce reviewable, declarative changes. Require remote state with locking and encryption, and adopt a plan-first apply discipline to reconcile reality versus declared configuration.
Infrastructure drift occurs when cloud resources are changed manually outside of code, causing mismatched state. Infrastructure as Code manages drift by treating declarative configuration and remote state as the source of truth, using plan diffs and detection workflows to reconcile reality with declared state.
Review a Terraform plan for unsafe state changes by applying a safety review checklist that identifies unexpected destroys, drift risk, and unsafe modifications. Follow Terraform style conventions and ensure remote state locking is active before proceeding with the plan-first apply discipline.
Yes, this Infrastructure as Code discipline applies to Pulumi, CloudFormation, and CDK provisioning. It standardizes state management, plan-first apply discipline, and drift detection workflows across these tools to prevent infrastructure drift and ensure deployment safety.
Remote state locking is required for deployment safety because it prevents concurrent operations from corrupting your state file. Combined with encryption and a plan-first apply discipline, it treats your state as a protected source of truth to safely manage declarative infrastructure changes.
EstomImplement modular Terraform configurations with remote state management and testing.
jackspaceAutomate Terraform IaC best practices for provisioning and state management.
thomast1906Automate security scanning of Terraform configurations for Azure infrastructure.
scumunnaManage ad account changes with approval workflows and incident runbooks.
