iac-patterns

Provide Infrastructure as Code patterns for Terraform, Pulumi, and CDK.

Updated Feb 28, 2026
One-click install
npx skills add https://github.com/lucasfdigital/Orchard --skill iac-patterns
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: iac-patterns
Source: https://github.com/lucasfdigital/Orchard/tree/main/skills/iac-patterns
Command: npx skills add https://github.com/lucasfdigital/Orchard --skill iac-patterns

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides essential guidelines and best practices for implementing Infrastructure as Code (IaC) principles, ensuring secure, modular, and version-controlled cloud resource provisioning.

Core Features & Use Cases

  • IaC Principles: Enforces idempotency, immutability, versioning, and security in cloud deployments.
  • Tooling Guidance: Offers patterns for Terraform/HCL and best practices for major cloud providers (AWS, GCP, Azure, Cloudflare).
  • Security Focus: Integrates static analysis, secret management, and least privilege principles.
  • Use Case: When setting up a new AWS environment, use this Skill to ensure your Terraform code follows best practices for modularity, security, and state management, preventing common misconfigurations.

Quick Start

Apply the IaC patterns skill to provision a new VPC in AWS using Terraform, ensuring remote state and modular design.

Frequently Asked Questions about iac-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What are the best practices for secure Terraform module design in AWS?

Terraform best practices for AWS involve enforcing modularity, immutability, and least privilege security principles. Implementing remote state and versioning ensures secure, idempotent resource provisioning without common misconfigurations.

How do I manage secrets securely in Infrastructure as Code across multiple clouds?

Secure Infrastructure as Code integrates static analysis and strict secret management to protect deployments across AWS, GCP, and Azure. Applying GitOps principles ensures sensitive data remains immutable and version-controlled.

Does this IaC patterns guidance work with Pulumi and CDK or only Terraform?

This IaC patterns guidance supports Pulumi and CDK alongside Terraform. It provides tool-agnostic principles for modularity and security, ensuring consistent cloud resource provisioning across AWS, GCP, Azure, and Oracle.

How to provision a new VPC using Terraform with GitOps principles?

Provisioning a VPC with GitOps involves applying modular Terraform patterns with remote state management. This ensures infrastructure deployments remain version-controlled, immutable, and idempotent across your cloud environment.

Why is idempotency important in cloud Infrastructure as Code deployments?

Idempotency in Infrastructure as Code ensures executing the same code multiple times produces identical results without side effects. This consistency maintains stable, predictable cloud resource states across AWS, GCP, and Azure.