What problem does it solve?
Provides a rigorous, production-ready workflow to detect, validate, secure, cost-estimate, and safely apply infrastructure-as-code changes so teams avoid drift, unexpected destructive changes, policy violations, and cost overruns.
Core Features & Use Cases
- IaC discovery & validation: Detects Terraform, CloudFormation, Pulumi, and CDK projects and runs format, init, validate, and plan checks before any apply.
- Policy & security enforcement: Runs policy checks and enforces hard rules such as no public storage, no wildcard IAM actions, required tagging, and audit logging before deployment.
- Cost estimation & drift detection: Integrates cost estimation and drift checks to flag budget or configuration divergence and gates changes that exceed thresholds.
- Testing & safe deploys: Supports unit and integration IaC tests, staged deployments, and safety checks for destructive operations.
Quick Start
Use the infra skill to run a full plan, policy check, cost estimate, and drift scan for the current IaC project before applying changes.