remediate-aws-terraform

Generate staged, atomic AWS Terraform remediation PRs from security findings.

1|Updated Apr 21, 2026

Search Tags:#security #aws #infrastructure #terraform #checkov #remediate

Ready to run

npx skills add https://github.com/sswapnil2/ai-config-fintech --skill remediate-aws-terraform

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: remediate-aws-terraform
Source: https://github.com/sswapnil2/ai-config-fintech/tree/main/skills/remediate-aws-terraform
Command: npx skills add https://github.com/sswapnil2/ai-config-fintech --skill remediate-aws-terraform

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Remediate AWS infrastructure issues safely by planning and executing staged PRs that fix misconfigurations without downtime or data loss.

Core Features & Use Cases

Staged PR sequencing: Breaks remediation into atomic, reviewable PRs ordered by blast radius.
Guardrails & dual-run: Enforces dual-run for destructive changes and rollback readiness.
Inventory-to-action workflow: Transforms findings from checks (checkov/tfsec/AWS Config) into a mapped remediation plan.

Quick Start

Generate a prioritized remediation plan from your security findings and provide the PR sequence ready for review.

Frequently Asked Questions about remediate-aws-terraform

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I safely remediate AWS Terraform security findings from checkov and tfsec?▼

To remediate AWS Terraform security findings safely, this Skill transforms checkov and tfsec results into a staged PR sequence ordered by blast radius, ensuring each fix is atomic and revertible.

What is the best way to prioritize AWS infrastructure remediations by blast radius?▼

Prioritizing AWS infrastructure remediations by blast radius is handled by ordering fixes from security findings into a staged sequence, applying the least destructive changes first and requiring dual-run for high-impact actions.

Can I generate a staged PR sequence for AWS Config and PCI compliance issues?▼

Yes, you can generate a staged PR sequence for AWS Config and PCI compliance issues by mapping the findings into atomic, reviewable pull requests with rollback readiness and validation plans.

Does this approach require dual-run validation for destructive Terraform changes?▼

Dual-run validation for destructive Terraform changes is enforced as a guardrail, ensuring that high blast-radius modifications are tested before deployment and that a rollback plan is available.

How do I track and rollback AWS infrastructure remediation PRs?▼

To track and rollback AWS infrastructure remediation PRs, the workflow provides inventory tracking, PR templates, and rollback procedures so each staged change remains revertible if validation fails.

What limitations exist when remediating AWS infrastructure with Terraform?▼

When remediating AWS infrastructure with Terraform, the main constraint is that destructive changes require a dual-run process and must be sequenced by blast radius, which may slow down urgent fixes.