What problem does it solve?
Many teams struggle with unmaintainable, insecure, or poorly structured Terraform code, leaking secrets into state, inconsistent module interfaces, and brittle CI/CD workflows that cause drift or accidental destructive changes. This Skill provides actionable guidance to design, review, and harden Terraform configurations so infrastructure is reproducible, auditable, and safe to operate at scale.
Core Features & Use Cases
- Module design & review: Advice on one-concern modules, input/output conventions, variable validation, locals, and naming patterns to improve reusability.
- State & secrets management: Recommendations for remote state backends with locking, encryption, and patterns to avoid committing secrets while enabling team workflows.
- CI/CD and safety gates: Best practices and example pipelines for plan-on-PR, apply-on-merge, OIDC authentication, -out=tfplan workflows, and drift detection.
- Use Case: Conduct a repo-wide Terraform audit to surface hardcoded secrets, missing provider pinning, state isolation issues, and prioritized remediation steps for production readiness.
Quick Start
Use the terraform-iac skill to audit the repository's Terraform files and produce a prioritized list of issues and step-by-step remediation actions.
