Architect and validate Terraform and OpenTofu infrastructure-as-code.
npx skills add https://github.com/iuliandita/skills --skill terraform-iuliandita
Please help me install this Agent Skill. Skill: terraform Source: https://github.com/iuliandita/skills/tree/main/skills/terraform Command: npx skills add https://github.com/iuliandita/skills --skill terraform-iuliandita
This skill addresses the complexity and security risks inherent in managing infrastructure-as-code, preventing common misconfigurations, drift, and compliance failures in Terraform and OpenTofu environments.
Use the terraform skill to review the current directory for security misconfigurations and compliance with PCI-DSS 4.0 standards.
High-intent search queries and answers about installing and using this skill.
You can audit Terraform modules by running a security review to check for PCI-DSS 4.0 control violations, least-privilege IAM issues, and S3 bucket hardening gaps. This validates encryption, tagging, and resource isolation before deployment.
Managing complex multi-account Terraform environments requires standardized patterns for state backend configuration and module architecture. This approach provides workflow automation to prevent drift and maintain infrastructure consistency across accounts.
Yes, the infrastructure-as-code workflow supports both Terraform and OpenTofu. It architects and validates production-grade infrastructure using either tool while managing state backends and enforcing policy-as-code security gates.
You enforce policy-as-code gates by integrating structural and behavioral quality standard checks into your CI/CD pipelines. This requires tools like tflint, checkov, and conftest to validate compliance and block insecure deployments.
Yes, checkov and conftest are required integrations for validating OpenTofu configurations. They enforce the structural and behavioral quality standards necessary to secure infrastructure-as-code and maintain compliance.
You need tflint, checkov, and conftest to enforce structural formatting, security scanning, and policy-as-code compliance. These dependencies validate production-grade infrastructure-as-code by catching misconfigurations before deployment.
darellchua2Configure OpenTofu provider blocks, authentication, and remote state backends.
pluginagentmarketplaceAutomate cloud infrastructure provisioning with Terraform, Pulumi, and CloudFormation.
andisabAutomate security scanning and policy validation for Infrastructure as Code resources.
devkeniScan Infrastructure as Code for security misconfigurations using Checkov, tfsec, and Trivy.
