terraform-patterns

Review Terraform code for anti-patterns, security issues, and structure problems.

Updated Apr 2, 2026
One-click install
npx skills add https://github.com/4lerman/text_evaluator --skill terraform-patterns-4lerman
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: terraform-patterns
Source: https://github.com/4lerman/text_evaluator/tree/main/.agents/skills/engineering-advanced-skills/terraform-patterns
Command: npx skills add https://github.com/4lerman/text_evaluator --skill terraform-patterns-4lerman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires terraform, python, tfsec, tf lint, infracost, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for designing, securing, and managing Terraform infrastructure, ensuring best practices are followed and resources are provisioned efficiently.

Core Features & Use Cases

  • Module Design: Offers guidelines for creating well-structured Terraform modules.
  • State Management: Provides strategies for managing state backends securely.
  • Security Hardening: Includes checks for security vulnerabilities in Terraform code.
  • Multi-Region Deployments: Assists in implementing multi-region infrastructure.
  • CI/CD Workflows: Integrates with CI/CD pipelines for automated deployment.
  • Use Case: If you are working on a complex Terraform setup and need to ensure it adheres to security best practices and follows established design patterns, this Skill can help you achieve that.

Quick Start

Run the /terraform:review command to analyze your Terraform code for anti-patterns, security issues, and structure problems.

Frequently Asked Questions about terraform-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure Terraform modules to follow infrastructure-as-code best practices?

Terraform module design best practices involve creating well-structured, reusable components for your infrastructure-as-code. This ensures resources are provisioned efficiently and complex setups adhere to established patterns, preventing configuration drift and simplifying maintenance across multi-environment deployments.

What is the best way to manage Terraform state backends securely across multiple environments?

Managing Terraform state securely requires specific strategies for configuring your state backends. Proper state management strategies prevent data loss and conflicts, ensuring your infrastructure-as-code deployments remain consistent and reliable across different environments and multi-region setups.

How do I check my Terraform code for security vulnerabilities and anti-patterns?

You can check Terraform code for security vulnerabilities by running automated security hardening analysis. This process reviews your configuration against established security best practices, identifying anti-patterns and structural issues to ensure your infrastructure-as-code is safe before deployment.

Do I need Python and tfsec to automate Terraform CI/CD workflows?

Automating Terraform CI/CD workflows typically requires Python, tfsec, tf lint, and infracost. These tools integrate into your pipelines to validate configuration, scan for security vulnerabilities, estimate costs, and ensure your infrastructure-as-code follows best practices before automated deployment.

Does this approach work for multi-region infrastructure deployments?

Yes, this approach specifically assists in implementing multi-region infrastructure deployments. By applying these Terraform design patterns and state management strategies, you can provision resources efficiently and maintain consistency across geographically distributed environments.