terraform-review

What problem does it solve?

Terraform configurations often suffer from inconsistent review quality, leading to misconfigurations, security gaps, and maintainability issues. This Skill provides a structured, repeatable framework to audit infrastructure-as-code across projects, ensuring consistency and reliability.

Core Features & Use Cases

• Global / Base checks: validate variables/outputs definitions, module interfaces, and documentation quality.
• Module structure guidance: enforce clear separation of concerns for locals/variables/outputs, and consistent naming.
• Security & compliance focus: identify hardcoded secrets, insecure defaults, unrefined IAM policies, and misconfigurations that violate best practices.
• Versioning & observability alignment: enforce provider/version pinning, output of meaningful metadata, and alignment with CI/CD reviews.
• Review workflow: outline a step-by-step process from initial assessment to remediation, with a prioritized issues report.

Quick Start

Run a Terraform code review on your repository by applying the checks in this guide to a module or set of modules.