skills.rest
zenobiuszeto
zenobiuszetoCOMMUNITY
Explore all skills by this author →
GitHub

terraform

Provision AWS infrastructure with Terraform using S3 remote state and DynamoDB locking.

Updated Feb 25, 2026
Search Tags:#aws#infrastructure#terraform#eks#ci-cd#rds#remote-state
One-click install
npx skills add https://github.com/zenobiuszeto/banking-strawman-capabilities --skill terraform-zenobiuszeto
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: terraform
Source: https://github.com/zenobiuszeto/banking-strawman-capabilities/tree/main/skills/terraform
Command: npx skills add https://github.com/zenobiuszeto/banking-strawman-capabilities --skill terraform-zenobiuszeto

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the complexity and risk of provisioning and managing production AWS infrastructure for the banking platform by providing a repeatable, auditable, and secure Terraform workflow that prevents state corruption and accidental destructive changes.

Core Features & Use Cases

  • Remote state & locking: Uses S3 remote state with DynamoDB locking to prevent concurrent applies and state corruption.
  • Modular infra: Encapsulates VPC, EKS, RDS PostgreSQL, ElastiCache Redis, DocumentDB, S3, and security groups via community modules and local modules for reuse.
  • Kubernetes & Helm automation: Manages Helm releases and Kubernetes provider configuration for platform services like Vault, Consul, ingress, and cert-manager.
  • Safety & CI integration: Enforces provider/version pinning, sensitive outputs, lifecycle prevent_destroy for stateful resources, and CI checks including format, validate, and security scans (tfsec/checkov).
  • Use Case: Bootstrapping a new environment, running plan/review on PRs, applying staging changes automatically, and safely promoting to production with guarded policies.

Quick Start

Initialize the infra/terraform directory, run terraform init to configure the S3 backend and DynamoDB locking, and then run a validated terraform plan for staging using the provided staging.tfvars.

Frequently Asked Questions about terraform

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I provision production AWS infrastructure for banking using Terraform?▼

You can provision production AWS infrastructure for banking using Terraform by deploying modular VPC, EKS, RDS, ElastiCache, and DocumentDB configurations with S3 remote state and DynamoDB locking to ensure safe, auditable resource management.

What is the best way to prevent state corruption when running Terraform in AWS?▼

The best way to prevent state corruption when running Terraform in AWS is to configure S3 remote state with DynamoDB locking, which blocks concurrent applies and protects your state file from overwrite conflicts.

How do I set up CI workflows for Terraform staging and production environments?▼

You can set up CI workflows for Terraform staging and production using GitHub Actions to run automated plans, validate configurations, and execute security scanning with tfsec or checkov before applying changes to your banking platform.

Does this Terraform configuration support Helm releases on EKS?▼

Yes, this Terraform configuration supports Helm releases on EKS by managing Helm releases and Kubernetes provider configuration for platform services like Vault, Consul, ingress, and cert-manager directly within your infrastructure code.

Do I need lifecycle prevent_destroy for stateful RDS and ElastiCache resources?▼

You need lifecycle prevent_destroy for stateful RDS and ElastiCache resources to guard against accidental destructive changes, ensuring critical banking data infrastructure cannot be terminated without manual intervention.

Related Skills

Explore More Software Engineering Skills→
mtaku3mtaku3
2

AWS Ecosystem

Automate AWS CLI and Terraform provisioning patterns for multi-account environments.

Community
Advanced
h4vzzh4vzz
33

kubernetes-deployment

Deploy applications to Kubernetes clusters with manifests, Helm charts, and autoscaling.

Community
Advanced
zystem-iozystem-io
5

expose-zymtrace-backend

Configure Kubernetes ingress or service exposure for a zymtrace backend with TLS.

Official
Intermediate
duylinhdang1998duylinhdang1998

infrastructure-as-code

Automate cloud infrastructure provisioning with Terraform HCL and AWS CDK TypeScript.

Community
Intermediate