terraform▌

Comprehensive Terraform and OpenTofu guidance covering testing, modules, CI/CD, and production patterns. Based on terraform-best-practices.com and enterprise experience.

Terraform and OpenTofu guidance for modules, testing, CI/CD, and infrastructure-as-code architecture. \n \n Covers module hierarchy, naming conventions, code structure standards, and count vs. for_each patterns with decision matrices \n Testing strategy framework spanning static analysis, native test framework (1.6+), Terratest, and security scanning tools (Trivy, Checkov) \n CI/CD integration guidance including workflow stages, cost optimization, and automated cleanup strategies \n Version mana

This skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using tools like Checkov, tfsec, and KICS. It addresses detecting misconfigurations in Terraform, CloudFormation, Kubernetes manifests, and Helm charts before deployment, establishing policy-based governance, and integrating IaC scanning into CI/CD pipelines to prevent insecure cloud resource provisioning.

Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive IAM policies, public resource exposure, missing encryption, and insecure defaults before cloud deployment.

Generate architecture diagrams from Terraform infrastructure code. \n \n Parses .tf files to extract resources, modules, data sources, and variables across AWS, Azure, and GCP providers \n Maps resource dependencies and relationships, grouping by provider and showing VPCs/VNets as containers \n Converts Terraform to Eraser DSL and renders cloud architecture diagrams via the Eraser API \n Requires network access and an Eraser API key; supports multi-provider setups and module hierarchies \n

Scaffold a new Terraform provider using the Plugin Framework. \n \n Generates a new Go module workspace with the standard \"terraform-provider-\" naming convention and initializes required dependencies \n Provides a template main.go file following HashiCorp's Plugin Framework patterns, with TODO markers for customization \n Validates the setup by running build and test commands to ensure the provider compiles and passes initial checks \n Handles workspace management by confirming intent before c

Infrastructure as code implementation across AWS, Azure, and GCP with modular design and state management. \n \n Covers module development, state backend configuration with locking and encryption, provider setup, and multi-environment workflows \n Enforces validation, semantic versioning, and security constraints; includes error recovery patterns for state drift, auth failures, and dependency issues \n Provides structured workflows: analyze requirements, design composable modules, configure remo

Production-ready Terraform module patterns for AWS, Azure, and GCP infrastructure.

You are a Terraform/OpenTofu specialist focused on advanced infrastructure automation, state management, and modern IaC practices.

Build scalable infrastructure as code with Terraform, managing AWS, Azure, GCP, and on-premise resources through declarative configuration, remote state, and automated provisioning.