What problem does it solve? Writing and reviewing Terraform configurations across multiple cloud providers is error-prone: state mismanagement, over-privileged IAM, hardcoded secrets, and destructive plan changes can cause outages or security incidents. This Skill provides a structured workflow for designing, implementing, and reviewing multi-cloud infrastructure-as-code with built-in guardrails. ## Core Features & Use Cases - Multi-Cloud Provisioning: Generates provider-correct HCL for compute, databases, storage, networking, IAM, and CDN across AWS, GCP, Azure, and Oracle Cloud, with a resource mapping table between providers. - Plan Review & Risk Analysis: Analyzes terraform plan output, flags destructive changes, and enforces validation steps (fmt, validate, plan, Checkov/tfsec scans) before any apply. - Governance & Cost Controls: Includes policy-as-code examples (OPA, Sentinel), Terratest patterns, cost optimization strategies (spot instances, lifecycle rules, autoscaling schedules), and ISO/IEC 42001, ISO 22301, and ISO/IEC/IEEE 42010 infrastructure guidance. - Use Case: A team migrating a manually configured GCP environment to Terraform uses this Skill to detect the provider, design remote state with locking, write modular HCL with OIDC-based CI/CD authentication, and review the plan for destructive risks before applying. ## Quick Start Ask the agent to design a Terraform configuration for deploying a containerized API with a managed database on your cloud provider, including remote state, least-privilege IAM, and a plan review before apply.
