terraform-style-check

What problem does it solve?

This Skill addresses inconsistencies and potential security vulnerabilities in Terraform and OpenTofu infrastructure-as-code by auditing configurations against established style guides, security best practices, and compliance requirements.

Core Features & Use Cases

• Style Auditing: Enforces naming conventions, file organization, and declaration standards.
• Best Practice Checks: Verifies correct module versioning, remote state configuration, and sensitive variable handling.
• Security Auditing: Identifies overly permissive IAM policies, insecure network configurations, and unencrypted resources.
• Compliance Checks: Ensures adherence to organizational tagging standards and security baselines.
• Use Case: A DevOps team can use this skill to automatically scan all new Terraform pull requests, ensuring they meet the company's security and style standards before merging, thus reducing manual review time and preventing misconfigurations.

Quick Start

Run the terraform-style-check skill on the './infrastructure/aws' directory with a 'full' check level and 'production' profile.