How does this skill help with SOC2 compliance?

It provides specific mapping for controls like logical access, network security, and audit trails, ensuring your IaC configurations meet certification standards through automated patterns.

Can it help reduce cloud costs?

Yes, it includes architectural patterns for resource right-sizing, automated tagging for cost allocation, and strategies for leveraging spot instances and savings plans.

Is this skill limited to a specific cloud provider?

No, it focuses on provider-agnostic patterns and cross-cutting concerns applicable to AWS, Azure, and Google Cloud Platform (GCP).

Does it integrate with security scanning tools?

The skill provides guidance on integrating tools like tfsec, Checkov, and Terrascan into CI/CD pipelines to enforce security policies automatically.

IaC Golden Architect

Name: IaC Golden Architect
Author: Lobbi-Docs

byLobbi-Docs

0•

Deployment & DevOps

Architects secure, compliant, and cost-optimized cloud infrastructure using standardized IaC patterns and enterprise-grade cross-cutting concerns.

The IaC Golden Architect skill provides comprehensive guidance for designing production-ready infrastructure that adheres to enterprise standards. It focuses on cross-cutting concerns including SOC2 compliance mapping, multi-cloud abstraction layers, and cost-optimization strategies. By providing proven patterns for IAM, network segmentation, and repository structure, this skill ensures that infrastructure as code (IaC) is not only scalable but also audit-ready and maintainable across providers like AWS, Azure, and GCP.

Key Features

01Multi-cloud abstraction patterns and provider-agnostic modules

02Enterprise security patterns for encryption, IAM, and networking

03Comprehensive cost optimization and resource tagging strategies

040 GitHub stars

05SOC2 compliance control mapping and implementation guidance

06Standardized repository structures for Monorepo and Polyrepo setups

Use Cases

01Designing a secure landing zone that meets SOC2 or HIPAA compliance requirements

02Implementing an enterprise-wide tagging strategy for cost allocation and FinOps

03Refactoring infrastructure code into reusable, provider-agnostic modules

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lobbi-docs/claude iac-architecture

For use in Claude.ai and ChatGPT

Download Skill