Does it support Terragrunt or other wrappers?

Yes, the skill covers environment management strategies including DRY configurations using Terragrunt and standard directory-based isolation.

Can I use this for multi-cloud deployments?

While the principles are universal to Terraform, the skill includes specific patterns for major providers like AWS, covering VPC design, IAM, and provider-specific security best practices.

Does this skill help with state management issues?

Yes, it provides specific guidance on setting up remote backends, preventing concurrent modification with state locking, and implementing directory-based workspace strategies.

How does this skill improve Terraform security?

It implements security-first patterns including secret management via Vault/AWS Secrets Manager, state encryption at rest, and automated scanning using tools like tfsec and Checkov.

Terraform Best Practices

Name: Terraform Best Practices
Author: NickCrew

byNickCrew

•

Deployment & DevOps

Implements scalable, production-grade infrastructure-as-code patterns using expert Terraform design principles and security standards.

About

The Terraform Best Practices skill provides expert guidance for building and maintaining enterprise-level cloud infrastructure. It covers the entire lifecycle of infrastructure-as-code, from modular architecture and secure state management to automated testing and multi-environment deployment strategies. By enforcing patterns like composition over monoliths, least-privilege IAM, and automated security scanning, this skill helps teams transition from manual setups to robust, scalable, and highly maintainable automated environments.

Key Features

Comprehensive testing strategies including Terratest and pre-commit hooks
Advanced module design patterns for reusable and composable infrastructure
Secure remote state management with encryption and DynamoDB locking
Integration of automated security scanning using tfsec and Checkov
7 GitHub stars
Standardized directory structures for multi-environment (Dev/Staging/Prod) isolation

Use Cases

Implementing secure CI/CD pipelines for infrastructure with automated validation and plan reviews
Establishing organizational standards for resource tagging, secret management, and state security
Refactoring monolithic Terraform configurations into modular, maintainable codebases

About

Key Features

Comprehensive testing strategies including Terratest and pre-commit hooks
Advanced module design patterns for reusable and composable infrastructure
Secure remote state management with encryption and DynamoDB locking
Integration of automated security scanning using tfsec and Checkov
7 GitHub stars
Standardized directory structures for multi-environment (Dev/Staging/Prod) isolation

Use Cases

Implementing secure CI/CD pipelines for infrastructure with automated validation and plan reviews
Establishing organizational standards for resource tagging, secret management, and state security
Refactoring monolithic Terraform configurations into modular, maintainable codebases