How does this skill improve Terraform security?

It implements security scanning tools like tfsec and Checkov, mandates external secret management using AWS Secrets Manager or Vault, and enforces least-privilege IAM roles.

Does it support remote state management?

Absolutely. It includes best-practice configurations for S3 and DynamoDB backends, ensuring state encryption at rest and preventing concurrent modification with state locking.

Is it compatible with Terragrunt?

Yes, it includes references and patterns for utilizing Terragrunt to keep your infrastructure configurations DRY and manage remote state across multiple modules efficiently.

Can this help with multi-environment setups?

Yes, it provides specific patterns for directory-based isolation and workspace strategies to safely manage and deploy to development, staging, and production environments.

Terraform Best Practices

Name: Terraform Best Practices
Author: NickCrew

byNickCrew

•

Cloud Infrastructure

Implements production-grade infrastructure-as-code patterns for scalable, secure, and maintainable cloud deployments.

About

This skill provides Claude with specialized knowledge for building enterprise-ready Terraform infrastructure, focusing on modular design, secure state management, and automated validation. It guides users through creating reusable modules, implementing secret management, and setting up robust CI/CD pipelines with integrated security scanning and testing. Whether refactoring legacy code or architecting new multi-environment cloud systems, this skill ensures compliance with industry standards and prevents common pitfalls like hardcoded secrets or monolithic configurations.

Key Features

Multi-environment deployment strategies for Dev, Staging, and Prod
7 GitHub stars
Automated security scanning patterns using tfsec and Checkov
Infrastructure testing and validation patterns using Terratest
Standardized module architecture for variables, outputs, and versions
Secure remote state management with backend encryption and locking

Use Cases

Migrating manual cloud resources to Terraform with proper state management
Integrating infrastructure security audits into CI/CD automation pipelines
Architecting scalable multi-account cloud environments using reusable modules

About

Key Features

Multi-environment deployment strategies for Dev, Staging, and Prod
7 GitHub stars
Automated security scanning patterns using tfsec and Checkov
Infrastructure testing and validation patterns using Terratest
Standardized module architecture for variables, outputs, and versions
Secure remote state management with backend encryption and locking

Use Cases

Migrating manual cloud resources to Terraform with proper state management
Integrating infrastructure security audits into CI/CD automation pipelines
Architecting scalable multi-account cloud environments using reusable modules