Which cloud platforms does this security skill cover?

It provides security implementation patterns specifically for AWS, Azure, and HashiCorp Cloud platforms.

Does it support security scanning tools?

The skill provides ready-to-use configurations for popular scanners like Checkov and tfsec to identify infrastructure vulnerabilities early.

How does this skill handle sensitive secrets in Terraform?

The skill implements patterns that use data sources from providers like HashiCorp Vault and AWS Secrets Manager, ensuring secrets are never hardcoded in your configuration files.

Can I use this for automated compliance checks?

Yes, it includes configurations for OPA (Open Policy Agent), Conftest, and Sentinel to enforce organizational policies as code.

Terraform Security Patterns

Name: Terraform Security Patterns
Author: pluginagentmarketplace

bypluginagentmarketplace

•

Security & Testing

Secures infrastructure as code by implementing robust secrets management, automated compliance scanning, and policy enforcement.

About

This skill empowers Claude to architect and implement production-grade security measures for Terraform environments. It provides specialized guidance on managing sensitive data through HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault, while enforcing organizational standards using Policy as Code frameworks like OPA/Conftest and Sentinel. By integrating automated scanning tools like Checkov and tfsec, the skill ensures that infrastructure is audited for vulnerabilities and misconfigurations before deployment, maintaining a high security posture across all cloud providers.

Key Features

End-to-end encryption patterns for S3, RDS, and EBS resources
Cross-cloud secrets management for Vault, AWS, and Azure
Automated security scanning with Checkov and tfsec configurations
Best practices for sensitive data protection and variable masking
Policy as Code integration using OPA, Conftest, and Sentinel
1 GitHub stars

Use Cases

Establishing zero-trust secrets management for production IaC
Implementing automated compliance guardrails in CI/CD pipelines
Remediating security vulnerabilities in existing Terraform configurations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add pluginagentmarketplace/custom-plugin-terraform terraform-security

For use in Claude.ai and ChatGPT

Download Skill

GitHub