6 skills · 3 categories
Claude Code skills for Terraform and IaC
Infrastructure-as-code skills for Terraform, OpenTofu and Pulumi: module design, remote state, reviewing plans for destructive changes before apply, drift detection and policy checks in CI.
Start with these
- 1
Terraform IaC
Read the plan before the plan reads you
Claude structures Terraform or OpenTofu code as per-environment roots over typed modules, pins providers, and keeps state remote and locked. Every change goes through fmt, validate, tflint and a saved plan that a bundled script summarizes, flagging replacements of databases and buckets. Renames use moved blocks and adoptions use import blocks, and nothing is applied without approval.
- 2
AWS CDK
CDK diffs you can trust before you hit deploy
Claude structures CDK apps into explicit-environment stateful and stateless stacks, uses L2 grant methods instead of hand-written policies, and reads every cdk diff for replacements before deploy. It keeps logical IDs stable through refactors, untangles cross-stack export deadlocks, and adds assertion tests and cdk-nag so encryption and retention regressions fail CI.
- 3
Pulumi IaC
Real code for infra, with previews you actually read
Claude structures Pulumi projects by lifecycle, keeps secrets in encrypted config or ESC, and wraps reusable infrastructure in ComponentResources with stable type tokens. It handles Outputs without string bugs, adds aliases before renaming anything, protects stateful resources, and reads every preview for replaces and deletes before asking you to approve an update.
All 6 Terraform and IaC skills
Grouped by category. Each card opens the full playbook, example prompts and install commands.
DevOps & SRE 3
Terraform IaC
Read the plan before the plan reads you
Claude structures Terraform or OpenTofu code as per-environment roots over typed modules, pins providers, and keeps state remote and locked. Every change goes through fmt, validate, tflint and a saved plan that a bundled script summarizes, flagging replacements of databases and buckets. Renames use moved blocks and adoptions use import blocks, and nothing is applied without approval.
Pulumi IaC
Real code for infra, with previews you actually read
Claude structures Pulumi projects by lifecycle, keeps secrets in encrypted config or ESC, and wraps reusable infrastructure in ComponentResources with stable type tokens. It handles Outputs without string bugs, adds aliases before renaming anything, protects stateful resources, and reads every preview for replaces and deletes before asking you to approve an update.
Grafana Dashboards
Broken, where, since when: answered in 30 seconds
Claude builds dashboards around the questions on-call actually asks: SLI stats on top, rate, errors and duration by route below, then saturation and dependencies. Queries use $__rate_interval and bucket-level percentile math, datasources are referenced by variable, and the JSON is provisioned from Git and checked by a bundled linter for hardcoded UIDs, missing units and vanity panels.
Security 2
Cloud Security Posture
Find the public bucket before someone else does
Claude audits cloud accounts with read-only roles across every region: it confirms logging baselines, runs Prowler against a CIS framework, adds targeted CLI checks for public data, open admin ports and risky identities, then collapses findings into root causes. Fixes go into Terraform or CDK after usage evidence and confirmation, each paired with an SCP or org policy guardrail.
Container Security
Minimal images, non-root pods, scanned on every build
Claude fixes container risk at the source: it swaps bloated base images for pinned distroless or slim ones, moves build secrets to BuildKit mounts, runs as a numeric non-root user, and applies a restricted securityContext with dropped capabilities and a read-only root filesystem. Trivy and hadolint gate CI, images get signed, and every change is measured against a CVE baseline.
Install
Every Terraform and IaC skill in one command
Installs into ~/.claude/skills/. Add --project after -- to install into the current repository.
curl -fsSL https://claudeskills.page/install.sh | sh -s -- terraform-iac aws-cdk pulumi-iac grafana-dashboards cloud-security-posture container-security Terraform and IaC skills FAQ
What is the best Claude Code skill for Terraform and IaC?
Start with Terraform IaC: Read the plan before the plan reads you. Then add AWS CDK and Pulumi IaC, which cover the next most common Terraform and IaC requests.
How do I install all 6 Terraform and IaC skills at once?
Pass every name to the installer in one command: curl -fsSL https://claudeskills.page/install.sh | sh -s -- terraform-iac aws-cdk pulumi-iac grafana-dashboards cloud-security-posture container-security. Add --project to install them into the current repository's .claude/skills/ folder so your team gets them too.
Do these Terraform and IaC skills work outside Claude Code?
Yes. Each skill uses only the portable Agent Skills frontmatter, so the same folder works on claude.ai, through the Claude API and in the Agent SDK. Skills that run bundled scripts need an environment with code execution.