Skill UI

Auto-activating DevOps skill that guides Kubernetes deployment creation with best practices, production-ready IaC configurations, and validation across Terraform, Helm, and monitoring workflows.

Automates guidance for managing Kubernetes secrets, covering best practices, Terraform/Helm patterns, and IaC validation ideal for advanced DevOps scenarios.

This comprehensive guide covers the entire MLOps lifecycle, specializing in building robust, scalable, and production-grade Machine Learning systems. Expertise includes orchestrating complex ML pipelines using Kubeflow, Airflow, Prefect, and cloud-native services (AWS SageMaker, Azure ML, GCP Vertex AI). It covers experiment tracking (MLflow, W&B), model versioning, model registries, infrastructure as code (Terraform), and container deployment using Kubernetes. Ideal for engineers tasked with moving ML models from research to reliable, managed production environments.

This comprehensive toolkit provides end-to-end DevOps automation capabilities. It scaffolds CI/CD pipelines (GitHub Actions, CircleCI), generates robust Infrastructure as Code (IaC) modules using Terraform for major clouds (AWS, GCP, Azure), and manages complex Kubernetes deployments (Blue/Green, Rolling). Ideal for automating infrastructure setup, application deployment, and drift management in multi-cloud environments.

A comprehensive collection of production-ready, reusable Terraform modules designed for standardized infrastructure provisioning across major cloud platforms: AWS, Azure, and GCP. This library enforces Infrastructure as Code (IaC) best practices, allowing users to build, test, and deploy multi-cloud compatible components efficiently and reliably.

Automates Terraform provider configuration guidance for advanced DevOps teams, offering best-practice code, IaC patterns, and validation support when working with Kubernetes and CI/CD stacks.

This skill provides advanced expertise in Infrastructure as Code (IaC) using Terraform and OpenTofu. It covers designing robust, reusable modules, managing complex multi-cloud state backends, and implementing enterprise-grade CI/CD pipelines. It specializes in governance, Policy-as-Code, and achieving GitOps compliance for full infrastructure automation.

Comprehensive guide and expert assistance for building, refactoring, and validating AWS cloud infrastructure using the AWS Cloud Development Kit (CDK). Covers best practices for TypeScript and Python, including resource naming conventions, Lambda function development, and multi-layer pre-deployment validation using tools like cdk-nag.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

Learn how to implement robust container security by integrating the open-source Trivy scanner (from Aqua Security) into your CI/CD pipelines. This guide covers scanning container images, Kubernetes manifests, IaC files, and code repositories to detect critical vulnerabilities, misconfigurations, secrets, and generating Software Bill of Materials (SBOM) for comprehensive supply chain security.

A comprehensive guide for integrating DevSecOps practices into CI/CD pipelines. It automates security testing by incorporating Static Application Security Testing (SAST), Dependency/IaC Scanning (SCA), Secrets Detection, and Dynamic Application Security Testing (DAST). Use this workflow to shift security left, enforce compliance, and establish security gates that block vulnerable deployments.