Skill UI

This skill guides the implementation of automated security scanning for Infrastructure as Code (IaC) templates using industry-leading tools like Checkov and tfsec. It focuses on integrating security checks into CI/CD pipelines to detect misconfigurations (e.g., public buckets, open ports) in Terraform, CloudFormation, and Kubernetes manifests before they reach production, thereby enforcing policy-based governance and securing the development lifecycle.

This skill demonstrates how to use Trivy, an open-source security scanner, to perform comprehensive container security assessments. It scans container images, Kubernetes manifests, and Infrastructure as Code (IaC) files for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues. Key features include generating Software Bill of Materials (SBOM) for supply chain transparency and integrating scanning gates into CI/CD pipelines, supporting robust DevSecOps practices.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

Analyzes IaC files and live Azure resources to validate SKUs, usage, and costs, then generates GitHub issues (one per recommendation plus an EPIC) so teams can track implementation of prioritized savings.

Automates importing live Azure environments into Terraform by discovering subscriptions, groups, or resource IDs, mapping dependencies, and generating AVM-based IaC files ready for validation and planning.

A comprehensive guide covering best practices for Terraform and OpenTofu. It provides structured advice on module hierarchy, directory organization, naming conventions, and advanced testing strategies (including native testing and policy as code). Use this skill when designing, refactoring, or implementing robust Infrastructure as Code (IaC) pipelines and multi-environment deployments.

Automate the deployment of CAST AI across various multi-cloud Kubernetes clusters, including EKS, GKE, and AKS. This module uses Terraform Infrastructure as Code (IaC) patterns to reliably configure necessary components like IAM roles, node autoscaling policies, and cluster resources, ensuring standardized onboarding across different cloud environments.

A comprehensive guide and code pattern for configuring ClickHouse instances across development, staging, and production environments. It emphasizes best practices for infrastructure-as-code (IaC), secure secrets management (integrating AWS Secrets Manager, Vault, etc.), and ensuring environment-specific settings are correctly applied for reliable data analytics pipelines.

This advanced skill automates the entire lifecycle of cloud infrastructure deployment. Instead of manual documentation review, it researches current best practices across multi-cloud platforms (AWS, GCP, Azure), synthesizes a coherent deployment strategy, and generates production-grade Infrastructure as Code (IaC). It outputs comprehensive artifacts, including Terraform modules, Kubernetes manifests, CI/CD pipelines, monitoring setups, and cost estimates, ensuring secure and optimized deployment.

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.