Skill UI

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

Automates review of Terraform infrastructure-as-code via Checkov, tfsec, Terrascan, and OPA/Rego policies to find permissive IAM roles, public exposure, missing encryption, and insecure defaults before cloud deployment.

Use Amazon Macie to automate discovery, classification, and protection of PII, financial, and credential data in S3 buckets; configure CLI/Terraform, custom identifiers, allow lists, and integrate findings into Security Hub and EventBridge for proactive risk response.

Automates scanning Terraform, CloudFormation, Kubernetes, and Helm IaC with Checkov/tfsec/KICS, enforces policy-as-code, and integrates into CI/CD to stop misconfigurations before deployment.

AegisOps-AI is a professional-grade 'Living Pipeline' that integrates advanced AI reasoning directly into the SDLC. It acts as an intelligent gatekeeper, automating high-stakes audits across three domains: identifying memory vulnerabilities in Linux Kernel patches, detecting massive cost drifts in Terraform plans, and translating natural language security intent into hardened Kubernetes manifests.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

Automates importing live Azure environments into Terraform by discovering subscriptions, groups, or resource IDs, mapping dependencies, and generating AVM-based IaC files ready for validation and planning.

Analyzes Terraform plan JSON from the AzureRM provider to filter false-positive Set-type attribute diffs when reviewing changes to gateways, load balancers, NSGs, and similar resources.

A comprehensive guide covering best practices for Terraform and OpenTofu. It provides structured advice on module hierarchy, directory organization, naming conventions, and advanced testing strategies (including native testing and policy as code). Use this skill when designing, refactoring, or implementing robust Infrastructure as Code (IaC) pipelines and multi-environment deployments.

Automate the deployment of CAST AI across various multi-cloud Kubernetes clusters, including EKS, GKE, and AKS. This module uses Terraform Infrastructure as Code (IaC) patterns to reliably configure necessary components like IAM roles, node autoscaling policies, and cluster resources, ensuring standardized onboarding across different cloud environments.

A comprehensive guide detailing the systematic process for upgrading and migrating CAST AI components. This includes updating Helm charts (agent, controller, evictor) and Terraform providers. It outlines prerequisites, step-by-step upgrade procedures, validation checks, and necessary rollback procedures to ensure a safe transition between versions.

A comprehensive guide to connecting any Kubernetes cluster (EKS, GKE, AKS) to CAST AI for cost optimization, autoscaling, and security monitoring. This skill covers the entire setup process, including generating API keys, installing the CAST AI agent via Helm charts, and integrating the provider using Terraform.