infra-review

Analyze a Terraform plan for security, cost, and destructive action impact before applying

Run a CI/CD workflow audit of the repository's GitHub Actions (versions, permissions, concurrency, path filters)

Run a comprehensive 4-perspective review of the current Terraform component (security, architecture, operations, cost)

Run a cost optimization review of the current Terraform component (NAT patterns, right-sizing, environment recommendations)

Run a quick Atmos component hygiene check (conventions, file layout, baseline variables)

Run a security-focused review of the current Terraform component (IAM, encryption, network exposure, Checkov)

Run a full AWS Well-Architected Framework review across all 6 pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability

Use this agent to review Terraform component structure, naming conventions, DRY patterns, Atmos integration, AWS service topology correctness, and variable/output interface design. Dispatch when creating or restructuring components.

Use this agent to review Terraform components for cost optimization: NAT gateway patterns, right-sized subnets, expensive resource toggles, and environment-specific variable recommendations. Dispatch when reviewing VPC, compute, or storage components.

Use this agent to review Terraform components for operational readiness: monitoring, logging, tagging, blast radius, and day-2 operations. Dispatch when evaluating production readiness.

Use this agent to review Terraform components for security issues: IAM over-permissioning, missing encryption, network exposure, and Checkov policy alignment. Dispatch when editing IAM policies, security groups, NACLs, or any resource with a policy argument.

Use this agent for a holistic infrastructure review using the AWS Well-Architected Framework across all 6 pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. Dispatch for architecture decision reviews, production readiness gates, or when evaluating overall infrastructure quality against AWS best practices.

Use when reviewing Terraform test files (.tftest.hcl), assessing test coverage, or designing new tests for components using mock_provider and plan-only assertions

Use when adding, modifying, or reviewing Terraform components in an Atmos components repository - checks for common mistakes like committed provider.tf, missing terraform-docs, broken linting config, or missing baseline variables

Use when reviewing Atmos infrastructure repositories, evaluating IaC structure, or assessing components/stacks organization for quality and best practices

Use when reviewing, auditing, or improving GitHub Actions workflows in a repository — checks for version drift, permission issues, missing concurrency controls, path filter gaps, and cross-workflow inconsistencies

Use when reviewing Terraform components for AWS cost optimization, right-sizing, or identifying unnecessary expensive resources like NAT gateways or over-provisioned subnets

Use when analyzing Terraform plan output for security, cost, and operational impact — parses terraform plan JSON to surface destructive changes, IAM modifications, cost-impacting resources, and drift before apply

Use when auditing Terraform code for security vulnerabilities, reviewing IAM policies, checking encryption, or validating network isolation in AWS components

2 hooks across 2 events