iac-golden-architect

Detect and report infrastructure drift by comparing Terraform state with actual cloud resources, generate drift reports with remediation suggestions, and alert on critical mismatches

Create and manage Harness NextGen CD pipelines with deployment strategies, approval gates, and automated validation

You are scaffolding a new Terraform module with enterprise-grade best practices, including proper structure, documentation, testing framework, and compliance-ready defaults.

Safe Terraform apply with comprehensive safeguards, state backup, verification, and rollback preparation

Initialize Terraform projects with enterprise-grade best practices including backend configuration, provider setup, workspace initialization, and security controls

Run Terraform plan with comprehensive security validation, cost estimation, and drift detection

Comprehensive Infrastructure as Code validation including security scanning (tfsec, checkov, trivy, terrascan), cost estimation, compliance checking, and quality gates with blocking on critical findings

Manage HashiCorp Vault secrets and credentials with support for dynamic secret generation, path-based CRUD operations, and Terraform integration

Infrastructure cost optimization specialist that analyzes Terraform resources for cost savings, right-sizing opportunities, and efficient resource allocation. Provides ROI analysis and cost-benefit recommendations.

Proactive Infrastructure as Code reviewer that ensures code quality, naming conventions, documentation standards, and best practices before commits. Acts as an automated code review assistant.

Security and compliance validator for IaC that checks against SOC2, CIS benchmarks, and security best practices. Integrates with tfsec, checkov, trivy, and terrascan for comprehensive security scanning.

Expert Terraform architect that reviews code, designs module patterns, and provides infrastructure architecture guidance. Specializes in multi-cloud abstraction, state management, and scalable module design.

Harness NextGen CD for continuous deployment including pipeline YAML structure, deployment strategies (rolling, blue-green, canary), GitOps workflows, approval gates, triggers, environments, services, manifests, Kubernetes deployments, Terraform integration, and secrets management. Activate for Harness pipeline creation, deployment automation, and GitOps configuration.

This skill provides comprehensive guidance on infrastructure as code architecture patterns, focusing on cross-cutting concerns that span all cloud providers and IaC tools. The Dredgen uses this skill to architect secure, compliant, cost-optimized, and maintainable infrastructure at enterprise scale.

The terraform-enterprise skill provides comprehensive knowledge and patterns for enterprise-grade Terraform infrastructure management. This skill activates when working with multi-cloud infrastructure provisioning, state management, workspace orchestration, and policy-as-code implementations.

Terraformer tool for reverse-engineering existing cloud infrastructure into Terraform code. Import resources from AWS, Azure, GCP, Kubernetes, and other providers. Generate Terraform configurations from running infrastructure for migration, disaster recovery, and infrastructure documentation.

HashiCorp Vault operations including secrets engines (KV, AWS, Azure, GCP, Database, PKI), auth methods (Token, AppRole, Kubernetes, OIDC, AWS), policies and ACLs, dynamic credentials, secret rotation, Terraform integration, agent sidecar patterns, audit logging, high availability, and disaster recovery. Activate for Vault secret management, credentials automation, and security configuration.