Terraform on AWS AI Skill Guide (Claude)

Overview & Engine Architecture

This skill specializes @terraform for AWS: provider configuration, reusable modules (VPC, ECS/EKS, RDS, IAM), remote state on S3, and tag/IAM conventions. Prefer S3 native state locking (use_lockfile = true; DynamoDB locking is deprecated). Agents write least-privilege policies, keep one env per state (or a clear workspace strategy), never commit access keys, and gate plan → human/CI review → apply. Prefer GitHub OIDC → IAM role over long-lived CI keys.