infrastructure-as-code
Manage infrastructure through versioned, reviewable code (Terraform, CloudFormation, Pulumi, etc.) with safe practices for state, modules, and changes. Use when provisioning or changing cloud and infrastructure resources.
- License 许可
- MIT
- 最近更新
- 2026-07-22
- Stars
- ★ 7
- Forks
- 1
01 前言 Front Matter
- name
- infrastructure-as-code
- description
- Manage infrastructure through versioned, reviewable code (Terraform, CloudFormation, Pulumi, etc.) with safe practices for state, modules, and changes. Use when provisioning or changing cloud and infrastructure resources.
03 SKILL.md 正文
Infrastructure as Code
Overview
IaC makes infrastructure changes reviewable, repeatable, and auditable. Poor IaC practices create outages and security holes just like poor application code.
When to Use
- Provisioning or modifying cloud resources
- Standardizing environments
- Reviewing Terraform / Pulumi / CloudFormation changes
Core Practices
- Store code in version control and review changes via PRs
- Use remote state with locking
- Prefer small, composable modules with clear interfaces
- Separate plan and apply; require human approval for production when appropriate
- Manage secrets carefully (never in plain state or code)
- Prefer immutable infrastructure patterns where practical
Principles
- Infrastructure changes should be as deliberate as application changes
- Drift should be detectable and minimized
- Blast radius of any single change should be limited
Verification
- Changes are planned and reviewed before apply
- State is secure and consistent
- Modules are reusable without excessive complexity
04 同仓库更多 Skills
compliance-monitoring
Design compliance monitoring and testing programs that verify controls work in practice and surface issues before regulators do. Use when building monitoring plans, compliance testing, or continuous control monitoring.
complaints-handling
Operate complaints-handling processes that meet regulatory standards — logging, timely resolution, root-cause analysis, and fair outcomes. Use when designing or improving regulated complaints frameworks or analyzing complaint themes for conduct risk.
aml-kyc-basics
Apply AML/KYC fundamentals — customer due diligence, monitoring, suspicious activity escalation, and recordkeeping — for financial crime compliance. Use when designing onboarding controls, transaction monitoring concepts, or AML program components in financial services.
ai-model-compliance
Apply compliance controls to AI and automated decision systems — transparency, fairness, human oversight, documentation, and regulatory alignment. Use when deploying AI in regulated processes (credit, fraud, customer decisions) or responding to AI governance expectations.
data-quality-management
Manage data quality end-to-end — dimensions, rules, remediation, and prevention — beyond one-off cleaning scripts. Use when building sustained data quality programs or fixing systemic accuracy, completeness, or consistency problems.
data-lineage
Capture and use data lineage — where data comes from, how it transforms, and what depends on it — for impact analysis, debugging, and trust. Use when tracing metric origins, assessing change impact, or diagnosing broken pipelines.