Infrastructure as Code Agent Skills

Manages multi-cloud infrastructure declaratively through Kubernetes custom resources, covering Crossplane installation, provider setup, and provisioning of AWS resources like RDS and S3.

Implements Kubernetes network policies for micro-segmentation, covering ingress/egress rules, Calico and Cilium, with a Python CLI for managing and validating policies.

Manages CDK for Terraform projects: synthesizes HCL, deploys stacks, inspects outputs, and analyzes diffs across TypeScript, Python, Go, Java, or C#.

Detect and triage infrastructure drift by comparing declared Terraform state against live cloud resources using scheduled pipelines and audit logs.

Generates kernel-DT overlay fragments to enable 25G/10G/1G MGBE QSFP interfaces on Jetson Thor, verifying pinmux and integrating with the BSP customization workflow.

Routes user requests to specialist skills for AEM 6.5 LTS Dispatcher configuration, troubleshooting, performance tuning, security hardening, and lifecycle orchestration.

Finds the minimal Azure role that meets desired permissions and generates CLI commands or Bicep code to assign it.

Design Azure infrastructure using natural language or analyze existing resources to generate architecture diagrams, refine them through conversation, and deploy with Bicep.

Provides an MCP server for managing infrastructure with Pulumi, enabling infrastructure-as-code operations through AI agents.

Sets up DNS records, SSL/TLS certificates, subdomains, email authentication, and health-check failover routing for Route53, Cloudflare, or GCP Cloud DNS, with optional Terraform output.

Audits deployment readiness across CI/CD, containers, monitoring, IaC, secrets, CDN, and DNS, scoring each area and identifying critical gaps, with optional auto-fix via chained sub-skills.

Cria e mantém o inventário da plataforma, mapeando contas AWS, clusters, ambientes, bancos e hosts, distinguindo produção de staging para evitar operações arriscadas.

Design and implement AWS architectures with best practices for IAM, S3, Lambda, DynamoDB, and serverless deployments.

Provides guidance and best practices for working with Ansible, covering core concepts, patterns, troubleshooting, and deployment strategies.

Deploy Flutter backends to OVHCloud using Managed Kubernetes, Object Storage, and Terraform, with CLI and infrastructure-as-code examples.

Discovers, validates, or creates a SageMaker execution role before deploying or training, preventing IAM-related deployment failures.

Scans infrastructure-as-code files for security and compliance misconfigurations using Checkov, with support for Terraform, Kubernetes, and other formats.

Provisions and manages Redpanda Cloud BYOC clusters via the Control Plane API and the rpk cloud byoc plugin, covering networks, IAM wiring, private connectivity, and enterprise features.

Deploy web applications, APIs, and background services on AWS using CDK, covering EC2, ECS Fargate, Lambda, API Gateway, CloudFront, Route 53, RDS, ElastiCache, IAM, and monitoring.

Deploys Flutter backends on AWS using EKS, RDS, S3, Lambda, API Gateway, ElastiCache, Secrets Manager, CloudWatch, and IAM, with CLI examples and CDK infrastructure code.

Manages Chef infrastructure by inspecting cookbooks, nodes, roles, environments, data bags, and compliance profiles, and provides guidance for debugging convergence failures and auditing compliance.

Manages BIND9 DNS servers by discovering zones, validating configuration, checking DNSSEC status, and reporting query patterns and statistics.