# Forge Lang Terraform

> Terraform infrastructure-as-code safety practices. Enforces plan-before-apply workflow. Use when working with .tf files or infrastructure commands. Use when this capability is needed.

- Skill: `tomevault-io/forge-lang-terraform` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/forge-lang-terraform`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/forge-lang-terraform/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/forge-lang-terraform

---


# Terraform Development

## Safety Rules

**NEVER run without user confirmation:**
- `terraform apply`
- `terraform destroy`
- `terraform import`

**ALWAYS run first:**
- `terraform plan`
- `terraform validate`

## Workflow

```
┌────────────────────────────────────────────────┐
│  VALIDATE → PLAN → REVIEW → APPLY             │
└────────────────────────────────────────────────┘
```

### Step 1: Validate

```bash
terraform init
terraform validate
terraform fmt -check
```

### Step 2: Plan

```bash
terraform plan -out=tfplan
```

**Show plan to user and wait for confirmation.**

### Step 3: Apply (only after explicit approval)

```bash
terraform apply tfplan
```

## Linting

```bash
# Format check
terraform fmt -check -recursive

# TFLint
tflint --recursive

# Checkov security scanning
checkov -d .
```

## Project Structure

```
project/
├── main.tf
├── variables.tf
├── outputs.tf
├── versions.tf
├── terraform.tfvars.example
├── modules/
│   └── module_name/
│       ├── main.tf
│       ├── variables.tf
│       └── outputs.tf
└── README.md
```

## Pre-Apply Checklist

```
Terraform Checklist:
- [ ] terraform init completed
- [ ] terraform validate passed
- [ ] terraform fmt -check passed
- [ ] tflint passed (if available)
- [ ] terraform plan reviewed
- [ ] User confirmed changes
- [ ] Ready to apply
```

## State Safety

- Never edit terraform.tfstate manually
- Always use `terraform state` commands
- Back up state before imports
- Use remote state with locking

## Scripts

Validate before plan:

```bash
~/.claude/skills/languages/terraform/scripts/plan-check.sh
```

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/martimramos) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-14 -->