# Terraform Iac Standards > Conventions and safety checks for Terraform infrastructure changes Use when this capability is needed. - Skill: `tomevault-io/terraform-iac-standards` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/terraform-iac-standards` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/terraform-iac-standards/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: DevOps & Infra - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/terraform-iac-standards --- Always run terraform plan before apply; never apply without reviewing the diff. Pin provider versions in required_providers — avoid >= without an upper bound. Store state remotely (S3 + DynamoDB or Terraform Cloud); never commit .tfstate. Use variable files (.tfvars) for environment-specific values, not hardcoded strings. Tag all resources with environment, owner, and cost-centre for billing visibility. --- > Source: [MichaelObasa/openshard](https://github.com/MichaelObasa/openshard) — distributed by [TomeVault](https://tomevault.io).