Terraform Plan Reviewer
Review Terraform plans for security & cost risks
What You Can Do
You can analyze Terraform execution plans to identify security vulnerabilities, cost optimization opportunities, and AWS best practice violations before resources are deployed. This skill reviews your Terraform code for IAM misconfiguration, unencrypted resources, over-provisioned instances, and architectural antipatterns—then provides specific remediation steps for each finding.
Features
Detects IAM policy overpermissions, unencrypted storage/databases, exposed credentials, and public resource access
Identifies over-provisioned instances, unused resources, inefficient storage classes, and recommends right-sizing
Checks against AWS Well-Architected Framework pillars (security, reliability, performance, cost, operations)
Ensures resources comply with common standards (encryption, logging, tagging, VPC isolation)
Provides specific Terraform code changes to fix each issue, not just problem statements
Maps resource relationships and flags circular dependencies or cascade risks
Analyzes what's being created, modified, or destroyed and potential consequences
Example Output
Security Findings
HIGH — IAM Role lacks explicit deny policies
- Resource:
aws_iam_role.lambda_execution - Issue:
s3:*permission on all buckets violates principle of least privilege - Fix: Scope to specific bucket ARN —
arn:aws:s3:::my-app-uploads/*
MEDIUM — RDS database not encrypted at rest
- Resource:
aws_db_instance.main - Issue:
storage_encrypted = falseallows unencrypted data - Fix: Add
storage_encrypted = trueand enable encrypted backups
Cost Optimizations
- EC2 instance type: t3.large ($60/mo) → t3.small ($13/mo) — 78% savings
- RDS instance class: db.r5.2xlarge → db.r5.large — saves $1,200/month
- S3 storage class: STANDARD → Intelligent-Tiering — ~30% savings with auto-archival
AWS Best Practices
✓ VPC endpoints configured for private API calls ✓ CloudTrail logging enabled
- ⚠️ NAT Gateway in single AZ (single point of failure) — add second AZ
- ⚠️ Backup retention too aggressive (90 days) — reduce to 30 days
What's Included
- SKILL.md: Complete Terraform review workflow, evaluation criteria, and remediation patterns
- Security Checklist: 25-point validation template (IAM, encryption, network, logging)
- Cost Optimization Guide: Common AWS savings patterns with Terraform examples
- AWS Best Practices Reference: Well-Architected Framework mapping and checks
- Review Report Template: Structured output format (findings, recommendations, impact)
- Remediation Examples: Code snippets for common fixes (IAM scoping, encryption, scaling)
Who It's For
- DevOps engineers — Catch infrastructure misconfigurations before production deploys
- Cloud architects — Validate multi-environment designs against AWS best practices
- Security engineers — Audit IAM, encryption, and compliance in infrastructure code
- Engineering leads — Review infrastructure changes during code review process
- SREs — Ensure operational best practices in infrastructure deployments
Best For
- Pre-deployment Terraform plan reviews in CI/CD pipelines
- Security audits of infrastructure-as-code changes
- Cost optimization analysis before provisioning resources
- AWS best practices validation across dev/staging/prod environments
- Knowledge transfer on infrastructure security patterns
You might also like
Accelerate your beat reporting by organizing research, identifying story angles, discovering sources, and developing narrative frameworks. You can quickly synthesize complex topics, spot emerging trends, and prepare comprehensive story outlines that anchor your reporting. This skill helps you go deeper on your beat with less time spent on research logistics.
by manwithstyle
Manage your entire story development pipeline—from assignment briefs and source research guidance to fact-checking verification and copy editing—all within Claude's context. You'll generate assignment templates, receive real-time editorial feedback, identify verification gaps, and receive copyediting suggestions with tracked changes. The skill handles complex multi-source stories, deadline pressure, and maintains editorial standards across your publication.
by manwithstyle
You can design comprehensive Datadog monitoring strategies that transform raw metrics into actionable intelligence. Claude helps you architect dashboards that surface critical insights, configure intelligent alerts that reduce false positives, and build escalation workflows that speed up incident response. The result: measurably lower MTTR and a team that trusts your alerts.
by manwithstyle
You can submit copy of any length—blog posts, marketing emails, website content, social media—and the Copy Editor's Assistant will systematically review it against your style guide, brand voice guidelines, and journalistic standards. It identifies specific issues with line references and provides actionable improvement suggestions for each problem. Every review produces a detailed report showing flagged content, recommended rewrites, and an overall compliance assessment.
by manwithstyle
Transform breaking news briefs into compelling visual story frameworks that guide photographers toward impactful coverage. You'll receive multiple narrative angles, detailed shot lists organized by scene and purpose, and complete assignment briefs with sourcing guidance. Each output ensures comprehensive emotional and contextual storytelling from first frame to final edit.
by manwithstyle
This skill walks you through a structured data analysis workflow—from initial exploration and claim verification to identifying compelling story angles and building evidence-backed narratives. You'll learn to spot anomalies, validate statistics, and construct defensible arguments that stand up to scrutiny. It's designed for journalists who want to move beyond surface-level data work into serious investigative storytelling.
by manwithstyle
This skill analyzes your datasets to uncover statistically significant patterns and newsworthy insights automatically. It validates claims against your data, structures findings into compelling narratives that connect evidence to context, and generates verification frameworks so readers can trust your conclusions. You get publication-ready data stories backed by rigorous statistical analysis and transparent methodology.
by manwithstyle
You can take raw interviews and turn them into fully structured narrative podcast stories. Claude helps you map emotional arcs, optimize pacing for audio listeners, refine scripts for natural delivery, and ensure your story has a compelling beginning, middle, and end. The result is a clear roadmap from raw material to polished episode.
by manwithstyle