
from terragrunt-skill19
Best-practice patterns and operational guidance for Terragrunt/OpenTofu infrastructure: catalog/live/module layout, state backend setup, and deployment workflow
Provides operational guidance and scaffolding patterns for managing infrastructure with Terragrunt (OpenTofu). Covers three-repo patterns (catalog, live, modules), unit and stack creation, module sourcing, state backend configuration (S3 + DynamoDB locking), and common pitfalls.
When setting up a new Terragrunt-based infrastructure catalog, creating stacks/units that wrap OpenTofu modules, configuring remote state, or running multi-account/multi-environment deployments. Useful for infra engineers building reproducible, environment-isolated deployments.
{ }
Intended for infra-focused assistants that produce HCL, CI configs, and deployment scripts. Good fit for agents helping with Terragrunt/OpenTofu ops and repo scaffolding.
Terragrunt/OpenTofu infrastructure skill with a comprehensive SKILL.md covering catalog/live/module layout, state management, and deployment workflow. The bundled setup-state-backend.sh script creates S3 buckets and DynamoDB lock tables for Terraform state — well-structured with dry-run support and good security defaults (TLS enforcement, public access blocks). Script failed due to missing aws CLI, which is expected for an infrastructure tool. Minor shell injection risk in HCL parsing function.
aws-cliSolid infrastructure skill. The parse_hcl function uses grep/sed with interpolated variables which could be a shell injection risk if HCL files contain malicious content, but this is low-risk in normal usage. S3 bucket setup includes good security practices: versioning, KMS encryption, public access block, TLS-only policy.