Talktodre-ops

aws-infra-terraform

Talktodre-ops/claude-skills/infra/SKILL.md

Blueprint for production AWS infrastructure with Terraform and GitHub Actions, proven on a Django and ECS system. Covers the environment-and-module layout, the reversible feature-toggle pattern (count flags that tear a subsystem to zero cost and back), S3 state with native locking, OIDC for CI auth with no static keys, the plan-before-apply discipline the source workflow lacked, the safe ECS deploy ordering (register, migrate as a one-off, abort on failure, then roll), least-privilege IAM with instance and task roles, the security posture for an app behind a TLS-terminating load balancer, secrets through SSM, private-by-default networking, and the SSM and mesh access model. Includes explicit do's and don'ts and the gotchas that bit in production. Use when building, reviewing, or operating this kind of infrastructure.