---

name: iac-skill description: Infrastructure as Code with Terraform, Ansible, and CloudFormation. sasmp_version: "1.3.0" bonded_agent: 04-infrastructure-as-code bond_type: PRIMARY_BOND

parameters:

• name: tool type: string required: false enum: ["terraform", "ansible", "cloudformation", "pulumi"] default: "terraform"
• name: operation type: string required: true enum: ["plan", "apply", "destroy", "validate", "import"]

retry_config: strategy: exponential_backoff initial_delay_ms: 1000 max_retries: 3

observability: logging: structured metrics: enabled

Infrastructure as Code Skill

Overview

Master IaC with Terraform, Ansible, and CloudFormation for automated infrastructure.

Parameters

Name	Type	Required	Default	Description
tool	string	No	terraform	IaC tool
operation	string	Yes	-	Operation type

Core Topics

MANDATORY

• Terraform HCL syntax and providers
• State management and locking
• Modules and workspaces
• Ansible playbooks and roles
• Inventory management

OPTIONAL

• CloudFormation templates
• Pulumi and CDK
• Testing IaC (terratest)
• Secret management

ADVANCED

• Custom providers
• Complex module design
• Multi-cloud strategies
• Drift detection

Quick Reference

# Terraform
terraform init
terraform plan -out=plan.tfplan
terraform apply plan.tfplan
terraform destroy
terraform fmt -recursive
terraform validate
terraform state list
terraform import aws_instance.web i-123

# State Management
terraform state mv old new
terraform state rm resource
terraform force-unlock LOCK_ID

# Ansible
ansible-playbook -i inventory playbook.yml
ansible-playbook playbook.yml --check --diff
ansible-playbook playbook.yml --tags nginx
ansible all -m ping -i inventory
ansible-vault encrypt secrets.yml

Troubleshooting

Common Failures

Symptom	Root Cause	Solution
State lock	Concurrent ops	Wait or force-unlock
Resource exists	Drift	Import or delete
Provider auth	Credentials	Check AWS_PROFILE
Cycle error	Dependencies	Restructure

Debug Checklist

1. Validate: terraform validate
2. Check state: terraform state list
3. Debug: TF_LOG=DEBUG terraform plan
4. Verify credentials

Recovery Procedures

Corrupted State

1. Restore from S3 versioning
2. Or import: terraform import for each resource

Resources

• Terraform Docs
• Ansible Docs