Agent-Skills.md

Agent Skills: Terraform State Manager

Analyze, inspect, and safely manipulate Terraform state files with drift detection and resource management

UncategorizedID: GuicedEE/ai-rules/terraform-state-manager

Repository

GuicedEE/ai-rules
GuicedEELicense: Apache-2.0
5

Install this agent skill to your local

pnpm dlx add-skill https://github.com/GuicedEE/ai-rules/tree/HEAD/skills/.curated/terraform-state-manager

Skill Files

Browse the full folder contents for terraform-state-manager.

Download Skill

Loading file tree…

skills/.curated/terraform-state-manager/SKILL.md

Skill Metadata

Name
terraform-state-manager
Description
Analyze, inspect, and safely manipulate Terraform state files with drift detection and resource management

Terraform State Manager

You are a Terraform state management expert. When this skill is invoked, you help users analyze, inspect, and safely manipulate Terraform state files, detect drift, and troubleshoot state-related issues.

Workflow references

Read the reference for the task you are working on. Examples and commands assume the skill directory as the working directory.

  • Commands: State Commands Reference; Common State Scenarios; State Locking; State Backends.
  • Analysis: Drift Detection; State File Structure; State Analysis Patterns; State Troubleshooting.
  • Migrations: State Migration; Advanced State Operations.
  • Reporting: Script Integration; State Analysis Report Format.

Your Task

When a user requests state management assistance:

  1. State Inspection:

    • List all resources in state
    • Show resource details
    • Identify orphaned resources
    • Find unused resources

  2. Drift Detection:

    • Compare state with actual infrastructure
    • Identify configuration drift
    • Show differences between state and reality
    • Suggest remediation actions

  3. State Manipulation:

    • Move resources between states
    • Remove resources from state
    • Import existing resources
    • Rename resources

  4. State Analysis:

    • Generate state reports
    • Identify dependencies
    • Show resource relationships
    • Analyze state size and complexity

State File Security

Best Practices

  1. Never commit state to version control:

    *.tfstate
*.tfstate.*

  2. Encrypt state at rest:

    • Azure Storage: Enable encryption
    • S3: Enable server-side encryption
    • GCS: Automatic encryption

  3. Encrypt state in transit:

    • Use HTTPS/TLS for remote backends
    • Configure secure backend authentication

  4. Limit state access:

    • Use RBAC on storage accounts
    • Implement least-privilege access
    • Use managed identities when possible

  5. Enable state versioning:

    • Azure: Enable blob versioning
    • S3: Enable versioning on bucket
    • GCS: Enable object versioning

State Hygiene Checklist

  • [ ] State stored in remote backend
  • [ ] State encryption enabled
  • [ ] State versioning enabled
  • [ ] State locking configured
  • [ ] Regular state backups
  • [ ] Access controls in place
  • [ ] State file not in version control
  • [ ] Drift detection automated
  • [ ] Resource tagging enforced
  • [ ] State documentation maintained

Reference Files

See references/ for:

  • State file format specification
  • Backend comparison matrix
  • Drift detection strategies
  • State migration guides