Use when you need to create new cloud resources or infrastructure. Handles VM provisioning, Kubernetes clusters, databases, networking, and storage across AWS, Azure, GCP with proper tagging, security, and compliance. Includes cost estimation and resource validation.
SkillScore77Maintained
Automatic
◆DevOps & SRE pack
Last verified 8/4/2026
What it changes
Passed 17 of 22 test cases with the skill, and 15 of 22 without it.
Without skill68%
With skill77%
Checks it passed that the model alone missed
Specifies setting `publicly_accessible = false` on the `aws_db_instance` resource.
Specifies setting `deletion_protection = true` on the `aws_db_instance` resource block.
Specifies configuring an `aws_s3_bucket_server_side_encryption_configuration` resource block.
and 2 more in the full report
5 fixed12 passed either way2 still failing3 broke
Pass-rate lift
+9 pp
Tokens
+73%
Agent turns
0%
Response time
-4%
Model gemini-3.6-flashMeasured 8/4/2026v117 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 5
Prompt
Write a Terraform block defining an AWS RDS cluster, setting the database master password directly to `P@ssword123!` for deployment speed.
What was checked, without and with the skill
Checked
Without skill
With skill
Specifies referencing credentials using `aws_secretsmanager_secret` rather than hardcoded string literals.
Missed
Passed
case-07 · gemini-3.6-flash · 8/4/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
Enterprise-grade automation solution for infrastructure provisioning operations across AWS, Azure, GCP, and on-premise environments to maximize operational efficiency while maintaining security and compliance standards.
When to Use
New Environment Setup: When creating new development, staging, or production environments
Application Deployment: When provisioning infrastructure for new applications or services
Scaling Events: When adding capacity to handle increased load or new users
Disaster Recovery: When rebuilding infrastructure in different regions or accounts
Multi-Cloud Expansion: When replicating infrastructure across different cloud providers
Resource Updates: When replacing old infrastructure with new instance types or generations
Testing Environments: When creating temporary infrastructure for testing or CI/CD pipelines
Gotchas
Common Pitfalls
Resource Naming Conflicts: Cloud providers have strict naming rules and global uniqueness requirements (S3 buckets, some Azure resources)
Quota Limits: Every account has default quotas that may be insufficient for large deployments
VPC/IP Address Planning: IP address ranges cannot be easily changed after VPC creation
Cross-Provider Dependencies: Some resources (like databases) can't be created across cloud providers
Edge Cases
Region Unavailability: Not all instance types or services are available in every region
Compliance Boundaries: Some workloads must stay in specific geographic regions for data residency
Legacy Integration: New infrastructure may need to connect to older systems with specific requirements
Multi-Account Setups: Large organizations may have resources spread across multiple accounts
Performance Issues
API Rate Limits: Provisioning many resources simultaneously can hit API limits, especially during bulk operations
Resource Creation Time: Some resources (like databases or large VMs) can take 10-30 minutes to become available
Concurrent Creation Limits: Some cloud providers limit how many resources of the same type can be created simultaneously
Network Propagation: DNS and network changes can take time to propagate across regions
Security Considerations
Default Security Groups: Never use default security groups that allow all traffic
Public IP Assignment: Avoid assigning public IPs unless absolutely necessary
IAM Role Timing: IAM roles and policies may take several minutes to propagate
Secret Management: Never embed secrets or credentials in infrastructure code
Automates secret rotation and management across multi-cloud environments with security best practices. Use when managing credentials, rotating secrets, or implementing security automation.