● Community
LukasNiessen
⚡ Sofort
terrashark
von LukasNiessen · LukasNiessen/terrashark
Terraform skill that actually follows HashiCorp best practices — eliminates LLM hallucinations with grounded, modular IaC.
TerraShark prevents the common Claude failure mode of hallucinated Terraform resource arguments by grounding generation in official HashiCorp best practices. Biases toward modular code, sensible state layout, and security defaults. Good for greenfield IaC and for fixing up LLM-generated Terraform that doesn't terraform plan cleanly.
Warum nutzen
Hauptfunktionen
Grounded in HashiCorp Terraform best practices Eliminates hallucinated resource arguments Modular structure by default (modules/, envs/) Security-first defaults (least privilege, encryption on) State layout guidance (remote backend, workspace patterns) Works with Claude Code and Codex
Live-Demo
In der Praxis
terrashark-skill.replay
▶ bereit
▶ Abspielen
Schritt ›
0/0
Anwendungsfälle
Praxisnahe Nutzung: terrashark
Wann einsetzen: Day one of a new AWS account; you want a VPC module that won't embarrass you in 6 months.
Ablauf
Generate module
Use terrashark. AWS VPC module, 3 AZs, public + private + db subnets, NAT gateways per AZ, flow logs on.✓ Kopiert
→ Module with variables.tf, main.tf, outputs.tf — no hallucinated args
Add security defaults
Ensure default security group denies all, flow logs go to CloudWatch with KMS-CMK encryption.✓ Kopiert
→ Security group + logging + KMS wired
Validate
Run terraform init + validate + plan with example tfvars.✓ Kopiert
→ Clean plan output, no errors
Ergebnis: A VPC module that terraform validates clean and follows AWS best practices.
Fallstricke
LLM suggests deprecated aws_vpc_endpoint arg — TerraShark grounds in current docs; if drift still happens, ask it to cite the HashiCorp pageModule too monolithic — Ask for split: networking module vs. endpoints module separately
Wann einsetzen: Another LLM gave you Terraform that looks reasonable but terraform plan fails on unknown arguments.
Ablauf
Point at the broken file
terraform plan fails on modules/rds. Use terrashark to fix each invalid argument with the current correct form.✓ Kopiert
→ Per-error fix with HashiCorp doc reference
Validate
Re-run plan; if any errors remain, iterate.✓ Kopiert
→ Clean plan
Ergebnis: A file that plans clean.
Wann einsetzen: You have dev + staging + prod and one giant terraform.tfstate.
Ablauf
Propose layout
Design S3 remote backend with per-env state files and DynamoDB locking. 3 envs.✓ Kopiert
→ Backend config per env with key separation + locking
Migration plan
Plan the migration from a single local state to this layout, step by step.✓ Kopiert
→ terraform state mv steps + safety checkpoints
Ergebnis: A state layout you can migrate to without losing state.
Fallstricke
Accidentally deleting state during migration — Always pull and back up state files before any mv operation
Kombinationen
Mit anderen MCPs für 10-fache Wirkung
AWS skill sizes architecture, TerraShark implements IaC
Design the architecture with aws-skill, implement as Terraform with terrashark.✓ Kopiert
Security-review the generated IaC
After terrashark scaffolds the module, run OWASP security review on the IAM and networking blocks.✓ Kopiert
Kosten & Limits
Was der Betrieb kostet
API-Kontingent None
Tokens pro Aufruf 10-30k per module
Kosten in € Free
Tipp Generate module by module, not whole environment in one shot.
Sicherheit
Rechte, Secrets, Reichweite
Credential-Speicherung: No credentials. TerraShark doesn't run terraform apply itself.
Datenabfluss: Prompts go to Claude. Terraform plan/apply hits your cloud provider using your local creds.
Always review generated IAM policies before apply. LLMs can silently over-grant.
Fehlerbehebung
Häufige Fehler und Lösungen
terraform validate fails on unknown argumentAsk TerraShark to reconcile against the current provider doc URL; provider version may be newer than the skill's prompt context.
Prüfen: terraform providers
Plan creates unwanted destroysUsually state-drift or implicit renaming. Run terraform plan -target to isolate before apply.
Alternativen
terrashark vs. andere
Alternative Wann stattdessen Kompromiss
Hand-writing with official docs open You know the provider deeply Slower