cloud▌

Certification requirements and best practices for Azure Terraform modules seeking AVM compliance. \n \n Enforces provider version constraints (azurerm >= 4.0, < 5.0; azapi >= 2.0, < 3.0) and prohibits git-based module references in favor of pinned Terraform registry sources \n Mandates lower snake_casing for all identifiers, precise variable types, discrete output attributes via anti-corruption layer pattern, and alphabetically ordered locals \n Requires feature toggle variables for ne

Production-ready serverless patterns for AWS Lambda, API Gateway, DynamoDB, and event-driven architectures. \n \n Lambda handler structure with proper error handling, context optimization, and SDK client initialization for cold start efficiency \n API Gateway integration using SAM templates, supporting both HTTP and REST APIs with CORS configuration and IAM policies \n Event-driven SQS patterns with batch processing, partial failure handling, dead-letter queues, and retry logic \n Anti-patterns

All reference documentation files are located in the references/ directory relative to this file.

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

CloudBase document database operations for WeChat MiniProgram with query, CRUD, and aggregation support. \n \n Provides CRUD operations, complex queries, pagination, aggregation, and geolocation queries through the CloudBase SDK \n Built-in WeChat authentication; no explicit login required, with automatic user context in cloud functions \n Requires type definitions and model layers per collection as a single source of truth for schema validation \n Database security rules must be configured via

$23

Multi-cloud architecture design, migration planning, cost optimization, and disaster recovery across AWS, Azure, and GCP. \n \n Covers six core workflow stages: discovery, design, security, cost modeling, migration, and operations with validation checkpoints at each phase \n Implements zero-trust security, least-privilege IAM, encryption at rest and in transit, and multi-region redundancy for critical workloads \n Applies the 6Rs migration framework, Well-Architected principles, and FinOps pract

Comprehensive guide for writing and running Terraform tests with assertions, mocking, and module validation. \n \n Write test files using .tftest.hcl syntax with run blocks that execute in plan or apply mode, supporting sequential and parallel execution with optional state isolation \n Assert conditions on resource attributes, outputs, and data sources; use expect_failures to validate that invalid inputs are properly rejected \n Mock providers (Terraform 1.7.0+) simulate infrastructure behavior

You are a cloud cost optimization expert specializing in reducing infrastructure expenses while maintaining performance and reliability. Analyze cloud spending, identify savings opportunities, and implement cost-effective architectures across AWS, Azure, and GCP.

When modifying Azure DevOps pipeline files (YAML files in build/azure-pipelines/), you can validate changes locally using the Azure CLI before committing. This avoids the slow feedback loop of pushing changes, waiting for CI, and checking results.