Infrastructure as Code Skill

Overview

Master IaC with Terraform, Ansible, and CloudFormation for automated infrastructure.

Parameters

Name Type Required Default Description

tool string No terraform IaC tool

operation string Yes

Operation type

Core Topics

MANDATORY

• Terraform HCL syntax and providers

• State management and locking

• Modules and workspaces

• Ansible playbooks and roles

• Inventory management

OPTIONAL

• CloudFormation templates

• Pulumi and CDK

• Testing IaC (terratest)

• Secret management

ADVANCED

• Custom providers

• Complex module design

• Multi-cloud strategies

• Drift detection

Quick Reference

Terraform

terraform init terraform plan -out=plan.tfplan terraform apply plan.tfplan terraform destroy terraform fmt -recursive terraform validate terraform state list terraform import aws_instance.web i-123

State Management

terraform state mv old new terraform state rm resource terraform force-unlock LOCK_ID

Ansible

ansible-playbook -i inventory playbook.yml ansible-playbook playbook.yml --check --diff ansible-playbook playbook.yml --tags nginx ansible all -m ping -i inventory ansible-vault encrypt secrets.yml

Troubleshooting

Common Failures

Symptom Root Cause Solution

State lock Concurrent ops Wait or force-unlock

Resource exists Drift Import or delete

Provider auth Credentials Check AWS_PROFILE

Cycle error Dependencies Restructure

Debug Checklist

• Validate: terraform validate

• Check state: terraform state list

• Debug: TF_LOG=DEBUG terraform plan

• Verify credentials

Recovery Procedures

Corrupted State

• Restore from S3 versioning

• Or import: terraform import for each resource

Resources

• Terraform Docs

• Ansible Docs