AI for Infrastructure as Code
Generate, review, refactor, and secure Ansible, Helm, and cloud infrastructure code with AI.
146 copy-paste prompts · 87 in-depth guides Jump to prompts Jump to guides
Prompts
- Advanced
AWS CDK Escape Hatches & L1 Override Prompt
Use CDK escape hatches (addPropertyOverride, addOverride, addDeletionOverride, and L2-to-L1 access) to set properties the L2 construct does not expose, without forking constructs or dropping to raw CloudFormation.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
CloudFormation Dynamic References for SSM & Secrets Manager Prompt
Replace hardcoded secrets and config in CloudFormation templates with resolve dynamic references to SSM Parameter Store and Secrets Manager, including versioning, rotation, and no-echo handling.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
CloudFormation Macros & Template Transform Authoring Prompt
Design and safely operate CloudFormation macros (Lambda-backed template transforms) to DRY up templates, inject standards, and expand shorthand — with idempotency, error handling, and change-set safety.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Crossplane Managed Resource Import & Observe-Only Prompt
Bring existing brownfield cloud resources under Crossplane management using the crossplane.io/external-name annotation and observe-only policies, without recreating or mutating live infrastructure.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Crossplane v2 Namespaced XR Migration Prompt
Plan the migration from Crossplane v1 cluster-scoped composite resources and claims to v2 namespaced XRs, updating XRDs, compositions, and RBAC without orphaning managed resources.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
IaC Provider & SDK Major Version Upgrade Plan Prompt
Plan a safe major-version upgrade of an IaC provider or SDK (Pulumi provider, CDK v2/aws-cdk-lib, CloudFormation resource types, OpenTofu provider) with breaking-change triage and a no-replace rollout.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
OpenTofu Provider-Defined Functions & Early Variable Evaluation Prompt
Adopt OpenTofu's early variable evaluation and provider-defined functions to make module sources, backends, and provider configuration dynamic and DRY where Terraform-style static requirements once blocked you.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Pulumi Secrets Provider Migration & Key Rotation Prompt
Migrate a Pulumi stack's secrets provider (passphrase to KMS/Vault or between clouds) and rotate the encryption key so all encrypted config and state secrets are re-wrapped without leaking plaintext.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Pulumi Transformations & Aliases Refactor Prompt
Refactor Pulumi resource names, parents, and structure at scale using aliases and stack transformations so URNs change on paper but no live resource is destroyed or replaced.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Crossplane Composition Revision Rollout & Pinning Prompt
Roll out changes to a Crossplane Composition safely across many live claims — using CompositionRevisions, revision pinning, and automatic-vs-manual update policies so a bad composition change cannot ripple into every managed resource at once.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
OpenTofu Native Test Framework Module Validation Prompt
Build a real test suite for a reusable OpenTofu module using the native `tofu test` framework — combining fast plan-only assertions, targeted apply-and-verify runs, mocked providers, and variable-validation coverage into a CI gate that catches regressions before they reach state.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Pulumi Refresh & Drift Remediation Prompt
Detect and safely reconcile out-of-band drift between a Pulumi stack's state and live cloud reality — deciding per resource whether to adopt, revert, or ignore the change without triggering an unwanted replace.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
AWS CDK Pipelines Self-Mutating CI/CD Prompt
Design a self-mutating AWS CDK Pipelines deployment — a pipeline that updates its own definition, deploys application stages across accounts with approvals, and runs infrastructure tests as gates, without hand-managed CodePipeline wiring.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
CloudFormation Change Set Review Prompt
Review a CloudFormation change set before you execute it — classifying every action as add, modify, or replace, flagging the replacements that destroy data, and turning a raw describe-change-set JSON into a go/no-go deployment decision.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Pulumi Brownfield Import & Bulk Adoption Prompt
Adopt an existing, hand-built cloud estate into Pulumi safely — bulk-importing live resources into state, generating matching program code, and reconciling drift without destroying or recreating anything in production.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Click-Ops to IaC Conversion Prompt
Reverse-engineer manually-created (click-ops) cloud resources into clean infrastructure-as-code and import them into state without recreating or disrupting live resources, across any IaC tool.
- Claude
- ChatGPT
Open prompt - Intermediate
IaC Code Review Checklist Generator Prompt
Generate a practical, tool-agnostic pull-request review checklist for infrastructure-as-code that covers correctness, security, blast radius, idempotency, and operability — so human reviewers catch what scanners miss.
- Claude
- ChatGPT
Open prompt - Advanced
IaC Compliance Control Mapping & Evidence Prompt
Map a compliance framework's controls to enforceable infrastructure-as-code guardrails and generate the audit evidence trail — so 'we're compliant' is provable from code and CI, not asserted in a spreadsheet, across any IaC tool.
- Claude
- ChatGPT
Open prompt - Advanced
IaC Disaster Recovery & Multi-Region Design Prompt
Design infrastructure-as-code so a region or environment can be stood up, failed over, or rebuilt from code — parameterized region/account inputs, replicated state, and a tested rebuild path — across any IaC tool.
- Claude
- ChatGPT
Open prompt - Intermediate
Greenfield IaC Repo Bootstrap Prompt
Scaffold a new infrastructure-as-code repository from scratch — directory layout, environment and state conventions, CI skeleton, and contribution guardrails — so a platform team starts on a paved road instead of accreting chaos, across any IaC tool.
- Claude
- ChatGPT
Open prompt - Intermediate
IaC Idempotency & Convergence Review Prompt
Review infrastructure-as-code for re-apply stability — find resources that show a diff on every run, non-deterministic inputs, and ordering hazards so a no-op apply is truly a no-op, across Terraform, Ansible, Helm, or CloudFormation.
- Claude
- ChatGPT
Open prompt - Advanced
Large IaC Codebase Refactor Plan Prompt
Plan a safe, incremental refactor of a large or tangled infrastructure-as-code codebase — decompose monoliths, untangle dependencies, and sequence the work so live infrastructure is never recreated mid-flight, across any IaC tool.
- Claude
- ChatGPT
Open prompt - Intermediate
IaC Module Documentation Generator Prompt
Generate clear, consumable documentation for an infrastructure-as-code module, role, or chart — inputs, outputs, examples, requirements, and an upgrade note — so consumers adopt the paved road without reading the source, across any IaC tool.
- Claude
- ChatGPT
Open prompt - Advanced
Policy-as-Code Rule Authoring from a Governance Requirement Prompt
Translate a written governance or compliance requirement into enforceable policy-as-code rules — choosing the right engine (OPA/Rego, Sentinel, Checkov, cfn-guard, Kyverno) and writing the rule with clear messages, tests, and a graduated rollout.
- Claude
- ChatGPT
Open prompt - Advanced
IaC State Backend & Topology Strategy Prompt
Design where IaC state lives and how it's split — remote backends, locking, and state/stack boundaries — so blast radius is contained, plans stay fast, and teams can work without stepping on each other, across any stateful IaC tool.
- Claude
- ChatGPT
Open prompt - Intermediate
Bicep existing Resources & Scope Targeting Review Prompt
Audit a Bicep deployment's use of the existing keyword and deployment scopes so references resolve to real resources and modules target the correct subscription, resource group, or management group.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
cdk8s Construct Library Design Prompt
Design a reusable cdk8s construct library that turns raw Kubernetes manifests into typed, composable building blocks with sane defaults and validation.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Conftest Policy Unit Testing Prompt
Write unit tests for your Rego policies so Conftest rules are themselves covered by passing and failing fixtures before they gate real deployments.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Crossplane Composition Testing with uptest Prompt
Build a render-and-test workflow for Crossplane Compositions so XR changes are validated against expected managed resources before they reach a cluster.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
IaC Ephemeral Preview Environments Prompt
Design per-pull-request ephemeral infrastructure environments that spin up on open, expose a preview, and tear down automatically so they never leak cost or orphaned resources.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
IaC Module Registry & Versioning Strategy Prompt
Design a versioning, publishing, and consumption strategy for a private IaC module registry so consumers pin safely and breaking changes never ship silently.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
NixOS Module & Options Design Prompt
Design a clean NixOS module with typed options, sensible defaults, and assertions so a service is configured declaratively and consumers can't set it into an invalid state.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Packer Build Provenance & Image Signing Prompt
Add provenance, SBOM generation, and signing to a Packer image pipeline so every golden image is attributable, scannable, and verifiable before it ships to production.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
SaltStack Reactor & Orchestrate Event-Driven Automation Prompt
Design a Salt reactor and orchestrate workflow that responds to events on the bus safely, with loop guards and idempotent orchestration instead of runaway reactions.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Ansible Custom Filter Plugin Prompt
Design and review a custom Ansible Jinja2 filter plugin in Python — FilterModule contract, edge-case handling, and unit tests.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Custom Lookup Plugin Prompt
Build a custom Ansible lookup plugin that fetches data from an external source at templating time, with caching and error handling.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible NX-OS and IOS Network Modules Prompt
Write idempotent Ansible playbooks for Cisco NX-OS and IOS devices using resource modules, with safe config replace and rollback.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Pull Mode GitOps Bootstrap Prompt
Design an ansible-pull workflow where nodes self-converge from a Git repo on a schedule, including bootstrap, locking, and reporting.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Runner Python Embedding Prompt
Embed Ansible into a Python service using the ansible-runner library — private data dir, event callbacks, artifacts, and status handling.
- Claude
- ChatGPT
Open prompt - Advanced
AWS CDK Aspects Compliance Enforcement Prompt
Write AWS CDK Aspects that visit the construct tree to enforce tagging, encryption, and security rules across all stacks at synth time.
- Claude
- ChatGPT
Open prompt - Advanced
CloudFormation Hooks Pre-Provision Guardrails Prompt
Author a CloudFormation Hook that validates resource configurations pre-provision and blocks non-compliant stacks across an account.
- Claude
- ChatGPT
Open prompt - Advanced
Packer Custom Provisioner Plugin Prompt
Scaffold a custom Packer provisioner plugin in Go using the plugin SDK, with config validation, prepare/provision hooks, and tests.
- Claude
- ChatGPT
Open prompt - Advanced
Pulumi Dynamic Providers Custom Resource Prompt
Implement a Pulumi dynamic provider to manage a resource with no native provider, with correct create/update/delete and diff logic.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Galaxy Requirements Pinning Prompt
Design a requirements.yml for roles and collections that pins versions reproducibly, handles transitive collection dependencies, and supports air-gapped or private Galaxy mirrors.
- Claude
- ChatGPT
Open prompt - Beginner
Ansible Host Pattern and Limit Targeting Prompt
Construct precise Ansible host patterns and --limit expressions so a play hits exactly the intended hosts, with safety guards that prevent an empty or over-broad target from running fleet-wide.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible-lint Custom Ruleset and Profile Configuration Prompt
Author an .ansible-lint configuration that selects the right enforcement profile, tunes skip/warn lists, and adds custom rules so CI fails on real problems without drowning teams in noise.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Module Argument Spec Validation Prompt
Design and review the argument_spec for a custom Ansible module so inputs are validated, mutually exclusive options are enforced, no_log secrets are protected, and check mode behaves correctly.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible module_defaults Group Configuration Prompt
Use module_defaults and action groups to centralize repeated module parameters (cloud auth, connection settings, common flags) so playbooks stay DRY without hiding security-relevant arguments.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Strategy Plugin and Mitogen Tuning Prompt
Choose and tune the right Ansible execution strategy (linear, free, host_pinned, Mitogen) and forks/pipelining settings to speed up large plays without breaking ordering guarantees.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Vault Rekey and Rotation Workflow Prompt
Design a safe ansible-vault rekey workflow that rotates the vault password and the underlying secrets across multiple environments without breaking running playbooks or CI.
- Claude
- ChatGPT
Open prompt - Advanced
CloudFormation Guard Policy Rule Authoring Prompt
Write AWS CloudFormation Guard (cfn-guard) rules in the Guard DSL that enforce security and compliance guardrails on CloudFormation templates, with unit tests and a CI gate that fails on violations.
- Claude
- ChatGPT
Open prompt - Advanced
Terratest Go Infrastructure Test Suite Prompt
Design a Terratest suite in Go that provisions real infrastructure, asserts on outputs and live behavior, and tears everything down cleanly even when assertions fail.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible async & poll Long-Running Task Review Prompt
Review Ansible async/poll usage for long-running tasks so jobs survive SSH timeouts, get polled or fire-and-forget correctly, and clean up async job files.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Callback Plugin & Output Logging Review Prompt
Design and review Ansible callback plugins and logging configuration for readable output, audit trails, and CI/JSON integration without leaking secrets.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible changed_when & failed_when Tuning Prompt
Review and tune changed_when/failed_when on command, shell, and module tasks so Ansible reports accurate change and failure status and stays idempotent.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Connection Plugin Selection Review Prompt
Review Ansible connection plugin choices (ssh, winrm, psrp, docker, local, network_cli) and their settings for correct, secure, and performant transport per host group.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible serial Rolling Update Strategy Prompt
Design and review Ansible serial/batch rolling updates with health gating and max_fail_percentage so deployments roll safely across a fleet without taking everything down.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Tags & Selective Execution Review Prompt
Review and rationalize Ansible tag strategy so --tags/--skip-tags runs hit exactly the intended tasks without skipping setup or dependencies.
- Claude
- ChatGPT
Open prompt - Advanced
CloudFormation Nested Stacks Refactor Prompt
Refactor a large monolithic CloudFormation template into well-bounded nested stacks with clean parameters, exports, and update safety.
- Claude
- ChatGPT
Open prompt - Beginner
IaC Naming & Tagging Convention Audit Prompt
Audit infrastructure-as-code for consistent resource naming and tagging so cost allocation, ownership, environment, and governance tags are complete and standardized.
- Claude
- ChatGPT
Open prompt - Beginner
IaC Pre-Commit Hooks & Guardrails Prompt
Design a pre-commit guardrail suite for IaC repos that lints, formats, scans for secrets and misconfigurations, and blocks bad infrastructure code before it lands.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Blocks, Rescue & Always Error Handling Prompt
Design resilient Ansible plays that group tasks into blocks with rescue and always sections so partial failures roll back cleanly instead of leaving hosts half-configured.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Delegation & run_once Orchestration Prompt
Coordinate cluster-aware rollouts in Ansible using delegate_to, run_once, and serial so leader-only actions, load-balancer drains, and rolling restarts happen in the right order on the right host.
- Claude
- Copilot
Open prompt - Intermediate
cloud-init Cross-Distro User-Data Design Prompt
Author portable cloud-init user-data that bootstraps instances consistently across Ubuntu, Debian, Rocky, and Amazon Linux despite differing package managers, users, and module support.
- Claude
- ChatGPT
Open prompt - Intermediate
Crossplane EnvironmentConfig & Patch-and-Transform Prompt
Use Crossplane EnvironmentConfigs and patch-and-transform pipelines to inject shared environment data (VPC IDs, region, defaults) into composed resources without hardcoding values per claim.
- Claude
- Cursor
Open prompt - Advanced
Crossplane ProviderConfig Multi-Tenancy Prompt
Design Crossplane ProviderConfig and credential-injection patterns so multiple teams or accounts share one control plane without leaking cloud credentials across tenant boundaries.
- Claude
- Gemini
Open prompt - Intermediate
Test Kitchen for Ansible Role Verification Prompt
Stand up a kitchen-ansible test harness that converges a role across multiple platforms and verifies the result with InSpec, catching regressions before they reach inventory.
- Claude
- Cursor
Open prompt - Advanced
Pulumi CrossGuard Policy Pack Authoring Prompt
Build a Pulumi CrossGuard policy pack that enforces guardrails at preview and update time, blocking non-compliant resources with clear remediation messages across every stack.
- Claude
- ChatGPT
Open prompt - Advanced
Pulumi Unit Testing with Resource Mocks Prompt
Write fast, offline unit tests for Pulumi programs using the runtime mocks API so you can assert resource properties and policy without ever hitting a cloud provider.
- Claude
- Copilot
Open prompt - Advanced
Sentinel Policy-as-Code Authoring Prompt
Write and test HashiCorp Sentinel policies that gate infrastructure runs by enforcement level, using imports and mocks to validate plans before they ever apply.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Network Automation Prompt
Automate network device configuration with Ansible — vendor-neutral facts, config templating, intent-based source of truth, dry-run diffs, and safe rollback — across switches, routers, and firewalls without bricking the fabric.
- Claude
- ChatGPT
Open prompt - Advanced
CDK for Terraform (CDKTF) Program Design Prompt
Architect a CDK for Terraform codebase in TypeScript or Python — stacks, constructs, provider/module bindings, state, and synth-to-Terraform CI — so you get real programming languages without losing Terraform's plan/apply guarantees.
- Claude
- ChatGPT
Open prompt - Beginner
Devbox Reproducible Dev Environments Prompt
Stand up reproducible, isolated developer environments with Devbox (Nix under the hood) — pinned toolchains, per-project shells, init scripts, and CI parity — without forcing the team to learn Nix.
- Claude
- ChatGPT
Open prompt - Intermediate
Goss and InSpec Image Compliance Testing Prompt
Write automated server-spec tests with Goss (or InSpec) to validate golden images and provisioned hosts — packages, services, ports, files, users, and CIS controls — and wire them into the image build pipeline as a gate.
- Claude
- ChatGPT
Open prompt - Advanced
Jsonnet and Tanka Kubernetes Config Prompt
Generate and structure Kubernetes manifests with Jsonnet and Grafana Tanka — libraries, abstractions, environments, and diff-gated apply — for teams that have outgrown YAML templating but want stronger composition than Helm or Kustomize.
- Claude
- ChatGPT
Open prompt - Intermediate
Kustomize Overlays and Components Prompt
Design a maintainable Kustomize structure — base, environment overlays, reusable components, patches, and generators — that scales across clusters without YAML duplication or template sprawl.
- Claude
- ChatGPT
Open prompt - Advanced
OpenTofu Migration from Terraform Prompt
Plan and execute a safe migration from Terraform to OpenTofu — version pinning, state compatibility, provider/registry differences, CI swap, and rollback — without touching live infrastructure.
- Claude
- ChatGPT
Open prompt - Advanced
OpenTofu State Encryption Prompt
Enable OpenTofu's native client-side state and plan encryption — key providers (KMS/PBKDF2), key rollover, fallback for reading old state, and CI wiring — so sensitive values never sit in plaintext in your backend.
- Claude
- ChatGPT
Open prompt - Advanced
Pulumi ESC Environments and Secrets Prompt
Centralize configuration and secrets with Pulumi ESC — composable environments, dynamic cloud credentials via OIDC, and consumption from Pulumi, Terraform, and plain shells — without scattering secrets across stacks.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Galaxy Collection Publishing & Versioning Prompt
Package, version, and publish an Ansible collection to Galaxy or a private Automation Hub — with semantic versioning, changelogs, dependency pins, and a CI release pipeline that signs and verifies artifacts.
- Claude
- ChatGPT
Open prompt - Intermediate
Bicep Module Registry & Private ACR Publishing Prompt
Stand up a private Bicep module registry in Azure Container Registry — publishing versioned, OCI-packaged modules with aliases, restore, and a CI pipeline so teams consume pinned shared infrastructure modules.
- Claude
- ChatGPT
Open prompt - Intermediate
Checkov Custom Policy Authoring Prompt
Write and test custom Checkov policies (YAML graph checks and Python checks) to enforce org-specific IaC guardrails across Terraform, CloudFormation, and Kubernetes — with suppressions, severities, and a CI gate that fails on real risk only.
- Claude
- ChatGPT
Open prompt - Advanced
CloudFormation Custom Resources & Lambda-Backed Resources Prompt
Build robust Lambda-backed CloudFormation custom resources that fill provider gaps — with correct CREATE/UPDATE/DELETE semantics, physical IDs, and response signaling that never strands a stack in UPDATE_ROLLBACK_FAILED.
- Claude
- ChatGPT
Open prompt - Advanced
Crossplane Composition Functions Prompt
Author Crossplane composition functions (pipeline mode with KCL, Go templating, or Python) to generate composed resources dynamically — replacing brittle patch-and-transform with testable, conditional logic.
- Claude
- ChatGPT
Open prompt - Advanced
Helm Chart Hooks & Lifecycle Management Prompt
Design correct, idempotent Helm hooks (pre/post install, upgrade, delete) for migrations, backups, and smoke tests — with weights, deletion policies, and failure handling that won't wedge a release.
- Claude
- ChatGPT
Open prompt - Advanced
Packer HCL2 Multi-Cloud Build Matrix Prompt
Refactor Packer into HCL2 with shared build blocks and a source matrix that bakes equivalent images across AWS, Azure, and GCP in parallel — one provisioning path, many targets, with consistent tagging and manifests.
- Claude
- ChatGPT
Open prompt - Intermediate
Pulumi Stack References & Cross-Stack Outputs Prompt
Wire Pulumi stacks together safely with StackReferences and typed outputs — drawing clean boundaries between network, platform, and app layers without circular dependencies or leaked secrets.
- Claude
- ChatGPT
Open prompt - Intermediate
AWS CDK Unit & Snapshot Testing Prompt
Build a layered test suite for AWS CDK apps — fine-grained assertions, snapshot tests, and aws-cdk-assertions matchers — so synthesized CloudFormation is verified before it ever reaches an account.
- Claude
- ChatGPT
Open prompt - Intermediate
Bicep Deployment Stacks & What-If Prompt
Adopt Azure Deployment Stacks with Bicep for lifecycle-managed, drift-protected resource groups, and wire what-if previews into CI so every change is reviewed before it lands.
- Claude
- ChatGPT
Open prompt - Advanced
Chef Cookbook to Ansible Migration Prompt
Plan and execute a phased migration off Chef cookbooks to Ansible roles — mapping recipes, attributes, data bags, and search to Ansible equivalents while keeping the fleet converged throughout.
- Claude
- ChatGPT
Open prompt - Advanced
CloudFormation to AWS CDK Migration Prompt
Migrate hand-written CloudFormation templates to AWS CDK incrementally — via cdk migrate, CfnInclude, and stack import — without recreating live resources or losing drift history.
- Claude
- ChatGPT
Open prompt - Intermediate
Helm Values Schema & Validation Prompt
Author a strict values.schema.json and template-time guardrails for a Helm chart so bad overrides fail at lint/install time with clear messages instead of producing broken Kubernetes objects.
- Claude
- ChatGPT
Open prompt - Intermediate
IaC Blast-Radius & Dependency Graph Review Prompt
Analyze an infrastructure plan or change set for blast radius — what gets replaced, what depends on it, and what could cascade — before approving the apply, across any IaC tool.
- Claude
- ChatGPT
Open prompt - Advanced
OPA Gatekeeper Admission Policy Prompt
Author OPA Gatekeeper ConstraintTemplates and Constraints that enforce cluster policy at admission — with dryrun rollout, audit, and mutation — without breaking existing workloads.
- Claude
- ChatGPT
Open prompt - Advanced
Pulumi Automation API Self-Service Prompt
Build an embedded self-service platform with the Pulumi Automation API — programmatic stack up/destroy, parameterized environments, and guardrails — instead of shelling out to the CLI in CI.
- Claude
- ChatGPT
Open prompt - Advanced
SaltStack States & Pillar Design Prompt
Design idempotent Salt state trees and a secure pillar/grains data layer — top files, environments, targeting, and reactor/orchestration — without the spaghetti most Salt deployments rot into.
- Claude
- ChatGPT
Open prompt - Advanced
AWS CDK Construct Design Prompt
Design layered AWS CDK constructs (L2/L3) with sane defaults, escape hatches, and unit + snapshot tests — so app teams consume a paved-road construct instead of hand-rolling CloudFormation.
- Claude
- ChatGPT
Open prompt - Intermediate
Azure Bicep Module Authoring Prompt
Design clean, reusable Azure Bicep modules with typed parameters, sane defaults, output contracts, and a registry publishing flow — instead of one sprawling main.bicep per environment.
- Claude
- ChatGPT
Open prompt - Advanced
Crossplane Providers & XRD API Design Prompt
Design Crossplane CompositeResourceDefinitions (XRDs) and provider configs that expose a clean, opinionated self-service platform API to app teams — abstracting cloud resources behind claims.
- Claude
- ChatGPT
Open prompt - Intermediate
Helm Chart Testing Strategy Prompt
Build a layered test suite for Helm charts — lint, schema-validated values, golden-file template tests, and helm test hooks against a kind cluster — so a values change can't silently break rendered manifests.
- Claude
- ChatGPT
Open prompt - Intermediate
IaC Cost Estimation CI Gate Prompt
Wire Infracost (or equivalent) into pull-request CI so infrastructure changes show a cost diff and breach a budget gate before merge — turning cloud spend into a reviewable, policy-enforced number.
- Claude
- ChatGPT
Open prompt - Advanced
IaC State Backup, Recovery & Import Prompt
Design backup, locking, recovery, and resource-import runbooks for IaC state (Terraform/OpenTofu/Pulumi) so a corrupted, lost, or out-of-band-modified state doesn't become an outage.
- Claude
- ChatGPT
Open prompt - Advanced
Ignition & Butane Immutable OS Provisioning Prompt
Provision Flatcar/Fedora CoreOS nodes with Butane configs compiled to Ignition — declarative, first-boot-only host setup for immutable, auto-scaling infrastructure where cloud-init is the wrong fit.
- Claude
- ChatGPT
Open prompt - Intermediate
Kyverno Policy Authoring Prompt
Write, test, and roll out Kyverno policies (validate, mutate, generate) for Kubernetes admission control — enforcing org standards on infra manifests without writing Rego.
- Claude
- ChatGPT
Open prompt - Advanced
Nix Flakes Reproducible Infrastructure Prompt
Use Nix flakes to pin reproducible build/dev environments and declarative server config (NixOS / nixos-rebuild / deploy-rs) so 'works on my machine' and drift both disappear.
- Claude
- ChatGPT
Open prompt - Intermediate
cloud-init Debugging Prompt
Diagnose why a cloud-init user-data run failed or produced the wrong result — parse logs, replay modules, and fix ordering, templating, and idempotency issues on first boot.
- Claude
- ChatGPT
Open prompt - Advanced
CloudFormation StackSets Multi-Account Prompt
Design CloudFormation StackSets to roll out baseline infrastructure and guardrails across many AWS accounts and regions with safe deployment waves and automatic Organizations enrollment.
- Claude
- ChatGPT
Open prompt - Advanced
Crossplane Composition Design Prompt
Design Crossplane XRDs, Compositions, and Composition Functions that expose a clean, opinionated platform API while hiding cloud-provider sprawl from application teams.
- Claude
- ChatGPT
Open prompt - Advanced
GitOps for Infrastructure Prompt
Design a GitOps workflow that reconciles cloud and platform infrastructure (not just app manifests) from Git using Flux/Argo plus an IaC operator, with safe drift handling and promotion.
- Claude
- ChatGPT
Open prompt - Intermediate
Helm Umbrella & Library Charts Prompt
Design Helm umbrella charts and shared library charts that compose subcharts, eliminate boilerplate via named templates, and keep values overrides sane across many services.
- Claude
- ChatGPT
Open prompt - Advanced
Cross-Tool IaC Migration Prompt
Plan and execute a migration between IaC tools (e.g. CloudFormation→Terraform, Terraform→Pulumi, or into Crossplane) by importing existing resources without destroying live infrastructure.
- Claude
- ChatGPT
Open prompt - Intermediate
Reusable IaC Module Design Prompt
Design reusable, composable infrastructure modules with clean interfaces, sane defaults, and versioning so platform teams ship paved roads instead of copy-pasted IaC.
- Claude
- ChatGPT
Open prompt - Intermediate
IaC Testing Strategy Prompt
Build a layered automated testing strategy for infrastructure code — static analysis, unit/contract tests, ephemeral integration tests, and post-apply verification — that catches regressions before production.
- Claude
- ChatGPT
Open prompt - Intermediate
Packer + Ansible Provisioner Pipeline Prompt
Combine Packer and Ansible to build immutable golden images where Ansible roles do the in-image configuration, with shared roles between image-build and runtime, fast caching, and validation.
- Claude
- ChatGPT
Open prompt - Advanced
Pulumi Typed Component Resources Prompt
Design reusable Pulumi ComponentResources in a real programming language — typed inputs/outputs, secret handling, stack references, and tests — to build a typed platform SDK for your teams.
- Claude
- ChatGPT
Open prompt - Intermediate
cloud-init Bootstrap Configuration Prompt
Write safe, idempotent cloud-init user-data that bootstraps instances on first boot — users, packages, mounts, network, and a config-management handoff — without secrets leaking into metadata.
- Claude
- ChatGPT
Open prompt - Intermediate
CloudFormation Template Review Prompt
Review a CloudFormation (or CDK-synthesized) template for correctness, drift resistance, and safe updates — intrinsic functions, change-set surprises, deletion policies, and the resources that recreate when you least expect it.
- Claude
- ChatGPT
Open prompt - Intermediate
Helm Chart Generator & Refactor Prompt
Generate a production-grade Helm chart from scratch or refactor a messy one — sane values schema, templating helpers, sub-charts, hooks, and upgrade safety — without hardcoding environment-specific cruft.
- Claude
- ChatGPT
Open prompt - Advanced
IaC Drift Detection & Reconciliation Prompt
Build a cross-tool strategy to detect and reconcile drift between declared IaC and live infrastructure — scheduled detection, classification of drift causes, and a safe path back to convergence without nuking out-of-band fixes.
- Claude
- ChatGPT
Open prompt - Intermediate
IaC Secrets Management Strategy Prompt
Design how secrets flow through IaC across tools — keep them out of code and state, inject at deploy/runtime via a secrets manager, and rotate without manual re-deploys.
- Claude
- ChatGPT
Open prompt - Intermediate
Multi-Environment IaC Promotion Pipeline Prompt
Design a dev → stage → prod promotion pipeline for infrastructure where the same code ships to every environment, differences live in config, and prod changes are reviewed, gated, and reversible.
- Claude
- ChatGPT
Open prompt - Advanced
Packer Golden Image Pipeline Prompt
Design a Packer build that produces hardened, reproducible golden machine images across clouds — provisioners, versioning, CVE scanning, and a bake-vs-boot decision framework.
- Claude
- ChatGPT
Open prompt - Advanced
Policy-as-Code with OPA & Conftest Prompt
Author Rego policies that gate IaC in CI — Conftest against Terraform plans, Kubernetes manifests, and Dockerfiles — with clear messages, exemptions, and a graduated enforce strategy that doesn't block every PR on day one.
- Claude
- ChatGPT
Open prompt - Advanced
Pulumi Program Design & Review Prompt
Architect or review a Pulumi program in a real programming language — stack/config layout, component resources, secret handling, and the failure modes that come from mixing imperative code with declarative infra.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Jinja2 Templates Advanced Patterns Prompt
Use advanced Jinja2 in Ansible — filters (default, map, selectattr), lookups, complex conditionals, custom filters.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Drift Detection with Check Mode Prompt
Detect configuration drift — periodic --check runs, --diff, integration with monitoring, alerts on drift.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible CI/CD Lint & Test Pipeline Prompt
Build Ansible CI/CD pipelines — lint, syntax check, Molecule tests, vault validation, deploy stages.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Custom Modules Development Prompt
Write custom Ansible modules in Python — module contract, AnsibleModule class, argument spec, idempotency, error handling.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Dynamic Inventory for Cloud Prompt
Configure dynamic inventory plugins — AWS (aws_ec2), GCP (gcp_compute), Azure (azure_rm), keyed_groups, filters, caching.
- Claude
- ChatGPT
Open prompt - Intermediate
AWX / Ansible Automation Platform Prompt
Configure AWX (Ansible Tower/AAP) — job templates, surveys, workflow templates, credentials, projects, scaling.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Facts & Caching Prompt
Tune Ansible fact gathering — gather_subset, custom facts, local facts, cache backends (jsonfile, Redis), staleness.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Performance Tuning Prompt
Speed up Ansible playbooks — forks, pipelining, async, smart gathering, fact caching, mitogen.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible External Secrets (HashiCorp Vault) Prompt
Integrate Ansible with HashiCorp Vault — secret lookup at runtime, AppRole auth, KV v2, dynamic secrets, caching.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible SSH Configuration Prompt
Configure SSH for Ansible — keys, jump hosts, control persist, agent forwarding, known_hosts, parallel connections.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Become / Privilege Escalation Prompt
Configure Ansible privilege escalation — become, become_user, become_method, restrict sudo, password handling.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Vault Secrets Management Prompt
Use Ansible Vault — encrypt secrets, vault IDs, multi-vault setups, integration with external secret managers.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Collections Design Prompt
Build and use Ansible Collections — FQCN, requirements.yml, ansible-galaxy collection install, custom collections.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Role Generator Prompt
Generate a complete, idempotent Ansible role with proper directory structure, defaults, handlers, molecule tests, and OS-family conditionals.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Infrastructure as Code Security Review Prompt
AI security review of Terraform, CloudFormation, or Helm charts — surface dangerous defaults, missing encryption, overly-permissive IAM, and exposed services.
- Claude
- ChatGPT
Open prompt - Advanced
Ansible Molecule Testing Prompt
Test Ansible roles with Molecule — scenarios, drivers (Docker/Podman/Vagrant), verifiers (Ansible/Testinfra), idempotence.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Roles Structure Best Practices Prompt
Design Ansible roles — defaults vs vars, meta dependencies, role parameters, tags, idempotency.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Loops & Control Prompt
Use Ansible loops correctly — loop vs with_items, complex loops, retries, loop_var, nested loops, performance.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Handlers & Notification Prompt
Use Ansible handlers correctly — notify, listen, force handlers, multi-handler chains, when handlers don't fire.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Idempotency Design Prompt
Make Ansible tasks idempotent — when to use changed_when / failed_when, check mode, validating shell tasks.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Variable Precedence Prompt
Debug Ansible variable scope — precedence rules, override behavior, hostvars, magic vars, set_fact lifetime.
- Claude
- ChatGPT
Open prompt - Intermediate
Ansible Inventory Design Prompt
Design Ansible inventories — static vs dynamic, group hierarchy, host_vars / group_vars, multi-environment patterns.
- Claude
- ChatGPT
Open prompt
Guides
- · 10 min read
Ansible vs Terraform: When to Use Each (and Together)
A practical, dimension-by-dimension comparison of Ansible and Terraform for DevOps engineers — provisioning vs configuration, state, idempotency, drift, and the both pattern.
Read guide - · 10 min read
Pulumi vs Terraform: Real Languages vs HCL for IaC
Pulumi vs Terraform compared: programming-language IaC versus declarative HCL, state and backends, testing, providers, secrets, learning curve, and when each wins.
Read guide - · 10 min read
ChatGPT vs Claude for Infrastructure-as-Code Reviews
Which AI reviews Terraform, Helm, Kubernetes, and Ansible better? A balanced ChatGPT vs Claude comparison on correctness, security, cost, and false positives.
Read guide - · 9 min read
Bicep Error: 'AuthorizationFailed — client does not have authorization to perform action over scope' — Cause, Fix, and Troubleshooting Guide
Fix Bicep 'AuthorizationFailed: the client ... does not have authorization to perform action ... over scope ...' by granting the right RBAC role and scope.
Read guide - · 7 min read
Bicep Error: 'BCP028: Identifier "storageAccount" is declared multiple times' — Cause, Fix, and Troubleshooting Guide
Fix Bicep 'Error BCP028: Identifier "storageAccount" is declared multiple times. Remove or rename the duplicates' by finding and renaming duplicate symbols.
Read guide - · 8 min read
Bicep Error: 'BCP037: The property "foo" is not allowed on objects of type' — Cause, Fix, and Troubleshooting Guide
Fix Bicep 'Error BCP037: The property "foo" is not allowed on objects of type ...' from misspelled properties, wrong nesting, or api-version drift.
Read guide - · 8 min read
Bicep Error: 'BCP057: The name "location" does not exist in the current context' — Cause, Fix, and Troubleshooting Guide
Fix Bicep 'Error BCP057: The name "location" does not exist in the current context' by declaring the missing param, var, or symbol or fixing scope.
Read guide - · 8 min read
AWS CDK Error: 'Cannot find asset at /path/cdk.out/asset.<hash>' — Cause, Fix, and Troubleshooting Guide
Fix the CDK error 'Cannot find asset at cdk.out/asset.<hash>' caused by stale cdk.out, missing synth, or lost asset staging in CI pipelines.
Read guide - · 8 min read
AWS CDK Error: 'This CDK CLI is not compatible with the CDK library used by your application' — Cause, Fix, and Troubleshooting Guide
Fix 'This CDK CLI is not compatible with the CDK library used by your application' by aligning aws-cdk CLI and aws-cdk-lib cloud assembly schema versions.
Read guide - · 9 min read
AWS CDK Error: 'Failed to build asset ...: docker exited with status 1' — Cause, Fix, and Troubleshooting Guide
Fix the CDK error 'Failed to build asset: docker exited with status 1' from DockerImageAsset and bundling — daemon down, Dockerfile bugs, or platform mismatch.
Read guide - · 7 min read
AWS CDK Error: 'No stack found matching 'MyStack'' — Cause, Fix, and Troubleshooting Guide
Fix the CDK error 'No stack found matching MyStack' caused by wrong stack IDs, missing context, or an app that never instantiates that stack.
Read guide - · 9 min read
AWS CDK Error: 'is not authorized to perform: cloudformation:CreateChangeSet' — Cause, Fix, and Troubleshooting Guide
Fix the CDK deploy error 'is not authorized to perform: cloudformation:CreateChangeSet' by fixing deploy-role trust, IAM policies, and bootstrap permissions.
Read guide - · 8 min read
CloudFormation Error: 'CREATE_FAILED ... already exists in stack' — Cause, Fix, and Troubleshooting Guide
Fix the CloudFormation error 'CREATE_FAILED ... already exists in stack' from fixed physical names, orphaned resources, and name collisions across stacks.
Read guide - · 9 min read
CloudFormation Error: 'Embedded stack was not successfully created' — Cause, Fix, and Troubleshooting Guide
Fix 'Embedded stack ... was not successfully created: The following resource(s) failed to create' in CloudFormation by drilling into nested stack events.
Read guide - · 9 min read
CloudFormation Error: 'Resource handler returned message: ... (HandlerErrorCode: InvalidRequest)' — Cause, Fix, and Troubleshooting Guide
Decode the CloudFormation error 'Resource handler returned message: ... (HandlerErrorCode: InvalidRequest)' using RequestToken and handler codes.
Read guide - · 8 min read
CloudFormation Error: 'Stack [MyStack] does not exist' — Cause, Fix, and Troubleshooting Guide
Fix 'ValidationError ... Stack [MyStack] does not exist' in CloudFormation: check the stack name, region, and account before describe, update, or delete.
Read guide - · 9 min read
Crossplane Error: 'cannot establish control of object: existing object is not controlled by this composite resource' — Cause, Fix, and Troubleshooting Guide
Fix Crossplane 'cannot establish control of object: existing object is not controlled by this composite resource' when two XRs or an adopted resource collide.
Read guide - · 9 min read
CUE Error: 'conflicting values "prod" and "dev"' — Cause, Fix, and Troubleshooting Guide
Fix CUE 'conflicting values "prod" and "dev"' unification errors — two files or constraints bind the same field to incompatible concrete values.
Read guide - · 8 min read
Kustomize Error: 'accumulating resources ... evalsymlink failure ... no such file or directory' — Cause, Fix, and Troubleshooting Guide
Fix Kustomize 'accumulating resources ... evalsymlink failure ... no such file or directory' from a bad resources path, remote base, or file outside root.
Read guide - · 8 min read
Kustomize Error: 'no matches for Id ...; failed to find unique target for patch' — Cause, Fix, and Troubleshooting Guide
Fix Kustomize 'no matches for Id .../...; failed to find unique target for patch' when a patch target selector points at a resource Kustomize cannot find.
Read guide - · 8 min read
OpenTofu Error: 'Backend initialization required, please run "tofu init"' — Cause, Fix, and Troubleshooting Guide
Fix OpenTofu 'Error: Backend initialization required, please run "tofu init"' from changed backend config, missing .terraform, or uninitialized CI runners.
Read guide - · 8 min read
Packer Error: 'Error: Failed to prepare build: "amazon-ebs.ubuntu"' — Cause, Fix, and Troubleshooting Guide
Fix Packer 'Failed to prepare build: amazon-ebs.ubuntu' — a missing plugin, unknown builder, or bad source/variable reference in your HCL2 template.
Read guide - · 9 min read
Packer Error: 'Timeout waiting for SSH.' — Cause, Fix, and Troubleshooting Guide
Fix Packer 'Timeout waiting for SSH.' — diagnose security groups, ssh_username, key pairs, communicator, and missing public IP on the build instance.
Read guide - · 9 min read
Pulumi Error: 'could not load plugin for aws provider' — Cause, Fix, and Troubleshooting Guide
Fix Pulumi 'error: could not load plugin for aws provider' caused by a corrupt, truncated, or wrong-arch provider binary that fails to start.
Read guide - · 8 min read
Pulumi Error: 'failed to decrypt configuration value' — Cause, Fix, and Troubleshooting Guide
Fix Pulumi 'error: failed to decrypt configuration value' from a wrong passphrase, secrets-provider mismatch, or config copied from another stack.
Read guide - · 8 min read
Pulumi Error: 'getting secrets manager: passphrase must be set with PULUMI_CONFIG_PASSPHRASE' — Cause, Fix, and Troubleshooting Guide
Fix Pulumi 'error: getting secrets manager: passphrase must be set with PULUMI_CONFIG_PASSPHRASE' when the passphrase secrets provider cannot initialize.
Read guide - · 9 min read
Pulumi Error: 'the current deployment has 1 resource(s) with pending operations' — Cause, Fix, and Troubleshooting Guide
Fix Pulumi 'error: the current deployment has 1 resource(s) with pending operations' after an interrupted update using refresh, cancel, or state repair.
Read guide - · 8 min read
Pulumi Error: 'error: Preview failed' — Cause, Fix, and Troubleshooting Guide
Fix Pulumi 'error: Preview failed' during pulumi preview. Diagnose program evaluation, config, and resource registration errors before any apply.
Read guide - · 9 min read
Pulumi Error: 'error: update failed' — Cause, Fix, and Troubleshooting Guide
Fix Pulumi 'error: update failed' after a partial pulumi up. Diagnose provider API errors, dependency failures, and recover stuck stacks.
Read guide - · 9 min read
AWS CDK Error Guide: 'Cannot reference across environments' — Fix Cross-Stack References
Fix AWS CDK cross-environment reference errors by colocating stacks in one env, setting explicit physical names, or passing plain values across accounts.
Read guide - · 8 min read
AWS CDK Error Guide: 'There is already a Construct with name' — Fix Duplicate Construct IDs
Fix AWS CDK 'There is already a Construct with name' by giving sibling constructs unique IDs and avoiding loop-generated ID collisions in your app.
Read guide - · 9 min read
CloudFormation Error Guide: 'Circular dependency between resources' — Break the Reference Cycle
Fix CloudFormation 'Circular dependency between resources' by breaking Ref and GetAtt cycles with standalone association resources and careful DependsOn.
Read guide - · 8 min read
CloudFormation Error Guide: 'No updates are to be performed' — Force a Real Stack Change
Fix CloudFormation 'No updates are to be performed' by understanding template-only diffing, using change sets, and forcing updates for external values.
Read guide - · 9 min read
Crossplane Error Guide: 'ProviderConfig not found' — Create the Missing ProviderConfig
Fix Crossplane 'ProviderConfig not found' by creating the ProviderConfig with the matching name and API group and wiring its credential Secret correctly.
Read guide - · 8 min read
OpenTofu Error Guide: 'Inconsistent dependency lock file' — Reconcile the Provider Lock
Fix OpenTofu 'Inconsistent dependency lock file' by running tofu init -upgrade, recording all platform hashes, and committing .terraform.lock.hcl to git.
Read guide - · 9 min read
OpenTofu Error Guide: 'Invalid for_each argument' — Fix Unknown Keys at Plan Time
Fix OpenTofu 'Invalid for_each argument' by giving for_each statically-known keys, staging applies with -target, or restructuring computed dependencies.
Read guide - · 9 min read
Pulumi Error Guide: 'inputs to import do not match' — Align Import Args With Live State
Fix Pulumi 'inputs to import do not match the existing resource' by aligning your code's inputs to the live cloud state or drafting them with --generate-code.
Read guide - · 9 min read
Pulumi Error Guide: 'no resource plugin found' — Install the Missing Provider Plugin
Fix Pulumi 'no resource plugin found' by installing the matching provider plugin version, aligning it with your SDK, and priming the plugin cache in CI.
Read guide - · 9 min read
CloudFormation Error Guide: 'is in ROLLBACK_COMPLETE state and can not be updated' — Recover a Stuck Stack
Fix CloudFormation's 'stack is in ROLLBACK_COMPLETE state and can not be updated' error: understand why a failed create leaves an unusable stack, delete or continue rollback, and redeploy without losing resources.
Read guide - · 9 min read
OpenTofu Error Guide: 'Provider produced inconsistent result after apply' — Diagnose a Buggy Provider
Fix OpenTofu's 'Provider produced inconsistent result after apply' error: understand why plan and post-apply state disagree, isolate provider bugs and eventual-consistency issues, and stabilize your applies.
Read guide - · 9 min read
Pulumi Error Guide: 'the stack is currently locked by 1 lock(s)' — Clear a Stuck Update
Fix Pulumi's 'the stack is currently locked' / another update in progress error: understand stack locks, prove the holder is dead, cancel a stale update, and stop CI runs from deadlocking your stack.
Read guide - · 9 min read
CloudFormation Error Guide: 'UPDATE_ROLLBACK_FAILED' — Recover a Stuck Stack
Fix CloudFormation UPDATE_ROLLBACK_FAILED: understand why a rollback stalled, skip or fix the blocking resource, continue-update-rollback, and get the stack back to a deployable state.
Read guide - · 9 min read
Crossplane Error Guide: 'cannot resolve references' — Fix Managed Resource Wiring
Fix Crossplane's 'cannot resolve references: referenced field was empty' error: understand selectors and refs, unblock a resource waiting on an unready dependency, and repair broken cross-resource wiring.
Read guide - · 9 min read
OpenTofu Error Guide: 'Error acquiring the state lock' — Release a Stuck Lock
Fix OpenTofu's 'Error acquiring the state lock' error: understand DynamoDB and backend locks, safely force-unlock an abandoned lock, and stop CI runs from deadlocking your state.
Read guide - · 10 min read
Bicep Scopes and the existing Keyword: The Two Things That Bite Everyone
Most Bicep deployment failures trace to scope confusion or a missing existing keyword that silently recreates a live resource. Here's how to get both right.
Read guide - · 10 min read
cdk8s Constructs: Building a Paved Road to Kubernetes
Replacing YAML with cdk8s code that looks like YAML misses the point. Typed constructs let platform teams ship secure defaults app teams can't easily get wrong.
Read guide - · 10 min read
Testing Your Policies: Why Your Conftest Rules Need Unit Tests Too
An untested Rego policy is a guess. Learn to write OPA unit tests with passing and failing fixtures so your Conftest gates block the right things, not everything.
Read guide - · 11 min read
Crossplane Composition Functions: When Patch-and-Transform Runs Out
Patch-and-transform compositions hit a wall fast. Composition Functions let you express real logic in code, with loops and conditionals, for your control plane.
Read guide - · 10 min read
Ephemeral Preview Environments That Don't Leak Cost
Per-PR preview environments are easy to spin up and hard to tear down. The fix is a reaper that runs independently of webhooks, plus tight credential isolation.
Read guide - · 10 min read
IaC Error Guide: 'InvalidTemplate' Bicep Deployment & BCP Compile Errors
Fix Bicep BCP compile errors and Deployment failed with InvalidTemplate: diagnose BCP033 type mismatch, missing parameters, circular dependencies, and bad ARM expressions.
Read guide - · 9 min read
IaC Error Guide: 'Has the environment been bootstrapped?' AWS CDK Deploy
Fix the AWS CDK 'Has the environment been bootstrapped?' error: create the CDKToolkit stack, align account/region, bootstrap versions, and IAM deploy roles.
Read guide - · 9 min read
IaC Error Guide: 'Failed running module' cloud-init Boot Provisioning Error
Fix cloud-init 'failed' / 'Failed running module' on boot: validate cloud-config YAML, debug runcmd exit codes, datasource issues, and failed package installs.
Read guide - · 9 min read
IaC Error Guide: 'FAIL - policy ... deny' Conftest Policy Violation
Fix Conftest and OPA policy violations: diagnose matched deny rules, wrong namespaces, unparsed input, broken Rego paths, and schema mismatches between policy and manifests.
Read guide - · 9 min read
IaC Error Guide: 'cannot resolve' Crossplane Composite Not Ready
Fix Crossplane composite resources stuck not Ready: diagnose unhealthy providers, bad ProviderConfig credentials, composition selectors, and patch errors.
Read guide - · 9 min read
IaC Error Guide: 'rendered manifests contain a resource that already exists' in Helm
Fix the Helm 'rendered manifests contain a resource that already exists' error: repair missing ownership annotations, adopt orphaned objects, and clear failed installs.
Read guide - · 10 min read
IaC Error Guide: 'Build amazon-ebs errored' Packer AMI Build Failure
Fix Packer Build 'amazon-ebs' errored: diagnose SSH timeouts, missing source AMIs, IAM permissions, failing provisioners, and VPC subnets with no public IP.
Read guide - · 9 min read
IaC Error Guide: 'resource already exists' Pulumi Update Failed
Fix Pulumi's 'update failed / resource already exists' error: reconcile drifted state, import out-of-band resources, clear partial updates, and remove protect.
Read guide - · 9 min read
IaC Error Guide: 'No matching sls found' SaltStack State Apply Failure
Fix SaltStack 'No matching sls found' and 'Minion did not return' on state.apply: repair file_roots, top.sls and environment mismatches, unaccepted keys, and gitfs sync.
Read guide - · 10 min read
Versioning a Shared IaC Module Registry Without Breaking Everyone
Once dozens of teams consume a module, a sneaky minor bump becomes a fleet-wide incident. Learn the semver contract and the CI guard that enforces it.
Read guide - · 10 min read
Writing NixOS Modules People Actually Want to Use
A NixOS module is an API. Typed options, eval-time assertions, and secure defaults turn raw config into something teams configure in ten lines and can't get wrong.
Read guide - · 11 min read
Securing the Machine Image Supply Chain with Packer, SBOMs, and Signing
Golden images are the most trusted and least scrutinized artifacts in a fleet. Add provenance, SBOMs, scanning, and signing to your Packer pipeline that fail closed.
Read guide - · 10 min read
SaltStack Reactors: Event-Driven Automation Without the Meltdown
Salt's event bus can turn one minion event into a fleet-wide reaction loop. Learn to write reactors with tight tag matching, loop guards, and bounded blast radius.
Read guide - · 10 min read
Reviewing CloudFormation Templates for Drift With AI
CloudFormation drift creeps in when someone clicks in the console. Here's how I use AI to read drift reports, explain them, and propose safe reconciliation.
Read guide - · 11 min read
Using AI to Generate and Review Helm Charts
Helm templating is fiddly and easy to get subtly wrong. Here's how I use AI to scaffold charts and review values, with helm template and lint as the safety net.
Read guide - · 11 min read
Claude vs Cursor for Infrastructure Engineers: Which Should You Use?
Claude is a model; Cursor is an AI IDE that can run Claude. Here's how a Sr. Systems Engineer actually uses each for Terraform, Helm, and K8s work.
Read guide - · 9 min read
Advanced Cloud-init Recipes for Production Server Bootstrapping
Past the hello-world user-data, cloud-init gets powerful: write_files, multi-part configs, jinja templating, boot stages, and debugging that doesn't waste hours.
Read guide - · 8 min read
CDK8s: Generating Kubernetes Manifests With Real Code
YAML sprawl and Helm's templating soup both fail at scale. CDK8s lets you define Kubernetes manifests in TypeScript or Python with types, loops, and abstraction.
Read guide - · 8 min read
Crossplane Providers: Managing Multi-Cloud Resources From Kubernetes
Compositions get the spotlight, but providers are the engine. Here's how Crossplane providers reconcile real cloud resources and how to run them in production.
Read guide - · 9 min read
Immutable Infrastructure Patterns: Stop Patching, Start Replacing
Mutable servers drift, accumulate cruft, and fail unpredictably. Immutable infrastructure trades in-place changes for replacement — here's how to actually adopt it.
Read guide - · 9 min read
NixOS for Servers: Truly Reproducible Infrastructure
Most IaC describes desired state and hopes the package manager cooperates. NixOS makes the entire OS a single declarative artifact you can roll back instantly.
Read guide - · 8 min read
Pulumi Automation API: Infrastructure as a Real Program
The CLI is fine for humans. When you need to provision infra from your own app or platform, the Pulumi Automation API turns deployments into function calls.
Read guide - · 9 min read
SaltStack States: Event-Driven Configuration Management at Scale
Salt's reputation is speed, but its real edge is the event bus and reactor. Here's how to write maintainable states and automate responses across thousands of nodes.
Read guide - · 9 min read
AWS CDK Patterns That Keep Infrastructure Code Maintainable
The AWS CDK gives you real code and real abstractions — and real ways to make a mess. Here are the constructs, stack, and testing patterns that scale.
Read guide - · 8 min read
Azure Bicep: Cleaner Infrastructure Code Than ARM Templates Ever Were
Bicep is Microsoft's domain-specific language that compiles to ARM JSON — with modules, type safety, and readable syntax. Here's how to use it well on Azure.
Read guide - · 8 min read
Cloud-init Recipes for Bootstrapping Servers the Right Way
Cloud-init runs on first boot across every major cloud. Get it right and your instances are configured before you ever SSH in. Here are the patterns that hold up.
Read guide - · 9 min read
Crossplane Compositions: Building Your Own Internal Cloud API
Crossplane turns Kubernetes into a control plane for any cloud. Compositions let you offer self-service infra to devs. Here's how the pieces fit together.
Read guide - · 8 min read
Kyverno: Policy-as-Code for Kubernetes Without Learning Rego
Kyverno writes Kubernetes admission policies in plain YAML — no new query language. Here's how to validate, mutate, and generate resources to keep clusters sane.
Read guide - · 9 min read
Pulumi: Infrastructure as Real Code in Python, Go, and TypeScript
Pulumi lets you provision cloud infra in a language you already know — with loops, functions, and tests. Here's how it differs from HCL and where it shines.
Read guide - · 8 min read
Building Golden Machine Images with Packer (and AI)
Immutable infrastructure starts with a solid golden image. Here's how to build reproducible machine images with Packer, and where AI accelerates the work.
Read guide - · 8 min read
Detecting and Fixing Infrastructure Config Drift
Config drift is the silent killer of IaC. Here's how to detect when reality diverges from code, why it happens, and how to close the gap for good.
Read guide - · 9 min read
GitOps for Infrastructure: How Git Becomes Your Control Plane
GitOps turns your repo into the single source of truth and a controller into the enforcer. Here's how it works for infrastructure, and where AI helps.
Read guide - · 9 min read
IaC Testing Strategies That Actually Catch Bugs
A layered approach to testing infrastructure as code — from static checks to integration tests — and where AI speeds up writing the test suite.
Read guide - · 8 min read
Managing Secrets in Infrastructure as Code Without Leaking Them
Secrets in IaC are where good intentions go to die in git history. Here's a practical approach to secret management across tools — and the AI guardrails to use.
Read guide - · 9 min read
Multi-Environment Promotion for Infrastructure as Code
How to promote infrastructure changes from dev to staging to prod safely — without copy-pasted config, drift, or 'works in staging' surprises.
Read guide - · 9 min read
Policy-as-Code for Infrastructure: OPA and Conftest in Practice
Stop catching bad infrastructure config in code review. Here's how to enforce IaC guardrails automatically with OPA and Conftest — and let AI write the Rego.
Read guide - · 10 min read
DevOps as a Service Pricing: What Should Businesses Expect to Pay?
What does DevOps as a Service actually cost? A breakdown of pricing models, the factors that move the number, and how to calculate ROI before you sign.
Read guide - · 11 min read
How to Choose the Right DevOps as a Service Provider
DevOps as a Service can buy you maturity, on-call coverage, and senior judgment you can't easily hire. Here's how to pick a provider who's actually run production.
Read guide
Recommended tools
-
GitHub Copilot
by GitHub / Microsoft
4.5The lowest-friction AI completion in your existing editor.
- Best for
- Inline completion while writing YAML, Bash, Python, Terraform — plus agent mode for scoped multi-file changes
- Pricing
- Free tier (limited); Pro $10/mo; Business $19/seat/mo; Enterprise $39/seat/mo
Read review -
Amazon Q Developer
by Amazon Web Services
4.3AWS's AI assistant for building and operating on AWS — IaC, CLI, and resource Q&A grounded in your account.
- Best for
- Building & operating on AWS — CloudFormation/CDK/Terraform, CLI, and AWS resource troubleshooting
- Pricing
- Free tier (generous); Pro $19/user/mo
Read review -
Microsoft Copilot for Azure
by Microsoft
4.0An AI assistant inside the Azure portal that knows your environment — generate Bicep/CLI, troubleshoot AKS, and query Log Analytics in plain English.
- Best for
- Managing & troubleshooting Azure resources, generating Bicep/CLI, AKS diagnostics, KQL authoring
- Pricing
- Included with Azure at no additional charge (standard Azure resource usage applies)
Read review