feat: Add automatic backend provisioning

.golangci.yml

@@ -67,6 +67,7 @@ linters:
             - "!**/pkg/auth/types/aws_credentials.go"
             - "!**/pkg/auth/types/github_oidc_credentials.go"
             - "!**/internal/aws_utils/**"
+            - "!**/pkg/provisioner/backend/**"
             - "$test"
           deny:
             # AWS: Identity and auth-related SDKs

CLAUDE.md

@@ -538,7 +538,15 @@ All cmds/flags need Docusaurus docs in `website/docs/cli/commands/`. Use `<dl>`
 **Common mistakes:** Using command name vs. filename, not checking slug frontmatter, guessing URLs.
 
 ### Documentation Requirements (MANDATORY)
-Use `<dl>` for arguments/flags. Follow Docusaurus conventions: frontmatter, purpose note, screengrab, usage/examples/arguments/flags sections. File location: `website/docs/cli/commands/<command>/<subcommand>.mdx`
+CLI command docs MUST include:
+1. **Frontmatter** - title, sidebar_label, sidebar_class_name, id, description
+2. **Intro component** - `import Intro from '@site/src/components/Intro'` then `<Intro>Brief description</Intro>`
+3. **Screengrab** - `import Screengrab from '@site/src/components/Screengrab'` then `<Screengrab title="..." slug="..." />`
+4. **Usage section** - Shell code block with command syntax
+5. **Arguments/Flags** - Use `<dl><dt>` for each argument/flag with `<dd>` description
+6. **Examples section** - Practical usage examples
+
+File location: `website/docs/cli/commands/<command>/<subcommand>.mdx`
 
 ### Website Build (MANDATORY)
 ALWAYS build after doc changes: `cd website && npm run build`. Verify: no broken links, missing images, MDX component rendering.

cmd/root.go

@@ -52,6 +52,7 @@ import (
 	"github.com/cloudposse/atmos/cmd/internal"
 	_ "github.com/cloudposse/atmos/cmd/list"
 	_ "github.com/cloudposse/atmos/cmd/profile"
+	"github.com/cloudposse/atmos/cmd/terraform/backend"
 	themeCmd "github.com/cloudposse/atmos/cmd/theme"
 	"github.com/cloudposse/atmos/cmd/version"
 	_ "github.com/cloudposse/atmos/cmd/workflow"
@@ -1223,6 +1224,7 @@ func Execute() error {
 	version.SetAtmosConfig(&atmosConfig)
 	devcontainer.SetAtmosConfig(&atmosConfig)
 	themeCmd.SetAtmosConfig(&atmosConfig)
+	backend.SetAtmosConfig(&atmosConfig)
 
 	if initErr != nil {
 		// Handle config initialization errors based on command context.

cmd/terraform/backend/backend.go

@@ -0,0 +1,37 @@
+package backend
+
+import (
+	"github.com/spf13/cobra"
+
+	"github.com/cloudposse/atmos/pkg/schema"
+)
+
+// AtmosConfigPtr will be set by SetAtmosConfig before command execution.
+var atmosConfigPtr *schema.AtmosConfiguration
+
+// SetAtmosConfig sets the Atmos configuration for the backend command.
+// This is called from root.go after atmosConfig is initialized.
+func SetAtmosConfig(config *schema.AtmosConfiguration) {
+	atmosConfigPtr = config
+}
+
+// backendCmd represents the backend command.
+var backendCmd = &cobra.Command{
+	Use:   "backend",
+	Short: "Manage Terraform state backends",
+	Long:  `Create, list, describe, update, and delete Terraform state backends.`,
+}
+
+func init() {
+	// Add CRUD subcommands
+	backendCmd.AddCommand(createCmd)
+	backendCmd.AddCommand(listCmd)
+	backendCmd.AddCommand(describeCmd)
+	backendCmd.AddCommand(updateCmd)
+	backendCmd.AddCommand(deleteCmd)
+}
+
+// GetBackendCommand returns the backend command for parent registration.
+func GetBackendCommand() *cobra.Command {
+	return backendCmd
+}