feat(atlas-terraform-aws-harden): add AWS hardening skill for existing Atlas clusters - #42
Draft
marcosuma wants to merge 1 commit into
Draft
feat(atlas-terraform-aws-harden): add AWS hardening skill for existing Atlas clusters#42marcosuma wants to merge 1 commit into
marcosuma wants to merge 1 commit into
Conversation
…g Atlas clusters Adds atlas-terraform-aws-harden skill that edits a user's existing Terraform project to add AWS security hardening to an Atlas cluster using the official terraform-mongodbatlas-modules/atlas-aws/mongodbatlas Landing Zone module. Features: - Edits existing project files in place (versions.tf, variables.tf, main.tf, outputs.tf, terraform.tfvars.example) — no separate subfolder generated - AWS PrivateLink private endpoints (BYO subnets or create new VPC/subnets) - AWS KMS encryption at rest (BYO key ARN or module-created key) - IAM role for Cloud Provider Access (always module-managed) - S3 backup export (BYO bucket or module-created bucket) - Dynamic mongodbatlas provider version resolution via MCP/gh/WebSearch - Module interface inspection via GitHub API before generating HCL - terraform validate run against user's project path before presenting edits - Terraform < 1.12 compatibility patches for atlas-aws v0.3.x - Eval tests (6 scenarios) and skill boundary tests (17 cases)
marcosuma
commented
May 13, 2026
| terraform version -no-color | head -1 | ||
| ``` | ||
|
|
||
| If below 1.12, apply using the Edit tool: |
Author
There was a problem hiding this comment.
unsure about leaving this or just forcing to upgrade tf to 1.12
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
atlas-terraform-aws-hardenskill: edits a user's existing Terraform project to add AWS security hardening to an Atlas cluster using the official atlas-aws Landing Zone Moduleversions.tf,variables.tf,main.tf,outputs.tf, andterraform.tfvars.exampleterraform validateagainst the user's project directory before presenting editsValidation prompts tested
Checklist
./tools/validate-skills.sh skills/atlas-terraform-aws-harden/passestesting/skills-boundaries/atlas-terraform-harden-vs-skills.json)testing/atlas-terraform-aws-harden/evals/evals.json)