cloud-platforms SKILL.md skillA

cloud-platforms from hoangminhung/devops-ai-kit is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add hoangminhung/devops-ai-kit/cloud-platforms@git:20261028.645512f

Pins git:20261028.645512f in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
hoangminhung/devops-ai-kit
Path
claude/skills/cloud-platforms/SKILL.md
Versions recorded
1
Latest version
git:20261028.645512f, committed Oct 28, 2026
Size
3,458 bytes
Repository stars
5
License
MIT

Design standards for cloud and on-prem infrastructure — Azure, AWS, GCP, Hetzner, OVHcloud and bare-metal data centers — organised by tier (baseline, production, enterprise landing zone) so recommendations match the real size of the project. Use whenever designing, provisioning or reviewing cloud networking, identity, managed Kubernetes (AKS/EKS/GKE), landing zones, VPC/VNet layouts or data-center infrastructure, even if the user only names a single provider service.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Cloud & on-premise infrastructure standards

<!-- devops-ai-kit · Last reviewed: 2026-10-28 -->

## Choose the right tier before you apply standards

Suggesting an enterprise architecture for a small project is over-engineering: it costs money, it costs operations work, and the user will then ignore even the good advice. Always decide the tier first, and write the chosen tier in the plan / ADR.

| Tier | When | Apply |
|---|---|---|
| **Baseline** | Every project, including dev / PoC used for more than a few days | The "Baseline" part of each provider |
| **Production** | Real users, real data, an uptime commitment | Baseline + "Production" |
| **Enterprise landing zone** | Many teams / many subscriptions-accounts, compliance needs, a platform team | All three tiers |

If the tier is not clear, ask the user. Do not pick Enterprise by default.

## Common rules for every provider

- **MUST** Create every resource with IaC (Terraform / OpenTofu). Manual console work is only for troubleshooting. If you must create something by hand, write it down and import it into IaC later.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add hoangminhung/devops-ai-kit/cloud-platforms@sha256:07b967a9853d5831

The line at the top of this page pins the label git:20261028.645512f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_wm26qhkp4456xiaz.svg)](https://markdownregistry.com/a/art_wm26qhkp4456xiaz)

0 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 28, 2026.

versioncommittedcommitsizeaudit
git:20261028.645512f latest2026-10-28 645512f 3,458 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (3458 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

hoangminhung/devops-ai-kit · 5 stars · license MIT · pushed 2026-11-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_wm26qhkp4456xiaz
GET https://markdownregistry.com/api/v1/resolve?ref=hoangminhung/devops-ai-kit/cloud-platforms
GET https://markdownregistry.com/api/v1/blob/07b967a9853d583113bf79a486968e057f109031eea4dd34a28a40f0fc68f738

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from hoangminhung/devops-ai-kit

container-supply-chain SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/container-supply-chain/SKILL.md · Container and software supply-chain security in CI/CD — vulnerability scanning gates with Trivy or Grype, SBOM…
git:20261028.645512f · audit A · 5 stars
db-reliability SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/db-reliability/SKILL.md · Database reliability engineering standards for PostgreSQL (and MySQL) on Kubernetes — zero-downtime schema changes with…
git:20261028.645512f · audit A · 5 stars
disaster-recovery SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/disaster-recovery/SKILL.md · Backup and disaster-recovery standards — defining RTO/RPO, 3-2-1 and offsite copies, immutable backups (S3 Object Lock…
git:20261028.645512f · audit A · 5 stars
finops SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/finops/SKILL.md · Cloud cost-control standards — cost estimation gates for Terraform changes (Infracost), NAT and data-transfer costs…
git:20261028.645512f · audit A · 5 stars
grill-me SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/grill-me/SKILL.md · Interview the user in short rounds to fill in missing context before acting — goal, scope, target environment…
git:20261028.34f57d4 · audit A · 5 stars
infra-docs SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-docs/SKILL.md · Write infrastructure documentation based on real evidence — change records of what was changed and why…
git:20261101.e2f12a4 · audit A · 5 stars
infra-rulebook SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-rulebook/SKILL.md · Map an infrastructure repo's files to the devops-ai-kit technology rules (Terraform, Ansible, Kubernetes, Helm, Argo…
git:20261031.84caac1 · audit A · 5 stars
infra-scout SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-scout/SKILL.md · Onboard an infrastructure repo — read its Terraform (folders, backends, workspaces, provider versions), Helm charts and…
git:20261103.8a00cbc · audit B · 5 stars
infra-task SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-task/SKILL.md · Run a risky infrastructure change end-to-end — recon of the live state, version research, a written plan, independent…
git:20261101.756f384 · audit A · 5 stars
k8s-networking SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-networking/SKILL.md · Kubernetes networking standards — Gateway API versus Ingress, migrating off the retired ingress-nginx controller…
git:20261028.645512f · audit A · 5 stars
k8s-storage SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-storage/SKILL.md · Kubernetes storage standards — choosing CSI drivers and access modes, StorageClass settings (reclaim policy, binding…
git:20261028.645512f · audit A · 5 stars
pki-secrets SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/pki-secrets/SKILL.md · Certificate, secret and access-management standards — cert-manager with ACME (HTTP-01/DNS-01) or Vault PKI…
git:20261101.8158acd · audit A · 5 stars

Every file in hoangminhung/devops-ai-kit

Other files named cloud-platforms

cloud-platforms SKILL.md skill
d-padmanabhan/agent-engineering-handbook · skills/cloud-platforms/SKILL.md · Cloud platform best practices for AWS, Azure, GCP, and Cloudflare. Covers Zero Trust architecture, IAM patterns…
git:20260207.963c258 · audit A · 20 stars

Browse by kind, by grade A, or by owner.