Best-practice authoring guidance AND a read-only policy gate for AWS Terraform generated by a migration skill. Load during any phase that writes a terraform/ directory — first as the "what to emit" posture rules + security-baseline spec, then after writing as the deterministic policy verdict.
Install
npx skills add aws/agent-toolkit-for-aws --skill tf-best-practicesnpx skills add aws/agent-toolkit-for-aws --skill tf-best-practices -a claude-code -gnpx skills add aws/agent-toolkit-for-aws --skill tf-best-practices -a codex -ggemini skills install https://github.com/aws/agent-toolkit-for-aws.git --path plugins/aws-startup-advisor/skills/tf-best-practicesgh skill install aws/agent-toolkit-for-aws tf-best-practicesgit clone --depth 1 https://github.com/aws/agent-toolkit-for-aws /tmp/aws__agent-toolkit-for-aws
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/aws__agent-toolkit-for-aws/plugins/aws-startup-advisor/skills/tf-best-practices ~/.claude/skills/tf-best-practices # Claude Code
cp -R /tmp/aws__agent-toolkit-for-aws/plugins/aws-startup-advisor/skills/tf-best-practices ~/.agents/skills/tf-best-practices # Codex, Cursor, Gemini CLI, Copilot, OpenCode