Sakul Learning argues that Gruntwork nails the symptoms of messy HCL repos but reaches for the wrong cure in Terragrunt. The real fix is treating cloud infrastructure as software, with tested, typed, versioned libraries, and CDK Terrain plus TerraConstructs as the middle path forward.

Brian Torres walks through the three ways infra repos rot, copy-paste sprawl, mega-modules, and tribal knowledge, then maps each to a fix. The cure is Terragrunt structure: account/region hierarchy, inherited config and tags, isolated state, Stacks, and CI/CD as the only path to prod.

Cody Gagnon notes that AzureRM ships only five Terraform Actions, then shows how AzAPI's new gateway action quietly unlocks dozens more. With one POST wrapper you can rotate storage keys, start and stop AKS, and run other Day-2 ops natively, though data-plane endpoints stay out of reach

Darryl Ruggles builds a similarity engine to show how Lambda Managed Instances breaks the one-request-per-environment rule, running functions on EC2 in a VPC with up to 32 GB. The Terraform walkthrough covers capacity providers, concurrency, and when LMI beats standard Lambda on cost.

This open-source project drops into any Terraform or CloudFormation repo and lets your AI agent run a full security scan, no plugins, keys, or installs. Domain skills cover IAM, network, storage, secrets, logging, and serverless, then chain them into cross-domain attack paths with high-ROI fixes.