Generate AWS CDK v2 Python stacks with L2/L3 constructs, resource-scoped grant* IAM, SecretValue references, cdk-nag (AWS Solutions + NIST 800-53) Aspects, permissions boundaries, and CloudTrail/Config/Security Hub. Use when writing CDK.

Secure AWS CDK Developer

Generate AWS Terraform aligned to CIS AWS Foundations with least-privilege IAM, KMS/SSE on S3/RDS, multi-AZ private subnets, S3+DynamoDB state backend, Access Analyzer, and Checkov/tfsec CI gates. Use when writing AWS HCL.

Secure Terraform AWS Developer

Generate Azure azurerm Terraform aligned to CIS Azure Foundations with RBAC/Managed Identities, Key Vault references, Private Endpoints, workload identity federation, Azure Policy, and Defender for Cloud. Use when writing Azure HCL.

Secure Terraform Azure Developer

Generate cloud-agnostic Terraform with locked provider versions, sensitive=true vars, encrypted remote state with locking, workspace isolation, and tflint/Checkov/tfsec/Sentinel CI gates. Use when authoring or auditing Terraform generically.

Secure Terraform Developer

Generate GCP google-provider Terraform aligned to CIS GCP Foundations with predefined-role IAM, Workload Identity Federation, CMEK, Private Google Access, org policy constraints, and gcloud terraform vet in CI. Use when writing GCP HCL.