adk-infra-expert
Generate and validate Terraform modules for secure Vertex AI Agent Engine environments.
Install
mkdir -p .claude/skills/adk-infra-expert && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/7601" && unzip -o skill.zip -d .claude/skills/adk-infra-expert && rm skill.zipInstalls to .claude/skills/adk-infra-expert
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Execute use when provisioning Vertex AI ADK infrastructure with Terraform.Key capabilities
- →Provision Agent Engine runtime
- →Configure 14-day code execution sandbox
- →Set up Memory Bank infrastructure
- →Apply VPC Service Controls
- →Create least-privilege IAM roles
How it works
The skill generates and validates Terraform modules to provision secure, production-grade infrastructure for Vertex AI ADK agents.
Inputs & outputs
When to use adk-infra-expert
- →Provision Agent Engine runtime
- →Configure VPC Service Controls for agents
- →Set up least-privilege IAM for ADK
- →Initialize Terraform for Vertex AI deployments
About this skill
Adk Infra Expert
Overview
Provision production-grade Vertex AI ADK infrastructure with Terraform: secure networking, least-privilege IAM, Agent Engine runtime, Code Execution sandbox defaults, and Memory Bank configuration. Use this skill to generate/validate Terraform modules and a deployment checklist that matches enterprise security constraints (including VPC Service Controls when required).
Prerequisites
Before using this skill, ensure:
- Google Cloud project with billing enabled
- Terraform 1.0+ installed
- gcloud CLI authenticated with appropriate permissions
- Vertex AI API enabled in target project
- VPC Service Controls access policy created (for enterprise)
- Understanding of Agent Engine architecture and requirements
Instructions
- Initialize Terraform: Set up backend for remote state storage
- Configure Variables: Define project_id, region, agent configuration
- Provision VPC: Create network infrastructure with Private Service Connect
- Set Up IAM: Create service accounts with least privilege roles
- Deploy Agent Engine: Configure runtime with code execution and memory bank
- Enable VPC-SC: Apply service perimeter for data exfiltration protection
- Configure Monitoring: Set up Cloud Monitoring dashboards and alerts
- Validate Deployment: Test agent endpoint and verify all components
Output
- Configuration files or code changes applied to the project
- Validation report confirming correct implementation
- Summary of changes made and their rationale
See Terraform implementation details for output format specifications.
Error Handling
See ${CLAUDE_SKILL_DIR}/references/errors.md for comprehensive error handling.
Examples
See ${CLAUDE_SKILL_DIR}/references/examples.md for detailed examples.
Resources
- Agent Engine: https://cloud.google.com/vertex-ai/generative-ai/docs/agent-engine/overview
- VPC-SC: https://cloud.google.com/vpc-service-controls/docs
- Terraform Google Provider: https://registry.terraform.io/providers/hashicorp/google/latest
- ADK Terraform examples in ${CLAUDE_SKILL_DIR}/examples/
When not to use it
- →When infrastructure is managed outside of Terraform
- →When the project does not use Vertex AI
Prerequisites
Limitations
- →Requires VPC Service Controls access policy for enterprise deployments
How it compares
It automates the creation of complex security perimeters and runtime environments compared to manual console provisioning.
Compared to similar skills
adk-infra-expert side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| adk-infra-expert (this skill) | 1 | 27d | Review | Advanced |
| terraform-module-library | 7 | 4mo | No flags | Advanced |
| azure-deployment-preflight | 7 | 6mo | Review | Advanced |
| azure-image-builder | 0 | 6mo | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by jeremylongshore
View all by jeremylongshore →You might also like
terraform-module-library
wshobson
Build reusable Terraform modules for AWS, Azure, and GCP infrastructure following infrastructure-as-code best practices. Use when creating infrastructure modules, standardizing cloud provisioning, or implementing reusable IaC components.
azure-deployment-preflight
github
Performs comprehensive preflight validation of Bicep deployments to Azure, including template syntax validation, what-if analysis, and permission checks. Use this skill before any deployment to Azure to preview changes, identify potential issues, and ensure the deployment will succeed. Activate when users mention deploying to Azure, validating Bicep files, checking deployment permissions, previewing infrastructure changes, running what-if, or preparing for azd provision.
azure-image-builder
hashicorp
Build Azure managed images and Azure Compute Gallery images with Packer. Use when creating custom images for Azure VMs.
iac-common
jonathan-vella
**UTILITY SKILL** — Shared IaC deploy patterns for Bicep + Terraform agents: deployment strategies, circuit breaker, known deploy issues. WHEN: "phased deployment", "circuit breaker", "deploy strategy", "deploy issue", "shared IaC pattern". DO NOT USE FOR: preflight (azure-validate), code generation
deploying-applications
ancoleman
Deployment patterns from Kubernetes to serverless and edge functions. Use when deploying applications, setting up CI/CD, or managing infrastructure. Covers Kubernetes (Helm, ArgoCD), serverless (Vercel, Lambda), edge (Cloudflare Workers, Deno), IaC (Pulumi, OpenTofu, SST), and GitOps patterns.
adk-deploy-guide
kumaran-is
MUST READ before deploying any ADK agent to Google Cloud — covers Cloud Run, Agent Engine, Vertex AI, event-driven agents, and ADK CI/CD pipelines. Use when deploying ADK agents to production, not for agent code patterns (use google-adk) or project scaffolding.