Official agent skill

Resource Identity

by hashicorp in hashicorp/terraform-provider-aws

Add resource identity to a resource in the Terraform AWS provider.

OfficialMPL-2.0Auto-check passedDevOps & Cloud

Install Resource Identity

skills CLI
$ npx skills add hashicorp/terraform-provider-aws --skill resource-identity -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install hashicorp/terraform-provider-aws resource-identity --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/resource-identity .claude/skills/resource-identity && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
resource-identity
GitHub stars
11k
Token cost
~235 tokens
SKILL.md length
96 words
Files
1
Skills in repo
17
Repo updated
First seen
Licence
MPL-2.0

At a glance

Add resource identity to a resource in the Terraform AWS provider.

  • Tasks that involve Infrastructure as code
  • SKILL.md covers When to use and Inputs
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Resource Identity is an agent skill from hashicorp/terraform-provider-aws, published by the product's own GitHub organization. Add resource identity to a resource in the Terraform AWS provider.

Its SKILL.md is about 240 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud, covering Infrastructure as code. It works with Terraform and Amazon Web Services. The repository describes itself as: The AWS Provider enables Terraform to manage AWS resources. The licence is MPL-2.0.

When your agent uses it

  • Tasks that involve Infrastructure as code

Example prompts

  • “/resource-identity”

What it can do on your machine

Read from SKILL.md and the folder at commit 972faab. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Resource Identity loads about 235 tokens when it runs. Until then it costs about 21 tokens; SKILL.md has 96 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~21
When it runs · the whole SKILL.md, loaded when a task matches
~235

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from hashicorp/terraform-provider-aws at commit 972faab, republished under its MPL-2.0 licence (© hashicorp). 96 words, ~235 tokens.

Download SKILL.mdSave it as .claude/skills/resource-identity/SKILL.md (or your agent's skills folder).
name
resource-identity
description
Add resource identity to a resource in the Terraform AWS provider.
<!-- Copyright IBM Corp. 2014, 2026 -->
<!-- SPDX-License-Identifier: MPL-2.0 -->

Skill: Add Resource Identity Support

Assume the @maintainer persona.

Use this skill to add resource identity to an existing resource, or when creating a net-new resource.

Refer to docs/resource-identity.md for instructions. The task is complete when all generated identity acceptance tests (TestAcc{Resource}_Identity) are passing.

When to use

Trigger this skill when the user:

  • Says "add resource identity support", or similar while referring to a Terraform resource.

Inputs

Required:

  • The target resource name (e.g. aws_s3_bucket).

If the user provides a human readable name (e.g. "S3 Bucket") rather than the Terraform resource, confirm the target resource before proceeding.

© hashicorp, MPL-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .agents/skills/resource-identity of hashicorp/terraform-provider-aws.

Open the folder on GitHubat commit 972faab

Compare with similar skills

Resource Identity next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Resource Identity compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Resource Identity this skillhashicorp/terraform-provider-aws11k—~235Automated safety check: PassMPL-2.0
Senior DevOps Toolkitmaslennikov-ig/claude-code-orchestrator-kit2606 repos~1.1kAutomated safety check: NotesCustom licence
Terravision Cloud Diagramspatrickchugh/terravision1.6k—~5.6kAutomated safety check: NotesAGPL-3.0-only
TerrasharkLukasNiessen/terrashark714—~843Automated safety check: PassMIT
AWS Cloud Advisortech-leads-club/agent-skills7k—~2.1kAutomated safety check: PassCC-BY-4.0
Spa Create Configsplunk/splunk-platform-automator137—~3.5kAutomated safety check: PassProprietary

Similar skills

  • Senior DevOps Toolkit

    maslennikov-ig/claude-code-orchestrator-kit

    Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…

    260 GitHub starsUsed in 6 repos~1.1k tokens
    DevOps & CloudAuto-check: notes
  • Terravision Cloud Diagrams

    patrickchugh/terravision

    Draw cloud architecture diagrams for AWS, Azure or GCP with the official provider icon sets, using TerraVision.

    1.6k GitHub stars~5.6k tokensUpdated 2 days ago
    DevOps & CloudAuto-check: notes
  • Terrashark

    LukasNiessen/terrashark

    Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps.

    714 GitHub stars~843 tokensUpdated 6 days ago
    DevOps & CloudAuto-check passed
  • AWS Cloud Advisor

    tech-leads-club/agent-skills

    Answers AWS architecture, security and service-selection questions by searching AWS documentation through MCP tools first, then adapting advice to your stack and team.

    7k GitHub stars~2.1k tokensUpdated 18 days ago
    DevOps & CloudAuto-check passed
  • Spa Create Config

    splunk/splunk-platform-automator

    A skill your agent uses when creating or updating splunkconfig.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for…

    137 GitHub stars~3.5k tokensUpdated 2 days ago
    DevOps & CloudAuto-check passed
  • Verify mql provider resource/field changes against real cloud infrastructure.

    411 GitHub stars~3.7k tokensUpdated today
    DevOps & CloudAuto-check passed

More from hashicorp/terraform-provider-aws

All 17 skills in this repo
  • Review Docs

    hashicorp/terraform-provider-aws

    Official

    Review a Terraform AWS Provider PR's end-user documentation (website/docs//.markdown): whether docs are needed, description openings, argument/attribute style, section structure, tags wording, code…

    11k GitHub stars~1.3k tokensUpdated yesterday
    Auto-check passed
  • Review Helpers

    hashicorp/terraform-provider-aws

    Official

    Review Terraform AWS Provider helper code: finders, status functions, waiters, sweepers, data sources, and list resources.

    11k GitHub stars~978 tokensUpdated yesterday
    Auto-check passed
  • Review Identity

    hashicorp/terraform-provider-aws

    Official

    Review Terraform AWS Provider Resource Identity: the identity-strategy annotations (@ArnIdentity, @SingletonIdentity, @IdentityAttribute), multi-attribute @ImportIDHandler parsers, and region…

    11k GitHub stars~692 tokensUpdated yesterday
    Auto-check passed
  • Review Lifecycle

    hashicorp/terraform-provider-aws

    Official

    Review Terraform AWS Provider resource lifecycle: CRUD step order, smerr/smarterr error handling, and AutoFlex model-to-SDK conversion.

    11k GitHub stars~990 tokensUpdated yesterday
    Auto-check passed
  • Review Schema

    hashicorp/terraform-provider-aws

    Official

    Review Terraform AWS Provider Plugin Framework schema shape: model structs, Required/Optional/Computed combinations, plan modifiers (no ForceNew), nested-block custom types, validators, sensitive…

    11k GitHub stars~1k tokensUpdated yesterday
    Auto-check passed
  • Review Tags

    hashicorp/terraform-provider-aws

    Official

    Review Terraform AWS Provider tagging: the tags/tagsall schema attributes, the @Tags(identifierAttribute=...) annotation, and wiring input.Tags = getTagsIn(ctx) after flex.Expand.

    11k GitHub stars~462 tokensUpdated yesterday
    Auto-check passed

Categories

Questions about Resource Identity

What does Resource Identity do?

Add resource identity to a resource in the Terraform AWS provider. Resource Identity is an agent skill from hashicorp/terraform-provider-aws, published by the product's own GitHub organization. Add resource identity to a resource in the Terraform AWS provider.

When should I use Resource Identity?

Resource Identity fits situations like: tasks that involve Infrastructure as code.

How do I install Resource Identity in Claude Code?

Run `npx skills add hashicorp/terraform-provider-aws --skill resource-identity -a claude-code`. Or copy the skill folder (.agents/skills/resource-identity in hashicorp/terraform-provider-aws) into .claude/skills/resource-identity in your project. Claude Code loads it when a task matches its description.

How do I install Resource Identity in Codex?

Run `npx skills add hashicorp/terraform-provider-aws --skill resource-identity -a codex`. Or copy the skill folder (.agents/skills/resource-identity in hashicorp/terraform-provider-aws) into .agents/skills/resource-identity in your project. Codex loads it when a task matches its description.

Can I use Resource Identity in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add hashicorp/terraform-provider-aws --skill resource-identity -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/resource-identity, .gemini/skills/resource-identity, .github/skills/resource-identity and .opencode/skills/resource-identity in your project.

What does Resource Identity need to run?

SKILL.md names no scripts, command-line tools or credentials: Resource Identity is instructions for the agent only.

Does Resource Identity access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Resource Identity safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Resource Identity use?

Resource Identity is published under the MPL-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Resource Identity use?

About 235 tokens (SKILL.md is roughly 940 characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Resource Identity?

Skills that share tags, products or a category with Resource Identity: Senior DevOps Toolkit (maslennikov-ig/claude-code-orchestrator-kit, 260 stars), Terravision Cloud Diagrams (patrickchugh/terravision, 1.6k stars), Terrashark (LukasNiessen/terrashark, 714 stars) and AWS Cloud Advisor (tech-leads-club/agent-skills, 7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Resource Identity?

hashicorp (a GitHub organization, an official publisher) maintains it in hashicorp/terraform-provider-aws, which has 11,109 GitHub stars. The repository holds 17 skills in this directory. The repository was last updated on October 7, 2026.

Source: hashicorp/terraform-provider-aws on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.