Official agent skill

Review Identity

by hashicorp in hashicorp/terraform-provider-aws

Review Terraform AWS Provider Resource Identity: the identity-strategy annotations (@ArnIdentity, @SingletonIdentity, @IdentityAttribute), multi-attribute @ImportIDHandler parsers, and region…

OfficialMPL-2.0Auto-check passedDevOps & Cloud

Install Review Identity

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-identity -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-identity --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/review-identity .claude/skills/review-identity && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "review-identity" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-identity into .claude/skills/review-identity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-identity", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-identity

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-identity -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-identity --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/review-identity .agents/skills/review-identity && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "review-identity" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-identity into .agents/skills/review-identity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-identity", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-identity -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-identity --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/review-identity .cursor/skills/review-identity && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "review-identity" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-identity into .cursor/skills/review-identity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-identity", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/hashicorp/terraform-provider-aws.git --path .agents/skills/review-identity

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-identity -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-identity --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/review-identity .gemini/skills/review-identity && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "review-identity" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-identity into .gemini/skills/review-identity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-identity", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-identity

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-identity -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/review-identity .github/skills/review-identity && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "review-identity" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-identity into .github/skills/review-identity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-identity", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-identity -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-identity --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/review-identity .opencode/skills/review-identity && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "review-identity" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-identity into .opencode/skills/review-identity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-identity", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: review-identity
GitHub stars: 11k
Token cost: ~692 tokens
SKILL.md length: 222 words
Files: 1
Skills in repo: 17
Repo updated: Oct 10, 2026
First seen: Oct 8, 2026
Licence: MPL-2.0

At a glance

Review Terraform AWS Provider Resource Identity: the identity-strategy annotations (@ArnIdentity, @SingletonIdentity, @IdentityAttribute), multi-attribute @ImportIDHandler parsers, and region…

Works in 2 steps: An // @ImportIDHandler("") annotation… → The implementation
Reviewing a PR that adds
SKILL.md covers Identity strategy — exactly…, Multi-attribute identity needs… and Region opt-out for global…
Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Review Identity is an agent skill from hashicorp/terraform-provider-aws, published by the product's own GitHub organization. Review Terraform AWS Provider Resource Identity: the identity-strategy annotations (@ArnIdentity, @SingletonIdentity, @IdentityAttribute), multi-attribute @ImportIDHandler parsers, and region opt-out for global services. Use when reviewing a PR that adds or changes identity annotations or import-ID parsing in internal/service//.go.

Its SKILL.md is about 690 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud, covering Infrastructure as code. It works with Terraform and Amazon Web Services. The repository describes itself as: The AWS Provider enables Terraform to manage AWS resources. The licence is MPL-2.0.

When your agent uses it

Reviewing a PR that adds
Changes identity annotations
Import-ID parsing in internal/service//.go

Example prompts

“/review-identity”

Workflow steps

2 steps, taken from the first numbered list in SKILL.md.

An // @ImportIDHandler("") annotation (alongside the @IdentityAttribute annotations) referencing a type that satisfies…
The implementation

What it can do on your machine

Read from SKILL.md and the folder at commit f4a1d21. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are go).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Review Identity loads about 692 tokens when it runs. Until then it costs about 88 tokens; SKILL.md has 222 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~88
When it runs · the whole SKILL.md, loaded when a task matches: ~692

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from hashicorp/terraform-provider-aws at commit f4a1d21, republished under its MPL-2.0 licence (© hashicorp). 222 words, ~692 tokens.

Download SKILL.mdSave it as .claude/skills/review-identity/SKILL.md (or your agent's skills folder).

name: review-identity
description: Review Terraform AWS Provider Resource Identity: the identity-strategy annotations (@ArnIdentity, @SingletonIdentity, @IdentityAttribute), multi-attribute @ImportIDHandler parsers, and region opt-out for global services. Use when reviewing a PR that adds or changes identity annotations or import-ID parsing in internal/service/**/*.go.

<!-- Copyright IBM Corp. 2014, 2026 -->

<!-- SPDX-License-Identifier: MPL-2.0 -->

Review: Resource Identity

Assume the @maintainer persona. Scope: identity declaration and import-ID parsers. Loaded from review-pr.

Identity strategy — exactly one per resource

Every new resource declares one identity strategy via comment annotations above the factory function. Flag missing identity annotations on new resources.

Strategy	Annotations	Use when
ARN	`// @ArnIdentity` (or `// @ArnIdentity("arn_attribute")`)	AWS API uses the ARN as identifier
Singleton	`// @SingletonIdentity`	One per region (or one per account for global services)
Parameterized	one or more `// @IdentityAttribute("<attr>")`	Composite or non-ARN identifier

@IdentityAttribute supports keywords: optional, resourceAttributeName, testNotNull, valueType, and identityDuplicateAttributes.

Multi-attribute identity needs an `ImportIDHandler`

Parameterized identities with more than one attribute require both:

An // @ImportIDHandler("<typeName>") annotation (alongside the @IdentityAttribute annotations) referencing a type that satisfies inttypes.ImportIDParser.
The implementation:

type fooImportID struct{}

func (fooImportID) Parse(id string) (string, map[string]string, error) {
    // parse a separator-delimited string into named identity attributes
}

var _ inttypes.ImportIDParser = fooImportID{}

Flag multi-attribute identity resources that:

Omit @ImportIDHandler — the generator's Validate() requires it for multiple parameterized identity and will error.
Reference an @ImportIDHandler whose target type doesn't satisfy inttypes.ImportIDParser (the var _ inttypes.ImportIDParser = ...{} assertion catches this).
Implement Parse without a clear error message describing the expected import-ID format on malformed input.

@ImportIDHandler is meaningful for parameterized identities with multiple attributes. Question its use on singleton or single-attribute parameterized resources.

Region opt-out for global services

Global services (CloudFront, IAM, Route 53 hosted zones, etc.) omit framework.WithRegionModel from the model and register with inttypes.ResourceRegionDisabled() in the service-package generator. Identity-Schema docs for these resources omit the region attribute.

Files

Just SKILL.md in .agents/skills/review-identity of hashicorp/terraform-provider-aws.

Open the folder on GitHubat commit f4a1d21

Compare with similar skills

Review Identity next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Review Identity compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Review Identity this skillhashicorp/terraform-provider-aws	11k	—	~692	Automated safety check: Pass	MPL-2.0	yesterday
Senior DevOps Toolkitmaslennikov-ig/claude-code-orchestrator-kit	260	6 repos	~1.1k	Automated safety check: Notes	Custom licence	7 mo ago
Terravision Cloud Diagramspatrickchugh/terravision	1.6k	—	~5.6k	Automated safety check: Notes	AGPL-3.0-only	4 days ago
TerrasharkLukasNiessen/terrashark	716	—	~843	Automated safety check: Pass	MIT	8 days ago
AWS Cloud Advisortech-leads-club/agent-skills	7k	—	~2.1k	Automated safety check: Pass	CC-BY-4.0	yesterday
Spa Create Configsplunk/splunk-platform-automator	138	—	~3.5k	Automated safety check: Pass	Proprietary	4 days ago

Similar skills

Senior DevOps Toolkit
maslennikov-ig/claude-code-orchestrator-kit
Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…
260 GitHub starsUsed in 6 repos~1.1k tokens
DevOps & CloudAuto-check: notes
Terravision Cloud Diagrams
patrickchugh/terravision
Draw cloud architecture diagrams for AWS, Azure or GCP with the official provider icon sets, using TerraVision.
1.6k GitHub stars~5.6k tokensUpdated 4 days ago
DevOps & CloudAuto-check: notes
Terrashark
LukasNiessen/terrashark
Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps.
716 GitHub stars~843 tokensUpdated 8 days ago
DevOps & CloudAuto-check passed
AWS Cloud Advisor
tech-leads-club/agent-skills
Answers AWS architecture, security and service-selection questions by searching AWS documentation through MCP tools first, then adapting advice to your stack and team.
7k GitHub stars~2.1k tokensUpdated yesterday
DevOps & CloudAuto-check passed
Spa Create Config
splunk/splunk-platform-automator
A skill your agent uses when creating or updating splunkconfig.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for…
138 GitHub stars~3.5k tokensUpdated 4 days ago
DevOps & CloudAuto-check passed
Provider Verification
mondoohq/mql
Verify mql provider resource/field changes against real cloud infrastructure.
412 GitHub stars~3.7k tokensUpdated today
DevOps & CloudAuto-check passed

More from hashicorp/terraform-provider-aws

All 17 skills in this repo

Review Docs
hashicorp/terraform-provider-aws
Official
Review a Terraform AWS Provider PR's end-user documentation (website/docs//.markdown): whether docs are needed, description openings, argument/attribute style, section structure, tags wording, code…
11k GitHub stars~1.3k tokensUpdated yesterday
Auto-check passed
Review Helpers
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider helper code: finders, status functions, waiters, sweepers, data sources, and list resources.
11k GitHub stars~978 tokensUpdated yesterday
Auto-check passed
Review Lifecycle
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider resource lifecycle: CRUD step order, smerr/smarterr error handling, and AutoFlex model-to-SDK conversion.
11k GitHub stars~990 tokensUpdated yesterday
Auto-check passed
Review Schema
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider Plugin Framework schema shape: model structs, Required/Optional/Computed combinations, plan modifiers (no ForceNew), nested-block custom types, validators, sensitive…
11k GitHub stars~1k tokensUpdated yesterday
Auto-check passed
Review Tags
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider tagging: the tags/tagsall schema attributes, the @Tags(identifierAttribute=...) annotation, and wiring input.Tags = getTagsIn(ctx) after flex.Expand.
11k GitHub stars~462 tokensUpdated yesterday
Auto-check passed
Review Tests
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider acceptance and unit test basics: required basic and disappears tests, TestAcc naming, TestCase essentials (PreCheck/ErrorCheck/ProtoV5ProviderFactories/CheckDestroy)…
11k GitHub stars~908 tokensUpdated yesterday
Auto-check passed

Works with

Questions about Review Identity

What does Review Identity do?

Review Terraform AWS Provider Resource Identity: the identity-strategy annotations (@ArnIdentity, @SingletonIdentity, @IdentityAttribute), multi-attribute @ImportIDHandler parsers, and region…. Review Identity is an agent skill from hashicorp/terraform-provider-aws, published by the product's own GitHub organization. Review Terraform AWS Provider Resource Identity: the identity-strategy annotations (@ArnIdentity, @SingletonIdentity, @IdentityAttribute), multi-attribute @ImportIDHandler parsers, and region opt-out for global services.

When should I use Review Identity?

Review Identity fits situations like: reviewing a PR that adds; changes identity annotations; import-ID parsing in internal/service//.go.

How do I install Review Identity in Claude Code?

Run `npx skills add hashicorp/terraform-provider-aws --skill review-identity -a claude-code`. Or copy the skill folder (.agents/skills/review-identity in hashicorp/terraform-provider-aws) into .claude/skills/review-identity in your project. Claude Code loads it when a task matches its description.

How do I install Review Identity in Codex?

Run `npx skills add hashicorp/terraform-provider-aws --skill review-identity -a codex`. Or copy the skill folder (.agents/skills/review-identity in hashicorp/terraform-provider-aws) into .agents/skills/review-identity in your project. Codex loads it when a task matches its description.

Can I use Review Identity in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add hashicorp/terraform-provider-aws --skill review-identity -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/review-identity, .gemini/skills/review-identity, .github/skills/review-identity and .opencode/skills/review-identity in your project.

What does Review Identity need to run?

SKILL.md names no scripts, command-line tools or credentials: Review Identity is instructions for the agent only.

Does Review Identity access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Review Identity safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Review Identity use?

Review Identity is published under the MPL-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Review Identity use?

About 692 tokens (SKILL.md is roughly 2.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Review Identity?

Skills that share tags, products or a category with Review Identity: Senior DevOps Toolkit (maslennikov-ig/claude-code-orchestrator-kit, 260 stars), Terravision Cloud Diagrams (patrickchugh/terravision, 1.6k stars), Terrashark (LukasNiessen/terrashark, 716 stars) and AWS Cloud Advisor (tech-leads-club/agent-skills, 7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Review Identity?

hashicorp (a GitHub organization, an official publisher) maintains it in hashicorp/terraform-provider-aws, which has 11,113 GitHub stars. The repository holds 17 skills in this directory. The repository was last updated on October 10, 2026.

Source: hashicorp/terraform-provider-aws on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Review Identity

Facts

At a glance

What it does

When your agent uses it

Example prompts

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Review: Resource Identity

Identity strategy — exactly one per resource

Multi-attribute identity needs an ImportIDHandler

Region opt-out for global services

Files

Compare with similar skills

Similar skills

More from hashicorp/terraform-provider-aws

Related

Questions about Review Identity

Multi-attribute identity needs an `ImportIDHandler`