Skip to content
Beta Multi-model support (OpenAI, Gemini, and more) launching soon.
RBA RBA Skills

cloud-devops-accelerator

v0.1.0 ExperimentalNo security review by Dakota Smith

Install

Pick the surface you use. Plugins run inside Claude Code, which is available in the terminal CLI, the desktop app on Mac and Windows, the web app at claude.ai/code, and the VS Code and JetBrains extensions. The slash commands are identical on every surface.

From inside any Claude Code session — terminal, desktop app, web app, or IDE extension:

  1. Add the RBA Skills marketplace (only needed once per machine):

    /plugin marketplace add rbaconsulting/rba-skills-plugin

  2. Install cloud-devops-accelerator:

    /plugin install cloud-devops-accelerator@rba-ai-hub

  3. Activate it without restarting:

    /reload-plugins

Overview

Cloud & DevOps Accelerator

Azure-first infrastructure and DevOps toolkit for RBA digital experience projects. Generates production-grade Bicep templates, Terraform modules, Azure DevOps CI/CD pipelines, landing-zone scaffolds, security baselines, and operational runbooks. Includes an AWS adapter layer for multi-cloud or AWS-primary client engagements.

Designed for the DX agency delivery context: CMS workloads (Sitecore, Umbraco, Optimizely), composable frontends, and microservice APIs all running on Azure PaaS — with consistent governance, least-privilege identity, and automated promotion gates baked in from day one.

What's inside

Artifact Slug Purpose
Skill cloud-bicep-template Generate production-ready Azure Bicep templates for any PaaS resource combination — App Service, Container Apps, Azure SQL, Azure Cache for Redis, Key Vault, and more — with parameter files for each environment tier.
Skill cloud-cicd-pipeline Author multi-stage Azure Pipelines YAML for build, test, security scan, and environment-gated deployment — with OIDC-based service connections and Key Vault variable groups.
Skill cloud-landing-zone Scaffold a CAF-aligned Azure landing-zone structure: management-group hierarchy, policy assignments, hub-spoke networking, Log Analytics workspace, and Defender for Cloud enablement — output as Bicep or Terraform.
Skill cloud-terraform-module Generate structured Terraform modules targeting the AzureRM (or AWS) provider, with remote state on Azure Blob Storage, workspaces for environment parity, and per-environment tfvars.
Skill cloud-environment-runbook Produce a fully detailed environment runbook: topology diagrams (Mermaid), access patterns, deployment procedures, incident-response steps, and rollback playbooks for a given Azure environment.
Skill cloud-security-baseline Apply the Microsoft cloud security benchmark, Defender for Cloud policies, and RBA's DX workload security standards — generating Azure Policy assignments, RBAC role definitions, and a gap-assessment report.
Agent cloud-infra-reviewer Subagent that reviews Bicep/Terraform files for cost optimisation, security gaps, naming-convention drift, and missing tags — returns structured findings with severity and fix guidance.
Command cloud-devops Slash-command entry point that reads the current repo context and routes to the appropriate Cloud & DevOps Accelerator skill.

When to use this plugin

  • Greenfield Azure environments — standing up a new project's subscription, networking, and PaaS resources from scratch.
  • CI/CD modernisation — migrating Classic pipelines to YAML multi-stage, introducing OIDC service connections, or adding security/quality gates.
  • Landing-zone establishment — Enterprise-scale CAF adoption for a client moving to or maturing on Azure.
  • Terraform refactors — breaking a monolithic ARM/Bicep deployment into versioned, reusable Terraform modules.
  • Operational readiness — generating runbooks and security baselines before go-live on a DX platform.
  • AWS projects — using the AWS adapter within cloud-terraform-module and cloud-cicd-pipeline for non-Azure client work.

How to install

claude plugin install cloud-devops-accelerator@rba-ai-hub

After installation, invoke any skill directly:

/cloud-bicep-template App Service Plan + SQL + Redis for Sitecore XM Cloud managed hosting
/cloud-cicd-pipeline Umbraco 13 on Azure App Service, promote dev→staging→prod
/cloud-landing-zone Hub-spoke, three app spokes, Defender for Cloud, Azure Firewall
/cloud-terraform-module AzureRM module for Container Apps + Key Vault + ACR
/cloud-environment-runbook staging environment for Optimizely DXP on Azure
/cloud-security-baseline Sitecore XM Cloud workload, ISO 27001 aligned
/cloud-devops

Or trigger the router command:

/cloud-devops

Permissions required

Skills in this bundle read local IaC files and write generated files. Specific tool grants per skill are declared in each SKILL.md. No credential directories (.azure/, .aws/, .ssh/) are accessed; authenticate externally using the Azure CLI or workload identity before running deployment steps.

Platform adapters

All skills default to Azure targets. Pass --provider aws (or state it naturally in your prompt) to switch the infrastructure provider:

  • Bicep → CloudFormation / CDK (noted in cloud-bicep-template)
  • AzureRM → AWS provider (handled in cloud-terraform-module)
  • Azure DevOps Pipelines → GitHub Actions (handled in cloud-cicd-pipeline)
  • Azure Policy → AWS Config Rules + Service Control Policies (handled in cloud-security-baseline)

Landing-zone patterns map CAF concepts to AWS Control Tower / Account Factory equivalents when the AWS adapter is active.

Bundled artifacts

Skills

  • cloud-bicep-template — Generates production-ready Azure Bicep templates for PaaS resource combinations (App Service, Container Apps, SQL, Redis, Key Vault, etc.) with parameter files for each environment tier. Use when a project needs repeatable, reviewer-friendly IaC for an Azure workload or when migrating ARM JSON to Bicep.
  • cloud-environment-runbook — Produces a comprehensive environment runbook for an Azure deployment — topology diagrams, access patterns, deployment procedures, incident-response steps, and rollback playbooks. Use before go-live on any environment to ensure the platform team can operate it without the original delivery team present.
  • cloud-landing-zone — Scaffolds a CAF-aligned Azure landing-zone structure — management-group hierarchy, Azure Policy assignments, hub-spoke networking, Log Analytics, and Defender for Cloud — output as Bicep or Terraform. Use when establishing a new client Azure tenant or maturing an existing subscription towards enterprise governance.
  • cloud-security-baseline — Applies the Microsoft cloud security benchmark and RBA's DX workload security standards to an Azure subscription — generating Azure Policy assignments, RBAC role definitions, and a gap-assessment report with prioritised remediations. Use before go-live or during a security review of an Azure DX environment.
  • cloud-terraform-module — Generates structured Terraform modules for Azure (AzureRM) or AWS providers — with remote state on Azure Blob Storage or S3, workspace-per-environment parity, and per-environment tfvars. Use when a project uses Terraform as its IaC tool or when converting Bicep/ARM to Terraform.
  • cloud-cicd-pipeline — Authors multi-stage Azure Pipelines YAML (or GitHub Actions) for build, test, security scan, and environment-gated deployment — with OIDC service connections, Key Vault variable groups, and approval gates. Use when creating or modernising CI/CD for a DX platform project.

Agents

  • cloud-infra-reviewer — Reviews Bicep and Terraform IaC files for cost optimisation, security gaps, naming-convention drift, and missing resource tags — returning structured findings with severity and specific fix guidance. Invoke as a subagent after generating IaC with cloud-bicep-template or cloud-terraform-module, or as a standalone reviewer on existing infrastructure code.

Slash Commands

  • /cloud-devops — Entry-point router for the Cloud & DevOps Accelerator — reads the project context and guides you to the right skill. Use when unsure which skill to invoke, or to get a contextual assessment of what cloud and DevOps work the current project needs.
Technical details
Homepage
https://rba-skills.tylerschroeder.net/plugins/cloud-devops-accelerator/
License
MIT
Maturity
experimental
Security review
No security review
Owners
  • engineering
Platforms
azure, azure-devops
Disciplines
engineering
Lifecycle
build, operate
Tags
  • bicep
  • terraform
  • ci-cd
  • landing-zone
  • aws
  • infrastructure-as-code
  • security
  • runbook
  • sre
  • cms-hosting
  • sitecore
  • umbraco
  • optimizely
Last updated
by Tyler Schroeder
Source
plugins/cloud-devops-accelerator/

Edit this plugin's README on GitHub — opens GitHub's web editor. No git knowledge needed.