About adk-infra-expert
adk-infra-expert is a skill for generating and validating Terraform infrastructure for Vertex AI ADK deployments. It helps teams apply security controls and produce a deployment checklist and validation report.
Key features
- 01Terraform module generation and validation
- 02Secure VPC and Private Service Connect setup
- 03Least-privilege IAM configuration
- 04Agent Engine, Code Execution, and Memory Bank setup
- 05VPC Service Controls and monitoring
- 06Deployment validation and checklist
Use cases
- 01Provisioning infrastructure for a Vertex AI ADK agent
- 02Applying enterprise network and IAM constraints
- 03Reviewing deployment components and configuration
Install
Copy the command and run it in a terminal.
npx skills add https:/ / github.com/ jeremylongshore/ tons-of-skills-marketplace --skill adk-infra-expertAfter installing, type/adk-infra-expertin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
references/ARD.mderrors.mdexamples.mdimplementation.mdPRD.mdscripts/init-terraform.shDetails
From the project READMEAdk Infra Expert
Overview
Provision production-grade Vertex AI ADK infrastructure with Terraform: secure networking, least-privilege IAM, Agent Engine runtime, Code Execution sandbox defaults, and Memory Bank configuration. Use this skill to generate/validate Terraform modules and a deployment checklist that matches enterprise security constraints (including VPC Service Controls when required).
Prerequisites
Before using this skill, ensure:
- Google Cloud project with billing enabled
- Terraform 1.0+ installed
- gcloud CLI authenticated with appropriate permissions
- Vertex AI API enabled in target project
- VPC Service Controls access policy created (for enterprise)
- Understanding of Agent Engine architecture and requirements
Instructions
- Initialize Terraform: Set up backend for remote state storage
- Configure Variables: Define project_id, region, agent configuration
- Provision VPC: Create network infrastructure with Private Service Connect
- Set Up IAM: Create service accounts with least privilege roles
- Deploy Agent Engine: Configure runtime with code execution and memory bank
- Enable VPC-SC: Apply service perimeter for data exfiltration protection
- Configure Monitoring: Set up Cloud Monitoring dashboards and alerts
- Validate Deployment: Test agent endpoint and verify all components
Output
- Configuration files or code changes applied to the project
- Validation report confirming correct implementation
- Summary of changes made and their rationale
See Terraform implementation details for output format specifications.
Error Handling
See ${CLAUDE_SKILL_DIR}/references/errors.md for comprehensive error handling.
Examples
See ${CLAUDE_SKILL_DIR}/references/examples.md for detailed examples.
Resources
- Agent Engine: https://cloud.google.com/vertex-ai/generative-ai/docs/agent-engine/overview
- VPC-SC: https://cloud.google.com/vpc-service-controls/docs
- Terraform Google Provider: https://registry.terraform.io/providers/hashicorp/google/latest
- ADK Terraform examples in ${CLAUDE_SKILL_DIR}/examples/