WINDSURF RULESTerraform & OpenTofu IaC Windsurf Cascade Rules
Generate Windsurf Cascade rules for Terraform & OpenTofu IaC in .windsurf/rules/, with the stack's conventions and checks. Windsurf's Cascade agent reads rules from .windsurf/rules/. This rule gives Cascade the Terraform & OpenTofu IaC conventions, commands and patterns to avoid, so its edits follow the stack instead of generic or outdated defaults.
.windsurf/rules/terraform-iac.mdWhat this file changes for Terraform & OpenTofu IaC
Windsurf's Cascade agent reads rules from .windsurf/rules/. This rule gives Cascade the Terraform & OpenTofu IaC conventions, commands and patterns to avoid, so its edits follow the stack instead of generic or outdated defaults.
Terraform & OpenTofu IaC: code to avoid and code to write instead
# Dangerous: Hardcoded secret, no version lock, unmanaged state
resource "aws_db_instance" "bad_db" {
engine = "postgres"
password = "plaintextpassword123" # Leaked credentials in git!
}terraform {
required_version = ">= 1.7.0"
required_providers {
aws = {
source = "hashicorp/aws"
version = "~> 5.40"
}
}
backend "s3" {
bucket = "corp-tf-state-prod"
key = "vpc/terraform.tfstate"
region = "us-east-1"
dynamodb_table = "terraform-locks"
encrypt = true
}
}
resource "aws_db_instance" "primary" {
identifier = "app-db-prod"
allocated_storage = 50
engine = "postgres"
instance_class = "db.r6g.large"
password = var.db_password
skip_final_snapshot = false
lifecycle {
prevent_destroy = true
}
}How to Install Terraform & OpenTofu IaC Windsurf Cascade Rules via Terminal
Step 1: Open Project Directory & Verify Target Placement
Open your terminal and navigate to your project root folder where the .windsurf/rules/terraform-iac.md file will reside. Ensure the file is placed at the exact path below relative to your project root so the AI engine automatically loads it:
Step 2: Fetch Rule File via Terminal Command
Run curl, PowerShell, or wget to stream the rule directly from the DevScratchpad raw API endpoint and write it to .windsurf/rules/terraform-iac.md:
Terminal One-Liner Install
Run directly in your project root to stream and write this rule file with one command.
mkdir -p ".windsurf/rules" && curl -fsSL "https://www.devscratchpad.tech/api/raw/windsurf-rules/terraform-iac" -o ".windsurf/rules/terraform-iac.md"Step 3: Check that Windsurf Cascade uses it
Cascade reads rules in .windsurf/rules/ and applies this one according to its trigger.
Windsurf rules generator: Cascade rules for your stack
Windsurf Cascade Rules: how it works, where the file goes, and every Windsurf preset.
Tools for Terraform & OpenTofu IaC work
Browser-based utilities to test, format and inspect the code your AI tool writes. Nothing you paste is uploaded.
YAML to JSON / JSON to YAML Converter
Bidirectional YAML and JSON conversion with syntax validation.
Cron Expression Visualizer
Translates complex cron schedules into plain English with a 5-column breakdown grid.
CIDR Calculator & Subnet Inspector
Calculate IPv4 subnet masks, broadcast addresses, and usable ranges.
Base64 / Hex / Binary Multi-Inspector & Image Previewer
Auto-detects Base64, URL-safe Base64, Hex, Binary, URL-encoded, and Data URL input and converts it to every format, plus a Canonical Hex Dump.
Live Repository & Schema Ingestion
Inspect any public or private GitHub repository, or paste SQL DDL and Prisma models directly in AI Skill Studio to auto-generate authentic rules. Zero server transmission.
Migrating from Legacy .cursorrules or CLAUDE.md?
Use the free, in-browser converter to turn one long rules file into Cursor .mdc, Claude SKILL.md or Windsurf rules.
Technical FAQ: Terraform & OpenTofu IaC AI Rulebooks
Where do I save this Windsurf rule?
Save it as .windsurf/rules/terraform-iac.md in your project. Cascade picks up rules in that folder automatically.
When does Windsurf apply this rule?
According to the trigger in its frontmatter: always on, on a glob match, when Cascade decides the description fits the task, or when you @-mention it.