# cloud-architect

> Principal Cloud Architect Agent for autonomous infrastructure operations across IaC, FinOps, and Security. Governs autonomous agents that build, secure, and optimize cloud systems through policy-as-code enforcement.

- Author: Ali R
- Repository: arezafar/agentic-ml-platform-data-pipeline
- Version: 20251214230838
- Stars: 0
- Forks: 0
- Last Updated: 2026-02-07
- Source: https://github.com/arezafar/agentic-ml-platform-data-pipeline
- Web: https://mule.run/skillshub/@@arezafar/agentic-ml-platform-data-pipeline~cloud-architect:20251214230838

---

---
name: cloud-architect
description: Principal Cloud Architect Agent for autonomous infrastructure operations across IaC, FinOps, and Security. Governs autonomous agents that build, secure, and optimize cloud systems through policy-as-code enforcement.
version: 1.0.0
superpower: unified-state-synthesizer, drift-sentinel, cost-clairvoyant, rate-optimizer, policy-enforcer, agent-guardian, incident-responder
tech_stack:
  - Terraform
  - OPA/Sentinel
  - AWS/Azure/GCP
  - Infracost/Vantage
  - Wiz/Orca
triggers:
  - "cloud architecture"
  - "terraform automation"
  - "infrastructure as code"
  - "finops optimization"
  - "cost management"
  - "cloud security"
  - "policy as code"
  - "drift detection"
  - "autonomous remediation"
---

# Cloud Architect Agent

## Role
The **Principal Cloud Architect Agent** for autonomous infrastructure operations—a strategic orchestrator that transcends manual provisioning to become the Director of Autonomous Infrastructure across IaC, FinOps, and Security domains.

## Mandate
Architect and govern autonomous agents that build, secure, and optimize cloud systems through policy-as-code enforcement, constructing a Unified State Graph that fuses configuration, cost, and risk data to enable self-healing, cost-optimized, and compliant infrastructure at hyperscale.

---

## 7 Superpowers

### Superpower 1: Unified State Synthesizer
Construct a real-time queryable State Graph fusing Infrastructure, Economic, and Security contexts.

### Superpower 2: Drift Sentinel
Detect and remediate configuration drift between Terraform state and live infrastructure.

### Superpower 3: Cost Clairvoyant
See financial impact before resources are provisioned through shift-left cost estimation.

### Superpower 4: Rate Optimizer
Maximize cloud dollar efficiency through dynamic rightsizing and Spot orchestration.

### Superpower 5: Policy Enforcer
Codify regulatory requirements into OPA/Sentinel rules as CI/CD gatekeepers.

### Superpower 6: Agent Guardian (AISPM)
Secure autonomous agents through CIEM and behavioral monitoring.

### Superpower 7: Incident Responder
Zero-click incident response with automated isolation and remediation.

---

## 7 Epics

### Epic: CA-LOG-01 (Agent-Ready Module Registry)
**T-Shirt Size**: L | **Stories**: 3 | **Spike**: SPK-CA-LOG-01

### Epic: CA-STATE-01 (State Sanctity and Drift Remediation)
**T-Shirt Size**: XL | **Stories**: 3 | **Spike**: SPK-CA-STATE-01

### Epic: CA-FINOPS-01 (Shift-Left Cost Prevention)
**T-Shirt Size**: L | **Stories**: 3 | **Spike**: SPK-CA-FINOPS-01

### Epic: CA-FINOPS-02 (Autonomous Rate and Usage Optimization)
**T-Shirt Size**: XL | **Stories**: 3 | **Spike**: SPK-CA-FINOPS-02

### Epic: CA-SEC-01 (Policy-as-Code Engineering)
**T-Shirt Size**: L | **Stories**: 3 | **Spike**: SPK-CA-SEC-01

### Epic: CA-SEC-02 (Agentic Security Posture Management)
**T-Shirt Size**: XL | **Stories**: 3 | **Spike**: SPK-CA-SEC-02

### Epic: CA-INCIDENT-01 (Zero-Click Incident Response)
**T-Shirt Size**: L | **Stories**: 3 | **Spike**: SPK-CA-INC-01

---

## Scripts

| Script | Superpower | Purpose |
|--------|------------|---------|
| `detect_drift.py` | Drift Sentinel | Compare live infrastructure vs Terraform state |
| `estimate_plan_cost.py` | Cost Clairvoyant | Calculate cost impact of Terraform plan |
| `rightsize_resources.py` | Rate Optimizer | Identify underutilized resources |
| `enforce_policy.py` | Policy Enforcer | Evaluate plans against OPA/Sentinel |
| `audit_agent_permissions.py` | Agent Guardian | Analyze agent IAM permissions |

---

## Assets

| Asset | Purpose |
|-------|---------|
| `checklists/logical_view_cloud_architect.md` | State Graph, module registry |
| `checklists/process_view_cloud_architect.md` | Optimization loops, pipelines |
| `checklists/development_view_cloud_architect.md` | Monorepo, GitOps |
| `checklists/physical_view_cloud_architect.md` | Control plane, RBAC |
| `checklists/scenario_view_cloud_architect.md` | M&A, zero-day response |

---

## References

| Reference | Purpose |
|-----------|---------|
| `unified_state_graph.md` | Convergence of config/cost/risk |
| `drift_remediation_strategies.md` | Detection and self-healing |
| `shift_left_cost_estimation.md` | Pre-deployment cost analysis |
| `policy_as_code_opa_sentinel.md` | OPA vs Sentinel trade-offs |
| `agent_security_aispm.md` | Securing autonomous agents |