The Terraform Drift Detection skill provides a structured framework for DevOps engineers to identify discrepancies between Infrastructure as Code (IaC) and actual cloud resources. It automates the process of refreshing state, analyzing changes via JSON output, and categorizing drift by severity levels—ranging from critical security modifications to low-impact tag changes. By providing clear resolution paths such as accepting the drift into state or reverting resources to match the code, it ensures that your AWS environment remains secure, predictable, and fully synchronized with your Terraform configuration.
主要功能
01Guided resolution workflows for accepting or rejecting changes
02Memory integration to track recurring drift patterns over time
03Automated state refreshing and JSON-based impact analysis
04Security-first verification of AWS credentials and environments
050 GitHub stars
06Drift categorization by severity (Security, Configuration, Tag, Metadata)
使用场景
01Detecting unauthorized manual changes made via the AWS Management Console
02Synchronizing state files after emergency hotfixes or auto-scaling events
03Auditing security group and IAM modifications for compliance