Ravi Sir's Cards › AWS
Detect drift
This revision card explains Detect drift. It starts from the need that someone changed a security group in the console; the template no longer matches reality. It describes drift detection compares stack resources to the template and flags unmanaged changes. The how-to section covers how to run detect-drift on prod weekly; fix by template update or import, not silent console edits. An example on the card is SSH port opened manually shows MODIFIED on the security group resource.
Read card text
What this card says
Why do we need it?
Someone changed a security group in the console; the template no longer matches reality.
What is it?
Drift detection compares stack resources to the template and flags unmanaged changes.
drift
How to do it
Run detect-drift on prod weekly; fix by template update or import, not silent console edits.
Example
SSH port opened manually shows MODIFIED on the security group resource.