Infrastructure Drift Detection and Remediation

Detect and remediate infrastructure drift across Terraform, CloudFormation, and Pulumi stacks.

6|Updated Oct 25, 2025
One-click install
npx skills add https://github.com/williamzujkowski/cognitive-toolworks --skill infrastructure-drift-detection-and-remediation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Infrastructure Drift Detection and Remediation
Source: https://github.com/williamzujkowski/cognitive-toolworks/tree/main/skills/devops-drift-detector
Command: npx skills add https://github.com/williamzujkowski/cognitive-toolworks --skill infrastructure-drift-detection-and-remediation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Drift between infrastructure as code (IaC) definitions and live cloud resources can cause outages, misconfigurations, and compliance risk. This Skill provides automated drift detection, impact analysis, remediation planning, and auditable rollback workflows to keep environments in sync.

Core Features & Use Cases

  • Detect drift across Terraform, CloudFormation, Pulumi, and driftctl-driven stacks.
  • Generate remediation plans with impact analysis and compliance mapping.
  • Auto-remediate selected drifts with rollback support and audit trails.
  • Use case: Regular drift scans in production to ensure IaC state matches deployed resources and trigger safe remediation workflows.

Quick Start

Initiate a drift scan for your IaC workspace and review the generated remediation plan.

Frequently Asked Questions about Infrastructure Drift Detection and Remediation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect infrastructure drift between Terraform and live cloud resources?

Infrastructure drift detection scans your IaC definitions against live cloud resources to identify configuration mismatches. This Skill supports Terraform, CloudFormation, Pulumi, and driftctl to generate deterministic drift reports for single-workspace or multi-stack environments.

What is the best way to automate drift remediation for CloudFormation stacks?

Automated drift remediation applies policy-driven fixes to bring live cloud resources back into sync with IaC definitions. This Skill generates remediation plans with impact analysis, executes fixes, and provides rollback support with audit trails for CloudFormation and other IaC frameworks.

Does this drift detection tool work with Pulumi and driftctl?

Yes, this drift detection tool works with Pulumi and driftctl contexts. It supports scheduled drift monitoring and multi-stack remediation use cases across Terraform, CloudFormation, and Pulumi without requiring additional dependencies.

Can I schedule regular IaC drift scans in production environments?

Yes, you can schedule regular IaC drift scans in production to ensure deployed resources match your IaC state. The Skill supports scheduled drift monitoring and triggers safe remediation workflows with compliance mapping and auditable rollback capabilities.

Why does infrastructure drift cause compliance risk and outages?

Infrastructure drift causes compliance risk and outages because live cloud resources deviate from defined IaC configurations, introducing untracked changes. Detecting and remediating this drift keeps environments synchronized and ensures policy compliance.

How do I generate a remediation plan with rollback support for IaC drift?

To generate a remediation plan with rollback support, initiate a drift scan for your IaC workspace. The Skill produces a remediation plan featuring impact analysis, compliance mapping, and auditable rollback workflows to safely correct detected drift.