How Can You Detect Infrastructure Drift in IaC?

Sure, here's a quick flow: you create your Terraform code and apply it. If someone goes in and messes with things manually, your next apply will show those changes. It reverts everything back to what your code defines. So, you essentially keep track by regularly applying your configurations and fixing any deviations.

To really manage drift, it's essential to restrict ClickOps access completely. Only allow manual changes in development environments, not in production or testing phases. This way, your infrastructure remains intact, and you can focus on planning with IaC.

Before you even think about drift detection, you need to have IaC set up first. If there's no code to compare against, tracking changes is pointless. Get your IaC in place, then you can start worrying about drifts.

Drift detection depends heavily on your IaC tool. For instance, if you're using Terraform, just run a 'plan' command to see what would change. This allows you to spot any discrepancies caused by manual edits.