iac-drift-detector

Detect drift between IaC definitions and actual cloud resource state.

Compare Terraform/CloudFormation/Pulumi state against live cloud resources to identify missing resources, unmanaged infrastructure, property drift, and tag mismatches.

Features

• Multi-Provider — Terraform, CloudFormation, Pulumi, Bicep, ARM detection
• Drift Detection — Missing/Unmanaged/Modified/Tag drift with severity scoring
• Drift Score & Grade — A-F grading system (0-100 score)
• Security-Aware — Critical severity for security groups and IAM changes
• 10 Detection Rules — IAC-001 to IAC-010

Installation

pip install -e .

Quick Start

iac-drift-detector demo
iac-drift-detector scan demo-drift/iac-state.yaml demo-drift/cloud-state.yaml
iac-drift-detector scan demo-drift/iac-state.yaml demo-drift/cloud-state.yaml --fail-on critical
iac-drift-detector rules

Testing

python -m pytest tests/ -v

License

MIT