Detect drift between IaC definitions and actual cloud resource state
Project description
iac-drift-detector
Detect drift between IaC definitions and actual cloud resource state.
Compare Terraform/CloudFormation/Pulumi state against live cloud resources to identify missing resources, unmanaged infrastructure, property drift, and tag mismatches.
Features
- Multi-Provider — Terraform, CloudFormation, Pulumi, Bicep, ARM detection
- Drift Detection — Missing/Unmanaged/Modified/Tag drift with severity scoring
- Drift Score & Grade — A-F grading system (0-100 score)
- Security-Aware — Critical severity for security groups and IAM changes
- 10 Detection Rules — IAC-001 to IAC-010
Installation
pip install -e .
Quick Start
iac-drift-detector demo
iac-drift-detector scan demo-drift/iac-state.yaml demo-drift/cloud-state.yaml
iac-drift-detector scan demo-drift/iac-state.yaml demo-drift/cloud-state.yaml --fail-on critical
iac-drift-detector rules
Testing
python -m pytest tests/ -v
License
MIT
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file iac_drift_detector-1.0.0.tar.gz.
File metadata
- Download URL: iac_drift_detector-1.0.0.tar.gz
- Upload date:
- Size: 12.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.11.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5d4639f2a9bbd2953e5305510ced9262b4cf42c24931c25fecf07e10d600fd8f
|
|
| MD5 |
d35a8f07d494f47fdbbe8bfdfaed6129
|
|
| BLAKE2b-256 |
0709437b6460deead096b706c836fabe0e1520261827a7d12c1610707cf40262
|
File details
Details for the file iac_drift_detector-1.0.0-py3-none-any.whl.
File metadata
- Download URL: iac_drift_detector-1.0.0-py3-none-any.whl
- Upload date:
- Size: 13.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.11.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
b8c84d7c171d134d343e27d4e80e229360a85bfe0b3694b7048fcaf83f2afc24
|
|
| MD5 |
aea5e7c88f437464089696b87129f45c
|
|
| BLAKE2b-256 |
b68e09308d0439fa3ebfa05c3d53a4a3d15d00d7001fcadf375dbad494d4ee1c
|
