About

Imported from jeremylongshore/tons-of-skills-marketplace (skills/.curated/detecting-infrastructure-drift/SKILL.md). Install upstream with npx skills add jeremylongshore/tons-of-skills-marketplace --skill detecting-infrastructure-drift. Copyright stays with the author (MIT).

Detecting Infrastructure Drift

Name: detecting-infrastructure-drift
Author: jeremylongshore

Current State

!ls *.tf Dockerfile docker-compose.yml 2>/dev/null || echo 'No IaC files found' !terraform version 2>/dev/null || echo 'Terraform not installed'

Overview

Detect discrepancies between actual cloud infrastructure state and the desired state defined in IaC (Terraform, CloudFormation, Pulumi). Run drift detection commands, analyze modified/added/deleted resources, generate drift reports with affected resources, and provide remediation steps to bring infrastructure back into compliance.

Prerequisites

IaC configuration files up to date in the project directory
Cloud provider CLI installed and authenticated with read access to all managed resources
IaC tool installed: Terraform 1.0+, AWS CLI (for CloudFormation drift), or Pulumi
Remote state storage accessible and current (S3 backend, Terraform Cloud, Pulumi Cloud)
Read-only IAM permissions for all resource types managed by IaC

Instructions

Identify the IaC tool in use by scanning for .tf files, template.yaml, or Pulumi.yaml
Initialize the IaC tool if needed: terraform init to download providers and configure backend
Run drift detection: terraform plan -detailed-exitcode (exit code 2 = drift detected), aws cloudformation detect-stack-drift, or pulumi preview
Parse the output to identify resources with drift: added (exists in cloud but not in IaC), modified (attributes changed), or deleted (in IaC but missing from cloud)
For each drifted resource, determine if the drift is intentional (manual hotfix) or unintentional (configuration error, unauthorized change)
Generate a structured drift report with resource identifiers, attribute differences, and severity classification
Provide remediation options per resource: terraform apply to enforce desired state, terraform import to adopt changes, or update IaC to match reality
Schedule recurring drift detection: configure a cron job or CI pipeline to run daily and alert on drift
Investigate the root cause: determine who made the manual change and implement guardrails (SCPs, IAM restrictions) to prevent recurrence

Output

Drift detection report with resource-level detail: resource type, ID, drifted attributes, expected vs. actual values
Remediation commands: terraform apply, terraform import, or IaC code updates
CI/CD pipeline step for automated drift detection on a schedule
Alert configuration for drift detection results (Slack, email, PagerDuty)
Prevention recommendations: IAM policy restrictions, SCP guardrails, automated enforcement

Error Handling

Error	Cause	Solution
`Error acquiring state lock`	Another Terraform process is running or stale lock	Wait for the other process; use `terraform force-unlock <ID>` if the lock is stale
`Unable to authenticate to cloud provider`	Expired or missing credentials	Refresh with `aws configure`, `gcloud auth login`, or `az login`
`No state file found`	Backend not initialized or state file deleted	Run `terraform init` to configure the backend; restore state from backup if deleted
`Access denied reading resource`	IAM policy missing read permissions for some resource types	Grant read-only access for all resource types managed by IaC (`ReadOnlyAccess` or specific policies)
`State file version mismatch`	Terraform version newer than state format	Upgrade Terraform to match the state version or use `terraform state replace-provider`

Examples

"Run drift detection against all Terraform-managed infrastructure and generate a report of resources that have changed since last apply."
"Set up a daily GitHub Actions workflow that runs terraform plan and posts drift results to Slack if any resources are out of sync."
"Detect CloudFormation stack drift for the production VPC stack and provide remediation steps for any MODIFIED resources."

Resources

Terraform drift detection: https://developer.hashicorp.com/terraform/tutorials/state/resource-drift
CloudFormation drift detection: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/detect-drift-stack.html
Pulumi drift detection:
Preventing drift: https://developer.hashicorp.com/terraform/tutorials/state/refresh

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/jeremylongshore-tons-of-skills-marketplace-detecting-inf-26324f/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

jeremylongshore-tons-of-skills-marketplace-detecting-inf-26324f.ocm.jsonjson

{
  "ocm": "1",
  "id": "jeremylongshore-tons-of-skills-marketplace-detecting-inf-26324f",
  "kind": "skill",
  "name": "detecting-infrastructure-drift",
  "description": "Execute use when detecting infrastructure drift from desired state. Trigger with phrases like \"check for drift\", \"infrastructure drift detection\", \"compare actual vs desired state\", or \"detect configuration changes\". Identifies discrepancies between current infrastructure and IaC definitions using terraform plan, cloudformation drift detection, or manual comparison.",
  "publisher": "jeremylongshore",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "devops",
      "terraform",
      "detecting-infrastructure",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Execute use when detecting infrastructure drift from desired state. Trigger with phrases like \"check for drift\", \"infrastructure drift detection\", \"compare actual vs desired state\", or \"detect configuration changes\". Identifies discrepancies between current infrastructure and IaC definitions using terraform plan, cloudformation drift detection, or manual comparison."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/jeremylongshore/tons-of-skills-marketplace",
      "path": "skills/.curated/detecting-infrastructure-drift/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/jeremylongshore/tons-of-skills-marketplace/blob/HEAD/skills/.curated/detecting-infrastructure-drift/SKILL.md",
      "key": "jeremylongshore/tons-of-skills-marketplace/skills/.curated/detecting-infrastructure-drift/SKILL.md"
    },
    "compatibility": "Designed for Claude Code",
    "allowed_tools": [
      "Read,",
      "Write,",
      "Edit,",
      "Grep,",
      "Glob,",
      "Bash(terraform:*),",
      "Bash(aws:*),",
      "Bash(gcloud:*)"
    ],
    "license": "MIT"
  },
  "instructions": "# Detecting Infrastructure Drift\n\n## Current State\n\n!`ls *.tf Dockerfile docker-compose.yml 2>/dev/null || echo 'No IaC files found'`\n!`terraform version 2>/dev/null || echo 'Terraform not installed'`\n\n## Overview\n\nDetect discrepancies between actual cloud infrastructure state and the desired state defined in IaC (Terraform, CloudFormation, Pulumi). Run drift detection commands, analyze modified/added/deleted resources, generate drift reports with affected resources, and provide remediation steps to bring infrastructure back into compliance.\n\n## Prerequisites\n\n- IaC configuration files up to d",
  "cost": {
    "context_tokens": 1073
  }
}

Fetch it by URL: GET /api/v1/registry/jeremylongshore-tons-of-skills-marketplace-detecting-inf-26324f/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.