Someone clicked in the console at 2am. Now your Terraform lies. Drift Detective continuously compares cloud reality against your IaC state, attributes every drift to its source, and opens reconcile PRs.
Detect Your DriftTerraform, Pulumi, CloudFormation state vs live cloud — checked hourly.
CloudTrail/audit logs identify who changed what, when and why.
Choose import-to-IaC or revert-to-state — either way, one PR to merge.
Security-group and IAM drift flagged critical; cost drift reported to FinOps Radar.
Console changes trigger instant Slack alerts with revert options.
Deep integration with Zion IaC Services workflows.