AWS CloudFormation Drift Detection & Remediation Guide
· via Spacelift
Summary: CloudFormation ships drift detection, and this guide covers using it honestly: detection is on demand and has documented blind spots worth knowing before trusting a green result. Remediation is rarely just re-apply, since import or careful template updates preserve the fix someone made for a reason. Prevention is organizational: lock down console writes and make the pipeline the only door.
Who should read it: CloudFormation operators, and anyone auditing an estate where the console has had visitors.