drift-detection

# Skill: Drift Detection > **Expertise:** Terraform plan-based drift detection, CI scheduling, cloud audit log correlation, drift classification. ## When to load When setting up scheduled drift detection, investigating detected drift, or correlating drift with cloud audit events. ## Scheduled Drift Detection (GitHub Actions) ```yaml # .github/workflows/drift-detection.yml name: Drift Detection on: schedule: - cron: '0 */6 * * *' # every 6 hours workflow_dispatch: # manual trigger jobs: detect-drift: runs-on: ubuntu-latest strategy: matrix: component: [network, k8s-cluster, databases, iam-roles] steps: - uses: actions/checkout@v4 - name: Configure AWS credentials (OIDC) uses: aws-actions/configure-aws-credentials@v4 with: role-to-assume: ${{ vars.DRIFT_DETECTOR_ROLE_ARN }} aws-region: eu-west-1 - name: Terraform init working-directory: terraform/environments/production/${{ matrix.component }} run: terraform init -backend-config=backend.hcl - name: Terraform plan (drift check) id: plan working-directory: terraform/environments/production/${{ matrix.component }} run: | terraform plan \ -var-file=terraform.tfvars \ -detailed-exitcode \ -out=drift-check.plan \ 2>&1 | tee drift-output.txt echo "exit_code=$?" >> $GITHUB_OUTPUT continue-on-error: true ...