Home / Companies / Snyk / Blog / Post Details
Content Deep Dive

Improving coverage of cloud resources to reduce infrastructure drift

Blog post from Snyk

Post Details
Company
Date Published
Author
Stephane Jourdan
Word Count
2,878
Language
English
Hacker News Points
-
Summary

Drift detection of managed resources has been deprecated. Snyk IaC helps developers discover cloud resources not under Terraform control, or that have drifted from their expected state, by listing them as Terraform resources. It also provides a built-in way to ignore resources in bulk and reports everything in Terraform terms with the right information to help developers import those resources into their HCL code. However, automatically reverting changes might not always be the desired outcome, and a lightweight drift detection alerting system is needed in conjunction with the deployment pipeline. Snyk IaC drives faster fixes by closing the feedback loop between cloud security and engineering teams and reporting actionable fixes direct to engineer, in engineer-friendly terms.