A CLI tool that scans cloud infrastructure to detect, track, and alert on drift from Terraform IaC definitions.
driftctl is a free and open-source CLI tool that detects, tracks, and alerts on infrastructure drift between Terraform IaC definitions and actual cloud resources. It scans cloud providers like AWS, Azure, GCP, and GitHub to identify discrepancies, helping prevent security issues and configuration mismanagement caused by manual changes or unauthorized actions.
DevOps engineers, SREs, and security teams managing cloud infrastructure with Terraform who need to ensure consistency between IaC and deployed resources.
Developers choose driftctl because it provides a dedicated, open-source solution for tracking infrastructure drift, offering visibility into IaC coverage and early detection of misconfigurations without relying on proprietary or integrated platform tools.
Detect, track and alert on infrastructure drift
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
As a free and open-source tool, driftctl avoids vendor lock-in and allows community customization, with clear licensing and download stats shown in the README.
Scans AWS, Azure, GCP, and GitHub for drift, providing broad coverage for hybrid or multi-cloud environments managed with Terraform.
Specifically maps cloud resources to Terraform IaC code, making it ideal for teams standardized on Terraform to track infrastructure coverage.
Supports multiple output formats, enabling easy pipeline integration for automated drift checks, as highlighted in the features section.
The project is in maintenance mode with no promise to review contributions, limiting future development and community-driven enhancements.
Still in beta with potential breaking changes, as warned in the README, which can lead to instability and require frequent updates in production.
Only compatible with Terraform IaC, so it's not suitable for teams using other frameworks like CloudFormation or Kubernetes manifests directly.