Amazon Announces AWS CloudFormation Drift Detection

Recently, AWS CloudFormation has announced a new feature - drift detection, to help organizations to automate configuration consistency across AWS cloud resources.

Recently, AWS CloudFormation has announced a new feature - drift detection, to help organizations to automate configuration consistency across AWS cloud resources. This feature will help organizations to detect when configuration drift occurs from out-of-band changes.
 
According to the company, using drift detection when you apply for drift detection, "CloudFormation compares the current stack configuration to the one specified in the template that was used to create or update the stack and reports on any differences, providing you with detailed information on each one."
 
You can make use of the drift detection feature for API Gateway, Auto Scaling, CloudTrail, CloudWatch Events, CloudWatch Logs, DynamoDB, Amazon EC2, Elastic Load Balancing, IAM, AWS IoT, Lambda, Amazon RDS, Route 53, Amazon S3, Amazon SNS, and Amazon SQS.
 
A sample of Drift Detection in Action was provided in announcement blog, by, Jeff Barr, chief evangelist at AWS.
 
You just need to select the stack and choose "Detect drift" from the Actions menu.
 
Source: aws.amazon.com 
 
Then, confirm your intent and click Yes, detect:
 
 
Source: aws.amazon.com 
 
Source: aws.amazon.com 
 
You can see the Drift status of your stack in IN_SYNC 
 
Source: aws.amazon.com
 
You can see the drift status of each checked resource by taking a look at the Resources tab as below.