All Articles

Browse 2 articles by topic or keyword.

I Added a Tag in AWS. Terraform Removed It Automatically.

I added a tag directly to an EC2 instance in AWS, then ran my Terraform drift detector. The change was classified as LOW, Lambda started a separate remediation build, and Terraform removed the tag automatically.

July 30, 2026Terraform Drift: Catching Infrastructure Changes Before They Catch You

#Terraform#AWS

My Terraform Drift Alert Could Not Explain the Drift

My Terraform drift detector could send an email, but it could not explain what changed or how serious it was. I changed the SNS message into structured JSON, delivered it to SQS for audit processing, and used Lambda to classify every resource change by severity.

July 22, 2026Terraform Drift: Catching Infrastructure Changes Before They Catch You

#Terraform#AWS