Safely handle configuration drift with AWS CloudFormation drift-aware change sets

This article announces AWS CloudFormation's new drift-aware change sets feature, which detects and resolves configuration drift in infrastructure managed by Infrastructure as Code (IaC).

• Compares IaC templates with actual infrastructure state to identify drift
• Provides three-way diff between new template, last-deployed template, and current state
• Reverts drifted resources to match template definitions during deployment
• Previews deployment impact on drifted resources before execution
• Restores infrastructure to previous state if provisioning errors occur
• Accessible via CloudFormation Console or CreateChangeSet API with REVERT_DRIFT parameter
• Available in all AWS Regions where CloudFormation is supported

Drift-aware change sets help teams maintain infrastructure consistency and security by preventing unintended changes from manual modifications outside of IaC.