REST API endpoints for drift detection — GET /drifts

POST /api/v1/drifts/detect
Authorization: Bearer <token>

{
  "job_id": 42,
  "status": "running",
  "message": "Drift detection scan started"
}

GET /api/v1/drifts
Authorization: Bearer <token>

{
  "data": [
    {
      "id": 1,
      "resource_id": 15,
      "resource_name": "data-lake-bucket",
      "resource_type": "s3_bucket",
      "drift_type": "security",
      "severity": "critical",
      "status": "detected",
      "summary": "S3 bucket BlockPublicAcls changed from true to false",
      "baseline_value": true,
      "current_value": false,
      "detected_at": "2024-01-15T14:30:00Z"
    }
  ],
  "meta": { "total": 12, "page": 1, "per_page": 20 }
}

GET /api/v1/drifts/{id}
Authorization: Bearer <token>

PATCH /api/v1/drifts/{id}
Authorization: Bearer <token>
Content-Type: application/json

{
  "status": "investigating"
}

POST /api/v1/drifts/{id}/resolve
Authorization: Bearer <token>
Content-Type: application/json

{
  "capture_baseline": true
}

GET /api/v1/drifts/summary
Authorization: Bearer <token>

{
  "total": 12,
  "by_severity": {
    "critical": 1,
    "high": 4,
    "medium": 5,
    "low": 2
  },
  "by_status": {
    "detected": 8,
    "investigating": 3,
    "resolved": 1
  }
}