Skip to main content
The drift command group detects, lists, and manages configuration drift — cases where live infrastructure diverges from its expected or baseline state. Drift findings are categorized by severity and type.

drift detect

Trigger a drift detection scan across all resources from all connected providers:
infraudit drift detect
To scan a specific provider, combine with --provider on drift list after the scan, or use the provider sync command first to ensure resources are up to date.

drift list

List drift findings with optional filters. Synopsis:
infraudit drift list [flags]
FlagValuesDescription
--severitycritical, high, medium, lowFilter by severity level
--statusdetected, investigating, resolvedFilter by resolution status
--typeconfiguration, security, complianceFilter by drift category
--providerprovider IDFilter by provider
Examples:
# List all drift findings
infraudit drift list

# Show only critical findings
infraudit drift list --severity critical

# Show detected security drifts
infraudit drift list --status detected --type security

# Output as JSON and count critical findings
infraudit drift list --severity critical -o json | jq 'length'

drift get

Show full details for a single drift finding, including the expected and actual values: Synopsis:
infraudit drift get <drift-id>
Example:
infraudit drift get 5

drift summary

Show an aggregate summary of drift findings grouped by severity:
infraudit drift summary
Example output:
SEVERITY   COUNT
--------   -----
critical   2
high       7
medium     14
low        31

drift resolve

Mark a drift finding as resolved after you have addressed the underlying issue: Synopsis:
infraudit drift resolve <drift-id>
Example:
infraudit drift resolve 5

drift acknowledge

Acknowledge a drift finding to indicate it is under investigation, without marking it as resolved: Synopsis:
infraudit drift acknowledge <drift-id>
Example:
infraudit drift acknowledge 5
To generate an AI-powered remediation suggestion for a drift finding, use infraudit remediation suggest-drift <id>.