> ## Documentation Index
> Fetch the complete documentation index at: https://docs.infraudit.com/llms.txt
> Use this file to discover all available pages before exploring further.

# infraudit drift — infrastructure drift detection commands

> infraudit drift scan, list, get, acknowledge — detect and manage infrastructure configuration drift. Key flags: --severity, --status, --type, --provider.

The `drift` command group detects, lists, and manages configuration drift — cases where live infrastructure diverges from its expected or baseline state. Drift findings are categorized by severity and type.

## `drift detect`

Trigger a drift detection scan across all resources from all connected providers:

```bash theme={null}
infraudit drift detect
```

To scan a specific provider, combine with `--provider` on `drift list` after the scan, or use the `provider sync` command first to ensure resources are up to date.

## `drift list`

List drift findings with optional filters.

**Synopsis:**

```bash theme={null}
infraudit drift list [flags]
```

| Flag         | Values                                    | Description                 |
| ------------ | ----------------------------------------- | --------------------------- |
| `--severity` | `critical`, `high`, `medium`, `low`       | Filter by severity level    |
| `--status`   | `detected`, `investigating`, `resolved`   | Filter by resolution status |
| `--type`     | `configuration`, `security`, `compliance` | Filter by drift category    |
| `--provider` | provider ID                               | Filter by provider          |

Examples:

```bash theme={null}
# List all drift findings
infraudit drift list

# Show only critical findings
infraudit drift list --severity critical

# Show detected security drifts
infraudit drift list --status detected --type security

# Output as JSON and count critical findings
infraudit drift list --severity critical -o json | jq 'length'
```

## `drift get`

Show full details for a single drift finding, including the expected and actual values:

**Synopsis:**

```bash theme={null}
infraudit drift get <drift-id>
```

Example:

```bash theme={null}
infraudit drift get 5
```

## `drift summary`

Show an aggregate summary of drift findings grouped by severity:

```bash theme={null}
infraudit drift summary
```

Example output:

```
SEVERITY   COUNT
--------   -----
critical   2
high       7
medium     14
low        31
```

## `drift resolve`

Mark a drift finding as resolved after you have addressed the underlying issue:

**Synopsis:**

```bash theme={null}
infraudit drift resolve <drift-id>
```

Example:

```bash theme={null}
infraudit drift resolve 5
```

## `drift acknowledge`

Acknowledge a drift finding to indicate it is under investigation, without marking it as resolved:

**Synopsis:**

```bash theme={null}
infraudit drift acknowledge <drift-id>
```

Example:

```bash theme={null}
infraudit drift acknowledge 5
```

<Tip>
  To generate an AI-powered remediation suggestion for a drift finding, use [`infraudit remediation suggest-drift <id>`](/cli/commands/remediation).
</Tip>