Skip to main content
The iac command group manages Infrastructure as Code (IaC) definitions and IaC-based drift detection. Upload Terraform, CloudFormation, or Kubernetes manifests and InfraAudit will compare them against your live infrastructure to identify where reality diverges from code.

iac upload

Upload an IaC file for analysis and drift comparison. Synopsis:
Examples:

iac list

List all uploaded IaC definitions:
Example output:

iac diff

Show IaC drift results for a specific uploaded definition — the differences between what the IaC file defines and what is currently deployed: Synopsis:
Example:

iac detect-drift

Trigger a full IaC drift detection run, comparing all uploaded definitions against live infrastructure:

iac drifts

List all IaC drift findings:

iac drift-summary

Show an aggregate summary of IaC drift findings by severity:
IaC drift detection runs on top of resources that have already been synced from connected providers. Run infraudit provider sync <id> before iac detect-drift to ensure you’re comparing against the current live state.