Build a Configuration Drift Detective that compares desired infrastructure configurations against exported snapshots of actual environments. Support infrastructure-as-code plans, environment configuration files, Kubernetes manifests, and structured JSON or YAML inventories. Identify unexpected changes, missing resources, inconsistent settings across environments, exposed configuration values, and differences that could affect availability or security. Explain each finding, classify its severity, and connect it to the relevant configuration source. Generate proposed remediation patches and a review workflow with rollback guidance. Never expose secrets in reports, assume every difference is harmful, or apply infrastructure changes without explicit approval.
0 Comments