More Info:

Your AWS CloudFormation stacks should not be drifted from their expected template configuration. A CloudFormation stack is considered to have drifted from its configuration if one or more of its resources have been drifted.

Risk Level

Medium

Address

Operational Maturity, Reliability

Compliance Standards

CBP

Triage and Remediation

Remediation

To remediate AWS CloudFormation Drift Detection, follow these steps:

  1. Log in to the AWS Management Console.
  2. Navigate to the CloudFormation service.
  3. Click on the stack that has drift detection enabled.
  4. Click on the “Drift” tab.
  5. Review the drift detection results to identify the resources that have drifted.
  6. Click on the “Resources” tab to see the current state of the resources.
  7. Select the resources that have drifted and click on the “Detect Drift” button.
  8. Wait for the drift detection process to complete.
  9. Review the drift detection results to confirm that the resources have been remediated.
  10. If necessary, make changes to the stack to remediate the drift.
  11. Update the stack to apply the changes.
  12. Repeat the drift detection process to confirm that the resources are no longer drifting.

Additional Reading: