AWS Infrastructure Drift Detection: How to Find and Fix Config Drift Before It Breaks Production
Detect AWS config drift with terraform plan + Config. July 2026 runbook: schedule, triage, prevent console writes.
Blog category
Detect AWS config drift with terraform plan + Config. July 2026 runbook: schedule, triage, prevent console writes.
One bad `terraform apply` still deletes databases. July 2026: plan, review, apply, no -auto-approve, OIDC CI, Atlantis/HCP Terraform gates.
AWS provider 6.0 GA June 2025. July 2026: upgrade 4 to 5 to 6 one major at a time, changelog-first, staging plan, lockfile commit.
Terraform on AWS: import, state mv/rm, stuck locks. July 2026: S3 use_lockfile (TF 1.10+); DynamoDB locking is legacy.
ECS blue/green without downtime: CodeDeploy canary/linear still works, and native ECS BLUE_GREEN (2025+) is now a first-class path. July 2026 checklist: hooks, alarms, dual-run cost.
CI/CD infrastructure is invisible until your DevOps bill hits $15,000/month. Build minutes, artifact storage, and ephemeral environments accumulate costs that few teams track. This post covers how to measure and control them.
A 500ms latency spike in a distributed system could be a slow RDS query, a Lambda cold start, a downstream API timeout, or a CloudWatch Logs ingestion delay. Finding the cause requires correlated logs, traces, and metrics, not grep.
Vite 8 (March 2026) ships Rolldown by default. July 2026: Bun install, SWC, CodeBuild cache to cut CI build minutes.
GitHub Actions patterns for AWS workloads in production: OIDC authentication, pinned actions, blue-green deployments, build caching, and the security mistakes that leave your pipeline open to supply chain attacks.
CodePipeline isn't the most loved CI/CD tool, but it talks to every other AWS service natively. Pipeline architecture, CodeBuild configuration, cross-account deploys, and the patterns that ship code safely without bolting on a third-party runner.
June 30, 2026 added two major CloudFormation/CDK changes: pre-deployment validation on Create/Update and Express mode with up to 4x faster stack operations. This guide covers when to use each in production workflows.
CodePipeline costs a few dollars a month. GitHub Actions costs more at scale than most teams expect. Jenkins is free until you count the team running it. Integration, cost, scalability, and team fit across the three CI/CD options most AWS teams actually choose between.