Observed Signal · May 17, 2026 · Technical Implementation · Source: DEV Community · Impact: 2/5 · Sentiment: Neutral
Auto-healing CloudFormation Drift with Durable Functions
The article demonstrates an automated Configuration Healing workflow that detects and remediates AWS CloudFormation stack drift by using Durable Functions orchestrations implemented with the AWS Lambda Durable Execution SDK for Python. It describes AWS’s November 2025 addition of "drift-aware change sets" (deploy-mode REVERT_DRIFT) that let CloudFormation generate remediation change sets automatically, then shows a sample implementation: a CloudFormation test stack, intentional drift via SSM parameter changes, a Durable Functions workflow that polls for asynchronous operations, automatic creation and optional execution of drift-aware change sets, SNS notifications, and deployment via AWS SAM. The author published source code on GitHub and describes an option to stop after change-set creation for human review before execution.
Practical cloud-infrastructure automation pattern that eases long‑running orchestration and drift remediation; useful to engineering teams but has limited direct impact on the AdTech industry broadly.
Track Real-Time Infrastructure Signals & Market Shifts
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- AWS added "drift-aware change sets" to CloudFormation in November 2025.
- The author implemented automatic detection and remediation of CloudFormation drift using Durable Functions and the AWS Lambda Durable Execution SDK for Python.
- Implementation includes an example CloudFormation stack (AWS::SSM::Parameter) and a workflow that creates and can execute drift-aware change sets (using --deployment-mode REVERT_DRIFT).
- The sample deployment is available as a SAM application and the full source is published on GitHub (repository: sample-aws-cfn-configuration-healing).
- Workflow supports SNS notifications and a CreateChangeSetOnly flag to stop after change-set creation for manual review.
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Infrastructure Drift: How to Detect and Prevent It
This technical guide defines infrastructure drift as mismatches between infrastructure-as-code (IaC) declarations and actual cloud state caused by manual edits. It describes common causes (emergency edits, partial migrations, console-first teams), explains why drift harms reliability and audits, and recommends detection and prevention techniques: schedule terraform plan runs and alert on diffs, use cloud-native drift tools (AWS Config, GCP Asset Inventory), treat Git as the source of truth, remove manual edit permissions or enforce write-only service accounts, and build fast-path IaC pipelines to enable quick emergency changes with auditability. The article was published on 2026-08-11 and authored by Samson Tanimawo, Founder & CEO of Nova AI Ops.
Terraform Auto-Removes Manual AWS EC2 Tag
A developer tested an automatic remediation control loop that detects Terraform drift in AWS, classifies the severity, and runs a separate remediation pipeline to restore declared infrastructure. The pipeline uses a drift detector CodeBuild job that runs terraform plan, publishes structured changes via SNS, a Lambda that classifies changes (LOW/MEDIUM/HIGH) and, for eligible LOW non-deletion updates, starts a remediation CodeBuild job that runs terraform apply. The author adjusted the classifier to treat in-place updates on MEDIUM resources as LOW, separated detector and remediation IAM roles, ensured the correct Git commit is cloned for remediation, and observed that a manually added EC2 tag was removed when Terraform applied the Git-declared state.
Terraform Drift Detection and Recovery on Google Cloud
A developer-published lab and GitHub repository demonstrating Terraform drift detection, importing existing Google Cloud resources, and state recovery. The project uses a small baseline (VPC, subnet, firewall rule, service account) to simulate manual drift, demonstrates detection with terraform plan (including -detailed-exitcode and -refresh-only), shows terraform state inspection and terraform import for recovery, and automates scheduled drift checks via GitHub Actions. The workflow writes a GCS backend dynamically from repository variables, authenticates with Google Cloud using Workload Identity Federation (OIDC) to keep the pipeline keyless, and creates GitHub issues when drift is detected rather than auto-applying fixes. The artifact is published with documentation, scripts, example imports and CI workflows in a public GitHub repo.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.