Glossary: Vulnerability, Asset and Change Management
Drift
A cloud setting changed by hand, for example in the console, after the code was applied, so it no longer matches the infrastructure-as-code files. A CSPM tool catches it and a code review can't.
Where the book teaches it
Related terms
CSPM (cloud security posture management)Infrastructure as code