Terraform, Vault, Consul and Pack
Terraform, Vault, Consul and Packer
FTFY.
HashiCorp has kicked off its Amsterdam conference with a raft of product announcements, including a worthwhile look into infrastructure drift and a private beta for HCP Waypoint. The first, currently in public beta, is called Drift Detection for Terraform Cloud, and is designed to keep an eye on the state of an organization's …
Unless you capture the state of the entire hard drive, it is impossible to determine if there have been any important changes. And even if you pretend that is enough, you're still basically trying to solve the halting problem.
The rule at Google was: if you need to log in to nose around, fine. If you touch ANYTHING, however, you log out via init 6. (Yes, the break glass credentials gave us root on the boxen.) I really cannot think of a better rule.