My Terraform drift detector had a problem.
It could run terraform plan, detect drift, and send me an email through SNS. But the message only told me that drift existed.
It did not tell me which resources changed. It did not tell me whether the change affected IAM, networking, or something less critical.
So I changed the alert into a structured event and sent it to two places: SQS for audit processing and Lambda for severity classification.
The Stack







