Navigate to IaC drift detection issues - Administrator Guide - Cortex Cloud Posture Management - Cortex CLOUD

Cortex Cloud Application Security

Product
Cortex Cloud Posture Management
Cortex Cloud Application Security > Cortex CLOUD
Creation date
2025-01-22
Last date published
2026-05-31
Category
Administrator Guide

To access IaC drift detection issues, navigate to ModulesApplication SecurityIaC Drifts.

The IaC Drift Detection page displays a filterable, sortable table of all drift findings detected across monitored cloud accounts and repositories.

Note

The default sort order is by Severity (descending). The default filter shows drift findings with a status of New and In Progress. Resolved drift findings are hidden by default.

The IaC drift detection issues table is a filtered instance of the broader Issues table found under Cases & Issues, meaning the IaC drift detection table exclusively displays issues categorized as IaC drift. The IaC Drift Detection table displays drift issues detected during periodic drift scans that compare the IaC-defined state against the live cloud resource state. You can filter for drift detection issues in the main issues table using the filter Detection Method=CAS Drift Scanner.

The IaC Drifts issues page provides focused visibility into runtime configuration divergence, allowing you to prioritize remediation efforts efficiently.

IaC drift detection issues are generated when the following conditions are met:

  • A deployed cloud resource's runtime configuration diverges from its IaC definition

  • The specific divergence violates a security policy

The IaC Drift Detection page contains two tabs: Issues and Findings

  • Issues tab: Displays deduplicated, policy-evaluated IaC drift issues. The Issues tab is the default view and the primary workspace for triage and remediation. Issues are created when a raw drift finding matches a unified policy

  • Findings tab: Displays all raw IaC drift findings detected by the drift scanner before policy evaluation. The Findings tab provides visibility into the complete scanner output, including drift findings that did not generate issues because no matching unified policy exists. Use the Findings tab to audit drift detection coverage, review findings excluded by current policy configurations, and identify opportunities to create new policies for uncovered drift patterns. For more information on Findings, refer to Investigate IaC drift detection findings