From clickops to governed IaC: CloudFormation drift detection in practice
A practical guide for moving AWS environments from ad hoc console/CLI changes (ClickOps) toward governed Infrastructure as Code with CloudFormation. It covers using IaC Generator to scan and template existing resources, deciding between importing versus recreating resources, organizing stacks by ownership and change frequency, and automating continuous drift detection with EventBridge, drift-aware change sets, and remediation policy. It closes with a four-level operational maturity model (visibility, control, automation, governance) and concrete steps for ownership, process, and feedback loops.