Define configuration drift in IaC. How do you detect and remediate it?

This tests your grasp of the gap between declared and live infrastructure state. A strong answer defines drift as deviation from the IaC source of truth caused by ad hoc changes. For detection, it covers scheduled state comparisons with Terraform plan or CloudFormation drift detection, plus policy scanning with AWS Config or OPA. For remediation, it recommends automated reconciliation, immutable redeployment, and breaking glass workflows that route exceptions back into code.