Aegis - Infrastructure Drift Detector

~/aegis$ drift scan --live

Drift Feed6 events

The S3 bucket "aegis-prod-customer-data" containing PII had its S3 Public Access Block disabled via the AWS Console at 13:14 UTC. Terraform state still defines block_public_access = true. This bucket holds customer records subject to GDPR Article 32 and SOC2 CC6.1.

Terraform Expectedblock_public_access = true

Live State (Drifted)block_public_access = false

Compliance Impact

SOC2 / CC6.1GDPR / Art. 32

Infrastructure Drift Dashboard

S3 Bucket Public Access Block disabled manually

Security Group port 22 open to 0.0.0.0/0

RDS instance missing encryption at rest

IAM role granted wildcard s3:* on production account

GCP firewall rule allows RDP from 0.0.0.0/0 on port 3389

CloudTrail logging disabled on management bucket