Question

A cloud security architect discovers that developers frequently apply manual hotfixes directly to production resources during incidents, causing the running infrastructure to diverge from the Terraform state stored in the pipeline. This creates unpredictable security posture across the environment. Which approach BEST addresses the root cause while maintaining resilient, secure infrastructure?

Accepted Answer

Deploy a CSPM tool to continuously detect configuration drift and remediate it by reconciling live resources back to the approved IaC baseline through the pipeline

Answer

Grant developers standing administrative access to production so manual fixes can be applied faster and documented afterward

Answer

Disable the Terraform state file and manage all production infrastructure exclusively through the cloud console going forward

Answer

Increase the frequency of vulnerability scans on production workloads to catch misconfigurations sooner