# Infrastructure as code: return manual exceptions to the workflow

https://thiago.limaesilvatecnologia.com.br/en/artigos/iac-drift/

Published: 2026-09-12

Repositories represent environments only when differences are reconciled.

Content produced with AI assistance for Thiago Silva’s website. Independent editorial analysis; it does not represent clients or employers.

Reading-path month: March 2026

Collection published on September 12, 2026. Months organize the reading path; they are not earlier publication dates.

A short architecture article. The technical reference supports the topic; hypothetical scenarios and assessment proposals are editorial analysis, not accounts of personal implementations.

## The architecture decision

An emergency console fix may be necessary and still create lasting drift. Risk appears when the next run silently reverses the fix or nobody knows the intended state.

## Practical application

Editorial proposal: make reconciliation part of emergency-change closure. In a hypothetical environment, record the difference, rationale and owner updating the approved definition.

## How to verify

Exercise one controlled change and verify detection and review. Do not automatically apply every suggested correction without impact assessment. Restore a comprehensible source of intent, with evidence that code and environment agree after intervention.

## Sources

- [OWASP — Infrastructure as Code Security Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Infrastructure_as_Code_Security_Cheat_Sheet.html). Accessed: 2026-09-12.

[Profile: Thiago Silva | Cyber Architect](https://thiago.limaesilvatecnologia.com.br/en/perfil/)