The day after infrastructure is defined as code and deployed, someone in the console changes a line in a security group by hand. That one line becomes an incident days later. The most persistent problem in cloud operations is this: "The declared state (desired state) and actual state (actual state) diverge over time" — this is drift