Skip to content

Cloud & DevOps · Major Project

Infrastructure Drift Detection & Policy as Code

Scheduled drift checks on Terraform, and Rego policies that block bad plans

3-4 weeks build

Overview

Two ways infrastructure goes wrong: someone changes it by hand, or someone plans something that should never be allowed. A scheduled workflow runs a Terraform refresh-only plan and opens an issue when live resources no longer match the code. Separately, every plan is exported as JSON and tested with Conftest against Rego policies on tags, encryption and public access. LocalStack covers the demo without a cloud bill.

What makes it stand up

  • 01Scheduled drift checks that open an issue listing what changed
  • 02Plans exported as JSON and tested before any apply
  • 03Rego policies for mandatory tags, encryption and public exposure
  • 04Policy unit tests, so rules are verified like any other code
  • 05Runs against LocalStack or free-tier resources

Module breakdown

  1. 01

    Baseline

    A small Terraform stack of buckets, security groups and instances.

  2. 02

    Drift detection

    Refresh-only plans on a schedule with a readable diff.

  3. 03

    Policies

    Rego rules with deny and warn levels and clear messages.

  4. 04

    Pipeline gate

    Conftest step that fails a pull request on a deny.

  5. 05

    Remediation

    Choosing between re-applying code and adopting the change.

After this, you will be able to

  • Explain where drift comes from and why it is risky
  • Defend each policy rule and whether it denies or warns
  • Demo a manual console change being detected, and a bad plan blocked

Technology stack

  • Terraform
  • Open Policy Agent
  • Conftest
  • GitHub Actions
  • LocalStack

Complete kit

₹7,199₹12,299
-41%

Delivered in under 48 hours

Level
Major Project
Domain
Cloud & DevOps
Build time
3-4 weeks
Difficulty

You receive

  • Complete, commented source code
  • 60-90 page project report (IEEE format)
  • Editable presentation deck
  • Architecture, ER and UML diagrams
  • Local setup and deployment guide
  • Sample dataset or seed data
  • Viva question bank with answers
  • One 45-minute walkthrough call
  • 30 days of doubt-clearing support
Compare tiers

Keep looking

Students also considered

Capstone

Cloud & DevOps

Cloud-Native CI/CD Platform

GitOps pipeline with Kubernetes, Helm and progressive delivery

  • Kubernetes
  • Docker
  • Helm
  • Argo CD
  • +2
₹5,299₹8,999
4.8/74 reviews
Capstone

Cloud & DevOps

Microservices Observability Stack

Traces, metrics and logs across services that call each other

  • Go
  • Docker
  • OpenTelemetry
  • Prometheus
  • +2
₹5,299₹9,099
4.8/69 reviews
Mini Project

Cloud & DevOps

Package & Deploy an ML Model as an API

Takes a trained model to a versioned, containerised FastAPI service

  • Python
  • scikit-learn
  • FastAPI
  • Docker
  • +1
₹5,899₹9,999