Infrastructure as Code Governance: Preventing Drift and Misconfiguration through Automated Guardrails

Abstract

Infrastructure as Code (IaC) enables repeatability but can amplify misconfiguration risks when governance is weak. This research proposes an IaC governance framework combining policy validation, change impact analysis, automated drift detection, and environment promotion controls. The framework introduces guardrail tiers that adapt to team maturity while preserving speed for low-risk changes. Evaluations show reduced misconfigurations in production and improved traceability of infrastructure changes across accounts and regions.