When Humans Cheat

Drift happens when someone manually changes a setting in the AWS console, bypassing your code.

If you run tofu plan, OpenTofu will detect this 'drift' and offer to change it back to what's in the code. This is how you enforce compliance.