Which Terraform command assists in detecting and managing drift?

The command that assists in detecting and managing drift is Terraform refresh. This command is designed to synchronize the state file with the real-world infrastructure by querying the current state of the deployed resources.

When infrastructure is managed with Terraform, it maintains a state file that reflects the desired state of the resources. Over time, external changes can occur due to manual updates or other factors that may lead to a discrepancy between the actual state of the infrastructure and what is defined in the Terraform configuration. Drift detection is crucial as it helps you identify these inconsistencies.

While Terraform plan is useful because it shows the changes that Terraform will make to reach the desired state, it does not directly address drift detection. Instead, it generates an execution plan based on the current state of the infrastructure and the configuration, which assumes that the state file is accurate. Terraform state, on the other hand, focuses on managing the state data itself rather than detecting drift. Lastly, Terraform validate is primarily used to check the syntax of the configuration files and ensure that they are valid, rather than dealing with drift detection or management.

By using Terraform refresh, you ensure that your state file is up-to-date, facilitating the identification and management of any drift that may have occurred.