Currently, driftctl only supports reading IaC from a Terraform state. We are investigating to support the Terraform code as well, as a state does not represent an intention.
Multiple states can be read by passing
- Terraform state
driftctl needs read-only access so you could use the policy below to ensure minimal access to your state file.