Add drift detection to deploy and integration

Author: whi-tw

infra/deployments/deploy/inputs.tf

@@ -15,3 +15,9 @@ variable "send_logs_to_cyber" {
   type        = bool
   default     = true
 }
+
+variable "drift_detection_schedule" {
+  description = "EventBridge schedule expression for drift detection"
+  type        = string
+  default     = "cron(0 9 ? * MON *)"
+}

infra/deployments/deploy/tools/drift-detection.tf

@@ -0,0 +1,6 @@
+module "drift_detection" {
+  source = "../../../modules/drift-detection"
+
+  deployment_name     = "deploy"
+  schedule_expression = var.drift_detection_schedule
+}

infra/deployments/integration/account/drift-detection.tf

@@ -0,0 +1,7 @@
+module "drift_detection" {
+  source = "../../../modules/drift-detection"
+
+  deployment_name     = "integration"
+  schedule_expression = var.drift_detection_schedule
+  git_branch          = "whi-tw/detect-deploy-integration-drift" # TODO: change back to "main" after testing
+}

infra/deployments/integration/inputs.tf

@@ -62,3 +62,9 @@ variable "pentester_cidr_ranges" {
     error_message = "Each entry in the last must be a valid IPv4 CIDR range"
   }
 }
+
+variable "drift_detection_schedule" {
+  description = "EventBridge schedule expression for drift detection"
+  type        = string
+  default     = "cron(0 9 ? * MON *)"
+}