so how do you handle config drift when youre using iac

were using terraform for our infra as code, and while its great for initial provisioning, were starting to see config drift. manual changes or updates outside of terraform are creeping in. what are your strategies for detecting and remediating drift effectively? are there specific tools or workflows youve found successful