Techniques for remediating drift in real cloud infrastructure from desired cloud infrastructure. In one technique, a configuration graph is generated based on first infrastructure configuration code. A deployed state of a cloud infrastructure is generated based on a data schema and a current state of the cloud infrastructure. Resources indicated in the deployed state are matched to nodes in the configuration graph. Based on differences between the resources and the nodes, the configuration graph is updated to generate an updated configuration graph. Based on the updated configuration graph, second infrastructure configuration code is generated that is different than the first infrastructure configuration code.