Trying to connect cloud architecture (CAF / Zero Trust) with IaC validation

Trying to connect cloud architecture (CAF / Zero Trust) with IaC validation We often say that architecture defines intent, while Infrastructure as Code (IaC) defines implementation. But in practice, they drift apart very quickly. Architecture lives in documents (CAF, Zero Trust, internal HLDs) IaC reflects what is actually deployed There is no reliable way to verify that one matches the other The problem IaC gives us precision, but not meaning. Architecture gives us meaning, but not verification