Drift module/feature is missing account_id and region fields to match some resources that are "settings" per region or per account (so no ARN or resource ID, but the account/region itself is the resource ID).

ie. in the AWS provider iam.password_policies is per account and ec2.regional_config is per account and region, but tfstate doesn't have those properties to match to, so we don't know which row in the DB to match the aws_iam_account_password_policy in tfstate to. (and ec2.regional_config is represented in TWO separate tf resources, which are aws_ebs_default_kms_key and aws_ebs_encryption_by_default... which are handled, but again no account/region matching)