Cloud infrastructure

Cloud replaces capital cost with an operating cost that scales with carelessness. The discipline is mostly about making the environment reproducible and the spend visible.

Everything reproducible from code

Infrastructure created by hand cannot be reviewed, reproduced, or recovered. Define it as code, review it like code, and apply it through a pipeline rather than from a laptop.

The test: could you rebuild the environment from an empty account, and do you know that because you have done it? Untested reproducibility is a belief.

Console access for humans should be read-only in production by default. Write access exists for emergencies, is time-bound, and is logged — see security:access-and-identity for the policy this implements.

Environments that mean something