Change management governs production changes through documented steps and reviews that control risk, conflicts, and effects on security or availability. section 1.4.1 section 7.0
A practical change-management flow:
- Submit a change request describing the implementation, rollout, and rollback steps. section 7.0
- Use peer review and a change advisory board as quality gates for security, availability, resiliency, and conflicting work. section 7.0
- Schedule the approved change, execute it during an appropriate window, and verify its result. section 1.4.1
- Reduce residual risk with reproducible tests, idempotent checks, composable scope, and infrastructure that can evolve consistently. section 1.4.1
Figure 7.1 Collaboration on IaC involves streamlining the process of peer and organizational review of changes.
Use the collaboration workflow to see how peer and organizational review coordinates conflicting infrastructure changes. section 7.0
