That's really a lot of ground to cover, but two simple recommendations would be: - idempotency / consider all state as a cost - start off with some chaos monk

That's really a lot of ground to cover, but two simple recommendations would be: - idempotency / consider all state as a cost - start off with some chaos monkey testing - e.g. establish automatic regular restarts/re-deploys from the start Both are no silver bullet but ensure that you won't have too much anxiety and can act robustly when something goes wrong. It also has a host of positive downstream effects, such as facilitating setup of new machines and/or scaling.