2 ms·
Minimal process: Edit SQL in editor, have peer review it, debug in your head, copy&paste with 4-eyes. Compliant process: Write Ticket, approve/review ticket, (
by KingOfCoders 3y ago
Minimal process: Edit SQL in editor, have peer review it, debug in your head, copy&paste with 4-eyes.
Compliant process: Write Ticket, approve/review ticket, (give DB access to developer/ops) or CI/CD run SQL with migration, (revoke access), close ticket.
Why? Because I've deleted portions of a live db when I thought I was on testing.
- zmgsabst 3y agoThis is why I try not to have permissions to prod. Sure, in some sense as the AWS account owner and tech lead, I’m generally part of the trust chain and could grant them to myself. But there’s only misery available by having them bestowed normally. I want it to be effort to touch prod, preferably in a way that involves a second person — because it keeps me from being careless. Which I (as a human) often am. Can’t break what you can’t touch!