That's one of the (I think) less appreciated benefits of running on a service like EC2. You can have all the plans in the world and still find yourself up the

That's one of the (I think) less appreciated benefits of running on a service like EC2. You can have all the plans in the world and still find yourself up the creek without a paddle when some impossible or very hard to revert upgrade goes wrong. But with EC2 it's a simple as taking a snapshot of the image prior to upgrading. Even better, you can fire up a brand new instance based off the current production image and upgrade that and only bring it on line when you're happy it's working - then just decommission the old one when you're done.