Configuration baselines & drift
Known-good infrastructure posture tracked as code.
Automated drift detection maturity evolves with automation investment.
Baseline sources
- Wrangler configuration: routes, bindings, compatibility dates.
- Versioned SQL migrations for the managed metadata database.
- Repository-reviewed changes for edge service logic.
Goals
- Detect unintended edge/trigger edits vs reviewed merges.
- Alert on new privileged bindings or unexpected origins lists.
A configuration baseline playbook is available through procurement for qualified security reviews.