Reliability That Works (2018)

Since errors can arise from any interaction, the cost of error prevention is exponential to the investment in the development of the system. For environmental causes of error, this is pretty easily accomplished by aligning the logical isolation with physical segmentation (ie: regions, availability zones, etc.) If you use isolation to contain Environmental errors, you should also use it to contain Self-induced errors. Deploy your code, config and operational data changes one failure domain at a time.

Source: www.linkedin.com