Immutable Infrastructure

Immutable infrastructure is an approach where infrastructure components are never modified after deployment; instead, changes are made by replacing instances with new ones built from updated configurations. From a security perspective, immutability ensures that drift from a known-good state cannot occur, eliminates persistent foothold opportunities for attackers, and guarantees consistency between environments.

Container-based and serverless architectures are inherently immutable by design.