Ephemeral infrastructure

Infrastructure that is rebuilt frequently gives an attacker much less time to establish themselves.

Persistence is hard when the machine will not exist tomorrow. It also means configuration drift cannot accumulate, because everything comes from the definition each time. The trade is that forensics gets harder: the evidence goes away with the instance unless you captured it.