High availability

Availability engineering and security engineering pull against each other more often than anyone admits.

A system built to be reachable from everywhere, always, with automatic failover and shared credentials, has made a series of decisions that are excellent for uptime and generous to an attacker. Neither discipline is wrong; the trade is real, and it goes unexamined because the two are usually owned by different teams.