Skip to main content

Maintenance calendar

Everything in this module on one schedule. Put each item in the team calendar with an owner. Copy this page into the project repo as MAINTENANCE.md and tick it each period.

How it works​

Daily (10 minutes)​

  • The daily production check.
  • Backup jobs reported success last night.
  • No alarm in the alert channel left unanswered.

Weekly (30 minutes)​

  • Review Dependabot pull requests.
  • Log review with the saved queries. See CloudWatch and account security.
  • Security findings: GuardDuty, Security Hub.
  • Disk use on self-hosted boxes under 70%.

Monthly (half a day)​

  • Patching: OS updates applied and rebooted where needed; every image rebuilt.
  • Database minor versions in the maintenance window.
  • Cost review recorded.
  • Inventory: overdue DeleteAfter resources removed; manual resources accounted for.
  • Certificates: none under 30 days.
  • Access review: leavers removed from GitHub, AWS, the vault and servers.

Quarterly (a day)​

  • Restore drill for each backup type, with its time recorded.
  • Version table: nothing within three months of end of life without a plan.
  • Rotate long-lived secrets that do not rotate themselves.
  • Store and platform deadlines: app store SDK levels, AWS deprecations.
  • Review this calendar: drop what is automated, add what bit us.
Last updated on