Manage your software configuration
Managing how the pieces of your software and service work together allows you to build a stable, scalable, secure and portable system.
It’s important to do this because your system is likely to be much larger than a single application relying on other supporting infrastructure components.
Even if your system is a simple application, it still probably requires configuration, for example providing database credentials or a web service endpoint.
Using configuration management tools
Configuration management tools will help you to document and maintain the configuration and dependencies of your software system.
You can do this using handmade software but it’s more common to use existing open source tools, for example:
Use infrastructure as code
One way you can manage configuration is by using code to describe the configuration and software dependencies. Dependencies are the things your software needs in order to work properly.
This approach brings all the advantages of programming in general and allows you to:
- test your code ability
- reuse your code
- document your infrastructure
Once written in code, the infrastructure configuration is then run against the servers, networks and software in question.
When documenting technology components, you should include information on:
- service vulnerabilities
- how you will assess the effectiveness of security controls
- who is responsible for ensuring asset security
Build for portability
Moving software systems between providers can be difficult and time-consuming. If you don’t consider portability, it’s possible to lock yourself in with a provider.
Configuration management gives you a deep understanding of the configuration of your system. You can use this knowledge to easily move software between providers.
Use the same development and production tools
A common software systems problem is that code which was written by a development team works on their machine or test environment but not in the production environment.
This is often caused by differences in:
- software
- databases
- application servers
Avoid this problem by using the same tools for your development and production environments.
Related guides
You may also find these guides useful:
- Last update:
-
Integrated elements on Documenting service assets and Discovering vulnerabilities.
-
Guidance first published