# Immutable Infrastructure

> For AI agents: the complete glossary index is at [llms.txt](https://glossary.cncf.io/llms.txt).
> Markdown versions of every glossary page are available by appending `index.md` to the page URL.

Immutable Infrastructure refers to computer infrastructure 
([virtual machines](https://glossary.cncf.io/virtual-machine/), [containers](https://glossary.cncf.io/container/), network appliances) 
that cannot be changed once deployed. 
This can be enforced by an automated process that overwrites unauthorized changes or 
through a system that won't allow changes in the first place. 
Containers are a good example of immutable infrastructure 
because persistent changes to containers can only be made by 
creating a new version of the container or recreating the existing container from its image.

By preventing or identifying unauthorized changes, 
immutable infrastructures make it easier to identify and mitigate security risks. 
Operating such a system becomes a lot more straightforward 
because administrators can make assumptions about it. 
After all, they know no one made mistakes or changes they forgot to communicate. 
Immutable infrastructure goes hand-in-hand with [infrastructure as code](https://glossary.cncf.io/infrastructure-as-code/) 
where all automation needed to create infrastructure is stored in version control (e.g. Git). 
This combination of immutability and version control means that 
there is a durable audit log of every authorized change to a system.

---

- Canonical URL: https://glossary.cncf.io/immutable-infrastructure/
- Status: Completed
- Last modified November 9, 2022: ` Updating tags ` ([9d1d041](https://github.com/cncf/glossary/commit/9d1d041677b70d2b1579b8e378afb168c392f1f3))
- Source: https://github.com/cncf/glossary/blob/main/content/en/immutable-infrastructure.md
- License: [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/)