# Production Checklist

A quick pre-flight list for going live.

* [ ] **RBAC & 2FA**: least-privilege roles, all admins on 2FA
* [ ] **Network**: security groups tight; expose only needed ports
* [ ] **Backups**: policies configured and tested restores
* [ ] **Snapshots**: before major updates
* [ ] **Monitoring**: CPU/mem/disk/net alerts enabled
* [ ] **Quotas/Budgets**: review limits and forecasts
* [ ] **Runbook**: document incidents, contacts, and SLAs
