immutable infrastructure

A design where servers are never changed after they are built. To update or recover, you build a fresh server from a known-good image and throw the old one away, along with any malware on it.