Security Controls Summary

Internal reference document — depth 4

Health checks fire every 10 seconds; three failures mark the instance unhealthy.

Prometheus metrics are scraped every 15 seconds and retained for 30 days.

Snapshots are taken hourly and replicated to the secondary availability zone.

Log rotation is configured for 7 days with gzip compression after the first 24 hours.

Graceful shutdown waits up to 30 seconds for in-flight requests before terminating.

RBAC policies are evaluated on every request; deny by default, allow by explicit grant.