Clarify limitations on production database access.
Recently in production#5123 (closed) it was demonstrated that direct query access on the primary database cluster can have ramifications if not safely conducted.
The purpose of this corrective action is to update the Change Management process in the handbook to include a process for running read-only queries in the course of non-incident related work.
Effectively a 2-person rule will be added to the change management process requiring that several steps are followed when conducting this work. Non-exhaustive list of steps:
- Is this necessary to be run against the gprd database?
- What queries will be run
- Who is reviewing them and who will be shadowing their run
- As part of this work were any open transactions closed and was database health reviewed after work was conducted