Self-Service Infrastructure

What it is

Self-service infrastructure lets product teams provision what they need (a database, a queue, a new environment) through an API, CLI, or portal — with organizational policy (cost limits, security baselines) enforced automatically rather than via manual review.

Key points

• Policy as code: instead of a human reviewing every infrastructure request against a checklist, rules (allowed instance sizes, required tags, mandatory encryption) are enforced programmatically at provisioning time.
• Guardrails over gatekeeping: the goal is to make the compliant path the only easy path, rather than blocking requests and routing them through manual approval.
• Cost and quota management: self-service systems typically bake in budget limits and quotas per team, since removing manual review also removes the natural cost-checking that came with it.
• Done well, self-service infrastructure shifts the platform team's role from "approver of every request" to "builder of the system that makes good requests the default."