We have windows servers hosting our software. There is a third party company doing something like penetration testing and provides us with reports and recommendations about the servers' setup/configuration. Right now we add all servers in a domain/ad so we can easily propagate server setup/OS changes to all machines. Recently we added some Linux servers to our setup.
My question is what other options we have to easily push changes to all servers without manually doing this to each server?
Possible options:
- all new servers are created and provisioned with Terraform. So one of the options is to destroy existing machines and bring new ones with the new setup. Immutable infrastructure.
- we could use DSC. I am not sure about the Linux part here