Salesforce ArchitectureAdvancedenvironmentssegmentationsecurity
Design Salesforce platform segmentation for dev test staging production isolation
Real World Scenario
Developer tested integration against production connected app credentials; accidental mass email to customers from dev script.
Expected Answer
• Strict credential isolation vault path per environment
• Production connected apps blocked from non-prod IP ranges
• Sandbox post-copy runbook disable emails flows integrations
• Promotion pipeline automated no manual prod metadata paste
• Production data masking before sandbox refresh legal approval
• Separate integration users per environment never shared password
• Audit trail environment promotion who deployed what when
Follow-Up Questions & Answers
Click to expand — each follow-up includes a direct, interview-ready answer
Direct answer: Strict credential isolation vault path per environment Also consider: Production connected apps blocked from non-prod IP ranges In practice: Sandbox post-copy runbook disable emails flows integrations Optimize for scale and operational observability.
Architect Perspective
Environment segmentation failure causes prod incidents—treat prod credentials as radioactive outside prod.