Earlier quoted context omitted.
And unfortunately the kind of thing that compliance flags as a big no-no once you've got any kind of filing or privacy requirements.
This sort of thing doesn’t have to be a compliance breach, but you will likely need some way of ensuring there’s a second person in the loop, typically that would take the form of having someone in a separate production infrastructure team actually driving a while you talk them through what needs to happen.
You also need a way of recording what changed. when committing to git it's easy, but live eval-ing into prod sounds harder.