As noted at https://wikitech.wikimedia.org/wiki/SRE_Team_requests#Hardware_requests this is a best practice before requesting hardware/resources within prod itself:

Full testing of service & puppetization within Wikimedia Cloud VPS

I created an instance in the security-tools project after a bit of initial cleanup to be tracked further in T194150