1. An apparatus for dynamic protection of a master operating system image, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of: detecting, by an image deployment monitor, a configuration change to a deployed copy of a master operating system (‘OS’) image; detecting, by the image deployment monitor, a change in an operational state of the deployed copy of the master OS image; in response to detecting the change, generating, by the image deployment monitor, a configuration recommendation to prevent the change from occurring in operational states of future deployed copies of the master OS image, including identifying the configuration change as the cause of the change in the operational state of the deployed copy of the master OS image, wherein the configuration recommendation comprises a recommendation to modify a resource allocation; and in response to identifying the configuration change as the cause of the change in the operational state of the deployed copy of the master OS image, modifying the master OS image to prevent the configuration change from occurring in future deployed copies of the master OS image, wherein modifying the master OS image comprises modifying the resource allocation and wherein the master OS image includes an adjustment module configured to modify the master OS image based on the configuration recommendation.