Run two identical environments: blue (current) and green (new). Deploy updates to green while blue serves traffic. After testing green, switch the load balancer to point at green.
Rollback is instant: just switch back to blue. Downside: you need double the infrastructure during deployment. Works best for stateless services.