Monitoring Third Party Vendors as an Ops Engineer/SRE
Why should you monitor your third-party Cloud and SaaS vendors if you are in SRE/Ops?
As part of an SRE team, your primary responsibility is ensuring the reliability of your applications. What makes you responsible for monitoring services that you don't even manage? Third-party services are just like yours - with SLAs. And outages happen, affecting you as well as many others who depend on them.
It's a no-brainer that you should know when such outages happen to be on top of things if/when it affects your running applications.
Most of your third party dependencies will have a public status page or a Twitter account where they publish updates on their outages. Here are some seemingly easy ways to monitor these pages
- Subscribe to the RSS feed of these pages
- Follow the Twitter account
- Sign up for Slack, Email, SMS notifications on the status page itself if the page supports these
But if you have tried it, it's not that easy
- Not all pages have RSS feeds
- Some have Slack, Email, SMS integration - some don't
- Some don't have a Twitter account
- You need to sign up on all of these pages one by one, and all services may not support the same notification channel
You can easily end up doing this one by one for 10-15 or more service providers. Let's do a quick check. Which services in this list below do you use in your stack?
- DNS - GCP/GoDaddy/UltraDNS/Route53
- Cloud/PaaS - GCP/AWS/Azure/DigitalOcean/Heroku/Render/Railway/Hetzner
- Observability - Grafana Cloud/DataDog/New Relic/SolarWinds
- On-call management - PagerDuty/OpsGenie
- Email - Google Workspace/Zoho
- Communication - Zoom/Slack
- Collaboration - Atlassian Jira/Confluence
- Source code - GitLab/GitHub
- CI/CD/GitOps - TravisCI/CircleCI/CodeFresh
- CDN/Content delivery/ - Cloudflare/CDNJS/Fastly/Akamai
- SMTP providers - SMTP.com/SendGrid
- Payments - PayPal/Stripe
- Artifact Repo - Maven/DockerHub
- Develope APIs - Apple Dev Platform/Meta Platform
- LLM APIs - OpenAI/Anthropic/Portkey
- Marketing - MailChimp/Hubspot
- Auth - Okta/Clerk/Auth0
This is a small list. You may not have all of these, or may have more/others, but you get the point.
Like any self-respecting Ops Engineer/SRE, you would probably want to whip up a script and write this check-pages-and-notify-in-one-place tool by yourself. I know, because I've worked in Ops/SRE roles for the better part of my career, and NIH is a very real thing. Here's why it's not a great idea
- Any software you write has to be maintained. Say your org starts using a new service which does not have an RSS feed on the status page. What now?
- Who monitors the monitor? How do you know when your script is not running?
- You probably have better uses for your time
IncidentHub was built to solve precisely these problems - so you can focus on what's important, and hand off monitoring third-party services to something that was built with that goal in mind. So stop hacking together scripts to monitor public status pages, and try it out.