Rewindex

RewindexOutage eventsNov 12, 2019

AWS outage, Nov 12, 2019

11 vendors posted 12 incidents between 07:00 and 17:00 UTC, against about 9 incidents from 9 vendors in the same hours on an ordinary week. 6 vendors named AWS in 7 incidents (5 of them blamed it). Vendors reported an AWS outage; AWS’s own incident for this date is not in the archive.

Observed, not verified. A line means a vendor’s incident named another vendor, or started in the same window. It is not a proven cause.

Times are UTC; lags are from when the first vendor named AWS.

    21. first vendor named AWS 07:40
Named AWSNamed another vendorDid not name anyoneEach column is 30 minutes

How it spread

Vendors that named AWS, grouped by when they posted, and vendors that blamed one of the vendors AWS took down. Solid lines: the vendor named the other. Dashed: same window, not named.

Swipe sideways to see the whole diagram.

AWSown incident not archivedWithin an hour5 vendors, 4 blamed AWSOpsgenie, Elastic Cloud, Wise, JFrog +11 to 4 hours later1 vendor, 1 blamed AWSConfluentLater1 vendorJFrog
AWSown incident not archivedWithin an hour5 vendors, 4 blamed AWSOpsgenie, Elastic Cloud, Wise,JFrog +11 to 4 hours later1 vendor, 1 blamed AWSConfluentLater1 vendorJFrog
Rendered on the server with pele from the Mermaid source below. Each box lists the first few vendors; every vendor is listed further down.
Mermaid source
flowchart LR
  root["AWS<br/>own incident not archived"]:::inferred
  h1["Within an hour<br/>5 vendors, 4 blamed AWS<br/>Opsgenie, Elastic Cloud, Wise, JFrog +1"]:::blames
  root --> h1
  h4["1 to 4 hours later<br/>1 vendor, 1 blamed AWS<br/>Confluent"]:::blames
  root --> h4
  later["Later<br/>1 vendor<br/>JFrog"]:::names
  root --> later

Vendors that named AWS

In their own words. “Blames” means a causal phrase sits next to the name (“due to”, “upstream provider”…).

Within an hour

5 vendors

1 to 4 hours later

1 vendor

Later

1 vendor

Same window, did not name anyone

5 incidents started during the event without naming AWS or another vendor. Some are part of it, some are a normal day’s background (about 9 in these hours).

Show all 5

Detected automatically from 9 status pages opening incidents in the peak hour (normally at most 4). Mentions are matched by name in each incident’s title and updates, then classified as cause, location or integration; quoted text is the vendor’s. Vendors that share one status page are shown once.