[EAM] Service Disruption for Fact Sheet updates

Incident Report for SAP LeanIX

Postmortem

Summary

Between September 19, 01:46 PM UTC and 7:20 PM UTC, customers experienced issues with saving Fact Sheets in the Inventory

What happened?

To continuously improve our security and standards in our services, we replaced a vulnerable library from our GraphQL API service. A bug in the code change resulted in undetected side effects when parsing incoming JSON data sent to the GraphQL API.

As a consequence, customers were unable to save changes to their Fact Sheets, if specific field types (Integer, Single Select) have been part of the updated section.

Mitigation: What did we do about it?

As soon as we identified the impact of Fact Sheet updates, we implemented a fix.

Follow-ups: How will we improve?

Following the mitigation, we did an in-depth analysis why our CI/CD pipeline did not identify the bug after removal of the library. We already implemented additional specific test cases to cover these unforeseen scenarios.

To detect such scenarios quicker, we are going to review our monitoring and alerting systems as well and implement further improvements.

Posted Sep 22, 2023 - 06:52 UTC

Resolved

This incident has been resolved.
Posted Sep 19, 2023 - 19:06 UTC

Update

We are currently releasing a possible fix.
Posted Sep 19, 2023 - 18:41 UTC

Update

We are continuing to work on a fix for this issue.
Posted Sep 19, 2023 - 17:22 UTC

Update

We are continuing to work on a fix for this issue.
Posted Sep 19, 2023 - 17:21 UTC

Identified

The issue has been identified and a fix is being implemented.
Posted Sep 19, 2023 - 17:11 UTC

Update

We are continuing to investigate this issue.
Posted Sep 19, 2023 - 17:06 UTC

Investigating

We are currently experiencing a service disruption in EAM. Our team is working on a fix.
Posted Sep 19, 2023 - 17:01 UTC
This incident affected: EU Instances (EAM), US Instances (EAM), CA Instances (EAM), AU Instances (EAM), DE Instances (EAM), CH Instances (EAM), AE Instances (EAM), and UK Instances (EAM).