Addendum to my last comment:<p>There really should be a requirement that SaaS services supported some kind of load&#x2F;dump configuration API, where you can deal with raw config. The admin UI should be completely optional.<p>Most SaaS vendors don&#x27;t have APIs that cover all parts of the service. Some do have decent APIs -- for example, we store our DNS records in files and use Gandi&#x27;s APIs to update our zones, using a custom script (with some nice diffing capabilities), and we do some automatic configuring of Mailgun -- but APIs are always stateful and never declarative, which means that a client will always have to issue half a dozen calls to diff and converge its state. It&#x27;s painful.