api design essentials - akana platform overview

© 2016 Akana., Inc All Rights Reserved. Powering the API Economy

API Design Essentials –Akana Platform Overview


www.akana.com


The Ecosystem of Teams Involved in an API Strategy

APIs

Enterprise Architecture

Business

Integration

Operations

Security

Designers


Successful API Strategy Supports Each Role Involved

API Designer• Flexibility in choice of tools• Freedom from API Description

Languages

API Product Manager• Create a product offering• Manage provisioning of services• Communicate with with developers• Report on the businesses progress

Tom

Sidney

Integration Developer• Quickly transform SOAP to REST• Rapidly compose a new API from

several sources• Easily redact data

Security Architect• Up to date threat protection• Modern security standards• Integration with legacy standards• React to threats quickly

Operations Lead• Protectmy backend services• Enforce SLAs set by product manger• Scale globally • Monitor the environment

Enterprise Architect• Establish and architecture that for all

API strategies • Simplify the enterprise architecture• Ensure compliance and auditability

Karen

Rod

Jack

Jeff


Akana Platform Provides End-to-End CapabilitiesAPI DesignDesign your APIs how you want to

API SecurityLeverage the latest in security standards

API Traffic ManagementEstablish, Monitor, Alert, and Enforce Multiple Service Level Agreements

API PortalSocialize and manage your communities through targeted developer portals

API AnalyticsGenerate deep business insights from your API traffic through configurable analytic reports

Lifecycle ManagementBuild APIs leveraging DevOpswith auditable control

Mediation & IntegrationCreate modern well-‐structured APIs from legacy assets and multiple backend sources

Deployment OptionsChoose fully hosted cloud, hybrid, or on-‐premises


How Akana Fits Into Your Existing Architecture

Security Services


Flexibility and Productivity for Your API Designers

• Design and document APIs in the new graphical designer. Supports markdown

• Import Swagger, RAML, WSDL or WADL and continue editing in graphical designer

• Export Swagger, RAML, WSDL or WADL to use with your favorite client side or server side code generators and IDEs

• Manage the API JSON and XML models

“Focus on your API Design. There is no need to be an expert on any API Description Language specifications. We take care of that for you. “


Proven and Trusted Security for Your Security Architect

• Reduce risks by consistently applying and managing security policies across all of your services and APIs

• Keep up to date and protect against the latest security threats and attacks

“ 4 out of the 5 top US Banks trust Akana for security“

“ Akana has the largest most up-‐to-‐date policy library in the industry“

• Certified PCI DSS 3.1 level 1 Service Provider• Compliant with EU Data Protection Directive 95/46/EC• Comprehensive HSM integration


Sample List Of Out of Box Policies

ü OpenID Provider/Relying Party

ü OAuth 1.0a & 2.0 (all grant-types)ü Developer/Partner Key Auth & Az

ü CORS Management

ü HTTP Basic-Auth

ü Mutual SSL based Authentication

ü SAML 1.1 & 2.0 (STS included)

ü WS-Trust 1.2 & 1.3

ü WS-Security Transport Binding

ü WS-Security Username Token

ü WS-Security Message Encryption/Signature

ü Integration with AD, SiteMinder, OAM, RSA,ü Cookie-based Authentication

ü Denial of Service attack Prevention

ü SQL Injection Prevention

ü Virus Scanning

ü XML Schema Validation

ü Malicious Pattern Detection

ü SLA/Throttling by a Developer/Partner

ü Certificate (PKI) Management (CA Included)


Rapid Delivery for Your Integration Developers

• SOAP to REST - declarative mediation out of the box

• Security Policy Mediation - mediate between REST API using Oauth to a SOAP service with sophisticated WS-Security Policies

• Orchestration – create APIs from scratch by integrating multiple services together

• Transformation – map content from one object type to another with both declaritive (XML<> JSON) and prescriptive (XSL-T, FreeMarker)

• Scripting – write and deploy code in Jython, Beanshell, Java, or Javascript to augment your policies or orchestrations

Audit

Branch

FreeMarker

Content

Map Headers

Script

Reply

Process

Spilt

Modify Headers

Variables and Faults

Transformation

Throw

Join

“ Deploy new mediations in days instead of months”

Micro orchestration


Configurable Traffic Shaping For Your API Operations Lead

“ Shape traffic through configurable policies and have it immediately take effect once applied to your APIs ”

“ Receive alerts when SLA policies are nearing their threshold”

• Throttling – control how much traffic each App can send to your API with throughput, bandwidth, and concurrency policies for each App

• SLA reporting and enforcement– define, monitor, alert and enforce service level agreements for each App consuming your APIs

• Global Traffic Management – deploy API endpoints globally using our GTM solution to route traffic to the closet endpoint


API Productization Tools for Your API Product Manager

• Socialize through configurable developer• Document APIs with auto generated Swagger docs and add

addition supporting documents and media• Monetize with licenses and SLAs

• Provision app keys and secrets with configurable workflow• Test with the inline Swagger documentation testing tool

complete with security• Client code generation enabler through exporting of the

appropriate API Description Language for APIs

• Search and filter across all artifacts in the developer portal with full index capabilities

• Groups to enable API segmentation • Boards for new requirement requests, defects, and community

support“ Streamline partner onboarding to get to that first transaction in a matter of days and not months”

“ Create a community experience for each of your consumer segments; internal, external, and partners”


Insights For the API Product Manager“ Have a complete global view over your API business with operational, consumer, and business analytics.”

• Operational Analytics – monitor the performance and availability of your APIs, watch trends and detect and prevent risk as it happens

• Consumer Analytics – track how the developers are using your APIs and gain insights on how to improve the APIs

• Business Analytics – build dashboard that show how your APIs are impacting your business, identify high-impact areas, and monitor critical aspects as your business is evolving real-time

“Architected to meet international data privacy standards”


Control and Auditability For Your Enterprise Architect

• Asset Version Control – fully customizable workflow for APIs, Apps, and other assets. Multi-level approvals as needed, will full decision auditing

• DevOps Automation – deep integration with common DevOps platforms such as Jenkins, JIRA, GitHub

• Asset Relationship Visualization – visualize how assets (requirements, models, schemas, service, APIs, Apps, etc) relate to each other, and fully understand the potential impact of any change.

“DevOps gives you the speed, but we provide the wheel and the gas pedal to let you control where and how fast you go to ensure you are driving your business in the right direction and avoiding hazards”


Scalability and Deployment Flexibility for Your Company

Deployment Options• Cloud • Hybrid• On Premises

“Choose one or more deployment zones that fit your company’s needs and we’ll make sure you scale .“

“The Akana Platform is the only product that is equally at home in the Cloud and On Premises.“

api design essentials - akana platform overview

Technology