api economy - cuomo

APIsExploring the API Economy & API Management

@JerryCuomoIBM Fellow, VP WebSphere Strategy & CTO

API Management

© 2014 IBM Corporation

IBM API ManagementFully on-premise, multi-tenant solution,

for API providers

IBM DataPowerAPI Gateway for security, control, integration & optimized access to a full range of Mobile, Web,

API, SOA, B2B & Cloud workloads

Over a decade of innovation, 10,000+ units sold, 2000+ customer installations worldwide

A single, comprehensive solution to design, secure, control, publish, monitor & manage APIs


IBM API Management

Manage and Share with developer

communities

3

Create, assemble and version an API

1

Analyze & Monitor API usage

4

Secure, control &

scale the API

2


Easily manage your APIsdesign, secure, control, publish, monitor & manage

Explore API documentation

Provision application keys

Developer Portal API Manager Management Console

Define and manage APIs

Explore API usage with analytics

Manage API user communities

Provision system resources

Monitor runtime health

Scale the environment


Join the API EconomyIBM API Management V3 – on-premise* & SaaS**

Assemble business APIs easily

Provide Secure or Open APIs on-prem or Cloud

Control APIs at a fine-grained level

Analyze API usage

Manage private, partner, public app developers

Provide self-service app developer onboarding

What’s new in IBM API Management V3 Single console to manage REST & SOAP services and publish to various app

developer communities with role-based access control Simple on-premise deployment architecture & elastic scalable cloud solution Enhanced OAuth 2.0 support for secure APIs Web service discovery from WSRR Policy-driven API control & visibility across various environments

What’s new in IBM API Management V3 Single console to manage REST & SOAP services and publish to various app

developer communities with role-based access control Simple on-premise deployment architecture & elastic scalable cloud solution Enhanced OAuth 2.0 support for secure APIs Web service discovery from WSRR Policy-driven API control & visibility across various environments

* on-prem GA date May 9** SaaS Statement of Direction


API Management v3 platform solution

Management layer Gateway layer

The management layer enables organizations to define, manage, expose and control APIs.

Provides API Manager, Developer Portal and Management Console

API configurations are deployed to the gateway, which provides the enforcement point for runtime policies to control API traffic.

Gateway is DataPower physical or virtual


API Developer • How do I assemble APIs?• How do I manage security?• Will the infrastructure scale?• How do I measure performance?

App Developer

• Where do I access APIs?

• How do I understand the APIs?

• How do I measure success?

API Product Manager

• How can I rapidly release & update my APIs?

• How do I publicize my API?• How do I measure success?

Operations Lead

• How do I manage all the API Environments that are being requested?

• How can I scale each environment?

• How can I easily find and fix issues?

API Success Requires Addressing Needs of Multiple Stakeholders


Intuitively and iteratively define APIs and associated policies

Rapidly assemble APIs via configuration, not coding

Minimize risk with industry leading security & scalability

Define

API Developer

Assemble

Meter

SecureDeploy, Test & Debug

Monitor

Scale

Version

21

Create, Secure & Version APIsSimple interface accelerates iterative API development & deployment


Easily create, find REST and SOAP APIs

Define the REST or SOAP API you wish to expose

Import from a registry

Search for, add custom tags to, and mark favorite APIs for easier discovery


Assemble New APIs Through Configuration

Assemble a new API by combining multiple REST or SOAP services into a composite API

Provide examples of the request and response messages, headers and parameters

Drag and connect linking the request and response messages

Transform the message elements with a click


Secure the API

Identify application with Client ID & Secret

Authenticate using LDAP or Authentication URL

Authorize using OAuth 2.0 support with implicit grant type, authorization code, resource owner


Version the API for iterative development

Version the API configuration in just one click

Revert prior version



App Developer




API Product Manager



Operations Lead






“Productize” APIs using Plans

Include multiple APIs and Resources per Plan

Version your Plans

Apply Entitlement by Plan or Resource

Fine grained control over plan deployment

Enforce Hard or Soft limits


Gain Business Insights

Pinpoint key market fluctuations and find correlations related to your business

• Business Analytics for both API provider and application developer:

• Top traffic producing API ,

• Top application producing traffic

• Structured Filtered Search across analytics for example

• country:USA, color:red

• Saved Searches and Filters for easy and consistent retrieval

• Enables chargeback/billing for API consumption by developers through export of activity as .cvs file



App Developer




API Product Manager



Operations Lead






Developer portal for API consumers

Self service developer portal to explore APIs

Browse API documentation

Role-based access for viewing APIs

Browse available plans with limits and choose from available plans


Register application

Register new application

Request security keys


Monitor API consumption

Monitor most active applications and APIs



App Developer




API Product Manager



Operations Lead






Support many organizations with one solution

Multi-tenant support for multi-provider organizations

Provider and Consumer organization Visibility

Alerts & notifications

Send email directly through tool


Single Dashboard health monitoring

Consolidated super admin view

View system health

DataPower load balancing

SSL certificate Management

Server scaling


Setup in minutes

Easy out of the box setup

LDAP or internal identity provider support


Where does API Management fit?


Customer success stories

Business Challenge Difficult for internal partners and developers to discover &

access key financial services Lacked a standard ecosystem to manage internal partners

including global credit card companies and merchants No visibility on Service consumption or ability to

chargeback for LoB use of Services

Example Apps

Solution IBM API Management v2.0 & DataPower Gateway

Leading Global Commercial Bank provides easy & secure access to key financial services

Business Value Offers 3rd party merchants secure standards-based access

to key business services as APIs, with a self-service experience

Provides an internal ecosystem for partners and a central repository with usage analytics

Drives innovation for Mobile application development

$

Business ChallengeBusiness Challenge External business partners retrieve flight information by scraping the

company’s website Unauthorized access to full flight information , with no usage analytics Delays in updating website – difficult for authorized partner to test

changes REST-based API had just been built but security was not in place


Business Value Easily and securely connect company Website to new APIs, saving cost

of building OAuth based secure access Enable secure exposure of APIs to External Business Partners, saving

the implementation cost of building a developer support infrastructure with access management

Ability to leverage existing investment in IBM DataPower gateway and internal team skillset

Enable secure Mobile app integration with Enterprise APIs

Large Airline in North America provides authorized access to flight services

Leading European Auto Manufacturer provides innovative vehicle connectivity with IBM API Management

Business Challenge Offer innovative connectivity services to customers,

improve the driver experience, improve safety, and create new revenue sources

Improve driving conditions with driver profiling, eco-driving, fleet management, reduce accident risk

Collect data to monetize them for partners

Solution IBM API Management v2.0 & IBM MessageSight

Business Value “Always connected” low-latency reliable communications

with the car systems/apps and customer mobile apps Vehicle data APIs published on secure developer portal Internal & external developers use vehicle data to develop

mobile applications Drives innovation for Mobile application development

Business ChallengeBusiness Challenge Difficult for internal partners and developers to discover &

access key retail services Leverage mobility as a revenue stream and manage

internal and external business partners No visibility on Service consumption or ability to

chargeback for LoB use of Services


Business Value Offers 3rd party merchants secure standards-based access

to key business services as APIs, with a self-service experience

Provides an internal ecosystem for partners and a central repository with usage analytics

Drives innovation for Mobile application development

Leading Retailer in North America provides easy & secure access to retail services

Pitney Bowes, a global leader in software innovations, and mailing and shipping solutions, powers billions of transactions in modern commerce

“Pitney Bowes location-based services on IBM BlueMix will allow innovators and developers to seamlessly extend their products and services to the cloud and mobile devices.” -Roger Pilc, Chief Innovation Officer, Pitney Bowes ..

api economy - cuomo

Documents

api economy api management

api success

api environments

api traffic

ibm corporation api

monitor api usage

api product manager

cloud control apis