API Management & Governance in an Enterprise

30 March 2015

Principal Architect – Aditi + STC (a Harman company)

13 years of experience.Architecting Enterprise solutions across retail, healthcare, finance, e-commerce.

-Leveraging open source stack - Middleware, NoSQL over AWS-Speaker @ WSo2 conferences, contribute to Java.net projects

2

Agenda

• ABOUT ADITI_STC

• APIs/SERVICES IN AN ENTERPRISE

• CHALLENGES FACED BY MANY

• GOVERNANCE ASPECTS ACROSS LIFECYCLE

• API MANAGER - what does it address

• GOVERNANCE REGISTRY – what does it address

• DEMO

3

STC + ADITI Overview

4

We Provide Innovative Software Solutions

CLOUDDESIGN MOBILITY ANALYTICS

Member of Open Handset Alliance

Android Device Certification PartnerOnly Services Company in the OAA

Best IoT partnerWindows Azure Partner of the Year

5

SYMPHONY TELECA IS YOUR GLOBAL INNOVATION AND DEVELOPMENT PARTNER

REPRESENTATIVE CLIENT LIST

Over 600 clients globally

$400M+ in revenue

7,500 employees in 40 offices

Delivery centers in Argentina, China, India, Poland, Russia, US

AWARDS

GROWINGAT 25% YOY

ü

ü

ü

ü

… at a Global scale

6

APIs in an Enterprise

7

APIs – Integral part of EnterpriseThey are everywhere…

• Shared/Utility services

• Mediation/ Broker services

• Identity services• Data services

• Business as a Service• Mobile strategy

• … and many more

Within Application

Across application

s

(within enterprise)

Outside Enterprise

(across partners)

Maturity

Complexity

8

APIs – Silos & Un Managed?Silos? Un Managed?

• Each LOB re-inventing the wheel?

• Cost savings?• Time to market?• Maintenance overhead?

• Catalog of services against functionality?

• Dependencies & associations within services

• Who are the consumers of my service?

• Versioning? Sharing of assets?

9

Governance challenges

10

APIs – Lifecycle & Governance aspects

Governance across stages… | Design Time & Run Time Governance

Planning• Searchable -Catalog,

De-duplication• Capture - Consumers

& Providers• Capturing

requirements• NFR (perf., security)• Policies & Metadata

Build - Develop• Capture Lifecycle• Notifications on events• Capture dependency & • association• Re-use & Collaboration• Environment Mapping & deployment across

Run• Analyze usage pattern Of APIs• SLA & Performance -Response times• Subscription statistics• Monitoring & Metering• Security

Share• Communication

& Collaboration• Artefacts

repository• Forum &

Feedback• Documentation• Versioning

11

Solution Aspects

Governance Registry

BAM

Monitoring

API Manager

12

API Manager – what challenges does it address?

A single platform to publish APIs, subscribe to them.Also handles security, documentation & collaboration.

• Browse/Search for APIs• Subscribe to APIs• Forum, Feedback & Rating• Production & Sandbox• API Keys - OAuth

• Create APIs• Publish APIs &

Documentation• Manage Throttling,

Versioning• Lifecycle – Prototype/

Publish• Contact Info. & Statistics

Publisher

Store

• Gateway serves all API invocations

• Takes care of throttling• Key Mgr. handles security

Gateway &Key Mgr.

13

API Manager + BAM – runtime Governance

Platform to aggregate, analyze & report on API usage data. – Who uses my APIs? How & When?

• Predefined OOTB reports• Ability to write custom

Hive queries• Create custom

visualizations using Toolbox.

• Connect API Manager to BAM

• Push Log data to BAM• JSON format• API to push data

Collect data

Inbuilt & custom queries

• Use in Dev for debugging purposes

• Single place to analyze logs

• Prod to measure subscription, response time, usage pattern

• End consumer personalization

Dev & Prod

usage

14

Governance Registry – what challenges does it address?

• A single platform across the Enterprise to manage the APIs, Services, Policies and other artefacts.

• Foster trust, share & re-use, cost savings & accelerate time to market.

• Create APIs, Services, WSDLs

• Policies & Sequences• Share across multiple

apps by mounting Governance registry

• Registry extension – model types & their meta data

• Create consumers, providers

• Applications & Services• Contact Info. & Statistics

Enterprise Map

(rxt & metadata)

Artefacts

(upload & share)

• Lifecycle – Prototype/ Publish

• Handlers for media types

Lifecycle &

Handlers

Provider (External

)

Seq/URL

Consumer (Department)

Application(s) Service/

WSDL/ API

15

Governance Registry across Environments

Use keys instead of actual URLShared Governance Registry across Env.

Different Mount points.

16

WSO2 API Management Platform

17

WSO2 API Manager 1.9.0 released !!

• External Key Manager support• Pluggable Version Strategy• Applications/Subscription sharing• Swagger 2.0 support• Improved API Analytics toolbox (separate

download)• API Fraud Detection sample (separate

download)

18

Q&A

40GLOBAL OFFICES

7500EMPLOYEES

23COUNTRIES

Top 10Mobile Companies

Top 5Outsourced Product Development Companies

2012 Partner of the year Windows Azure, Finalist

Excellence AwardTechnology Agency of the

Year 2015