Scale the API Economy With The Open API Definition Leap Of Faith
API Economy - Cuomo
description
Transcript of API Economy - Cuomo
APIsExploring the API Economy & API Management
@JerryCuomoIBM Fellow, VP WebSphere Strategy & CTO
API Management
© 2014 IBM Corporation
IBM API ManagementFully on-premise, multi-tenant solution,
for API providers
IBM DataPowerAPI Gateway for security, control, integration & optimized access to a full range of Mobile, Web,
API, SOA, B2B & Cloud workloads
Over a decade of innovation, 10,000+ units sold, 2000+ customer installations worldwide
A single, comprehensive solution to design, secure, control, publish, monitor & manage APIs
© 2014 IBM Corporation
IBM API Management
Manage and Share with developer
communities
3
Create, assemble and version an API
1
Analyze & Monitor API usage
4
Secure, control &
scale the API
2
© 2014 IBM Corporation
Easily manage your APIsdesign, secure, control, publish, monitor & manage
Explore API documentation
Provision application keys
Developer Portal API Manager Management Console
Define and manage APIs
Explore API usage with analytics
Manage API user communities
Provision system resources
Monitor runtime health
Scale the environment
© 2014 IBM Corporation
Join the API EconomyIBM API Management V3 – on-premise* & SaaS**
Assemble business APIs easily
Provide Secure or Open APIs on-prem or Cloud
Control APIs at a fine-grained level
Analyze API usage
Manage private, partner, public app developers
Provide self-service app developer onboarding
What’s new in IBM API Management V3 Single console to manage REST & SOAP services and publish to various app
developer communities with role-based access control Simple on-premise deployment architecture & elastic scalable cloud solution Enhanced OAuth 2.0 support for secure APIs Web service discovery from WSRR Policy-driven API control & visibility across various environments
What’s new in IBM API Management V3 Single console to manage REST & SOAP services and publish to various app
developer communities with role-based access control Simple on-premise deployment architecture & elastic scalable cloud solution Enhanced OAuth 2.0 support for secure APIs Web service discovery from WSRR Policy-driven API control & visibility across various environments
* on-prem GA date May 9** SaaS Statement of Direction
© 2014 IBM Corporation
API Management v3 platform solution
Management layer Gateway layer
The management layer enables organizations to define, manage, expose and control APIs.
Provides API Manager, Developer Portal and Management Console
API configurations are deployed to the gateway, which provides the enforcement point for runtime policies to control API traffic.
Gateway is DataPower physical or virtual
© 2014 IBM Corporation
API Developer • How do I assemble APIs?• How do I manage security?• Will the infrastructure scale?• How do I measure performance?
App Developer
• Where do I access APIs?
• How do I understand the APIs?
• How do I measure success?
API Product Manager
• How can I rapidly release & update my APIs?
• How do I publicize my API?• How do I measure success?
Operations Lead
• How do I manage all the API Environments that are being requested?
• How can I scale each environment?
• How can I easily find and fix issues?
API Success Requires Addressing Needs of Multiple Stakeholders
© 2014 IBM Corporation
Intuitively and iteratively define APIs and associated policies
Rapidly assemble APIs via configuration, not coding
Minimize risk with industry leading security & scalability
Define
API Developer
Assemble
Meter
SecureDeploy, Test & Debug
Monitor
Scale
Version
21
Create, Secure & Version APIsSimple interface accelerates iterative API development & deployment
© 2014 IBM Corporation
Easily create, find REST and SOAP APIs
Define the REST or SOAP API you wish to expose
Import from a registry
Search for, add custom tags to, and mark favorite APIs for easier discovery
© 2014 IBM Corporation
Assemble New APIs Through Configuration
Assemble a new API by combining multiple REST or SOAP services into a composite API
Provide examples of the request and response messages, headers and parameters
Drag and connect linking the request and response messages
Transform the message elements with a click
© 2014 IBM Corporation
Secure the API
Identify application with Client ID & Secret
Authenticate using LDAP or Authentication URL
Authorize using OAuth 2.0 support with implicit grant type, authorization code, resource owner
© 2014 IBM Corporation
Version the API for iterative development
Version the API configuration in just one click
Revert prior version
© 2014 IBM Corporation
API Developer • How do I assemble APIs?• How do I manage security?• Will the infrastructure scale?• How do I measure performance?
App Developer
• Where do I access APIs?
• How do I understand the APIs?
• How do I measure success?
API Product Manager
• How can I rapidly release & update my APIs?
• How do I publicize my API?• How do I measure success?
Operations Lead
• How do I manage all the API Environments that are being requested?
• How can I scale each environment?
• How can I easily find and fix issues?
API Success Requires Addressing Needs of Multiple Stakeholders
© 2014 IBM Corporation
“Productize” APIs using Plans
Include multiple APIs and Resources per Plan
Version your Plans
Apply Entitlement by Plan or Resource
Fine grained control over plan deployment
Enforce Hard or Soft limits
© 2014 IBM Corporation
Gain Business Insights
Pinpoint key market fluctuations and find correlations related to your business
• Business Analytics for both API provider and application developer:
• Top traffic producing API ,
• Top application producing traffic
• Structured Filtered Search across analytics for example
• country:USA, color:red
• Saved Searches and Filters for easy and consistent retrieval
• Enables chargeback/billing for API consumption by developers through export of activity as .cvs file
© 2014 IBM Corporation
API Developer • How do I assemble APIs?• How do I manage security?• Will the infrastructure scale?• How do I measure performance?
App Developer
• Where do I access APIs?
• How do I understand the APIs?
• How do I measure success?
API Product Manager
• How can I rapidly release & update my APIs?
• How do I publicize my API?• How do I measure success?
Operations Lead
• How do I manage all the API Environments that are being requested?
• How can I scale each environment?
• How can I easily find and fix issues?
API Success Requires Addressing Needs of Multiple Stakeholders
© 2014 IBM Corporation
Developer portal for API consumers
Self service developer portal to explore APIs
Browse API documentation
Role-based access for viewing APIs
Browse available plans with limits and choose from available plans
© 2014 IBM Corporation
Register application
Register new application
Request security keys
© 2014 IBM Corporation
Monitor API consumption
Monitor most active applications and APIs
© 2014 IBM Corporation
API Developer • How do I assemble APIs?• How do I manage security?• Will the infrastructure scale?• How do I measure performance?
App Developer
• Where do I access APIs?
• How do I understand the APIs?
• How do I measure success?
API Product Manager
• How can I rapidly release & update my APIs?
• How do I publicize my API?• How do I measure success?
Operations Lead
• How do I manage all the API Environments that are being requested?
• How can I scale each environment?
• How can I easily find and fix issues?
API Success Requires Addressing Needs of Multiple Stakeholders
© 2014 IBM Corporation
Support many organizations with one solution
Multi-tenant support for multi-provider organizations
Provider and Consumer organization Visibility
Alerts & notifications
Send email directly through tool
© 2014 IBM Corporation
Single Dashboard health monitoring
Consolidated super admin view
View system health
DataPower load balancing
SSL certificate Management
Server scaling
© 2014 IBM Corporation
Setup in minutes
Easy out of the box setup
LDAP or internal identity provider support
© 2014 IBM Corporation
Where does API Management fit?
© 2014 IBM Corporation
Customer success stories
Business Challenge Difficult for internal partners and developers to discover &
access key financial services Lacked a standard ecosystem to manage internal partners
including global credit card companies and merchants No visibility on Service consumption or ability to
chargeback for LoB use of Services
Example Apps
Solution IBM API Management v2.0 & DataPower Gateway
Leading Global Commercial Bank provides easy & secure access to key financial services
Business Value Offers 3rd party merchants secure standards-based access
to key business services as APIs, with a self-service experience
Provides an internal ecosystem for partners and a central repository with usage analytics
Drives innovation for Mobile application development
$
Business ChallengeBusiness Challenge External business partners retrieve flight information by scraping the
company’s website Unauthorized access to full flight information , with no usage analytics Delays in updating website – difficult for authorized partner to test
changes REST-based API had just been built but security was not in place
Solution IBM API Management v2.0 & DataPower Gateway
Business Value Easily and securely connect company Website to new APIs, saving cost
of building OAuth based secure access Enable secure exposure of APIs to External Business Partners, saving
the implementation cost of building a developer support infrastructure with access management
Ability to leverage existing investment in IBM DataPower gateway and internal team skillset
Enable secure Mobile app integration with Enterprise APIs
Large Airline in North America provides authorized access to flight services
Leading European Auto Manufacturer provides innovative vehicle connectivity with IBM API Management
Business Challenge Offer innovative connectivity services to customers,
improve the driver experience, improve safety, and create new revenue sources
Improve driving conditions with driver profiling, eco-driving, fleet management, reduce accident risk
Collect data to monetize them for partners
Solution IBM API Management v2.0 & IBM MessageSight
Business Value “Always connected” low-latency reliable communications
with the car systems/apps and customer mobile apps Vehicle data APIs published on secure developer portal Internal & external developers use vehicle data to develop
mobile applications Drives innovation for Mobile application development
Business ChallengeBusiness Challenge Difficult for internal partners and developers to discover &
access key retail services Leverage mobility as a revenue stream and manage
internal and external business partners No visibility on Service consumption or ability to
chargeback for LoB use of Services
Solution IBM API Management v2.0 & DataPower Gateway
Business Value Offers 3rd party merchants secure standards-based access
to key business services as APIs, with a self-service experience
Provides an internal ecosystem for partners and a central repository with usage analytics
Drives innovation for Mobile application development
Leading Retailer in North America provides easy & secure access to retail services
Pitney Bowes, a global leader in software innovations, and mailing and shipping solutions, powers billions of transactions in modern commerce
“Pitney Bowes location-based services on IBM BlueMix will allow innovators and developers to seamlessly extend their products and services to the cloud and mobile devices.” -Roger Pilc, Chief Innovation Officer, Pitney Bowes ..