API Management Fundamentals for Architects

Outline

Chapter 1. API Management Introduction

• Data is King
• Data Exchange Payloads
• API Management Defined
• The Driving Forces
• APIs to Monetize on Your Information Assets and Services
• The Traditional Point-to-point Integration Example
• It Raises Some Questions …
• The Facade Design Pattern
• API Management Conceptual Architecture
• Other "Complimentary" Services
• What Else is Needed?
• The Digital Transformation Strategies
• Gartner's Magic Quadrant for Full Life Cycle API Management
• Apigee
• MuleSoft
• Amazon Web Services (AWS)
• WSO2
• IBM API Connect
• KONG
• Summary

Chapter 2. Mulesoft & WSO2 Overview

• What is MuleSoft?
• MuleSoft AnyPoint Platform
• MuleSoft Cloud Community Manager
• Anypoint Studio
• Advanced REST Client (ARC)
• What is WSO2?
• User Roles in WSO2 Workflows
• The Main Client-Facing Web Applications and Capabilities
• WSO2 Main Features
• The API Gateway
• Workflow for Invoking an API
• Workflow for Creating an API
• Access Control and Security
• User Authentication via Access Token
• Manage and Scale API Traffic
• Monitor and Monetize
• WSO2 Cloud
• Summary

Chapter 3. Apigee Overview

• What is Apigee?
• The Big Picture
• API Consumers
• Apigee Main Components
• Apigee Edge API Management Platform Functional Diagram
• Apigee Capabilities and Actors
• Apigee Policies for Traffic Management and Data Transformation
• Apigee Sense
• Developer Portal
• Apigee Monetization
• Core Monetization Components
• API Runtime
• API Proxies
• API Proxy Virtual Hosts
• Flows
• OAuth 2.0 Integration
• API Beauty (an API Runtime's Capability)
• API Edge Caching
• Service Composition
• Apigee Edge Monitoring and Analytics
• Samples of Monitoring Charts
• Edge Microgateway
• Edge Microgateway Integration with Apigee Edge Analytics
• Examples of Edge Microgateway Deployments (1 of 3)
• Examples of Edge Microgateway Deployments (2 of 3)
• Examples of Edge Microgateway Deployments (3 of 3)
• Pricing: Standard Plan
• Apigee Hybrid
• Apigee Hybrid Capabilities
• Apigee Hybrid Collaboration Diagram
• Summary

Chapter 4. API Management Analytics

• API Metrics
• API Proxy (API Gateway) Performance
• The Apigee Proxy (API Service Gateway) Performance Chart
• The Apigee Target Service Performance Chart
• The Apigee Cache Performance Chart
• The Apigee Error Code Chart
• Geolocation Metric
• The Apigee GeoMap Chart
• Developer Engagement
• The Apigee Developer Engagement Chart
• Reports
• Summary

Chapter 5. RESTful Services Overview

• Many Flavors of Services
• SOAP or REST?
• Understanding REST
• Manipulation of Resources through Representations
• Principles of RESTful Services
• HTTP Methods
• HTTP Status Codes
• Related Standards: MIME
• Anatomy of a URL
• GET
• The GET Method
• Passing Parameters
• HTTP Methods That Modify/Create Resources
• POST
• POST Request Example
• POST Response Example
• PUT
• PUT Example - Update
• PUT Example - Create
• PATCH
• Patch Example - Update
• To PUT or POST?
• SOAP Examples
• A RESTful API for Tracking Video Games
• What is gRPC?
• How It Works
• gRPC Request - Response Diagram
• REST vs. gRPC
• So, REST or gRPC?
• Summary

Chapter 6. Describing RESTful APIs

• Describing RESTful APIs
• History
• Ad-hoc Interface definitions
• Modern Choices
• Stacking Up Open API vs RAML
• Open API vs RAML: Advantages and Disadvantages
• RAML
• Build A RAML API Description
• ROOT
• List Resources
• Define Methods
• Define Query Parameters
• Enter Responses
• Open API (Swagger)
• Swagger Versions
• Swagger Editor
• Swagger Codegen
• Swagger UI
• OpenAPI Service Description
• Pretty Printed OpenAPI Service Definition
• Summary

Chapter 7. Securing APIs

• What are the Security Domains?
• How to Secure an API?
• DDoS Protection
• Authentication
• OAuth2 Overview
• OAuth Components
• OAuth Authentication and Authorization Overview
• OAuth Collaboration Diagram
• Example: OAuth Client Credentials Grant with Apigee Edge
• Getting Authorization Code Through a Federated External Directory (Facebook or Google)
• What is Security Assertion Markup Language (SAML)?
• SAML 2.0 Web SSO Authentication
• SAML vs. OAuth2
• Identity mediation
• Encryption of Data in Transit with TLS
• Key and Certificate Management
• Threat Detection
• Apigee Content-based Security
• JSON Web Tokens (JWT)
• How JWT Works
• OAuth vs JWT
• Data-masking
• Last-mile security
• Summary

Chapter 8. Microservices Architecture Overview

• What is a "Microservice"?
• Principles of Microservices
• Properties and Attributes of Microservices
• Benefits of Using Microservices
• The Microservices Architecture
• Microservices Architecture vs SOA
• The ESB Connection
• Microservices Architecture Benefits
• Microservices Architecture Choices and Attributes
• Example: On-Line Banking Solution Based on MsA
• Distributed Computing Challenges
• Replaceable Component Architecture
• What Can Make a Microservices Architecture Brittle?
• Summary

Chapter 9. Designing and Implementing Microservices

• Two Types of IT Projects
• What is In Scope for a Robust Microservices Design?
• Scoping Your Microservice via the Bounded Context
• Scoping Your Solution's Microservices Architecture
• External / Shared and Internal Service Models
• General Architectural and Software Process Organizational Principles
• Loose Coupling, the OOD Perspective
• Crossing Process Boundary is Expensive!
• Cross Cutting Concerns
• More Cross Cutting Concerns
• To Centralize or Decentralize Client Access?
• Decentralized Client Access
• Centralized Client Access
• The Facade Pattern
• The Facade Service Conceptual Diagram
• The Service Mesh Integration Pattern
• Istio
• Mesh Pros and Cons
• Service-to-Service Communication with Mesh
• The Naked Objects Architectural Pattern
• When to Use Naked Objects Pattern
• Dealing with the State
• How Can I Maintain State?
• Micro Front-ends (a.k.a. MicroUI)
• How can MicroUI Help Me?
• Your Clients Are Diverse
• The "Rich Client" - "Thin Server" Paradigm
• The "Rich Client" - "Thin Server" Architecture
• RIA as a Driving Force to Turn the "Thin Server" into a Set of Microservices
• Design for Failure
• Resilience-Related Design Patterns
• The Immutable Infrastructure Principle
• Implementing Microservices
• Microservice-Oriented Application Frameworks and Platforms
• Embedding Databases
• Embedded Java Databases
• Summary

Lab Exercises

• Lab 1. Understanding Google's Geocoding API (Research Project)
• Lab 2. Comparing API Management Platforms (Research Project)
• Lab 3. Working with MuleSoft Anypoint Studio
• Lab 4. Qwiklabs
• Lab 5. Monolith vs Microservices Design
• Lab 6. Data Availability and Consistency
• Lab 7. Using AWS API Gateway (Optional)
• Lab 8. Using API Management on Azure (Optional)