azure api management overview - microsoft management.pdf · using api management to aggregate data...

Azure API Management

0

20000

40000

60000

80000

100000

120000

2006 2007 2008 2009 2010 2011 2012 2013 2014 2015

Number of Public APIs

Year Total APIs

Mobile

Cloud

Computing

Internet

of

Things

Machine

Learning

Software

as a

Service

Microservices

APIs

“APIs make digital society and digital business work; they are

the basis of every digital strategy.”

From the Gartner research note “Top 10 Things CIOs Need to Know About APIs and the API Economy”

By Paolo Malinverno, Kristin R. Moyer, Mark O'Neill, Mike Gilpin

Published 25 January 2017

Business models

Channels

Ecosystems

Mobility

User experience

Crowdsourcing

Agility

Empowerment

Productivity

User Engagement Ecosystem Multi-modal IT

Based on Gartner research note “Articulating the Business Value of APIs”

Anne Thomas and Kristin R. Moyer

24 March 2016

Consume PublishMediate

Azure portalGatewayDeveloper portal

Abstract

Secure & protect

Evolve

Monitor

Analyze

Productize

Monetize

Discover

Learn

On-board

Try

Get support

SDKs and samples

global

product

api

operation

to backend

from backend

from caller

to caller

GET /foo/bar HTTP/1.1

Host: api.constoso.com

Key: 01234567890123456789

/foo

/bar

Developer portal

Azure portal

Gateway

Publish

Mediate

Consume

contosoapi-foo.azurewebsites.com

contosoapi-foo.azurewebsites.comcontosoapi-bar.azurewebsites.com

Gateway

Mediate

contoso.azure-api.net/fooapi.contoso.com/foo

• Username/Password

• Microsoft account

• Google account

• Facebook account

• Twitter account

• Azure AD (Premium)

• Azure AD B2C (Premium)

• Delegated

• Key

• OAuth 2

• OpenID Connect

• Client certificate

• IP filter

• Rate limits and quotas

• Azure account

• RBAC

• HTTP Basic

• Mutual certificate

• Shared secret

• IP filter

• VNET/NSG

Developer portal

Azure portal

Gateway

Publish

Mediate

Consume

Developer portal

Azure portal

Gateway

Publish

Mediate

Consume

VNET

Gateway

Mediate

VPN

VNET

/v1

/v2

;rev=1

;rev=2

;rev=3

;rev=4

;rev=1

;rev=2

/speakers

/sessions

/days

https://example.org/ foo

FantasyData

OBJECTIVES

Serve real-time data from more than 5000 sporting

events from all US regions including football,

basketball, baseball, hockey and golf.

TACTICS

Using API Management to aggregate data from

multiple sources and offer access under multiple

pricing tiers starting with free access. Deliver

documentation and testing environment helping

developers on multiple platforms get started quickly.

RESULTSLaunched API program serving approximately 100

developers building apps for websites, mobile

devices, stadium scoreboards and casino kiosks.

Leveraging cloud resources to bring down costs and

charge less than their competitors.

FantasyData is a leading provider of real-time sports content across multiple sports, serving fantasy, media and mobile clients worldwide.

Cognitive ServicesMicrosoft Cognitive Services has built a broad range

of AI-based intelligence capabilities handling vision

(e.g. face and emotion recognition), speech (e.g.

speaker recognition), language (e.g. linguistic

analysis , Bing speller), knowledge (e.g. entity linking

, recommendations) and search.

OBJECTIVES

Launch a public API program presenting a

consistent experience across APIs.

TACTICS

Using API Management to consolidate access to

multiple backend systems and offer access in tiers

with specific metering and rate limiting. Allowing

developers to use a Microsoft account to get API

credentials.

RESULTSLaunched API program serving more than 21 million

unique calls per month for 32,000 unique users.

HALOExclusively published by Microsoft Studios and

developed by 343 Industries, the Halo franchise is an

award-winning collection of properties, over $5

billion in worldwide sales to date, that has

transcended video games and grown into a global

entertainment phenomenon.

OBJECTIVES

Expose key HALO APIs including player profiles,

statistics and metadata.

TACTICS

Using API Management to offer different levels of

access for development and production with

different rate limits. Using the management interface

to get extra usage information for the exposed APIs.

RESULTSLaunched API program serving 1500 users exploring,

exploiting and creating incredible apps, tiles,

websites and more…

Implement and Test Deploy and Run Version and Retire

Integrated OpenAPI Editor XSLT and template transformation policies Versions

API mocking Retry and concurrency control policies Revisions

SOAP and SOAP2REST Secret and cert management in Key Vault Change log

Composite APIs out of Functions Identity federation with Azure AD B2C Versioning schemes

Workflow as an API with Logic Apps Internal VNET configuration Versions from revisions

Microservices gateway for Service Fabric Logging, monitoring and alerting

Custom analytics reports and dashboards

Multiple custom hostnames in Premium

OpenID Connect support

http://aka.ms/apimroadmap

“Differentiation does not come from building your own API

management platform. It comes from the APIs you publish to

your ecosystems of developers, and how motivated they are to

realize application constructs that turn into a business

advantage for you.”

From the Gartner research note “Top 10 Things CIOs Need to Know About APIs and the API Economy”

By Paolo Malinverno, Kristin R. Moyer, Mark O'Neill, Mike Gilpin

Published 25 January 2017

© Copyright Microsoft Corporation. All rights reserved.