apidays LIVE New York 2021 - API-driven Regulations for Finance, Insurance, and Healthcare July 28 & 29, 2021 API Automation For DevOps at Scale: How to Go From Code to API Product While Ensuring Compliance Rod Cope, Chief Technology Officer at Akana by Perforce

1. Akana by Perforce © 2021 Perforce Software, Inc.
API Automation For DevOps at Scale: How to Go From
Code to API Product While Ensuring Compliance
ROD COPE – JULY 29, 2021

2. akana.com
2 | Akana by Perforce © 2021 Perforce Software, Inc.
What We’ll Cover Today
1
2
3
4
Introduction
Challenges With Security, Compliance, & Governance
How API Automation Boosts DevOps
Summary / Q&A

3. akana.com
3 | Akana by Perforce © 2021 Perforce Software, Inc.
Presenter
Rod Cope
CTO, Perforce
Rod Cope is the CTO of Perforce Software where he provides technical vision and architectural leadership
for the company’s globally distributed development teams. Rod has over 25 years of experience in
software development that spans a number of industries, including telecommunications, aerospace,
healthcare, and manufacturing.
Previously in his career, Rod was the CTO of Rogue Wave Software and the CTO and Founder of OpenLogic.
He also worked in various software development roles for General Electric, IBM, Anthem, and IBM Global
Services. He holds both Bachelor’s and Master’s degrees in Software Engineering from the University of
Louisville.
rcope@perforce.com
www.linkedin.com/in/rodcope/

4. akana.com
4 | Akana by Perforce © 2021 Perforce Software, Inc.
DevOps and APIs: A Perfect Match
• APIs are critical to DevOps success.
• And DevOps is critical for APIs to get scaled appropriately.
• Both require major enterprise IT culture shifts.
• API automation at scale is the key to overcoming common
challenges and accelerating development — while ensuring
quality.
• Automated API creation
• Automated security, compliance, and governance.
• Automated API management = faster development!

5. Challenges With Security, Compliance, and Governance

6. akana.com
6 | Akana by Perforce © 2021 Perforce Software, Inc.
Challenge #1: Securing APIs
• In the race to scale more APIs, enterprises
cannot ignore security threats.
• Not only do you need to secure your APIs, you
also must secure the API lifecycle.
• Especially in DevOps.
• DevOps sits at the crossroads of IT and digital
innovation and plays a pivotal role in securing
the entire API lifecycle.
45% of respondents aren’t confident in their security organization's ability to detect whether a bad actor is
accessing their APIs. In fact, 51% aren't even confident their security team knows about all of the APIs that
exist in the organization.
- Ping Identity Survey

7. akana.com
7 | Akana by Perforce © 2021 Perforce Software, Inc.
Challenge #2: Compliance
• 91% of organizations experienced API security incident in
the last year.
• Compliance and governance challenges could cost the
enterprise millions if a single undetected threat
compromises customer data.
• Obviously, the risks of noncompliance are far too high which
means compliance is a must.
• But compliance regulations often stand in the way of
DevOps efficiency.
• API management platforms offer automated policies,
authentication / authorization, and SLA agreements.

8. akana.com
8 | Akana by Perforce © 2021 Perforce Software, Inc.
Challenge #3: Governance
• Like compliance, governance has a corporate history of slowing
innovation.
• Which responsibilities belong to DevOps teams?
• Which responsibilities DON’T?
• The API interaction / mediation layer allows you to:
• Decouple critical API product elements from the code on
which the API product is based.
• The code is the responsibility of the DevOps team.
• Applying security policies for governance can be delegated to
an API management solution — in an automated manner.

9. How API Automation Boosts DevOps

10. akana.com
10 | Akana by Perforce © 2021 Perforce Software, Inc.
API Automation Boosts DevOps, Bringing Everything Together

11. akana.com
11 | Akana by Perforce © 2021 Perforce Software, Inc.
API Automation For Your Security Policies
Protect against vulnerabilities.
API automation means automated security policies that protect
against OWASP API Security Top 10:
• Broken Object Level Authorization
• Broken Authentication
• Lack of Resources and Rate Limiting
• Broken Function Level Authorization
• Improper Assets Management

12. akana.com
12 | Akana by Perforce © 2021 Perforce Software, Inc.
API Automation For Simplified Compliance
Simplify compliance with API automation.
• Automate common tasks, steps, configurations, templates, and
policies.
• Ensure repeatability, speed, and compliance results.
• Gain major IT savings and greater security, for example:
• FHIR provides shared APIs so healthcare platforms can safely
share data across facilities. Automation speeds compliance
and opens door to healthcare innovation.
• PSD2, OIDC, OAuth 2.0 likewise automated at a platform
level to provide secure open banking environments.

13. akana.com
13 | Akana by Perforce © 2021 Perforce Software, Inc.
API Automation For End-to-End Governance
Gain end-to-end governance — the easy way.
API automation means security, consistency, stability, and
reusability.
So, you can:
• Enable consistency across APIs – cutting down on development
time and cost
• Allow components to be reused, both internally and externally
• Build APIs to achieve specific goals and bring value to the
business
• Track all elements of the API lifecycle – know where, how, and
by whom they are being used

14. akana.com
14 | Akana by Perforce © 2021 Perforce Software, Inc.
• API automation boosts DevOps…
• …adding speed.
• …ensuring security, compliance, and governance.
• …delivering value.
API Automation at Scale For DevOps

15. akana.com
15 | Akana by Perforce © 2021 Perforce Software, Inc.
Summary
• Enterprises face big challenges with security, compliance, and governance —
which gets in the way of DevOps.
• API automation solves these challenges and boosts DevOps efficiency.

16. Q&A

17. A K A N A A P I M A N A G E M E N T
Thank you!
Be sure to visit the Akana booth!
&
Register for a chance to win a $200 Amazon gift card.