SlideShare a Scribd company logo
1 of 66
Download to read offline
Be My API <3
How to implement an API strategy everyone will love.
 Mike Amundsen
  Principal API Architect
  Layer 7 Technologies
  @mamund
                                                       1
PRELIMINARIES


                2
Mike Amundsen
 Author, Web Architect, Presenter
 Principal API Architect
 Hypermedia Junkie
 Building Hypermedia APIs with HTML5 and Node
 RESTful Web APIs (w/ Leonard Richardson)




                                                 3
API Academy




        Mike Amundsen   Ronnie Mitra   Alex Gaber




                                                    4
API Academy




          http://forms.layer7tech.com/FW-API13
                                                 5
API Academy




              6
API Academy Web Site (URI shortly)




                                     7
Housekeeping
 Questions
 - Post questions to Q&A, we’ll cover them at breaks throughout the sessions

 Twitter                                                    facebook.com/layer7

 - Today’s event hashtag:
                                                             layer7.com/linkedin
   - #L7webinar
                                                             layer7.com/blogs
 - Follow us on Twitter:
   - @layer7
   - @mamund (Mike Amundsen)
   - @intalex (Alex Gaber)
   - @mitraman (Ronnie Mitra)



                                                                                   8
Outline
 The Business of APIs
 The USE methodology (Usable, Scalable, Evolvable)
 Implementing a Solid Foundation
 API Interaction Models




                                                      9
THE BUSINESS OF APIS


                       10
The Business of APIs
 API Consumers
 Acquisition Targets
 Product Models




                        11
API Consumer: Private
 Internal/contract developers
 Implementation control


 Your product is understood
 Your control is the code/deployment


 Agenda alignment


 Private APIs offer the ability to strengthen
 your market



                                                 12
API Consumer: Partner
 Strategic Partners
 Limited implementation control


 Your product is your SDK
 Your control is access internal content, users, etc.


 Agenda Co-operation


 Partner APIs offer opportunities to
 extend your market



                                                         13
API Consumer: Public
 “Third-party” developers
 Little to no implementation control


 Your product is your API
 Your control is the API


 Agenda wide open


 Public APIs offer a chance to discover
 new markets



                                           14
API Consumer
 Private APIs to strengthen your market
 Partner APIs to extend your market
 Public APIs to discover new markets




                                           15
Acquisition: Reach
 Increase install base
 Enter new markets
 Raise awareness/presence


 Leverage existing products




                               16
Acquisition: Content
 Increase contributed user content
 Gather behavioral data
 Make new content connections


 Build upon existing infrastructure




                                       17
Acquisition: Users
 Expand user base
 Increase user traffic
 Increase user data


 Deepen customer relationships




                                  18
Acquisition
 Leverage existing products
 Build upon existing infrastructure
 Deepen customer relationships




                                       19
Product: Monitor
 Know your product
 What APIs are used?
 Who is using them?
 When they are using them?


 You are your best source of “big data”




                                           20
Product: Measure
 What are your metrics?
 API performance
 - Latency
 - Uptime
 - Reliability
 Dev performance
 - “Installs”
 - Traffic
 - Stability
 You can’t improve what you don’t measure

                                             21
Product: Modify
 Small changes can mean big results
 Use your APIs to test new ideas, new products
 “CI” means constant improvement


 Turn feedback into features




                                                  22
Product
 You are your best source of “big data”
 You can’t improve what you don’t measure
 Turn feedback into features




                                             23
The Business of APIs
 API Consumers
 - Private, Partner, Public
 Acquisition Target
 - Reach, Content, Users
 Product Modeling
 - Monitor, Measure, Modify




                              24
USABLE, SCALABLE,
EVOLVABLE (USE)

                    25
Usable
 “Usability is the ease of use and learnability of a human-made object.”




                                                                            26
Usable
 “Usability is the ease of use and learnability of a human-made object.”

 In API, the “I” stands for “Interface”
 How usable is your interface?
 Design for Usability
  - Early focus on users and tasks
  - Empirical measurement
  - Iterative design
 Be prepared to measure and iterate




                                                                            27
Scalable
 “Scalability is the ability of a system, network, or process, to handle a growing
  amount of work in a capable manner …”




                                                                                      28
Scalable
 “Scalability is the ability of a system, network, or process, to handle a growing
  amount of work in a capable manner …”


 Scaling out vs. scaling up
 Scaling up (more memory, etc.) is “easier” and more limiting
 Scaling out (more machines) is “harder” and more reliable over time
 Design-in support for the
  “Layered Constraint” (Fielding’s REST)
 Take advantage of “DevOps” practices to
  support scaling
 Be prepared to scale out




                                                                                      29
Evolvable
 “Evolvability is defined as the capacity of a system for adaptive evolution.”




                                                                                  30
Evolvable
 “Evolvability is defined as the capacity of a system for adaptive evolution.”

 Extend (pandere or “to stretch”)
  - Existing elements cannot be removed
  - Meaning/processing of existing elements cannot be changed
  - New elements must be optional
 Versioning (vertere or “to turn”)
  - Make it easy to identfy the “version”
  - Implementations should reject unsupported
    versions
 Don’t version unless it is unavoidable
 Be prepared for clients to ignore version details
 Do not create “Dodo” apps.

                                                                                  31
Review
 Usable
 - Your API is your Interface
 - Focus on users & tasks, measure, iterate


 Scable
 - Scaling out is the key
 - Take advantage of DevOps practices


 Evolvable
 - Don’t create Dodo apps
 - Favor extending over versioning whenever possible




                                                       32
IMPLEMENT A SOLID
FOUNDATION

                    33
Component != Connector




                         34
Component
 Database
 File System
 Message Queue
 Transaction Manager
 Source Code




                        35
Component == Private




                       36
37
Connector
 Web Server
 Browser Agent
 Proxy Server
 Shared Cache




                  38
Connector == Public




                      39
40
Client                Server
         Connectors




          The Web




         Components
                               41
Representation Layer




                       42
Representation Layer
 Representation happens in the Connector
 HTTP supports content negotiation
  - Accept
  - Content-Type
 Differing clients (user-agents) === differing representations
  - Desktop
  - Browser
  - Tablet
  - Smartphone
 Be prepared to support multiple representations




                                                                  43
Caching Layer




                44
Caching Layer
 Caching happens EVERYWHERE
 HTTP supports Expiration Model and Validation Model Caching
 Expiration Model
  - Expires
  - Cache-Control: max-age
 Validation Model
  - Last-Modified
  - Etag, If-Match
 Be prepared to support caching for both client and server
 Squid, Varnish, Nginx, MemCacheD, etc.




                                                                45
Security Layer




                 46
Security Layer
 Security happens at the edges
 HTTP supports authentication negotiation
  - WWW-Authenticate
  - Authorization
  - Proxy versions, too
 Keep Authentication out of your components
 Perform Authorization as early as possible
 Various security/routing proxies available




                                               47
Review
 Components != Connectors
  - Components are private (DB Server)
  - Connectors are public (HTTP)
 Representation Layer
  - You only send representations
  - Be prepared to support multiple representation formats
 Caching Layer
  - Caching happens everywhere
  - Support caching at client and server (proxies)
 Security Layer
  - Security happens at the edges
  - Use security proxies for better compliance/performance


                                                             48
THE API INTERACTION MODEL


                            49
Interaction Model as a Implementation Strategy
 Lots of things to decide when creating an implementation
 How do we make good choices?
 What is our “basis” for decisions?




                                                             50
Lots of Choices
 SOAP, CRUD, REST
 XML, JSON, HTML
 Caching
 Security
 Error Formats, etc.




                        51
Focus on Interactions, not technologies
 Great APIs are based on interactions
 Great design starts with the user perspective
 Focus on how the API will be used, not what it exposes
 Let’s apply UX (user experience) concepts to DX (developer experience)




                                                                           52
Three Questions
 Who will use this API?
 What will it be used to create?
 How will the API actually behave?




                                      53
API Interaction Actors
 Developer
 Application
 End User




                         54
API Usage Scenarios
 Focus on Activities, not Objects
 How will this API help the developer?
 Narrow the interface to those things you want to encourage.




                                                                55
Interface Behavior
 Build a model of tasks
 Identify data points needed to complete the tasks
 Map out interaction details for each task (or set of tasks)




                                                                56
Some Tips
 Be sure to include error-handling interactions
  - Is this Fixable?
  - Repeatable?
  - Safe/Unsafe?
 Keep it “abstract”
  - Don’t get tied up w/ technology (formats, libraries, frameworks, etc.)
  - Describe your model independent of protocol (HTTP, webSockets, etc.)
  - Maintain your DX perspective at all times.




                                                                             57
Review
 Focus on interactions, not technologies
 Maintain the developer perspective
 Tasks -> Data -> Models
 Keep it “abstract”




                                            58
SUMMARY


          59
The Business of APIs
 API Consumers
 - Private, Partner, Public
 Acquisition Target
 - Reach, Content, Users
 Product Modeling
 - Monitor, Measure, Modify




                              60
Usable, Scalable, Evolvable (USE)
 Usable
 - Your API is your Interface
 - Focus on users & tasks, measure, iterate


 Scable
 - Scaling out is the key
 - Take advantage of DevOps practices


 Evolvable
 - Don’t create Dodo apps
 - Favor extending over versioning whenever possible




                                                       61
Implement a Solid Foundation
 Components != Connectors
  - Components are private (DB Server)
  - Connectors are public (HTTP)
 Representation Layer
  - You only send representations
  - Be prepared to support multiple representation formats
 Caching Layer
  - Caching happens everywhere
  - Support caching at client and server (proxies)
 Security Layer
  - Security happens at the edges
  - Use security proxies for better compliance/performance


                                                             62
API Interaction Models
 Focus on interactions, not technologies
 Maintain the developer perspective
 Tasks -> Data -> Models
 Keep it “abstract”




                                            63
In Conclusion
 The Business of APIs
 The USE methodology (Usable, Scalable, Evolvable)
 Implementing a Solid Foundation
 API Interaction Models




                                                      64
Thank you


 Twitter
 - Today’s event hashtag:
                                facebook.com/layer7
   - #L7webinar
                                layer7.com/linkedin
 - Follow us on Twitter:
                                layer7.com/blogs
   - @layer7
   - @mamund (Mike Amundsen)
   - @intalex (Alex Gaber)
   - @mitraman (Ronnie Mitra)




                                                      65
Be My API <3
How to implement an API strategy everyone will love.
 Mike Amundsen
  Principal API Architect
  Layer 7 Technologies
  @mamund
                                                       66

More Related Content

What's hot

APIs for biz dev 2.0 - Which business model to win in the API Economy?
APIs for biz dev 2.0 - Which business model to win in the API Economy?APIs for biz dev 2.0 - Which business model to win in the API Economy?
APIs for biz dev 2.0 - Which business model to win in the API Economy?3scale
 
API Best Practices Webinar: Metrics - What to Measure
API Best Practices Webinar:  Metrics - What to MeasureAPI Best Practices Webinar:  Metrics - What to Measure
API Best Practices Webinar: Metrics - What to MeasureApigee | Google Cloud
 
The Future of API Monetization
The Future of API MonetizationThe Future of API Monetization
The Future of API MonetizationProgrammableWeb
 
API Management in Digital Transformation
API Management in Digital TransformationAPI Management in Digital Transformation
API Management in Digital TransformationAditya Thatte
 
API Maturity Model (Webcast with Accenture)
API Maturity Model (Webcast with Accenture)API Maturity Model (Webcast with Accenture)
API Maturity Model (Webcast with Accenture)Apigee | Google Cloud
 
A New Breed of Technical Leaders: The 101 to Defining Your API Business Stra...
A New Breed of Technical Leaders: The 101 to Defining Your API Business Stra...A New Breed of Technical Leaders: The 101 to Defining Your API Business Stra...
A New Breed of Technical Leaders: The 101 to Defining Your API Business Stra...Akana
 
Platform for Secure Digital Business
Platform for Secure Digital BusinessPlatform for Secure Digital Business
Platform for Secure Digital BusinessAkana
 
API Management
API ManagementAPI Management
API ManagementProlifics
 
Enterprise API Adoption Patterns
Enterprise API Adoption PatternsEnterprise API Adoption Patterns
Enterprise API Adoption PatternsAkana
 
Mapping out your API Strategy - 4.20.11 Webinar slides
Mapping out your API Strategy - 4.20.11 Webinar slidesMapping out your API Strategy - 4.20.11 Webinar slides
Mapping out your API Strategy - 4.20.11 Webinar slidesApigee | Google Cloud
 
API Management Workshop (at Startupbootcamp Berlin)
API Management Workshop (at Startupbootcamp Berlin)API Management Workshop (at Startupbootcamp Berlin)
API Management Workshop (at Startupbootcamp Berlin)3scale
 
API First: Going Beyond SOA, ESBs, and Integration
API First: Going Beyond SOA, ESBs, and Integration API First: Going Beyond SOA, ESBs, and Integration
API First: Going Beyond SOA, ESBs, and Integration Apigee | Google Cloud
 
Treat Your API Like a Product
Treat Your API Like a ProductTreat Your API Like a Product
Treat Your API Like a ProductElie Chevignard
 
The Architecture of an API Platform
The Architecture of an API PlatformThe Architecture of an API Platform
The Architecture of an API PlatformJohannes Ridderstedt
 
SOA in the API World - Facades, Transactions, Stateless Services
SOA in the API World - Facades, Transactions, Stateless Services SOA in the API World - Facades, Transactions, Stateless Services
SOA in the API World - Facades, Transactions, Stateless Services Apigee | Google Cloud
 
Cross Platform Mobile Apps with APIs from Qcon San Francisco
Cross Platform Mobile Apps with APIs from Qcon San FranciscoCross Platform Mobile Apps with APIs from Qcon San Francisco
Cross Platform Mobile Apps with APIs from Qcon San FranciscoCA API Management
 

What's hot (20)

APIs for biz dev 2.0 - Which business model to win in the API Economy?
APIs for biz dev 2.0 - Which business model to win in the API Economy?APIs for biz dev 2.0 - Which business model to win in the API Economy?
APIs for biz dev 2.0 - Which business model to win in the API Economy?
 
API Best Practices Webinar: Metrics - What to Measure
API Best Practices Webinar:  Metrics - What to MeasureAPI Best Practices Webinar:  Metrics - What to Measure
API Best Practices Webinar: Metrics - What to Measure
 
Api for dummies
Api for dummies  Api for dummies
Api for dummies
 
Architecture for the API-enterprise
Architecture for the API-enterpriseArchitecture for the API-enterprise
Architecture for the API-enterprise
 
The Future of API Monetization
The Future of API MonetizationThe Future of API Monetization
The Future of API Monetization
 
API Management in Digital Transformation
API Management in Digital TransformationAPI Management in Digital Transformation
API Management in Digital Transformation
 
API Maturity Model (Webcast with Accenture)
API Maturity Model (Webcast with Accenture)API Maturity Model (Webcast with Accenture)
API Maturity Model (Webcast with Accenture)
 
A New Breed of Technical Leaders: The 101 to Defining Your API Business Stra...
A New Breed of Technical Leaders: The 101 to Defining Your API Business Stra...A New Breed of Technical Leaders: The 101 to Defining Your API Business Stra...
A New Breed of Technical Leaders: The 101 to Defining Your API Business Stra...
 
Open api in enterprise
Open api in enterpriseOpen api in enterprise
Open api in enterprise
 
Platform for Secure Digital Business
Platform for Secure Digital BusinessPlatform for Secure Digital Business
Platform for Secure Digital Business
 
API Management
API ManagementAPI Management
API Management
 
Enterprise API Adoption Patterns
Enterprise API Adoption PatternsEnterprise API Adoption Patterns
Enterprise API Adoption Patterns
 
Mapping out your API Strategy - 4.20.11 Webinar slides
Mapping out your API Strategy - 4.20.11 Webinar slidesMapping out your API Strategy - 4.20.11 Webinar slides
Mapping out your API Strategy - 4.20.11 Webinar slides
 
API Management Workshop (at Startupbootcamp Berlin)
API Management Workshop (at Startupbootcamp Berlin)API Management Workshop (at Startupbootcamp Berlin)
API Management Workshop (at Startupbootcamp Berlin)
 
API First: Going Beyond SOA, ESBs, and Integration
API First: Going Beyond SOA, ESBs, and Integration API First: Going Beyond SOA, ESBs, and Integration
API First: Going Beyond SOA, ESBs, and Integration
 
Treat Your API Like a Product
Treat Your API Like a ProductTreat Your API Like a Product
Treat Your API Like a Product
 
The Architecture of an API Platform
The Architecture of an API PlatformThe Architecture of an API Platform
The Architecture of an API Platform
 
SOA in the API World - Facades, Transactions, Stateless Services
SOA in the API World - Facades, Transactions, Stateless Services SOA in the API World - Facades, Transactions, Stateless Services
SOA in the API World - Facades, Transactions, Stateless Services
 
Cross Platform Mobile Apps with APIs from Qcon San Francisco
Cross Platform Mobile Apps with APIs from Qcon San FranciscoCross Platform Mobile Apps with APIs from Qcon San Francisco
Cross Platform Mobile Apps with APIs from Qcon San Francisco
 
Definitive Guide to API Management
Definitive Guide to API ManagementDefinitive Guide to API Management
Definitive Guide to API Management
 

Viewers also liked

Horeca internetmarketing deel2
Horeca internetmarketing deel2Horeca internetmarketing deel2
Horeca internetmarketing deel2Gezondheid Acties
 
API Workshop Amsterdam presented by API Architect Ronnie Mitra
API Workshop Amsterdam presented by API Architect Ronnie MitraAPI Workshop Amsterdam presented by API Architect Ronnie Mitra
API Workshop Amsterdam presented by API Architect Ronnie MitraCA API Management
 
Implementing Business Aligned Security Strategy Dane Warren Li
Implementing Business Aligned Security Strategy Dane Warren LiImplementing Business Aligned Security Strategy Dane Warren Li
Implementing Business Aligned Security Strategy Dane Warren LiDaneWarren
 
"How to create an efficient API.. with a business model?" by Nicolas Grenié
"How to create an efficient API.. with a business model?" by Nicolas Grenié"How to create an efficient API.. with a business model?" by Nicolas Grenié
"How to create an efficient API.. with a business model?" by Nicolas GreniéTheFamily
 
Best Practices for SharePoint Timer Jobs
Best Practices for SharePoint Timer JobsBest Practices for SharePoint Timer Jobs
Best Practices for SharePoint Timer JobsShailen Sukul
 
Making ‘Big Data’ Your Ally – Using data analytics to improve compliance, due...
Making ‘Big Data’ Your Ally – Using data analytics to improve compliance, due...Making ‘Big Data’ Your Ally – Using data analytics to improve compliance, due...
Making ‘Big Data’ Your Ally – Using data analytics to improve compliance, due...emermell
 
(ARC206) Architecting Reactive Applications on AWS | AWS re:Invent 2014
(ARC206) Architecting Reactive Applications on AWS | AWS re:Invent 2014(ARC206) Architecting Reactive Applications on AWS | AWS re:Invent 2014
(ARC206) Architecting Reactive Applications on AWS | AWS re:Invent 2014Amazon Web Services
 
ITANA 2016: API Architecture and Implementation
ITANA 2016: API Architecture and ImplementationITANA 2016: API Architecture and Implementation
ITANA 2016: API Architecture and ImplementationColin Bell
 
Rethinking it for digital transformation
Rethinking it for digital transformationRethinking it for digital transformation
Rethinking it for digital transformationMuleSoft
 
APIs in the Enterprise -Lessons Learned
APIs in the Enterprise -Lessons LearnedAPIs in the Enterprise -Lessons Learned
APIs in the Enterprise -Lessons LearnedApigee | Google Cloud
 
API Strategy Evolution at Netflix
API Strategy Evolution at NetflixAPI Strategy Evolution at Netflix
API Strategy Evolution at NetflixMichael Hart
 
Office 365 api vs share point app model
Office 365 api vs share point app modelOffice 365 api vs share point app model
Office 365 api vs share point app modelBIWUG
 
IBM Security Strategy Overview
IBM Security Strategy OverviewIBM Security Strategy Overview
IBM Security Strategy Overviewxband
 
London Adapt or Die: Securing your APIs the Right Way!
London Adapt or Die: Securing your APIs the Right Way!London Adapt or Die: Securing your APIs the Right Way!
London Adapt or Die: Securing your APIs the Right Way!Apigee | Google Cloud
 
Google Cloud Platform : The API model
Google Cloud Platform : The API modelGoogle Cloud Platform : The API model
Google Cloud Platform : The API modelLaFrenchMobile
 
Information security: importance of having defined policy & process
Information security: importance of having defined policy & processInformation security: importance of having defined policy & process
Information security: importance of having defined policy & processInformation Technology Society Nepal
 
AWS Enterprise Summit Netherlands - Keynote
AWS Enterprise Summit Netherlands - KeynoteAWS Enterprise Summit Netherlands - Keynote
AWS Enterprise Summit Netherlands - KeynoteAmazon Web Services
 

Viewers also liked (20)

Horeca internetmarketing deel2
Horeca internetmarketing deel2Horeca internetmarketing deel2
Horeca internetmarketing deel2
 
API Workshop Amsterdam presented by API Architect Ronnie Mitra
API Workshop Amsterdam presented by API Architect Ronnie MitraAPI Workshop Amsterdam presented by API Architect Ronnie Mitra
API Workshop Amsterdam presented by API Architect Ronnie Mitra
 
Implementing Business Aligned Security Strategy Dane Warren Li
Implementing Business Aligned Security Strategy Dane Warren LiImplementing Business Aligned Security Strategy Dane Warren Li
Implementing Business Aligned Security Strategy Dane Warren Li
 
Freire model api
Freire model apiFreire model api
Freire model api
 
"How to create an efficient API.. with a business model?" by Nicolas Grenié
"How to create an efficient API.. with a business model?" by Nicolas Grenié"How to create an efficient API.. with a business model?" by Nicolas Grenié
"How to create an efficient API.. with a business model?" by Nicolas Grenié
 
Best Practices for SharePoint Timer Jobs
Best Practices for SharePoint Timer JobsBest Practices for SharePoint Timer Jobs
Best Practices for SharePoint Timer Jobs
 
Making ‘Big Data’ Your Ally – Using data analytics to improve compliance, due...
Making ‘Big Data’ Your Ally – Using data analytics to improve compliance, due...Making ‘Big Data’ Your Ally – Using data analytics to improve compliance, due...
Making ‘Big Data’ Your Ally – Using data analytics to improve compliance, due...
 
(ARC206) Architecting Reactive Applications on AWS | AWS re:Invent 2014
(ARC206) Architecting Reactive Applications on AWS | AWS re:Invent 2014(ARC206) Architecting Reactive Applications on AWS | AWS re:Invent 2014
(ARC206) Architecting Reactive Applications on AWS | AWS re:Invent 2014
 
ITANA 2016: API Architecture and Implementation
ITANA 2016: API Architecture and ImplementationITANA 2016: API Architecture and Implementation
ITANA 2016: API Architecture and Implementation
 
Rethinking it for digital transformation
Rethinking it for digital transformationRethinking it for digital transformation
Rethinking it for digital transformation
 
APIs in the Enterprise -Lessons Learned
APIs in the Enterprise -Lessons LearnedAPIs in the Enterprise -Lessons Learned
APIs in the Enterprise -Lessons Learned
 
API Strategy Evolution at Netflix
API Strategy Evolution at NetflixAPI Strategy Evolution at Netflix
API Strategy Evolution at Netflix
 
Office 365 api vs share point app model
Office 365 api vs share point app modelOffice 365 api vs share point app model
Office 365 api vs share point app model
 
IBM Security Strategy Overview
IBM Security Strategy OverviewIBM Security Strategy Overview
IBM Security Strategy Overview
 
London Adapt or Die: Securing your APIs the Right Way!
London Adapt or Die: Securing your APIs the Right Way!London Adapt or Die: Securing your APIs the Right Way!
London Adapt or Die: Securing your APIs the Right Way!
 
Google Cloud Platform : The API model
Google Cloud Platform : The API modelGoogle Cloud Platform : The API model
Google Cloud Platform : The API model
 
Information security: importance of having defined policy & process
Information security: importance of having defined policy & processInformation security: importance of having defined policy & process
Information security: importance of having defined policy & process
 
AWS Enterprise Summit Netherlands - Keynote
AWS Enterprise Summit Netherlands - KeynoteAWS Enterprise Summit Netherlands - Keynote
AWS Enterprise Summit Netherlands - Keynote
 
Integration Ppt
Integration PptIntegration Ppt
Integration Ppt
 
Amazon EC2 Masterclass
Amazon EC2 MasterclassAmazon EC2 Masterclass
Amazon EC2 Masterclass
 

Similar to Be My API How to Implement an API Strategy Everyone will Love

The App Evolution
The App Evolution The App Evolution
The App Evolution Dev_Events
 
App Development Evolution: What has changed?
App Development Evolution: What has changed? App Development Evolution: What has changed?
App Development Evolution: What has changed? Dev_Events
 
Nadeus Education Services session on Google Apps and Google App Engine
Nadeus Education Services session on Google Apps and Google App EngineNadeus Education Services session on Google Apps and Google App Engine
Nadeus Education Services session on Google Apps and Google App EngineNadeus Education Services
 
The App Evolution
The App EvolutionThe App Evolution
The App EvolutionDev_Events
 
EvansData_DevRel_2016-DevOps
EvansData_DevRel_2016-DevOpsEvansData_DevRel_2016-DevOps
EvansData_DevRel_2016-DevOpsLarry McDonough
 
Which Application Modernization Pattern Is Right For You?
Which Application Modernization Pattern Is Right For You?Which Application Modernization Pattern Is Right For You?
Which Application Modernization Pattern Is Right For You?Apigee | Google Cloud
 
Microservices&amp;ap imanagement
Microservices&amp;ap imanagementMicroservices&amp;ap imanagement
Microservices&amp;ap imanagementpramodkumards
 
20141210 - Microservice Container
20141210 - Microservice Container20141210 - Microservice Container
20141210 - Microservice ContainerJamie (Taka) Wang
 
Managing Internal, Private External, and Open Developer Ecosystems
Managing Internal, Private External, and Open Developer EcosystemsManaging Internal, Private External, and Open Developer Ecosystems
Managing Internal, Private External, and Open Developer EcosystemsLarry McDonough
 
Docker & aPaaS: Enterprise Innovation and Trends for 2015
Docker & aPaaS: Enterprise Innovation and Trends for 2015Docker & aPaaS: Enterprise Innovation and Trends for 2015
Docker & aPaaS: Enterprise Innovation and Trends for 2015WaveMaker, Inc.
 
Meetup 2022 - API Gateway landscape.pdf
Meetup 2022 - API Gateway landscape.pdfMeetup 2022 - API Gateway landscape.pdf
Meetup 2022 - API Gateway landscape.pdfLuca Mattia Ferrari
 
Understanding the WSO2 Platform and Technology
Understanding the WSO2 Platform and TechnologyUnderstanding the WSO2 Platform and Technology
Understanding the WSO2 Platform and TechnologyWSO2
 
Content Strategy and Developer Engagement for DevPortals
Content Strategy and Developer Engagement for DevPortalsContent Strategy and Developer Engagement for DevPortals
Content Strategy and Developer Engagement for DevPortalsAxway
 
IBM API management Philip Little
IBM API management Philip LittleIBM API management Philip Little
IBM API management Philip LittleValeri Illescas
 
Microservices
MicroservicesMicroservices
MicroservicesSmartBear
 

Similar to Be My API How to Implement an API Strategy Everyone will Love (20)

App Development Evolution: What has changed?
App Development Evolution: What has changed? App Development Evolution: What has changed?
App Development Evolution: What has changed?
 
The App Evolution
The App Evolution The App Evolution
The App Evolution
 
App Development Evolution: What has changed?
App Development Evolution: What has changed? App Development Evolution: What has changed?
App Development Evolution: What has changed?
 
Nadeus Education Services session on Google Apps and Google App Engine
Nadeus Education Services session on Google Apps and Google App EngineNadeus Education Services session on Google Apps and Google App Engine
Nadeus Education Services session on Google Apps and Google App Engine
 
Mule ESB Intro
Mule ESB IntroMule ESB Intro
Mule ESB Intro
 
The App Evolution
The App EvolutionThe App Evolution
The App Evolution
 
Evans Data DevRel 2016
Evans Data DevRel 2016 Evans Data DevRel 2016
Evans Data DevRel 2016
 
EvansData_DevRel_2016-DevOps
EvansData_DevRel_2016-DevOpsEvansData_DevRel_2016-DevOps
EvansData_DevRel_2016-DevOps
 
Which Application Modernization Pattern Is Right For You?
Which Application Modernization Pattern Is Right For You?Which Application Modernization Pattern Is Right For You?
Which Application Modernization Pattern Is Right For You?
 
Microservices&amp;ap imanagement
Microservices&amp;ap imanagementMicroservices&amp;ap imanagement
Microservices&amp;ap imanagement
 
M meijer api management - tech-days 2015
M meijer   api management - tech-days 2015M meijer   api management - tech-days 2015
M meijer api management - tech-days 2015
 
20141210 - Microservice Container
20141210 - Microservice Container20141210 - Microservice Container
20141210 - Microservice Container
 
Managing Internal, Private External, and Open Developer Ecosystems
Managing Internal, Private External, and Open Developer EcosystemsManaging Internal, Private External, and Open Developer Ecosystems
Managing Internal, Private External, and Open Developer Ecosystems
 
Docker & aPaaS: Enterprise Innovation and Trends for 2015
Docker & aPaaS: Enterprise Innovation and Trends for 2015Docker & aPaaS: Enterprise Innovation and Trends for 2015
Docker & aPaaS: Enterprise Innovation and Trends for 2015
 
Cloud Native In-Depth
Cloud Native In-DepthCloud Native In-Depth
Cloud Native In-Depth
 
Meetup 2022 - API Gateway landscape.pdf
Meetup 2022 - API Gateway landscape.pdfMeetup 2022 - API Gateway landscape.pdf
Meetup 2022 - API Gateway landscape.pdf
 
Understanding the WSO2 Platform and Technology
Understanding the WSO2 Platform and TechnologyUnderstanding the WSO2 Platform and Technology
Understanding the WSO2 Platform and Technology
 
Content Strategy and Developer Engagement for DevPortals
Content Strategy and Developer Engagement for DevPortalsContent Strategy and Developer Engagement for DevPortals
Content Strategy and Developer Engagement for DevPortals
 
IBM API management Philip Little
IBM API management Philip LittleIBM API management Philip Little
IBM API management Philip Little
 
Microservices
MicroservicesMicroservices
Microservices
 

More from CA API Management

Api architectures for the modern enterprise
Api architectures for the modern enterpriseApi architectures for the modern enterprise
Api architectures for the modern enterpriseCA API Management
 
Mastering Digital Channels with APIs
Mastering Digital Channels with APIsMastering Digital Channels with APIs
Mastering Digital Channels with APIsCA API Management
 
Takeaways from API Security Breaches Webinar
Takeaways from API Security Breaches WebinarTakeaways from API Security Breaches Webinar
Takeaways from API Security Breaches WebinarCA API Management
 
API Design Methodology - Mike Amundsen, Director of API Architecture, API Aca...
API Design Methodology - Mike Amundsen, Director of API Architecture, API Aca...API Design Methodology - Mike Amundsen, Director of API Architecture, API Aca...
API Design Methodology - Mike Amundsen, Director of API Architecture, API Aca...CA API Management
 
Liberating the API Economy with Scale-Free Networks - Mike Amundsen, Director...
Liberating the API Economy with Scale-Free Networks - Mike Amundsen, Director...Liberating the API Economy with Scale-Free Networks - Mike Amundsen, Director...
Liberating the API Economy with Scale-Free Networks - Mike Amundsen, Director...CA API Management
 
API360 – A How-To Guide for Enterprise APIs - Learn how to position your ente...
API360 – A How-To Guide for Enterprise APIs - Learn how to position your ente...API360 – A How-To Guide for Enterprise APIs - Learn how to position your ente...
API360 – A How-To Guide for Enterprise APIs - Learn how to position your ente...CA API Management
 
API Monetization: Unlock the Value of Your Data
API Monetization: Unlock the Value of Your DataAPI Monetization: Unlock the Value of Your Data
API Monetization: Unlock the Value of Your DataCA API Management
 
Revisiting Geddes' Outlook Tower - Mike Amundsen, Director of API Architectur...
Revisiting Geddes' Outlook Tower - Mike Amundsen, Director of API Architectur...Revisiting Geddes' Outlook Tower - Mike Amundsen, Director of API Architectur...
Revisiting Geddes' Outlook Tower - Mike Amundsen, Director of API Architectur...CA API Management
 
Managing Identity by Giving Up Control - Scott Morrison, SVP & Distinguished ...
Managing Identity by Giving Up Control - Scott Morrison, SVP & Distinguished ...Managing Identity by Giving Up Control - Scott Morrison, SVP & Distinguished ...
Managing Identity by Giving Up Control - Scott Morrison, SVP & Distinguished ...CA API Management
 
Enabling the Multi-Device Universe
Enabling the Multi-Device UniverseEnabling the Multi-Device Universe
Enabling the Multi-Device UniverseCA API Management
 
Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...
Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...
Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...CA API Management
 
The Art of API Design - Ronnie Mitra, Director of API Design, API Academy at ...
The Art of API Design - Ronnie Mitra, Director of API Design, API Academy at ...The Art of API Design - Ronnie Mitra, Director of API Design, API Academy at ...
The Art of API Design - Ronnie Mitra, Director of API Design, API Academy at ...CA API Management
 
APIs Fueling the Connected Car Opportunity - Scott Morrison, SVP & Distinguis...
APIs Fueling the Connected Car Opportunity - Scott Morrison, SVP & Distinguis...APIs Fueling the Connected Car Opportunity - Scott Morrison, SVP & Distinguis...
APIs Fueling the Connected Car Opportunity - Scott Morrison, SVP & Distinguis...CA API Management
 
Adapting to Digital Change: Use APIs to Delight Customers & Win
Adapting to Digital Change: Use APIs to Delight Customers & WinAdapting to Digital Change: Use APIs to Delight Customers & Win
Adapting to Digital Change: Use APIs to Delight Customers & WinCA API Management
 
Balancing Security & Developer Enablement in Enterprise Mobility - Jaime Ryan...
Balancing Security & Developer Enablement in Enterprise Mobility - Jaime Ryan...Balancing Security & Developer Enablement in Enterprise Mobility - Jaime Ryan...
Balancing Security & Developer Enablement in Enterprise Mobility - Jaime Ryan...CA API Management
 
5 steps end to end security consumer apps
5 steps end to end security consumer apps5 steps end to end security consumer apps
5 steps end to end security consumer appsCA API Management
 
Best Practices You Must Apply to Secure Your APIs - Scott Morrison, SVP & Dis...
Best Practices You Must Apply to Secure Your APIs - Scott Morrison, SVP & Dis...Best Practices You Must Apply to Secure Your APIs - Scott Morrison, SVP & Dis...
Best Practices You Must Apply to Secure Your APIs - Scott Morrison, SVP & Dis...CA API Management
 
Drones, Phones & Pwns the Promise & Dangers of IoT APIs: Use APIs to Securely...
Drones, Phones & Pwns the Promise & Dangers of IoT APIs: Use APIs to Securely...Drones, Phones & Pwns the Promise & Dangers of IoT APIs: Use APIs to Securely...
Drones, Phones & Pwns the Promise & Dangers of IoT APIs: Use APIs to Securely...CA API Management
 
Gartner AADI Summit Sydney 2014 Implementing the Layer 7 API Management Pla...
Gartner AADI Summit Sydney 2014   Implementing the Layer 7 API Management Pla...Gartner AADI Summit Sydney 2014   Implementing the Layer 7 API Management Pla...
Gartner AADI Summit Sydney 2014 Implementing the Layer 7 API Management Pla...CA API Management
 
Using APIs to Create an Omni-Channel Retail Experience
Using APIs to Create an Omni-Channel Retail ExperienceUsing APIs to Create an Omni-Channel Retail Experience
Using APIs to Create an Omni-Channel Retail ExperienceCA API Management
 

More from CA API Management (20)

Api architectures for the modern enterprise
Api architectures for the modern enterpriseApi architectures for the modern enterprise
Api architectures for the modern enterprise
 
Mastering Digital Channels with APIs
Mastering Digital Channels with APIsMastering Digital Channels with APIs
Mastering Digital Channels with APIs
 
Takeaways from API Security Breaches Webinar
Takeaways from API Security Breaches WebinarTakeaways from API Security Breaches Webinar
Takeaways from API Security Breaches Webinar
 
API Design Methodology - Mike Amundsen, Director of API Architecture, API Aca...
API Design Methodology - Mike Amundsen, Director of API Architecture, API Aca...API Design Methodology - Mike Amundsen, Director of API Architecture, API Aca...
API Design Methodology - Mike Amundsen, Director of API Architecture, API Aca...
 
Liberating the API Economy with Scale-Free Networks - Mike Amundsen, Director...
Liberating the API Economy with Scale-Free Networks - Mike Amundsen, Director...Liberating the API Economy with Scale-Free Networks - Mike Amundsen, Director...
Liberating the API Economy with Scale-Free Networks - Mike Amundsen, Director...
 
API360 – A How-To Guide for Enterprise APIs - Learn how to position your ente...
API360 – A How-To Guide for Enterprise APIs - Learn how to position your ente...API360 – A How-To Guide for Enterprise APIs - Learn how to position your ente...
API360 – A How-To Guide for Enterprise APIs - Learn how to position your ente...
 
API Monetization: Unlock the Value of Your Data
API Monetization: Unlock the Value of Your DataAPI Monetization: Unlock the Value of Your Data
API Monetization: Unlock the Value of Your Data
 
Revisiting Geddes' Outlook Tower - Mike Amundsen, Director of API Architectur...
Revisiting Geddes' Outlook Tower - Mike Amundsen, Director of API Architectur...Revisiting Geddes' Outlook Tower - Mike Amundsen, Director of API Architectur...
Revisiting Geddes' Outlook Tower - Mike Amundsen, Director of API Architectur...
 
Managing Identity by Giving Up Control - Scott Morrison, SVP & Distinguished ...
Managing Identity by Giving Up Control - Scott Morrison, SVP & Distinguished ...Managing Identity by Giving Up Control - Scott Morrison, SVP & Distinguished ...
Managing Identity by Giving Up Control - Scott Morrison, SVP & Distinguished ...
 
Enabling the Multi-Device Universe
Enabling the Multi-Device UniverseEnabling the Multi-Device Universe
Enabling the Multi-Device Universe
 
Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...
Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...
Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...
 
The Art of API Design - Ronnie Mitra, Director of API Design, API Academy at ...
The Art of API Design - Ronnie Mitra, Director of API Design, API Academy at ...The Art of API Design - Ronnie Mitra, Director of API Design, API Academy at ...
The Art of API Design - Ronnie Mitra, Director of API Design, API Academy at ...
 
APIs Fueling the Connected Car Opportunity - Scott Morrison, SVP & Distinguis...
APIs Fueling the Connected Car Opportunity - Scott Morrison, SVP & Distinguis...APIs Fueling the Connected Car Opportunity - Scott Morrison, SVP & Distinguis...
APIs Fueling the Connected Car Opportunity - Scott Morrison, SVP & Distinguis...
 
Adapting to Digital Change: Use APIs to Delight Customers & Win
Adapting to Digital Change: Use APIs to Delight Customers & WinAdapting to Digital Change: Use APIs to Delight Customers & Win
Adapting to Digital Change: Use APIs to Delight Customers & Win
 
Balancing Security & Developer Enablement in Enterprise Mobility - Jaime Ryan...
Balancing Security & Developer Enablement in Enterprise Mobility - Jaime Ryan...Balancing Security & Developer Enablement in Enterprise Mobility - Jaime Ryan...
Balancing Security & Developer Enablement in Enterprise Mobility - Jaime Ryan...
 
5 steps end to end security consumer apps
5 steps end to end security consumer apps5 steps end to end security consumer apps
5 steps end to end security consumer apps
 
Best Practices You Must Apply to Secure Your APIs - Scott Morrison, SVP & Dis...
Best Practices You Must Apply to Secure Your APIs - Scott Morrison, SVP & Dis...Best Practices You Must Apply to Secure Your APIs - Scott Morrison, SVP & Dis...
Best Practices You Must Apply to Secure Your APIs - Scott Morrison, SVP & Dis...
 
Drones, Phones & Pwns the Promise & Dangers of IoT APIs: Use APIs to Securely...
Drones, Phones & Pwns the Promise & Dangers of IoT APIs: Use APIs to Securely...Drones, Phones & Pwns the Promise & Dangers of IoT APIs: Use APIs to Securely...
Drones, Phones & Pwns the Promise & Dangers of IoT APIs: Use APIs to Securely...
 
Gartner AADI Summit Sydney 2014 Implementing the Layer 7 API Management Pla...
Gartner AADI Summit Sydney 2014   Implementing the Layer 7 API Management Pla...Gartner AADI Summit Sydney 2014   Implementing the Layer 7 API Management Pla...
Gartner AADI Summit Sydney 2014 Implementing the Layer 7 API Management Pla...
 
Using APIs to Create an Omni-Channel Retail Experience
Using APIs to Create an Omni-Channel Retail ExperienceUsing APIs to Create an Omni-Channel Retail Experience
Using APIs to Create an Omni-Channel Retail Experience
 

Be My API How to Implement an API Strategy Everyone will Love

  • 1. Be My API <3 How to implement an API strategy everyone will love.  Mike Amundsen Principal API Architect Layer 7 Technologies @mamund 1
  • 3. Mike Amundsen  Author, Web Architect, Presenter  Principal API Architect  Hypermedia Junkie  Building Hypermedia APIs with HTML5 and Node  RESTful Web APIs (w/ Leonard Richardson) 3
  • 4. API Academy Mike Amundsen Ronnie Mitra Alex Gaber 4
  • 5. API Academy http://forms.layer7tech.com/FW-API13 5
  • 7. API Academy Web Site (URI shortly) 7
  • 8. Housekeeping  Questions - Post questions to Q&A, we’ll cover them at breaks throughout the sessions  Twitter facebook.com/layer7 - Today’s event hashtag: layer7.com/linkedin - #L7webinar layer7.com/blogs - Follow us on Twitter: - @layer7 - @mamund (Mike Amundsen) - @intalex (Alex Gaber) - @mitraman (Ronnie Mitra) 8
  • 9. Outline  The Business of APIs  The USE methodology (Usable, Scalable, Evolvable)  Implementing a Solid Foundation  API Interaction Models 9
  • 10. THE BUSINESS OF APIS 10
  • 11. The Business of APIs  API Consumers  Acquisition Targets  Product Models 11
  • 12. API Consumer: Private  Internal/contract developers  Implementation control  Your product is understood  Your control is the code/deployment  Agenda alignment  Private APIs offer the ability to strengthen your market 12
  • 13. API Consumer: Partner  Strategic Partners  Limited implementation control  Your product is your SDK  Your control is access internal content, users, etc.  Agenda Co-operation  Partner APIs offer opportunities to extend your market 13
  • 14. API Consumer: Public  “Third-party” developers  Little to no implementation control  Your product is your API  Your control is the API  Agenda wide open  Public APIs offer a chance to discover new markets 14
  • 15. API Consumer  Private APIs to strengthen your market  Partner APIs to extend your market  Public APIs to discover new markets 15
  • 16. Acquisition: Reach  Increase install base  Enter new markets  Raise awareness/presence  Leverage existing products 16
  • 17. Acquisition: Content  Increase contributed user content  Gather behavioral data  Make new content connections  Build upon existing infrastructure 17
  • 18. Acquisition: Users  Expand user base  Increase user traffic  Increase user data  Deepen customer relationships 18
  • 19. Acquisition  Leverage existing products  Build upon existing infrastructure  Deepen customer relationships 19
  • 20. Product: Monitor  Know your product  What APIs are used?  Who is using them?  When they are using them?  You are your best source of “big data” 20
  • 21. Product: Measure  What are your metrics?  API performance - Latency - Uptime - Reliability  Dev performance - “Installs” - Traffic - Stability  You can’t improve what you don’t measure 21
  • 22. Product: Modify  Small changes can mean big results  Use your APIs to test new ideas, new products  “CI” means constant improvement  Turn feedback into features 22
  • 23. Product  You are your best source of “big data”  You can’t improve what you don’t measure  Turn feedback into features 23
  • 24. The Business of APIs  API Consumers - Private, Partner, Public  Acquisition Target - Reach, Content, Users  Product Modeling - Monitor, Measure, Modify 24
  • 26. Usable  “Usability is the ease of use and learnability of a human-made object.” 26
  • 27. Usable  “Usability is the ease of use and learnability of a human-made object.”  In API, the “I” stands for “Interface”  How usable is your interface?  Design for Usability - Early focus on users and tasks - Empirical measurement - Iterative design  Be prepared to measure and iterate 27
  • 28. Scalable  “Scalability is the ability of a system, network, or process, to handle a growing amount of work in a capable manner …” 28
  • 29. Scalable  “Scalability is the ability of a system, network, or process, to handle a growing amount of work in a capable manner …”  Scaling out vs. scaling up  Scaling up (more memory, etc.) is “easier” and more limiting  Scaling out (more machines) is “harder” and more reliable over time  Design-in support for the “Layered Constraint” (Fielding’s REST)  Take advantage of “DevOps” practices to support scaling  Be prepared to scale out 29
  • 30. Evolvable  “Evolvability is defined as the capacity of a system for adaptive evolution.” 30
  • 31. Evolvable  “Evolvability is defined as the capacity of a system for adaptive evolution.”  Extend (pandere or “to stretch”) - Existing elements cannot be removed - Meaning/processing of existing elements cannot be changed - New elements must be optional  Versioning (vertere or “to turn”) - Make it easy to identfy the “version” - Implementations should reject unsupported versions  Don’t version unless it is unavoidable  Be prepared for clients to ignore version details  Do not create “Dodo” apps. 31
  • 32. Review  Usable - Your API is your Interface - Focus on users & tasks, measure, iterate  Scable - Scaling out is the key - Take advantage of DevOps practices  Evolvable - Don’t create Dodo apps - Favor extending over versioning whenever possible 32
  • 35. Component  Database  File System  Message Queue  Transaction Manager  Source Code 35
  • 37. 37
  • 38. Connector  Web Server  Browser Agent  Proxy Server  Shared Cache 38
  • 40. 40
  • 41. Client Server Connectors The Web Components 41
  • 43. Representation Layer  Representation happens in the Connector  HTTP supports content negotiation - Accept - Content-Type  Differing clients (user-agents) === differing representations - Desktop - Browser - Tablet - Smartphone  Be prepared to support multiple representations 43
  • 45. Caching Layer  Caching happens EVERYWHERE  HTTP supports Expiration Model and Validation Model Caching  Expiration Model - Expires - Cache-Control: max-age  Validation Model - Last-Modified - Etag, If-Match  Be prepared to support caching for both client and server  Squid, Varnish, Nginx, MemCacheD, etc. 45
  • 47. Security Layer  Security happens at the edges  HTTP supports authentication negotiation - WWW-Authenticate - Authorization - Proxy versions, too  Keep Authentication out of your components  Perform Authorization as early as possible  Various security/routing proxies available 47
  • 48. Review  Components != Connectors - Components are private (DB Server) - Connectors are public (HTTP)  Representation Layer - You only send representations - Be prepared to support multiple representation formats  Caching Layer - Caching happens everywhere - Support caching at client and server (proxies)  Security Layer - Security happens at the edges - Use security proxies for better compliance/performance 48
  • 50. Interaction Model as a Implementation Strategy  Lots of things to decide when creating an implementation  How do we make good choices?  What is our “basis” for decisions? 50
  • 51. Lots of Choices  SOAP, CRUD, REST  XML, JSON, HTML  Caching  Security  Error Formats, etc. 51
  • 52. Focus on Interactions, not technologies  Great APIs are based on interactions  Great design starts with the user perspective  Focus on how the API will be used, not what it exposes  Let’s apply UX (user experience) concepts to DX (developer experience) 52
  • 53. Three Questions  Who will use this API?  What will it be used to create?  How will the API actually behave? 53
  • 54. API Interaction Actors  Developer  Application  End User 54
  • 55. API Usage Scenarios  Focus on Activities, not Objects  How will this API help the developer?  Narrow the interface to those things you want to encourage. 55
  • 56. Interface Behavior  Build a model of tasks  Identify data points needed to complete the tasks  Map out interaction details for each task (or set of tasks) 56
  • 57. Some Tips  Be sure to include error-handling interactions - Is this Fixable? - Repeatable? - Safe/Unsafe?  Keep it “abstract” - Don’t get tied up w/ technology (formats, libraries, frameworks, etc.) - Describe your model independent of protocol (HTTP, webSockets, etc.) - Maintain your DX perspective at all times. 57
  • 58. Review  Focus on interactions, not technologies  Maintain the developer perspective  Tasks -> Data -> Models  Keep it “abstract” 58
  • 59. SUMMARY 59
  • 60. The Business of APIs  API Consumers - Private, Partner, Public  Acquisition Target - Reach, Content, Users  Product Modeling - Monitor, Measure, Modify 60
  • 61. Usable, Scalable, Evolvable (USE)  Usable - Your API is your Interface - Focus on users & tasks, measure, iterate  Scable - Scaling out is the key - Take advantage of DevOps practices  Evolvable - Don’t create Dodo apps - Favor extending over versioning whenever possible 61
  • 62. Implement a Solid Foundation  Components != Connectors - Components are private (DB Server) - Connectors are public (HTTP)  Representation Layer - You only send representations - Be prepared to support multiple representation formats  Caching Layer - Caching happens everywhere - Support caching at client and server (proxies)  Security Layer - Security happens at the edges - Use security proxies for better compliance/performance 62
  • 63. API Interaction Models  Focus on interactions, not technologies  Maintain the developer perspective  Tasks -> Data -> Models  Keep it “abstract” 63
  • 64. In Conclusion  The Business of APIs  The USE methodology (Usable, Scalable, Evolvable)  Implementing a Solid Foundation  API Interaction Models 64
  • 65. Thank you  Twitter - Today’s event hashtag: facebook.com/layer7 - #L7webinar layer7.com/linkedin - Follow us on Twitter: layer7.com/blogs - @layer7 - @mamund (Mike Amundsen) - @intalex (Alex Gaber) - @mitraman (Ronnie Mitra) 65
  • 66. Be My API <3 How to implement an API strategy everyone will love.  Mike Amundsen Principal API Architect Layer 7 Technologies @mamund 66