Innovation at scale - Key drivers and pitfalls to building API driven agile business platforms
Download as PPTX, PDF1 like125 views
The document discusses the importance of API management and integration in creating agile business platforms, emphasizing that APIs now account for a significant share of internet traffic and revenue. It highlights the necessity for companies to align their business and API strategies, develop marketplaces for APIs, and adopt a hybrid integration approach to meet growing demands. The text also stresses the critical need for robust API security and governance frameworks to support these integrations and platform strategies.
Innovation at scale - Key drivers and pitfalls to building API driven agile business platforms
- 1. Innovation at Scale Key drivers and pitfalls to building API driven agile business platforms Mifan Careem Vice President - Solutions Architecture, WSO2 Inc 1
- 2. Start with API management IDENTITY & ACCESS MANAGEMENT Secure and federated identity for integration 60M identities managed ENTERPRISE INTEGRATION Quick, iterative integration of any app, data, or system 6 trillion transactions / yr Complement APIs with integration, security and analytics that connect apps and data. API MANAGEMENT API design, creation, reuse, governance, and analytics 20K APIs for 200K orgs Common architecture, common code base WSO2 Open Source API Driven Integration Platform ● Identity management ● Identity federation / SSO ● Identity bridging ● API and microservices security ● Strong and adaptive Auth ● Access control ● Privacy control ● API analytics ● API designer ● API gateway ● API microgateway ● API publisher ● API storefront/marketplace ● API repository/registry ● ESB ● Integration designer ● Message broker ● Workflows
- 3. 3 The Global Impact of APIs APIs now account for 25% of the Internet’s traffic. $1 trillion is up for grabs through the redistribution of revenue through APIs (McKinsey 2017). 25% of revenue flows through APIs (Vanson Bourne 2018). Through 2020, integration work will account for 50% of the time and cost of building a digital platform (Gartner 2018).
- 4. The Integration Imperative is Growing Disaggregated architectures drive 50 billion endpoints, growing >1 trillion CONSUMER DEMAND Scale and agility are pushing app disaggregation... …that makes hybrid integration the unspoken challenge of all cloud services SUPPLIERS DISAGGREGATE ARCHITECTURE TO MEET DEMAND 1 10 102 103 105 109 MONOLITHIC BUSINESS APP ENTERPRISE APPS DEPARTME NTAL APPS SAAS APPS PUBLIC / PRIVATE APIS SERVERLESS & MICROSERVICES 1970s | MAINFRAME 1980s | IT AWAKENING 1990s | INTERNET 2000s | MOBILE 2010s | IoT/AI 2020+ | DIGITAL NATIVE 4
- 5. “APIs create business agility that fosters the rapid business reconfiguration necessary to continually adapt to an unknown future of constant change.” ~ Randy Heffner, Forrester Research ...And APIs Are The Glue All integration is becoming hybrid integration
- 7. • Every company is a technology company • Technology assets have to built for reuse • Reuse compounds return on technology investments • APIs are an encapsulation of intellectual property • Streamline internal assets AND better customer reach via APIs 7 1. Align business strategy with API strategy
- 8. 2. API Marketplace as a Sustainable Business Platform 8 An API marketplace is a platform to effectively connect API producers and API consumers - and as with any marketplace this provides the tools and means to do so
- 9. 3. Sustainability via Feedback Loops, Incentives, Adoption 9 Source: David Sacks, Yammer on Uber’s business model valuation • Social Incentives • Fun, Fame, Fortune • No. of Shares, Likes, Claps, Re-Tweets, View • Leaderboards • Rating/Filtering • Monetization
- 10. 4. Distributed Platforms vs Centers of Excellence vs Agility External Developers (Partners) Other BU Developers (Inter BU Access) Internal BU Developers (Intra BU Access) BU 1 API Marketplace BU 2 API Marketplace BU 3 API Marketplace BU n API Marketplace BU 1 API Management (Dedicated On-prem Deployment) BU 2 API Management (Private Cloud Tenant) BU 3 API Management (WSO2 API Cloud Tenant) BU n API Management (Other APIM Platform Tenant) Private Cloud Public Cloud Enterprise Enterprise API Marketplace BU 1 BU 2 BU 3 BU n
- 11. 11 Integration & Middleware Are Bottlenecks to Agility LAYERED MONOLITH Coordinated releases, organizational rigor, centralized change control Compute Network Storage Ops Infrastructure Ops Team Observability Scaling HA Resilience Observability Scaling HA Resilience Observability HA Resilience Middleware & Integration CoE Teams HA Resilience ObservabilityScaling INTEGRATION HA Resilience ObservabilityScaling MESSAGING HA Resilience ObservabilityScaling DATA HA Resilience ObservabilityScaling SECURITY App Logic . . . Centralized Dev Org App LogicApp Logic App 1 App 2 App (n)
- 12. Self-contained Deployable as a unit Independently elastic Data plane and control plane Cells… The New Building Blocks For The Composable Enterprise
- 13. Becoming Integration Agile… App Logic . . . Scaling HA Resilience Observability Scaling HA Resilience Observability HA Resilience Observability Compute Network Storage Ops Infrastructure Centralized Dev Org Middleware & Integration CoE Teams Ops Team LAYERED MONOLITH Coordinated releases, organizational rigor, centralized change control HA Resilience ObservabilityScaling INTEGRATION HA Resilience ObservabilityScaling MESSAGING HA Resilience ObservabilityScaling DATA HA Resilience ObservabilityScaling SECURITY App LogicApp Logic App 1 App 2 App (n) APIs COMPOSABLE ENTERPRISE Autonomous releases, CI/CD, self-organization, change-control authority App (n) App Microservice INTEGRATION MESSAGING DATA SECURITY App 1 INTEGRATION MESSAGING DATA SECURITY Microservices App 2 App Miniservice INTEGRATION MESSAGING DATA SECURITY APIs Self- Organizing Dev Teams . . . Ops Team Event-Based Hybrid Integration Platform Scaling | HA | Resilience | Observability Orchestration & High-Performance Data Store Ops Infrastructure DevOps <Microgateway> <Microgateway> <Microgateway>
- 14. 5. API Security is not an afterthought!
- 15. Implementing a Gateway Architecture 15 API Gateway Policy Enforcement & Security Lifecycle Mgt. Governance Analytics Threat Protection QoS and Rate Limiting • Gateway Patterns act as the (central) point of control for incoming and outgoing data • Enforce QoS and acts as a Policy Enforcement Point • Utilize an IAM to enable BYOID via federation • Follow industry standards such as Oauth2, OIDC, SAML • Be able to extend and customize as required using Oauth2 fraud detection, HMAC, Custom headers
- 16. Identity Federation at the Platform
- 18. Cloud Native ~ Zero Trust Network
- 19. “What was once a rich selection of blogs and websites has been compressed under the powerful weight of a few dominant platforms. This concentration of power creates a new set of gatekeepers, allowing a handful of platforms to control which ideas and opinions are seen and shared.” - Tim Berners-Lee https://webfoundation.org/2018/03/web- birthday-29/ https://beta.techcrunch.com/2018/03/12/platfo rm-power-is-crushing-the-web-warns- berners-lee/
- 20. 20 The right API driven business platform is key to innovate at scale Define API Strategy Define a Platform Strategy Facilitate Consumer s Engage and Empower Producers Incentives and Monetizatio n Agility and Distributio n Platform security model Govern and Manage