Enterprise API Management shows how to define the right architecture, implement the right patterns, and define the right organization model for business-driven APIs. The book explores the architectural decisions, implementation patterns, and management practices for successful enterprise APIs. And it gives clear, actionable advice on choosing ...

• Cover
• Title Page
• Copyright and Credits
• About Packt
• Foreword
• Contributors
• Table of Contents
• Preface
• Chapter 1: The Business Value of APIs
  • Change or die
    • What does this hyperconnectivity tell us?
    • The digital dilemma
    • Access to enterprise information and functionality is king
  • What are APIs and why should a business care?
    • APIs as an enabler for innovation and bimodal IT
    • APIs to monetize on information assets
    • APIs for regulatory compliance
      • GDPR
      • PSD2
      • Fast Healthcare Interoperability Resources (FHIR)
    • APIs for the reuse of business capabilities
  • Avoiding a hyperconnectivity mess
  • The API value chain
  • APIs as a driving force for many large acquisitions in the software industry
  • Summary
• Chapter 2: The Evolution of API Platforms
  • The journey of API platforms - from proxies to microgateways
    • Generation zero
    • First generation
    • Second generation
      • Application Services Governance
    • Third generation
      • Cloud adoption
      • Digital transformation
      • Customer-centricity
      • Common denominators
  • Summary
• Chapter 3: Business-Led API Strategy
  • Kick-starting a business-led API initiative
    • Defining the business drivers
    • Defining the goals and objectives
    • Defining the API strategy
  • Summary
• Chapter 4: API-Led Architectures
  • What is API-led?
  • Architecting API-led
    • Conceptual architecture view
    • Technical capability view
      • Management and operations
        • API life cycle
        • API design and mocking
        • Policy definition and implementation
        • API pages, developer portal, and marketplaces
        • API runtime operations and analytics
        • API monetization and billing
      • API exposure
        • Authentication (AuthN) and authorization (AuthZ)
        • Access control
        • API key validation
        • CORS
        • OWASP Top 10 protection
        • API composition
        • Redaction
        • Format conversion
        • Header handling
        • Fault handling
        • Routing
        • Rate limits
        • Throttling
        • Caching
        • Push notification
        • API load balancing
        • Quotas and plans
        • Versioning and deprecation
        • Custom policies
      • Business capability services
      • Semi-decoupled services
        • Orchestration
        • Data validation
        • Data transformation
        • Connectivity
        • Protocol conversion
        • Shared runtime
      • Fully decoupled services
        • Choreography
        • Data validation
        • Processing logic
        • Polyglot programming
        • Independent runtime
        • Service mesh
        • Event Hub
        • Service registry
        • Non-shared storage
      • Identity and access
        • Users and roles management
        • Identity federation
        • Access management
  • Summary
• Chapter 5: API-Led Architecture Patterns
  • Patterns in the context of APIs
  • API-led architecture patterns described
    • API resource routing
    • API content-based routing
    • Payload pagination
    • CRUD API service
    • CQRS API service
    • API aggregator
    • API orchestration service
    • API microgateway
    • Sidecar API gateway
    • Webhook
    • API geo-routing
    • API firewall
    • API basic authentication
    • API bearer of token
    • API bearer of obscure token
  • Summary
• Chapter 6: Modern API Architectural Styles
  • A brief history of interfaces
    • The rise of RPC
    • RPC and object-oriented programming
    • XML to the rescue
    • Latest trends
      • What does this trend analysis really tell us?
  • REST
    • Architecture
    • Interface definition
      • OAS
      • API Blueprint
      • RAML
    • Transport and payloads
    • Usage flow
  • GraphQL
    • Architecture
      • Architectural principles
    • Interface definition
      • Types that define operations
      • Types that define data
    • Transport and payloads
    • Usage flow
  • gRPC
    • Architecture
    • Interface definition, transport, and payload
    • Usage flow
  • Comparing the options
  • Summary
• Chapter 7: API Life Cycle
  • The full API development life cycle
    • API life cycle
      • API ideation and planning
      • Design
      • Mock and try
      • Create/configure
      • Deploy
      • Promote, deprecate, and retire
      • Observe
    • The API design-first life cycle
    • Service life cycle
      • Scaffold/refactor
      • Build and unit test
      • Contract test
    • Customer life cycle
      • Implementation and use
      • Feedback
  • Summary
• Chapter 8: API Products' Target Operating Model
  • Products in the real world
  • APIs as products
    • The implications of treating APIs as products
  • What is a TOM?
  • Defining the model
  • Organization
    • Central organization
    • Federated organization
    • A platform-based approach
  • Roles and responsibilities
    • API product teams
    • API platform team
  • Communication and collaboration model
  • Transition approach
  • Summary
• Index