1. Azure API Management: Why, what, how, and what’s next
BRK2186
Azure API Management: Why, what, how, and what’s next
Don Bushell, Global Services Product Manager, Boeing Company
Matthew Farmer, Senior Program Manager, Microsoft
Vladimir Vinogradsky, Principal Lead Program Manager, Microsoft

2. Agenda Digital transformation at Boeing Intro to API Management
A lap around demo
A few API Management capabilities we didn’t show
Demo of something new
Wrap up and Q&A

5. Business Goals Modernize IT infrastructure
Maintain and grow market presence
Quickly respond to customer demands
Building a company and defining an industry has left us with myriad heritage systems
Continue to push for broader market penetration and outpacing established and emerging competitors
Deliver rapid, iteration-based solutions instead of monolithic, multi-year software projects

6. The Old Way of Building Products
CoolProduct

7. The Old Way of Building Portfolios
CoolProduct
NewToy
WonderThing
SuperGizmo
GameChanger

8. A Modern Product
CoolProduct

9. A Modern Portfolio API Store CoolProduct NewToy WonderThing SuperGizmo
GameChanger
API Store

10. Challenges with an API-based Approach
Discoverability. What APIs are available and what do they do?
Onboarding. How can consumers request access to APIs and learn how to use them?
Security. How do I secure my vital data? How do I protect my backends from unauthorized access and overload?
Monitoring. Who is using my APIs and how much? Are my APIs online and working as expected?
Lifecycle. How do I evolve my APIs without adversely impacting consumers?

11. A Modern Portfolio: Marketecture
CoolProduct
NewToy
WonderThing
SuperGizmo
GameChanger
API Management
Backends on Azure
Backends on premises

12. “Helix” walkthrough
DEMO

14. Strategic value of APIs
User engagement
Ecosystems
Multi-speed IT
Mobility
User experience
Crowdsourcing
Business models
Channels
Ecosystems
Agility
Empowerment
Productivity
Based on Gartner research note “Articulating the Business Value of APIs”
Anne Thomas and Kristin R. Moyer
24 March 2016

15. API Management - a hub for enterprise APIs
Discover
Learn
On-board
Try
Get support
SDKs and samples
1st and 3rd party apps
Abstract
Secure & protect
Evolve
Monitor
Analyze
Productize
Monetize
Consume
Publis h
Mediate
Azure portal
Gateway
Developer portal
API managers and developers
App developers
APIs on Azure and outside

16. Policies Encapsulate common API management functions
Access control, Protection, Transformation, Caching, …
Chained together into a pipeline
Mutate request context or change API behavior
Set in the inbound and outbound directions
Can be triggered on error
Applied at a variety of scopes

17. Policy scopes global GET /foo/bar HTTP/1.1 Host: api.constoso.com
Key:
global
CORS
LOG
product
RATE
QUOTA
from caller
to backend
inbound
api
/foo
JWT
operation
/bar
CACHE
URL
BODY
to caller
from backend
outbound

18. Policy expressions C# “snippets” embedded in policy documents
Have read-only access to the request context
Can only use whitelisted .NET types
Dynamically configure and conditionally execute policies

19. Versioning is a highly debated subject
Version or not?
Semantic versioning?
What is a breaking change?
Where to place version information?
Path? Query? Header? Media type?
How to identify version?
Number? Date? Name?

20. Our approach to versioning
Natively understand versions at the system level
Versioning is an opt-in
Offer versioning scheme options
Inform developers about the changes
Control when the changes get adopted
Versions
Revisions
Consumers choose when to adopt
Providers choose when to deploy

21. Versions and revisions in API Management
Service Instance
API
Version
Operation
Revision
/v1
;rev=1
;rev=2
;rev=3
/speakers
/sessions
/days
;rev=4
foo
/v2
;rev=1
;rev=2

22. A lap around
DEMO

23. Façade and front door Developer portal Gateway Azure portal Consume
App developers
Gateway
Mediate
contosoapi-foo.azurewebsites.com
1st and 3rd party apps
Azure portal
APIs on Azure and outside
Publish
API managers and developers

24. Façade and front door Gateway Mediate 1st and 3rd party apps
contosoapi-foo.azurewebsites.com
1st and 3rd party apps
api.contoso.com/foo
contoso.azure-api.net/foo
contosoapi-bar.azurewebsites.com

25. Security and protection
Username/Password
Microsoft account
Google account
Facebook account
Twitter account
Azure AD (Premium)
Azure AD B2C (Premium)
Delegated
Developer portal
Consume
App developers
Key
OAuth 2
OpenID Connect
Client certificate
IP filter
Rate limits and quotas
HTTP Basic
Mutual certificate
Shared secret
IP filter
VNET/NSG
Gateway
Mediate
1st and 3rd party apps
Azure portal
Azure account
RBAC
APIs on Azure and outside
Publish
API managers and developers

26. VNETs and Hybrid Developer portal Gateway Azure portal Consume
App developers
VNET
Gateway
Mediate
1st and 3rd party apps
Azure portal
APIs on Azure and outside
Publish
API managers and developers

27. VNETs and Hybrid
VPN
VNET
Gateway
Mediate
1st and 3rd party apps

28. Multi-region and scaling
27 public regions in Americas, Europe, Asia and Australia
6 US government and DoD regions (preview)
Soon coming to China!
North Europe
Standard
1 unit

29. Multi-region and scaling
North Europe
Standard
3 units
1 unit

30. Multi-region and scaling
Central US
North Europe
Premium
1 unit
remote
Standard
3 units
1 unit
home
Native integration!

31. Multi-region and scaling
Central US
North Europe
Premium
2 units
remote
1 unit
remote
1 unit
home
Native integration!

32. Custom analytics

33. What if you wanted to…? Share reports on your APIs with business users
Create reports that focus on data specific to my business
Get deeper insight into your API users
Create your own API analytics store
…do it all with eye-catching Power BI dashboards

34. Power BI Solution Template
DEMO

35. Magic behind the magic
Power BI
Azure API Management

36. Azure API Management Analytics Power BI Solution Template
Runs on your subscription for less than $10/day
Provisioned automatically
Event Hubs, Stream Analytics, Azure SQL are all scalable to meet high traffic demands
Don’t like it? Just remove the APIM Policy and delete the resource group
All source shared and maintained on GitHub
Tell us what works and what you need!

37. Azure API Management Cloud hosted, turnkey, fully managed
5/19/2018 8:05 AM
Azure API Management
Cloud hosted, turnkey, fully managed
Works with APIs running in the cloud or on-prem
Abstracts, protects and optimizes APIs
Promotes and supports app developer engagement
Provides API governance, insights, and analytics
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

38. Stay in touch http://aka.ms/apimwish http://aka.ms/apimroadmap
Feature requests
(The) Product roadmap
Service updates, among other things
GitHub repo with sample policies
Hands-on walkthroughs
Tutorial, documentation, and references

39. “Differentiation does not come from building your own API management platform. It comes from the APIs you publish to your ecosystems of developers, and how motivated they are to realize application constructs that turn into a business advantage for you.”
From the Gartner research note “Top 10 Things CIOs Need to Know About APIs and the API Economy”
By Paolo Malinverno, Kristin R. Moyer, Mark O'Neill, Mike Gilpin
Published 25 January 2017

40. https://aka.ms/integrate17usa
Keynote Speaker
Scott Guthrie
Executive Vice President
For more details go to

41. Please evaluate this session
Tech Ready 15
5/19/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.