Post on 24-Jul-2015
#GlobalAzure #ViseoSpirit
Gestion des APIsAzure API ManagementSamir AREZKI, MVP AzureAltran technologies@itfana
Microsoft Azure #GlobalAzure #ViseoSpirit
GAB 2015 LYON ORAGANIZER
LOCAL SPONSORS
THANK YOU ALL !!
WORLDWIDE SPONSORS
…
#GlobalAzure #ViseoSpirit
Microsoft Azure #GlobalAzure #ViseoSpirit
AGENDA • API• Le marché des APIs • Gestion des API • Azure API Management
– Publication– Admin Experience– Developer Experience – Proxy & Policies– Reports – Security
Microsoft Azure #GlobalAzure #ViseoSpirit
POURQUOI AVOIR DES API ?
4
Microsoft Azure #GlobalAzure #ViseoSpirit
• API = Application Programming Interface (Interface Applicative de Programmation).
• Les API sont un moyen efficace de faire communiquer entre elles deux applications.
API
5
Microsoft Azure #GlobalAzure #ViseoSpirit 6
CONSUMERSALWAYS CONNECTEDON THE GOAPPs ON DEVICES
PARTNERS
INTERNAL
Microsoft Azure #GlobalAzure #ViseoSpirit
Les acteurs
• Developers• Business Units
• Suppliers• ISVs• Contractors• Affiliates
• Apps• Integrations
• Independents• End Users• Aggregators• Resellers
Internal
Partners
Customers
Wider World
Microsoft Azure #GlobalAzure #ViseoSpirit
• Ouvrir de nouveaux canaux• Améliorer votre visibilité • Présenter une façade uniforme
Étendre votre plate-forme
8
Microsoft Azure #GlobalAzure #ViseoSpirit
• Découvrir de nouveaux scénarios et marchés
• Prioriser vos offres• Offrir plus de valeur
Comprendre vos clients
9
Microsoft Azure #GlobalAzure #ViseoSpirit
• Vendre des API• Augmenter les ventes via API• Améliorer l'image de marque• améliorer l'agilité interne
Monétiser vos données et services
10
public privé
monétisation directe
monétisation indirecte
Microsoft Azure #GlobalAzure #ViseoSpirit
11
Exemples
The API is the product
The API projects the product
The API promotes the product
The API powers and feeds the product
e.g
Core value is tied up in the API
Extends availability of functionality to new places
Secondary function and indirect revenue impact
Content acquisition via the API
Microsoft Azure #GlobalAzure #ViseoSpirit
OUI, MAIS COMMENT INITIER UN PROJET DE GESTION D’API ?
12
Microsoft Azure #GlobalAzure #ViseoSpirit
• Comment faire participer les développeurs • Comment réduire TTFSC ?
– Time To First Sucessful Call (TTFSC) • Comment faire respecter vos contraintes ?• Comment rendre votre API Legacy moderne ?• Comment protéger vos systèmes de base ?
Comment ?
13
Microsoft Azure #GlobalAzure #ViseoSpirit
AZURE API MANAGEMENTPubliez des API en toute sécurité et à grande échelle pour les développeurs et partenaires.
14
Microsoft Azure #GlobalAzure #ViseoSpirit
• Service d’exposition d’une API – Qu’elle soit hébergée dans Azure ou ailleurs. – ASP.NET Web API, Azure API App ou autre technologie.
• Ajout de fonctionnalité pour diffuser l’API auprès de développeurs tiers : – Documentation et console interactive de test– Monitoring, gestion des erreurs, statiques– Sécurisation de l’accès, gestion des droits, transformation de
flux
Azure API Management
15
Microsoft Azure #GlobalAzure #ViseoSpirit 16
Azure API Management
APP DEVELOPERS
API PIBLISHERS
APPS
BACKENDSERVICES
Hosted anywhere.
Developed using any technology.
PROXY
DEVELOPER PORTAL
PUBLISHER PORTAL
Microsoft Azure #GlobalAzure #ViseoSpirit
Fonctionnalités
Developer ExperienceSelf-RegistrationSubscriptionsDocumentationConsoleIssues ForumDashboard
Admin ExperienceAPI specificationProduct managementPolicies EditorDeveloper managementContent managementConfigurable notifications
SecurityCustom developer IDSocial Developer IDAPI key authenticationBasic Authentication
Proxy & PoliciesCall and bandwidth quotasRate limitCachingHTTPSAuthenticate with BasicCORS / x-domain callsFind and replace stringRe-write URLMask URLsJSONPJSON to/from XMLSet header or parameterIP filterWildcard operations
ReportsCallsBandwidthCache hits/missesStatus codesAPI and service response timeProxy response timeFilter any report by product API Operation
Microsoft Azure #GlobalAzure #ViseoSpirit
démoAZURE API MANAGEMENT CRÉATION
Microsoft Azure #GlobalAzure #ViseoSpirit
Fonctionnalités
Developer ExperienceSelf-RegistrationSubscriptionsDocumentationConsoleIssues ForumDashboard
Admin ExperienceAPI specificationProduct managementPolicies EditorDeveloper managementContent managementConfigurable notifications
SecurityCustom developer IDSocial Developer IDAPI key authenticationBasic Authentication
Proxy & PoliciesCall and bandwidth quotasRate limitCachingHTTPSAuthenticate with BasicCORS / x-domain callsFind and replace stringRe-write URLMask URLsJSONPJSON to/from XMLSet header or parameterIP filterWildcard operations
ReportsCallsBandwidthCache hits/missesStatus codesAPI and service response timeProxy response timeFilter any report by product API Operation
Microsoft Azure #GlobalAzure #ViseoSpirit
démoAZURE API MANAGEMENT PUBLISHER PORTALAdmin Experience
Microsoft Azure #GlobalAzure #ViseoSpirit
Fonctionnalités
Developer ExperienceSelf-RegistrationSubscriptionsDocumentationConsoleIssues ForumDashboard
Admin ExperienceAPI specificationProduct managementPolicies EditorDeveloper managementContent managementConfigurable notifications
SecurityCustom developer IDSocial Developer IDAPI key authenticationBasic Authentication
Proxy & PoliciesCall and bandwidth quotasRate limitCachingHTTPSAuthenticate with BasicCORS / x-domain callsFind and replace stringRe-write URLMask URLsJSONPJSON to/from XMLSet header or parameterIP filterWildcard operations
ReportsCallsBandwidthCache hits/missesStatus codesAPI and service response timeProxy response timeFilter any report by product API Operation
Microsoft Azure #GlobalAzure #ViseoSpirit
démoAZURE API MANAGEMENTDEVELOPER PORTAL Developer Experience
22
Microsoft Azure #GlobalAzure #ViseoSpirit
Fonctionnalités
Developer ExperienceSelf-RegistrationSubscriptionsDocumentationConsoleIssues ForumDashboard
Admin ExperienceAPI specificationProduct managementPolicies EditorDeveloper managementContent managementConfigurable notifications
SecurityCustom developer IDSocial Developer IDAPI key authenticationBasic Authentication
Proxy & PoliciesCall and bandwidth quotasRate limitCachingHTTPSAuthenticate with BasicCORS / x-domain callsFind and replace stringRe-write URLMask URLsJSONPJSON to/from XMLSet header or parameterIP filterWildcard operations
ReportsCallsBandwidthCache hits/missesStatus codesAPI and service response timeProxy response timeFilter any report by product API Operation
Microsoft Azure #GlobalAzure #ViseoSpirit
démoAZURE API MANAGEMENTPROXY & POLICIES
24
Microsoft Azure #GlobalAzure #ViseoSpirit
Fonctionnalités
Developer ExperienceSelf-RegistrationSubscriptionsDocumentationConsoleIssues ForumDashboard
Admin ExperienceAPI specificationProduct managementPolicies EditorDeveloper managementContent managementConfigurable notifications
SecurityCustom developer IDSocial Developer IDAPI key authenticationBasic Authentication
Proxy & PoliciesCall and bandwidth quotasRate limitCachingHTTPSAuthenticate with BasicCORS / x-domain callsFind and replace stringRe-write URLMask URLsJSONPJSON to/from XMLSet header or parameterIP filterWildcard operations
ReportsCallsBandwidthCache hits/missesStatus codesAPI and service response timeProxy response timeFilter any report by product API Operation
Microsoft Azure #GlobalAzure #ViseoSpirit
démo
26
AZURE API MANAGEMENTREPORTS
Microsoft Azure #GlobalAzure #ViseoSpirit
Fonctionnalités
Developer ExperienceSelf-RegistrationSubscriptionsDocumentationConsoleIssues ForumDashboard
Admin ExperienceAPI specificationProduct managementPolicies EditorDeveloper managementContent managementConfigurable notifications
SecurityCustom developer IDSocial Developer IDAPI key authenticationBasic Authentication
Proxy & PoliciesCall and bandwidth quotasRate limitCachingHTTPSAuthenticate with BasicCORS / x-domain callsFind and replace stringRe-write URLMask URLsJSONPJSON to/from XMLSet header or parameterIP filterWildcard operations
ReportsCallsBandwidthCache hits/missesStatus codesAPI and service response timeProxy response timeFilter any report by product API Operation
Microsoft Azure #GlobalAzure #ViseoSpirit
démoAZURE API MANAGEMENTSECURITY AND ISSUES
28
Microsoft Azure #GlobalAzure #ViseoSpirit
• Multi-region• Azure Active Directory Integration• Virtual Private Network• ….
Azure API Management Premium
29
Microsoft Azure #GlobalAzure #ViseoSpirit
démoAZURE API MANAGEMENTPREMIUM Multi-region support
30
Microsoft Azure #GlobalAzure #ViseoSpirit
• Hébergé et géré par Microsoft• environnement sécurisé• Des performances prévisibles
Service managé
31
Microsoft Azure #GlobalAzure #ViseoSpirit
• Azure API Management offers the following benefits
– Easily create an API façade for the existing backend services– Quickly add new capabilities to the APIs, such as response
caching and cross domain access– Package and publish APIs to developers and partners
– Reliably protect published APIs from misuse and abuse– Engage developers with dynamically generated, interactive API
documentation, samples, forum, and blog
– Gain business and operational insights from analytics reports
Conlusion
32
Microsoft Azure #GlobalAzure #ViseoSpirit
• AZURE API MANAGEMENT– Documentation : https://
msdn.microsoft.com/en-us/library/azure/dn776327.aspx
– User voice : http://feedback.azure.com/forums/248703-api-management
Documentation et user Voice
33
Microsoft Azure #GlobalAzure #ViseoSpirit
GAB 2015 LYON ORAGANIZER
LOCAL SPONSORS
THANK YOU ALL !!
WORLDWIDE SPONSORS
…
#GlobalAzure #ViseoSpirit