apidays LIVE Hong Kong 2021 - Enterprise Integration Patterns for OpenAPI Initiatives by Hieu Nguyen Nhu, Microsoft
0 likes249 views
The document provides an overview of API management in the context of open banking and digital ecosystems, highlighting the need for businesses to adapt to an interconnected platform economy. It discusses regulatory efforts across various regions for open banking initiatives and emphasizes the importance of API management solutions to enable seamless integration and innovation across services. The document also outlines the role of Kubernetes in API-driven development, facilitating app scalability and orchestration while separating app logic from accessibility.
apidays LIVE Hong Kong 2021 - Enterprise Integration Patterns for OpenAPI Initiatives by Hieu Nguyen Nhu, Microsoft
- 2. OpenAPI Overviewâ OpenBanking Enterprise Integration Hybrid Application Services Q & A
- 3. APIs
- 5. All product and company names are trademarks or registeredÂź trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them
- 6. Businesses need to seamlessly leverage existing, widespread borderless ecosystems to reach, delight and retain customers in the âPlatform Economy.â The Platform Economy is powered by a mesh of interconnected services and solutions that spans across people, things, algorithms, digital personal assistants, automated agents and other entities. Businesses must now prime themselves to become providers and consumers on emerging platforms in their own industries â or across industries. In some cases, they may need to be the one to build the platform.
- 7. Open Banking
- 8. improved Customer Satisfaction creation of Open APIs share information securely
- 9. Europe âȘ PSD2 regulates banks in the EU to grant TPPs** access to payment accounts for account information and payment initiation âȘ CMA (Competition and Monetary Authority) regulated the 9 largest UK private banks to form an Open Banking Implementation Entity North America âȘ NACHA API Standardisation Working Group (100 banks, PSPs and IT companies to launch 16 APIs) âȘ US CFPB* pushed for customer-authorized access to data as an alternative to screen scraping âȘ Open Banking Developer Portals and APIs launched by several banks âȘ Fintech and Open Banking bill passed in Mexico Africa âȘ PSD2 is also being watched closely. South Africa may follow âȘ API Banking use cases for financial inclusion gaining traction in Nigeria Australia âȘ Australian Treasury Department to push for Open Banking regulation by July 2018 âȘ NAB and CBA among the first banks globally to release Developer Portals Asia âȘ Monetary Authority of Singapore âFinance-as-a- Serviceâ playbook to boost Open API adoption âȘ Hong Kong Monetary Authority plans to regulate tier-1 HK banks to open up APIs âȘ Several Open Banking related GovTech initiatives in India, China, Singapore Latin America âȘ Retail banking propositions to allow customers to access account information through Social Media Platforms to view balances and transactions ** Third PartyProvidersâ such as Payment ServiceProviders,Account Information andPaymentInitiation Providers * ConsumerFinancialProtection Bureau â regulatory agency to oversee financial products and servicesthat are offered to US customers § Initiatives driven by national or supra-national marketregulation
- 11. controlling access manage versions data at scale real time notifications reliably 14
- 12. Your Systems Azure Identity and Security Management API Management Service Bus / Event Hub Databases Data Lake Storage Traffic Manager / Load Balancer Machine Learning API Services Azure Monitoring Services Stream Analytics API Services API Services API Services
- 13. 16 API Management Solutions today are necessary elements that can accelerate the creation of ecosystem An API ManagementLayer or the Gateway allowscreationand configurationof APIs , self-serve registrationand instant API access, sandboxtesting environments, documentation,usage analyticsand much more Systems of Engagement Systems of Record Infrastructure & Network (Messaging & Services) API Decoupling Layer IoT Devices ESB BPM Service A Service B Service n CRM Financials Payments Cards Other CoreBanking Lending API Services Manage, Secure Developer Services Design Tools Analytic Services E2E Visibility Reusable Façade APIâs Obfuscated Core APIâs API Management Tool and GatewayFeatures SIMPLIFIED API ARCHITECTURE Developer Onboarding Security Mediation Traffic Management Developer Authentication API Catalogue and Documentation Analytics API Monetisation DeveloperSelf- service API Exposure Data Transformation Reporting Azure API Management Logic Apps App Services On-Premise Connectivity
- 14. 17 Azure API management solution overview âą Azure Apps service âą Azure Logic Apps âą API Managementand Integration âą Identity, Entitlementand Security âą ManagementAnalyticsand Monitoring Consumer / Consumerâs banks / Merchants On Premise / Partner / SaaS Connectivity Integration and Interfaces for API calls & Process Orchestration/Logic Data Management Personal Finance Management / Data Aggregation Analytics and Machine Learning Public and Private Marketplace Identity, Entitlement and Security Monitoring and Reporting (Operations, fraud and regulatory) Modern Apps / Portal (Web/Mobile/Bots/Kiosks) âą ChannelIntegrity âą API Managementand Integration âą Aggregation and Intelligence âą App Services and channel capability
- 15. Consumer / Consumerâs banks / Merchants On Premise / Partner / SaaS Express Route Load Balancer Traffic Manager Data Lake Storage Data Lake Cluster Reporting Machine Learning Azure IdentityandSecurityManagement Operational ManagementSuite+ PowerBIDashboardingandReporting ModernApps/ Portal Aggregation/Dashboard Information, Campaigns, Promotions, etc. Stream Analytics Service Bus Event Hub Logging APIManagement LogicApp/AppServices Functions No SQL Hybrid connectivity Integration IntegrationManagement Userinterfaces(Web/Mobile/Bots/Kiosks) IdentityandSecurity, Monitoring and Management Azure API management solution with Aggregation and Intelligence âą Azure Apps service âą Azure Logic Apps âą API Managementand Integration âą Identity, Entitlementand Security âą ManagementAnalyticsand Monitoring âą ChannelIntegrity âą API Managementand Integration âą Aggregation and Intelligence âą App Services and channel capability
- 17. API management is key in digital business ecosystem API Management Azure On-premises Other Clouds Extend innovation with citizen developers through easy discovery and consumption of custom APIs Enterprise marketplace for API-based innovation Unified management for custom APIs across clouds and on-premises Integrated early on into the API development process Power Apps Dataverse Connectors AI Builder Marketplace of apps for employees, partners, and customers Citizen developers Able to accelerate app creation IT pros Able to govern all APIs and Apps Professional developers Able to amplify skills by maximizing API reuse End users More productive and satisfied employees, partners, and customers Gartner named Microsoft a leader in 2020 Gartner Magic Quadrant for Low Code Application Platform
- 20. Azure Policy IT Pro Hosting Azure On-premises IoT Edge Multi-cloud App Developer VS Code GitHub Application package API Management Web App Function App Logic App Azure Serverless Integration Events Messaging Azure Kubernetes Service Management Azure Resource Manager Azure Arc Application platform ML App Worker App
- 21. Service invocation State management Publish Subscribe Resource bindings Virtual Actors Observability Secrets Extensible Any Cloud or Edge infrastructure HTTP API gRPC API Application code Any code or framework⊠Microservices written in Dapr: Distributed Application Runtime Build apps using any language with any framework
- 22. Gatewaypod Gatewaypod API Managers Kubernetes cluster 1 App 1 pod Sidecar UserApp App 2 pod Sidecar UserApp Legend: Control Plane Data Plane Dapr integration policies Diagram by Mark Chmarny @mchmarny Self-hosted gateway 1 Sidecar API Management Kubernetes cluster 2 App 1 pod Sidecar User App App 3 pod Sidecar User App Self-hosted gateway 2 Sidecar API Consumers
- 25. Microsoft proprietary andconfidential overview API-driven development with Kubernetes: Putting API at the center of the development process to clearly separate app accessibility and app logic API defines how internal world communicates with outside world âą External interface to the world âą Formalizes parameters for internal and external user access âą Allows definition and enforcement of policies, like security and usage âą Provides abstraction of the underlying details âą Enables decoupling of interface development from logic development âą Acts as proxy for app logic Kubernetes provides app orchestration environment and scalability needs âą Simplifies migration and modernization âą Enables developers to focus on app logic âą Provides orchestration and scalability across apps and services Kubernetes platform Kubernetes Security, governance, identity Infrastructure automation Infrastructure Accessibility Logic Cloud app Website Mobile app B2B partner API
- 26. Microsoft proprietary andconfidential API-driven development with Kubernetes: 1. API is defined by API developers and published via the API Management portal Kubernetes platform Kubernetes Security, governance, identity Infrastructure automation Infrastructure Accessibility Logic 2. Application developers define the microservices and associated logic and deploy to Kubernetes 3. API users (internal and/or external) use the API developer portal to learn about the API and use them in their applications 4. Applications access APIs via the API Gateway 5. API Gateway, after ensuring the API request meets security and other policies e.g. throttling, forwards the request to service running in Kubernetes API API developers API users App developers Management Portal Developer Portal Gateway architecture Putting API at the center of the development process to clearly separate app accessibility and app logic
- 27. Questions Photo by Ilkka KÀrkkÀinen on Unsplash