Scott Metzger of TrueCredit: Policy Patterns when SOA services are opened as APIs

Enterprise and consumer worlds colliding:
Policy and Governance Impacts of consumer access on Enterprise IT

Introduction
How is cloud computing related to SOA?
What we have learned about SOA over the last 8 years.
How we applied what we learned.

How is SOA related to the cloud?
Cloud

Little control
Shared with many
Un-trusted

How is SOA related to the cloud?
Services

Core capabilities
Critical
Many uses (clients)

Patterns
What policies should be implemented independent of the service being provided?
Value of being application agnostic.
Internal vs. external consumption of Services.
What 3rd party solutions are avialible to manage these policies?

5 areas of policy focus
Access
Routing
Caching
Transformation
Operations

Access
3 tiers for services
Use of a
Service
Method
Operational tool
Credentials

Routing
Versioning
Load balancing
Client origin
Logic based on:
Message content
URL
Requesting address

Caching
Implicit Caching
Performance
Cost management
Explicit Caching
Data retention
Data management

Translation

Back-porting
Switching costs –going from one service provider to another
Bridging protocols
HTML rendering

Operations
How you are going to manage your services in production?
Is the trend your friend?
How to mitigate the root cause committee syndrome?

A summary of what we have learned.
Implementing and managing an SOA has much in common with cloud services.
Discrete patterns emerge out of this experience that are independent of the type of business you are in.
Five examples of these patterns in the form of policies.
Evaluation of API management tools and selection of ServiceNet from Sonoa for policy management.