Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
@ManfredBo 
APIs for your Business 
+ 
Stages of the API Lifecycle 
Manfred Bortenschlager 
I work for 3scale.net 
Out-of-...
Outline 
1. Four business benefits of APIs 
2 @ManfredBo 
2. The API lifecycle 
• Plan/Design 
• Build/Integrate 
• Operat...
API 
Application Programming Interface
What’s an API? 
4 @ManfredBo
APIs for Developers 
5 @ManfredBo 
 Enrich functionality 
 Increase attractiveness by new combinations 
 Leverage brand...
APIs for Companies/Organisations 
1. Create/revive revenue sources 
6 @ManfredBo 
2. Deliver wider reach 
3. Foster (exter...
Example 1: 
Create/revive revenue sources 
 25% of revenue growth driven by APIs 
 750,000 fundraising pages created usi...
Example 2: 
Deliver wider reach 
 700 partners created 50,000 third party apps/services 
 300m monthly uniques who see t...
Example 3: 
Foster (external) innovation 
 Only 1 app developed by Fitbit inhouse 
 Third party apps in Fitbit’s ecosyst...
Example 4: 
Increase efficiency 
 Wrap every internal service with an API – or you are 
10 @ManfredBo 
fired 
 Better re...
But what really is the power of APIs ? 
11 @ManfredBo
APIs enable the creation of platforms. 
Platforms enable 2-sided / n-sided business 
models. 
(aka Asymmetric Business Mod...
Asymmetric Business Models 
13 @ManfredBo 
Side 1 
Gets most of the 
services 
“Home” market 
Side 2..n 
Pays 
“Victimized...
APIs enable the creation of platforms. 
…can serve n victimized markets ! 
A Platform… 
14 @ManfredBo
The API Lifecycle. 
And Tools… 
15 @ManfredBo
The API 
Lifecycle. 
16 @ManfredBo
17 @ManfredBo
Plan / Design 
18 @ManfredBo 
Why API? 
Alignment with overall business strategy 
What do we want to achieve?
Plan / Design 
• Resource modelling: Fine- vs coarse grained 
• Nouns and verbs (resources/HTTP) 
• http://www.thoughtwork...
Plan / Design 
20 @ManfredBo 
Tools 
• API Blueprint 
• RAML 
• Swagger 
See also “Where APIs and Tooling Unite” 
http://w...
API Blueprint 
21 @ManfredBo
22 @ManfredBo
23 @ManfredBo 
• Ruby 
• Grape http://www.confreaks.com/videos/475-rubyconf2010-the-grapes-of-rapid 
• Sinatra http://www....
var express = require('express'); 
//Create new instance of Express object 
var app = express(); 
app.get('/api', function...
app.get('/api/account', function(request, response) { 
//Set content-type 
response.type('application/json'); 
//Send text...
A demo: ‘Health’API 
https://github.com/3scale/workshop-apistrat2014 
26 @ManfredBo 
Deployed on Heroku: 
http://manfredhe...
A demo: ‘Health’API 
27 @ManfredBo 
Test with Postman 
http://www.getpostman.com 
(test live APIs quickly)
Unsecured API – What’s the problem? 
28 @ManfredBo 
No knowledge about: 
• Who accesses the API? 
• What are they doing wi...
29 @ManfredBo
Operate / Manage 
30 @ManfredBo 
App / 
Website 
Backend 
API
Operate / Manage 
31 @ManfredBo 
App / 
Website 
API 
Management 
Backend 
API 
http://api.2445581123523.proxy.3scale.net:...
Demo 1: Securing the API 
via API Management 
32 @ManfredBo
Demo 2: API Analytics 
via API Management 
33 @ManfredBo
What’s left to do ? 
Your own deployment of the traffic agent. 
34 @ManfredBo
Deployment 
35 @ManfredBo
Minimum API Operations 
Access Control: authentication and authorization to identify the 
originator of incoming traffic a...
37 @ManfredBo
Share / Engage 
38 @ManfredBo 
Image source: 
http://dx.jeremiahlee.com/
Developer Portal 
Acceleration 
Pilots / 
Case Studies 
Community 
Building 
Measure 
Comms 
Social Media 
Events 
Evangel...
New ebook 
“Building Effective API Programs” 
40 @ManfredBo
Demo 3: API Documentation 
via API Management 
41 @ManfredBo
API Management 
For Developers 
Out-of-the-Box API Management 
www.apitools.com 
Market Education & 
Evolution 
42 @Manfre...
Take-aways 
There can be an enormous benefit in APIs -- shown by many 
successful examples. 
It needs to be crystal clear ...
@ManfredBo 
APIs for your Business 
Q&A 
Manfred Bortenschlager 
I work at 3scale.net 
Out-of-the-box API Management 
@3sc...
www.apitools.com 
45 @ManfredBo
APItools.com 
1. Managing & Monitoring APIs 
2. Modifying API calls 
46 @ManfredBo
How does it work ? 
requests 
My app APItools 
responses 
★ Manage APIs 
★ Test & Debug 
★ Modify API traffic 
★ Analytics...
Upcoming SlideShare
Loading in …5
×

API Management Workshop (at Startupbootcamp Berlin)

8,144 views

Published on

These are the slides from the API Management Workshop, held at the Startupbootcamp Berlin on October 17.

We covered benefits of APIs for an organisation (regardless of size, sector, stage or purpose) and gave examples of successful deployment of APIs.

We then described the typical API lifecycle:
plan/design > build/integrate > operate/manage > share/engage.
We covered many best practices and tools for each stage and gave practical demos about how to secure and manage APIs.

Published in: Technology
  • Hi there! Get Your Professional Job-Winning Resume Here - Check our website! http://bit.ly/resumpro
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here

API Management Workshop (at Startupbootcamp Berlin)

  1. 1. @ManfredBo APIs for your Business + Stages of the API Lifecycle Manfred Bortenschlager I work for 3scale.net Out-of-the-box API Management @3scale API Workshop at Startupbootcamp Berlin Berlin, October 17, 2014
  2. 2. Outline 1. Four business benefits of APIs 2 @ManfredBo 2. The API lifecycle • Plan/Design • Build/Integrate • Operate/Manage • Share/Engage 3. Wrap-up and take-aways
  3. 3. API Application Programming Interface
  4. 4. What’s an API? 4 @ManfredBo
  5. 5. APIs for Developers 5 @ManfredBo  Enrich functionality  Increase attractiveness by new combinations  Leverage brand strength  Integrate more easily and quickly
  6. 6. APIs for Companies/Organisations 1. Create/revive revenue sources 6 @ManfredBo 2. Deliver wider reach 3. Foster (external) innovation 4. Increase efficiency
  7. 7. Example 1: Create/revive revenue sources  25% of revenue growth driven by APIs  750,000 fundraising pages created using JustGiving APIs raising £76m  40% annual user growth Source: http://www.3scale.net/resources/customer-stories/ 7 @ManfredBo
  8. 8. Example 2: Deliver wider reach  700 partners created 50,000 third party apps/services  300m monthly uniques who see the brand on other sites  The API gave reach and brand awareness which would not have been possible with traditional marketing. (Dick Brouwer, TripAdvisor Director of Engineering) 8 @ManfredBo Source: http://bit.ly/1uk6Oo7
  9. 9. Example 3: Foster (external) innovation  Only 1 app developed by Fitbit inhouse  Third party apps in Fitbit’s ecosystem accumulated are worth $1m of development cost Source: http://www.slideshare.net/faberNovel/why-shouldicareaboutap-is4/53 9 @ManfredBo
  10. 10. Example 4: Increase efficiency  Wrap every internal service with an API – or you are 10 @ManfredBo fired  Better re-usability, quicker integration, spot opportunities, get to market quicker (AWS) Source: http://apievangelist.com/2012/01/12/the-secret-to-amazons-success-internal-apis/
  11. 11. But what really is the power of APIs ? 11 @ManfredBo
  12. 12. APIs enable the creation of platforms. Platforms enable 2-sided / n-sided business models. (aka Asymmetric Business Models) See also VisionMobile report on Asymmetric Business Models: http://www.visionmobile.com/product/asymmetric-business-models/ 12 @ManfredBo
  13. 13. Asymmetric Business Models 13 @ManfredBo Side 1 Gets most of the services “Home” market Side 2..n Pays “Victimized” market(s)
  14. 14. APIs enable the creation of platforms. …can serve n victimized markets ! A Platform… 14 @ManfredBo
  15. 15. The API Lifecycle. And Tools… 15 @ManfredBo
  16. 16. The API Lifecycle. 16 @ManfredBo
  17. 17. 17 @ManfredBo
  18. 18. Plan / Design 18 @ManfredBo Why API? Alignment with overall business strategy What do we want to achieve?
  19. 19. Plan / Design • Resource modelling: Fine- vs coarse grained • Nouns and verbs (resources/HTTP) • http://www.thoughtworks.com/insights/blog/rest-api-design-resource- 19 @ManfredBo modeling • Decouple DB  API • “How to design APIs that last” • http://apiux.com/2014/09/05/api-design-sustainability/ • API-first design • https://pop.co/blog/why-we-chose-api-first-development/
  20. 20. Plan / Design 20 @ManfredBo Tools • API Blueprint • RAML • Swagger See also “Where APIs and Tooling Unite” http://www.futureinsights.com/home/where-apis-and-tooling-unite. html
  21. 21. API Blueprint 21 @ManfredBo
  22. 22. 22 @ManfredBo
  23. 23. 23 @ManfredBo • Ruby • Grape http://www.confreaks.com/videos/475-rubyconf2010-the-grapes-of-rapid • Sinatra http://www.sinatrarb.com/ • PHP • Slim http://coenraets.org/blog/2011/12/restful-services-with-jquery-php-and-the-slim- framework/ • Node.js: • Express.js, Fortune.js • Restify http://mcavage.me/node-restify/ • ASP.net • Python: • Flask Web framework for Python: http://flask.pocoo.org/ • Django for Python: http://www.django-rest-framework.org/ • Java: • JAX-RS • REST.li http://rest.li/index.html
  24. 24. var express = require('express'); //Create new instance of Express object var app = express(); app.get('/api', function(request, response) { //Do something to read a resource }); app.post('/api', function(request, response) { //Do something to create a resource }); app.put('/api', function(request, response) { //Do something to update a resource }); app.delete('/api', function(request, response) { //Do something to delete a resource }); //Start the server app.listen(3000); Node.js, Express.js
  25. 25. app.get('/api/account', function(request, response) { //Set content-type response.type('application/json'); //Send text response response.status(200).send( { message: 'Your balance is: '+ balance }); //... }); app.put('/api/account', function(request, response) { //Get the change in balance balance = parseInt(request.body.updatebalance); //Update the balance... //Notify client response.status(200).send( { message: 'Your new balance is: ' + balance }); //... }); //... Node.js, Express.js
  26. 26. A demo: ‘Health’API https://github.com/3scale/workshop-apistrat2014 26 @ManfredBo Deployed on Heroku: http://manfredhealthapp.herokuapp.com/ (UNSECURED!!)
  27. 27. A demo: ‘Health’API 27 @ManfredBo Test with Postman http://www.getpostman.com (test live APIs quickly)
  28. 28. Unsecured API – What’s the problem? 28 @ManfredBo No knowledge about: • Who accesses the API? • What are they doing with the API? • How to block someone? • What traffic occurs when by whom?
  29. 29. 29 @ManfredBo
  30. 30. Operate / Manage 30 @ManfredBo App / Website Backend API
  31. 31. Operate / Manage 31 @ManfredBo App / Website API Management Backend API http://api.2445581123523.proxy.3scale.net:80 http://manfredhealthapp.herokuapp.com
  32. 32. Demo 1: Securing the API via API Management 32 @ManfredBo
  33. 33. Demo 2: API Analytics via API Management 33 @ManfredBo
  34. 34. What’s left to do ? Your own deployment of the traffic agent. 34 @ManfredBo
  35. 35. Deployment 35 @ManfredBo
  36. 36. Minimum API Operations Access Control: authentication and authorization to identify the originator of incoming traffic and ensure only permitted access. Rate Limits and Usage Policies: usage quotas and restrictions on incoming traffic to keep loads predictable. Analytics: data capture and analysis of traffic patterns to learn how the API is being used. 36 @ManfredBo
  37. 37. 37 @ManfredBo
  38. 38. Share / Engage 38 @ManfredBo Image source: http://dx.jeremiahlee.com/
  39. 39. Developer Portal Acceleration Pilots / Case Studies Community Building Measure Comms Social Media Events Evangelist
  40. 40. New ebook “Building Effective API Programs” 40 @ManfredBo
  41. 41. Demo 3: API Documentation via API Management 41 @ManfredBo
  42. 42. API Management For Developers Out-of-the-Box API Management www.apitools.com Market Education & Evolution 42 @ManfredBo Out-of-the-box API Management For API Providers 3scale.net apistrategyconference.com apicodex.3scale.net APIs.io
  43. 43. Take-aways There can be an enormous benefit in APIs -- shown by many successful examples. It needs to be crystal clear what you want to achieve. The API needs to be aligned with the business strategy. APIs enable Asymmetric Business Models to tackle many markets. Carefully consider all four stages in the API lifecycle. Exposing data or services via APIs alone is not enough. Make sure you secure, monitor and manage APIs. 43 @ManfredBo
  44. 44. @ManfredBo APIs for your Business Q&A Manfred Bortenschlager I work at 3scale.net Out-of-the-box API Management @3scale + Stages of the API Lifecycle
  45. 45. www.apitools.com 45 @ManfredBo
  46. 46. APItools.com 1. Managing & Monitoring APIs 2. Modifying API calls 46 @ManfredBo
  47. 47. How does it work ? requests My app APItools responses ★ Manage APIs ★ Test & Debug ★ Modify API traffic ★ Analytics Web APIs Others… 47 @ManfredBo

×