This document provides an agenda and summary for the Manila MuleSoft Meetup #13 on API Governance and Flex Gateways that took place on September 14, 2022. The agenda included an introduction, presentations on API Governance by Eris Elmer Pallasigue and on Flex Gateways by Marla Vasquez, followed by a game. Housekeeping rules were outlined and there was an ice breaker game. The speakers' backgrounds were provided. The presentations summarized Universal API Management, Anypoint API Governance and how it fits in the API lifecycle, and introduced Flex Gateway. There was a Q&A after each presentation and a quiz game to end the event.
3. 3
● This session will be recorded
● Please be muted during the speaker presentation
● The recording and slides for today’s presentations will be made available to all attendees
● At the end of each presentation, there will be a Q&A session
● After all the presentations there will be a quiz game where you will get a chance to win a
training voucher from MuleSoft.
Housekeeping Rules
5. 5
●About the organizers:
○ Ryan Andal
○ Janos Geronimo
○ Christopher Co
○ Eugene Aly Alontaga
○ Roslee Ann Po
○ Frederick Ocampo
●About the sponsor:
○ Capgemini
○ MuleSoft
Introduction
A SHOW OF HANDS:
Who is new to this Meetup?
6. 6
●Identify the name of logo.
●Quickly type your answers in reverse text in our chat box.
●No prize and just for fun.
Ice Breaker Game
15. 15
● What is Universal API Management?
● Anypoint API Governance Overview
● Anypoint API Governance in API Lifecycle
● Anypoint API Governance Concepts
○ Governance Profiles
○ Governance Rulesets
● Demo
Scope
17. Universal API Management
MuleSoft’s goal with universal API management is to help our customers in the following ways:
Accelerate application
delivery
• API Design Center (Updated)
• Anypoint CLI (Updated)
Build modern architectures
and applications
• Flex Gateway (New)
Create vibrant API ecosystems
• Anypoint Exchange (Updated)
• API Community Manager
• API Experience Hub (Coming Soon)
Achieve consistent security
and governance
• API Manager (Updated)
• API Governance (New)
18. 18
Anypoint API Governance
API Governance enables you to:
● Operationalize API governance: Govern every API to comply with industry regulations and internal standards
without friction.
● Improve API conformance continuously: Identify APIs not conforming to quality standards in a glance and
notify owners seamlessly
● Enable developers to maintain speed: Self-serve governance rules and automate validations in API Designer or
through CI/CD.
19. 19
Anypoint API Governance in API Lifecycle
Design Phase
Publish specification to
● Use to build out RAML/OAS
definitions
● Where governance rulesets are
applied to API definitions (as
dependencies)
● Use to store an organization’s
API assets including
RAML/OAS Specifications
● Where governance rulesets are
cataloged and discovered
20. 20
Validate API Specifications via Anypoint CLI
Anypoint CLI Command (Validate API Specs):
governance api validate <path of ruleset> <path of api specs>
API Governance CLI Commands Reference Link:
https://docs.mulesoft.com/api-governance/cli-command-list
21. 21
A governance profile has two statuses, Normal and At Risk, which are based on the percentage of
conformant APIs in the governance profile.
o Normal: More than 70% of APIs are conformant
o At Risk: Less than 70% of APIs are conformant
Governance Profiles
22. 22
Governance rulesets are collections of rules, or guidelines, that can be applied over the metadata
extracted from API definitions in the Anypoint Platform.
MuleSoft provided rulesets:
Governance Rulesets
Anypoint Best Practices
Authentication Security Best
Practices
HTTPS Enforcement
Open API Best Practices
OWASP API Security Top 10
2019 Checklist
Required Examples
24. 24
● Universal API Management relation to Anypoint Governance
● Anypoint API Governance
● Part of API Governance in API Lifecycle
● Anypoint API Governance Concepts: Profiles and Rulesets
Summary
27. 27
● Is a management tool that sits between the client and the backend services.
● Normally used for security and governance
● Another layer in the architecture that lets you configure the non-functional requirements
API Gateway
29. 29
CONTROL PLANE
Component in Anypoint Platform that lets you
design, deploy and manage APIs
API MANAGER
MULE RUNTIME
Engine used to host and run Mule Applications
ORCHESTRATION LAYER
IMPLEMENTATION LAYER
API GATEWAY
BACKEND API
RUNTIME
AGENT
API ID
GOVERNANCE ENFORCED
AUTO DISCOVERY
RUNTIME PLANE
31. 31
Flex Gateway
Mulesoft’s new ultrafast API gateway that allows management and governance of any API built
using any technology that is deployed anywhere
36. 36
● Mechanics
○ Kindly go to www.quizizz.com and use the code that will be provided in the chat box.
○ Make sure to sign up using your REAL NAME.
○ Read carefully the questions and select the correct answers as fast as you can.
○ Top 3 players will receive a training voucher from MuleSoft.
Quiz Game
37. 37
● Share:
○ Tweet using the hashtag #MuleSoftMeetups
○ Invite your network to join: https://meetups.mulesoft.com/manila/
● Feedback:
○ Fill out the survey feedback and suggest topics for upcoming events
○ Contact MuleSoft at meetups@mulesoft.com for ways to improve the program
What’s next?