The Industry Authority for APIs and Microservices

The API Academy provides expertise and best practices for the strategy, architecture, design and security of enterprise-grade APIs and microservices. Our free API education and certification programs are now available!

NEW FROM THE API ACADEMY

API Certification News

Aran White December 22, 2020

Our third API Academy course: API Product Manager is out now! Learn how to make your APIs as easy as possible to consume by your core audience – the developers who

Istio and Mesh are a Microservices Deployment Framework

Jay Thorne May 26, 2020

And Together, They Need to have Business Context The industry and our customers have expressed a great interest in Istio and service mesh over the past couple of months. I

Recent API Academy Posts

Securing the Digital Record

Recently, I was chatting with a group of colleagues – we were all complaining about doctors and waiting rooms, etc. During the conversation, I mentioned something that I thought was pretty interesting. Being over 40 and blonde hair/blue eyed, AND having spent my teens and 20s soaking up the sun, I’m basically putting my dermatologist’s children through

Bill Oakes, CISSP May 5, 2021

Modern API Description Formats

For many organizations, the days of undocumented APIs are mostly gone. There are now several formats used to describe APIs. These machine-readable files can be converted into documentation and even be used to test integrations. While there are several formats, the most well-known is OpenAPI. In this article, we’ll provide a highlight of that and

Adam DuVander April 20, 2021

Kafka Integration with API Management

Kafka messaging busses are becoming more prevalent in today’s enterprises. In this video, I briefly discuss why, and then demonstrate integration with an API management solution (using Layer7 as the example – if you use a different API management solution, this will likely have differences).

Christian Oberlé April 8, 2021

The Most Common API Authentication Methods

Unless your API is a public feed of read-only data, you likely need authentication. There are many options you could choose, which may vary depending on your use case. However, it’s unlikely you’ll need to go out and create your own authentication method. Whenever possible, use a standard that is widely implemented. Otherwise, developers will

Adam DuVander April 6, 2021

API Metrics with a Time Series Database

This blog examines the different ways to collect metrics on your APIs, and shows the value of Apache Druid as a time series database option.

Obaidur Rashid March 22, 2021

API Authentication Best Practices

In this post, we’ll explore authentication methods, how to keep tokens safe, and what comes next.

Adam DuVander March 17, 2021

Microsurfaces: The Role of APIs in a Microservice Architecture

API-based communication is vital to delivering value in all aspects of a microservice architecture. Explore their relationship in this short introductory ebook.

Download Now

Microservice Architecture: Aligning Principles, Practices, and Culture

An award-winning, full-length ebook from O'Reilly and the API Academy that explains how microservices work, and what it means to build an application the microservices way.

Download Now

Securing Microservice APIs: Sustainable and Scalable Access Control

This essential ebook for technical practitioners proposes an API access control model that can be implemented to provide cohesive security over a network of microservices.

Download Now

API Design Education

For over a decade, we’ve provided thought leadership to global organizations on designing APIs, implementing API security, and modernizing mission-critical systems with continuous API management and microservices.

For Developers »

API Architecture Best Practices

We offer practical, field-tested guidance on how to use microservices and APIs to create service mesh patterns that optimize the security and scalability of multi-cloud, hybrid cloud, and on-premise IT infrastructures.

For Enterprise Architects »

API Briefings for Executives

New 5G and IoT applications will demand unprecedented levels of API performance, security, and governance. Ask us how your peers are integrating APIs and Digital BizOps to get ready for the coming revolution.

For Business Leaders »