Most organizations maintain dozens or even hundreds of APIs. Maintaining consistency and avoiding redundancy quickly becomes a major issue. API governance helps organizations declare and adhere to guidelines for new and existing APIs. There are different approaches to encourage conformity in API design, including governance review and automated restrictions. In this post, we’ll explore both…
Category: API Design
NA API Academy Virtual Workshop 2020 Replay
Here’s the replay of the North America API Academy Virtual Workshop from July 15, 2020. The agenda was the keynote on API strategy with John Cocke of HCL, followed by a discussion on API design with Academy members Jaime Ryan and Aran White. Jay Thorne of the Academy then discussed microservices and service mesh, and…
API Security in a Multi-Cloud Environment
In today’s app economy, more and more client interactions and transactions are occurring via the web and mobile applications, where predominantly APIs are been used for Information Exchange. Which enables modern enterprise to break the traditional barriers and expose their on-premises and cloud-based digital assets and applications to the outside world in a secure manner….
How-to: View Rich Analytics for GraphQL APIs and Back-ends Using Euclid
After you publish your API, one of the first questions you may be asked or ask yourself is probably “who is using it?”, followed quickly by “is it working?”. Over time you’ll want to see all sorts of data about your API traffic. In the past, you may have spent months updating your endpoints to…
TL;DR: Abstractions Make Us Both More Productive and Less Certain
Today, I have a guest contributor: I was working with Vidhya Bhushan, one of my Broadcom team members on our performance testing team. We had a discussion about performance testing for a specific use case and I asked for scaling of the test generation, and he commented that we might not need to since the…
TL;DR: High Cohesion, High Consistency, but with Low (or No) Coupling
This came up in a CI/CD pipeline discussion with Aman Khurana at our customer FedEx a few weeks ago, and the more I think about it, the more I like the phrase. I’m going to call it “CCLC” for short. In my view, this is a great summary of the important goals of a modern…
How to Publish GraphQL APIs to a Developer Portal
So you’ve been using and getting all the benefits that GraphQL has to offer with the Arvata GraphQL server for a while now, and you keep hearing about these concepts with an API developer portal involving client→API mappings and account/API plans. What are these concepts and how can you benefit from them? Client → API…
How to Include Rich Content in Your API Documentation
Clear documentation is a vital part of any API that you publish for broad consumption. No matter the quality of the API itself, consumers need documentation to get the most out of the API with a minimum amount of friction. A comprehensive specification is a great starting point, but often more is needed to establish…
How to Protect Existing GraphQL Endpoints using an API Gateway
You’ve spent months building a GraphQL API. The schema is just right, and your front-end developers are thrilled with it. At first it’s only exposed internally, so you’re not that worried about security, but then as different clients find out that you have this awesome API out there, they want to start using it as…
Istio and Mesh are a Microservices Deployment Framework
And Together, They Need to have Business Context The industry and our customers have expressed a great interest in Istio and service mesh over the past couple of months. I find this interesting because the tool represents the next evolutionary step, but is not without a few downsides. My focus in API management has sharpened…