As you move your workloads to the cloud or build new cloud-native applications, how will you connect them with other apps and data that still reside in your data centers, or in other clouds? The de facto standard to connect cloud workloads is the REST API. To get the most out of your cloud deployments, there’s a host of best practices around managing APIs in the cloud world. This presentation covers: -challenges faced as companies move to the cloud - managing security, governance, and visibility concerns - how APIs help you in a multi-cloud world

1. ©2016 Apigee Corp. All Rights Reserved.
Cloud Deployments Done Right:
Why APIs Are Key
Ed Anuff & Anant Jhingran

2. ©2016 Apigee Corp. All Rights Reserved.
Slideshare
slideshare.com/apigee
Apigee Community
https://community.apigee.com
YouTube
youtube.com/apigee

3. ©2016 Apigee Corp. All Rights Reserved.
@edanuff
Ed Anuff
@jhingran
Anant Jhingran

4. ©2016 Apigee Corp. All Rights Reserved.
Enterprises are aggressively adopting cloud
4
Multi-Cloud,
82%
Single
Public,
9%
Single
Private, 6%
No Plans, 3%
Hybrid
Cloud,
55%
Multipl
e
Public,
16%
Multipl
e
Private
, 11%
Percentage of Enterprises Adopting Cloud
Source: Rightscale 2016 State of Cloud Report
Note: Adopting - Experimenting or Already have production apps in Cloud (Private or Public)

5. ©2016 Apigee Corp. All Rights Reserved.
Cloud is datacenter with an API 
5

6. ©2016 Apigee Corp. All Rights Reserved.
But today we will talk about cloud
applications and APIs
6

7. ©2016 Apigee Corp. All Rights Reserved.
APIs are used to access applications
7
Application
Both “Lift & Shift” and “Lift, Modernize, & Shift”

8. ©2016 Apigee Corp. All Rights Reserved.
APIs are used to build applications
8
CATAL
OG
CUSTO
MER
SHOPP
-ING
CART
RECO
MMEN
D

9. ©2016 Apigee Corp. All Rights Reserved.
APIs are used to connect applications
9
CATALOG
CUSTOME
R
SHOPPPIN
G
CART
RECOMME
ND

10. ©2016 Apigee Corp. All Rights Reserved.
You cannot separate cloud apps and APIs
03
02
01 Modern apps are accessed through APIs
Modern apps are built using APIs
Modern apps connect using APIs

11. ©2016 Apigee Corp. All Rights Reserved.
Building Applications and APIs for the Cloud
11

12. ©2016 Apigee Corp. All Rights Reserved.
Integration-Centric
Data Services
Architecture
Data Access
Logic
Connectors
Existing
NoSQL
Existing
Content
Store
Existing
DB
Existing
Data
Service
API
Consumers
Service Integration
Architecture
Composition &
Integration Logic
COTS
Application
Existing
App
Services
SaaS
Connectors
API
Consumers
Application-Centric
MSA Outer
Architecture
Microservices
Microservice
Architecture
API
Consumers
Monolithic Service
Architecture
Service
Data Persistence
Application
Container
Service Service
Service Service
API
Consumers
Source: Gartner

13. ©2016 Apigee Corp. All Rights Reserved.
Cloud-Native Microservice Architecture With PaaS
Service Discovery Config. Store
zLoad
Balancing
Service
Router
MOM
Service
Identity Provider
Persistence
Services
Microservice A
Instance 1
Instance n
Instance 1
Instance n
Microservice B
API Gateway
Policy
Management
Logging and
Diagnostics
Telemetry
Deployment
Automation
Build
Automation
Platform
Automation
Automation
DevOps
Monitoring
and Alerting
Deploy
Environment Metaservices
Lookup
Log
Platform as a Service
Backing Services
Gateway
Consumer
Identity
Provider
Client Access
Protocols
(e.g., HTTPS,
MQTT, AMQP)
Mobile App
Browser App
IoT Device
PaaS Add-Ons
Platform API
8
7
6
54
2
3
1
Lookup AuthN/Z
Source: Gartner

14. ©2016 Apigee Corp. All Rights Reserved.
API Challenges
14
Onboarding
Difficult to onboard and manage app developers and API keys
Scale
Traditional integration technologies not built for web scale – billions of interactions
Agility
Inability of IT to meet the business demands of delivering volume of LOB apps faster
Security
Unable to secure critical assets exposed beyond trust boundaries
Visibility
Lack of insight into usage, performance, users, products, patterns, devices, anomalies

15. ©2016 Apigee Corp. All Rights Reserved.
What about Multi-Cloud?
15

16. ©2016 Apigee Corp. All Rights Reserved.
APP
APP
APP
APP
APP
Multi-Cloud introduces more problems
ON PREMISES/ PRIVATE CLOUD
APP
APP
APP
APP
APP
APP
APP
APP
REST APIs

17. ©2016 Apigee Corp. All Rights Reserved.
APP
APP
APP
APP
APP
Multi-Cloud Has New Challenges
ON PREMISES/ PRIVATE CLOUD
APP
APP
APP
APP
APP
APP
APP
APP
Inconsistent Policies
Inability to ensure all
custom cloud apps are
adhering to common
security policies
Cyber Threats
APIs are exposed to external
threats, given outside trust
boundaries
Flying Blind
Lack of visibility into APIs, API
usage and performance of
APIs connecting your apps

18. ©2016 Apigee Corp. All Rights Reserved.
Multi-Cloud Needs New Approaches
ON PREMISES/ PRIVATE CLOUD
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
Legacy ESBs
Existing ESBs are not built for
distributed, Cloud environments
PaaS Gateways
PaaS Gateways have limited
capabilities and can track only
APIs in that PaaS

19. ©2016 Apigee Corp. All Rights Reserved.
Need API Centric Architecture For Your Future
19©2016 Apigee. All Rights Reserved.
CONNECTORS
PROCESS FLOWS
ENDPOINT MANAGEMENT
END-TO-END VISIBIILITY
DISTRIBUTED, CLOUD NATIVE
DEVELOPER MANAGEMENT
API PROXY MANAGEMENT
ESBs
Integration/ Exposure Centric
Focus on Stability
Systems of Record Integration
Cost Reduction Enabler
API MANAGEMENT
Consumption Centric
Focus on Agility
Built for distributed, Cloud
Top-line growth enabler
Process orchestration is moving to code /
microservices, eliminating fat buses
Value of connectors reduced as new
services and resources are REST API
enabled

20. ©2016 Apigee Corp. All Rights Reserved.
Multi-Cloud Monitoring & Analytics
ON PREMISES
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
Distributed API Runtime,
Centralized Visibility &
Control
Federated Gateway
API SERVICES
ANALYTICS DEV PORTAL
MANAGEMENT SERVICES
20

21. ©2016 Apigee Corp. All Rights Reserved.
Multi-Cloud Consistent Security Model
ON PREMISES
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
APP
Federated Gateway
API SERVICES
ANALYTICS DEV PORTAL
MANAGEMENT SERVICES
- Traffic Management Policies
- Spike Arrest
- Rate Limiting
- Security Policies
- JSON Threat Protection
- SQL Injection Protection
- OAuth2
- TLS

22. ©2016 Apigee Corp. All Rights Reserved.
Takeaways
03
02
01 APIs are integral to your cloud success
Proactively manage API sprawl, API security &
visibility
API platform with a distributed model is critical to
manage a multi-cloud world

23. To be continued…
23©2015 Apigee. All Rights Reserved.