Upload
reed-mitchell
View
41
Download
0
Tags:
Embed Size (px)
DESCRIPTION
Nov 12, 2014. z Services API Management Creating new opportunities by extending customer “reach” by exposing z based core business functions as APIs. Asit Dan z Services API Management, Chief Architect [email protected]. API Opportunity. Examples across Industries. - PowerPoint PPT Presentation
Citation preview
© 2012 IBM Corporation
Nov 12, 2014
z Services API ManagementCreating new opportunities by extending customer “reach” by exposing z based core business functions as APIs
Asit Danz Services API Management, Chief [email protected]
Many of the core business functions reside in z based services (CICS, IMS, WAS, TPF) Examples across Industries
• Quote interest rate and Loan application• Checking room availability and reservation• Looking up an item at a store location and purchase
Vision API Opportunity
2
3
API Opportunity
3
Creating new business opportunities by extending “reach” with APIs for accessing enterprise assets and/or with improved security and governance
Reaching new customers and markets with new applications and solutions accessing core (z based) business functions, through business partners
Improving user experience of existing customers and/or delivering new services with Mobile applications
Gaining more business control and insight over access to the enterprise services (e.g., for accountability & chargeback) while also improving visibility to z based services for the internal and external developers • simplifying access to z assets
Opportunity
z Customers have made a significant investment over a long period of time, in developing many valuable assets supporting core business functions (and core competencies)• Leverage these existing assets by exposing as APIs, improving both consumability and governance
• Mobile, Cloud based or third-party applications can invoke these APIs for accessing core business functions
VisionVision
APIM and z assets, fits like a glove: Many of the core business functions reside in z based services (CICS, IMS, WAS, TPF)
z Services APIM: Opportunity
4
VisionVisionz Services APIM: Business challenges
1. Consumability of the APIs is Key: Easier creation and assembly of API from existing assets/services Visibility of APIs to internal and external developers Easier registration (by consuming applications) and set up including managing entitlement
2. Retaining business control (e.g., enforcing entitlement, accountability/chargeback) and gaining business insight in API invocation Securing APIs using a secure GW from unwanted external invocations (mapping to
application level security) and enforcing workload entitlement Business Monitoring of API access in gaining business insight on the use of APIs by external
applications, and for accountability/chargeback
Enterprise
Services
CICSIMSWASTPF
On-Premise Enterprise APIs
Cloud APIs
Mobile Applications
Cloud-based Services
Mobile, Cloud and Third-party Applications invoking z Services using APIs
Why API Management? Business challenges addressed by APIM in exposing z based services/assets
5
Making APIs consumable requires publishing not just what business functions they perform but various additional details on their use, and easy to sign up
• Listing and categorizing APIs for easy to find
• Describing details on how to invoke an API
z Services APIM: Business challenges
An example public site listing its published APIs (similar to many others Twitter, Amazon, etc.)
6
Businesses are transforming themselves to participate in the API economy
Provide self-service API portals to external/internal app developers
Expose business services securely as APIs to developer communities, and analyze API usage
Manage & monitor the entire API platform
On-premiseprivate
Off-premiseSaaS
Off-premiseprivate
Hybrid
IBM API ManagementHow do you rapidly and securely expose
your business to this developer ecosystem?
IBM APIM
IBM API ManagementFully on-premise, multi-tenant solution, for API providers
IBM DataPowerAPI Gateway for security, control, integration &
optimized access to a full range of Mobile, Web, API, SOA, B2B & Cloud workloads
Over a decade of innovation, 10,000+ units sold, 2000+ customer installations worldwide
A single, comprehensive solution to design, secure, control, publish, monitor & manage APIs
IBM APIM
Management ConsoleAPI ManagerDeveloper Portal
Share with developers
3
Create, assemble and define an API
1
Manage growth & analyze results
4
Secure & scale the API
2
Introducing IBM API Management:“A Complete API Management Solution”
IBM APIM
9
End-to-End Architecture for Mobile, Cloud and Third-party Applications accessing z Assets/Services using APIs
1. Develop Services (Web or REST)
On-Premise API Management
Cloud APIs
Mobile Applications
Cloud-based Services
Enterprise Transaction Processing
Enterprise
Services
CICSIMSWASTPF
Access to systems of records and enterprise data via APIs
Jane - Mobile app developerUses APIs to access Back-End services
Bob – developer of z based ServicesDevelops services from CICS, IMS and other z applications
2. Develop Enterprise API s
3. Mobile/Cloud App Enablement
Service Enablement• Enables invocation of z applications by
remote applications using standard protocols (WSDL, REST)
• Converts SOAP or JSON into application specific (e.g., COBOL, PL/I) data and invokes applications
API Management• Consumability by internal and external
developers (creation and look up)• Entitlement Management (securing,
workload enforcement) • Usage monitoring & Analytics
Mobile/Cloud/Third-party Application Development• Invokes APIs for accessing SOR
Shavon – API developerDevelops APIs from z based services
Enterprise APIs
Security & Integration API Gateway(IBM DataPower Appliance)
Create, Publish, Manage & Socialize APIs
(IBM API Management)
zServices APIz Services APIM: Architecture and Capabilities
APIM Communication with GW
10
System Z
z/OS Connect
JSON
WAS Liberty
Security & Integration API GatewayIBM DataPower Appliance
On Premise API Management
CICS
API Invocation
Create, Publish, Manage & Socialize APIs
(IBM API Management)
Discoveryservices
Web Services
REST Services
Discovery and invocation of System z based Services
WOLA based services
Web Services
IMS
SO
AP
G
ate
way
CICS
CICS TG
Enterpr ise
Services
Enterpr ise
Services
zServices APIz Services APIM: Architecture and Capabilities
Discovery of z Services for API Development1. Get a list of deployed services (Service Identification)
- Filter based on technical and business service attributes2. Get schema for a specific service (API Definition)3. Get additional deployment details for a service (API
Assembly)- e.g., security protocol support, invocation uri
Service Development Tool and Enablement Runtimes
Web Services CICS and IMS provides separate tools and runtimes; TPF provides runtime libraries
REST/JSONCICS and IMS use common z/OS Connect runtime
11
Call to Action Leverage existing z assets by exposing as APIs
Reach out to z asset owners in exploring scenarios around the three entry points
1. Reach new customers and markets with new applications and solutions accessing core business functions, through business partners
2. Improve experience of existing customers and/or deliver new services with Mobile applications
3. Gain more business control and insight over access to the enterprise services, while improving consumability and simplifying access to z assets
Partner with z architects - both from the customer side and IBM – for designing an end-to-end solution architecture
Work with IBM through POC Use IBM APIM and z product capabilities in developing API based solution Identify/define incremental business scenarios, and try out through POCs
12
Thank YouQuestions and follow up – [email protected]
API Management Resources
Product Page- ibm.com/apimanagement
API developer community- developer.ibm.com/api
Follow us on Twitter- @ibmapimgt
YouTube Channel- youtube.com/ibmapimanagement
14
Business Challenge Difficult for internal partners and developers to discover &
access key financial services Lacked a standard ecosystem to manage internal partners
including global credit card companies and merchants No visibility on Service consumption or ability to
chargeback for LoB use of Services
Business Challenge Difficult for internal partners and developers to discover &
access key financial services Lacked a standard ecosystem to manage internal partners
including global credit card companies and merchants No visibility on Service consumption or ability to
chargeback for LoB use of Services
Example Apps
Solution IBM API Management & DataPower GatewaySolution IBM API Management & DataPower Gateway
Leading Global Commercial Bank provides easy & secure access to key financial services
Business Value Offers 3rd party merchants secure standards-based access
to key business services as APIs, with a self-service experience
Provides an internal ecosystem for partners and a central repository with usage analytics
Drives innovation for Mobile application development
Business Value Offers 3rd party merchants secure standards-based access
to key business services as APIs, with a self-service experience
Provides an internal ecosystem for partners and a central repository with usage analytics
Drives innovation for Mobile application development
$APIM: Business challenges
15
Business ChallengeBusiness Challenge External business partners retrieve flight information by scraping the
company’s website Unauthorized access to full flight information , with no usage analytics Delays in updating website – difficult for authorized partner to test
changes REST-based API had just been built but security was not in place
Solution IBM API Management & DataPower
Business Value Easily and securely connect company Website to new APIs, saving
cost of building OAuth based secure access Enable secure exposure of APIs to External Business Partners, saving
the implementation cost of building a developer support infrastructure with access management
Ability to leverage existing investment in IBM DataPower gateway and internal team skillset
Enable secure Mobile app integration with Enterprise APIs
Large Airline in North America provides authorized access to flight services
IBM API Management
DataPower XG45(With DIM) or XI50/B,XI52
and the AO Option
REQUIRED components
• Physical or VE
• Purchase new or re-use existing appliances
Secure, Control, Optimize
Secure, Control, Optimize
IBM API Management
• 2 Hypervisor Installs
Create, Manage, Socialize
Create, Manage, Socialize
Physical infrastructure
IBM APIM
Roles and Development Tasks for enabling Mobile and Third-party Applications accessing Enterprise Assets
BobCreates enterprises services from existing z assets (CICS, IMS, WAS…) Uses an asset specific tool to generate service deployment artifacts (e.g., bindfile, WSDL) starting with an
existing asset, and deploys the generated artifacts in an appropriate runtime environment (e.g., z/OS Connect, CICS TS/TG, IMS SOAP GW)
Additionally, using an appropriate tool (e.g., CICS or IMS Explorer), explores asset details, and captures key service metadata for later understanding of its business function (such as, description of business function, business classification of this function, association of keywords, etc.)
May also publish this service to an external registry (e.g., WSRR or other existing registries in customer environments)
Shavon Creates an API from an existing service, as well as various entitlement policies Discovers deployed services from various back-end application environments in determining an
appropriate service to expose- Queries existing services based on matching business functions (i.e., service metadata)- Navigates service list and views service description, other metadata and interface definition in understanding
and selecting an appropriate service
Defines an API starting with the selected service interface- Defines API name, description and resource - Defines an appropriate transformations in mapping an API resource to an existing service interface definition- Defines various entitlement policies
May syndicate this API to multiple marketplaces (e.g., BlueMix)
JaneCreates a mobile app invoking APIs • Navigates and views APIs using the developer portal• Develops app code invoking selected APIs
zServices APIz Services APIM: Roles and Capabilities
18
• IBM-managed infrastructure
• Low entry cost
• Pay-per-use• Highly elastic• API Provider
has full control to create APIs & Plans, customize developer portals, publish to developer communities
IBM API Management - Full control & deployment flexibility
• Customer-managed infrastructure
• API Provider has full control to manage & scale the on-premise infrastructure
• Create APIs & Plans, customize developer portals, publish to developer communities
• Best of both worlds
• Meet seasonal capacity without CapEx
• Move APIs & Plans between public & private clouds
• Create APIs & Plans, customize developer portals, publish to developer communities
Off-premiseSaaS
On-premise Private
HybridOff-premise Private
• API Provider-managed on IBM-hosted cloud
• API Provider has full control to manage & scale the off-premise infrastructure
• Create APIs & Plans, customize developer portals, publish to developer communities