Pre-Con Ed: CA Live API Creator: How to Create, Deploy, Secure and Scale an Enterprise API in 30 Minutes

World®’16

AsurionUnbundlestheMonolithicPlatformfortheOmniChannelApproachVijayAlagarasan - PrincipalArchitect,EnterpriseArchitectureandTechnologyStrategyAsurion

DO3T09S

DEVOPS

2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation


Abstract

EveryonetalksaboutAPIsandhowtheycantransformabusiness.ButwherearetheseAPIssupposedtocomefrom?ThestateoftheartforAPIcreationisstilloverwhelminglycode-intensive,andthereforeslow,expensiveanderror-prone.Formanytypesofenterprisesystems,thereisa(much)betterway.

Inthissession,youwilllearn:• Howtocreateanenterprise-classAPIfromscratchusingCALiveAPICreatorinjustafew

minutes• Howtocombinepre-defineddatasources,suchasOracle,SQLServerandSalesforce,with

customdatabasesandarbitrarydata• HowtoshapeyourAPIandgiveitsomelogicandsecurity• HowtomakeyourAPIavailableatenterprisescaleAnd,becausenothinginthislifeisfixed:• HowtoupdatethisAPIinnotimeflat

Thisisapracticalsession:everythingwillbecookedlivebeforeyoureyes.Nocheating!Attheendofthesession,you'llbegivenanevaluationcopyofCALiveAPICreatorsothatyoucantryitinyourownbusiness.IfyoustillthinkcreatinganAPIisdifficult,thismaybethesessionforyou.

VijayAlagarasanAsurionPrincipalArchitect,EnterpriseArchitectureandTechnologyStrategy


Agenda

ABOUTASURION

OPPORTUNITIESANDCONSTRAINTS

KEYTAKEAWAYS

UNBUNDLINGHORIZONPLATFORM

RULESANDPATTERNS

PLATFORMATSCALEFOR2017

1

2

3

4

5

6


Asurion’s continuousinnovation ishelping290M customersgloballystayconnected whiledrivingloyalty toourpartners’brands.

• Foundedinthemid1990’s,Asurionhasbeenservingthecommunicationsandretailindustriesforover20years• BasedinNashville,Tennessee,Asurionhasover17,000associatesworldwide• Servingmorethen290millionconsumersgloballythroughouroperationsin18countries:

• Asurion isprivately-heldwithannualrevenuesinexcessof$5.8billion• Ourmanagementteamcomesfrombest-in-classcompanieswithexperienceacrossmobile,wireline telecom,logistics,insurance,servicecontracts,consulting,customercare,marketing,retailandmore

• Asurionpartnerswiththeworldsleadingmobilecarriers,retailerscablesatelliteandcableproviders.

NorthAmerica• GlobalHeadquarters• 15CorporateOwned

CallCenters• LogisticsCenter

SouthAmerica• 2CorporateOffices

Europe• 3CorporateOffices• 1CorporateOwnedCallCenter

AsiaPacific• 13CorporateOffices• LogisticsCenter• 2CorporateOwnedCallCenters

• Australia• Brazil• Canada• China/Hong-Kong

• Colombia• England• France• Israel

• Japan• Korea• Malaysia• Mexico

• Philippines• Peru• Singapore• Taiwan

• Thailand• UnitedStates

Expanding Global Presence

Corporate Overview


Asurion – WhatWeDo

§ WhiteLabelTechnologyProtectionService

§ PremierTechSupportforMobile,Tablets,Laptops

§ PostSaleswarrantysupport

§ DeviceLeasingandUpgrade

§ ExtendedwarrantyforRetailProducts

§ DirectServiceandOEMSupport

§ ContactCentertechsupportasaService


Opportunities

Efficiency

Innovation

Customer Reach

PartnerOpportunities

OmniChannel

Security

MobileIoT

DriveCustomerGrowth

DriveCustomerEngagement

Reducecustomerchurn

ImproveOperationalEfficiency

ReduceRisk

=

BusinessObjectives


ConstraintsWithTightlyBundledPlatform

§ B2B/A2Aintegrationcomplexity

§ Diverse/Disparatetechnologystacks

§ Operationalvisibility

§ InconsistentSecurity

§ Serviceperformancemonitoring

§ Servicedocumentationanddiscovery

§ Lotsofmanualcrossteamscollaborations

§ Limitedreusability


UnbundlingNeededfortheOmniChannelApproach

Capabilities as Microservices

Finance and Accounting

Digital Protection

Incident Management

Account Management

Capabilities Published as APIs

Logistics and Fulfillment

Risk Management

ChannelApplication

ChannelApplication

ChannelApplication


HorizonPlatformin2015

AgentPlatform

HorizonServicesLayer

EnterpriseDataModel

IncidentManagement

RiskManagement

AccountManagement

IntegrationServices

ExternalEntities

SupplyChain PartnersFinance

Horizon

Claim

sPlatfo

rm


Horizon

Claim

sPlatfo

rm

Agent

HorizonClaimsPlatforminEarly2016APIstoEnableOmniChannelApproach

HorizonServicesLayer

EnterpriseDataModel

IncidentManagement

RiskManagement

AccountManagement

IntegrationServices

ExternalEntities


CAAPIManagement[AccessControl,Throttling,Registry,Versioning,Routing,APIAnalytics]

Web IVRMobile


HorizonPlatformWorkinProgressBeAdaptiveforOmniChannelDemandsviaMicroservicesandAPIs

ExternalEntities


CAAPIManagement[AccessControl,Throttling,Registry,Versioning,Routing,APIAnalytics]

Horizon

Platfo

rm

IncidentSchema

IncidentManagement

RiskManagement

AccountManagement SystemAPIs

RiskDatabaseCustomerSchema


WebChannel

IVR

AVA

AsurionVirtualAssistantPlatformInnovationviaResearchLabs https://www.asurion.com/about/research-labs/

CA

API

Man

agem

ent


The8RulesofAPIManagement

APIGatewayislightweight

APIsarepublishedwithdocumentation

APIMethodsareaccessedonlybyauthorizedconsumers

APIlifecyclemustbemanaged

APIGatewayavailability

APIGatewayisperformant

APIResourcesareuniquelyaddressable

APIsaremonitoredforutilizationandbehavior

1

2

3

4

5

6

7

8


TypesofAPIsPrivateAPI PartnerAPI


Authorization

Authentication

AuthenticationandAuthorizationSecurityisPriority1

API Key

Active Directory Certificates


ThreatProtectionProtectYourAssetsandMaintainCredibility

Untrustednetwork

Corporate Internal

Internet

RequestFilteringThrottling

AuthenticationAPIKeyAuthorization

Transformation

PartnerGateway BackendServicesProtectAgainstSQLAttack

ProtectAgainstCodeInjectionProtectAgainstDocumentstructurethreats


RoutingDiverseandDisparateServicesExposedConsistently

REST

SOAP/JMS

SOAP/HTTPS

SOAP/HTTPS

XML/HTTP

SOAP/HTTPS


RateandQuotaLimitingDitchDenialofServiceAttacks

API Consumer API Plans

Rate Limit

QuotaLimit

Rate Limit

QuotaLimit

API Backend

• Frontendthrottling• ConfiguredviaAPI

developmentportal• Clusterwide

• Backendthrottling• ConfiguredviaAPI

PolicyforeveryAPI• Pernode


DocumentationBecomeSelfService

RichCatalogofAsurioncapabilitiesreadyandavailable§ Clear interactivedocumentation§ Browser-basedexploration ofAPIs§ Easyconsumption ofbusiness

functionsbybusinessusersdirectlyfromOfficeautomationproducts

REST-basedAPIinteractions§ Consistent interactionpatterns,

protocolsandmessageformatsregardlessofprovider

§ Standard HTTPstatuscodesTry it out!Choose your

output format!

Self-service sign-up and consumption!


APIManagementStatus

65asof09/07/2016

1Minthelast24Hour

7.5Minthelast7days

14asof09/07/2016

8asof09/07/2016

PrivateAPIs APIHits APIHits

APIConsumers APIProvides

5asof09/07/2016PartnerAPIs

99.93%inthelast24hourAvailability

4asof09/06/2016Channels


Spoke

PlatformatScalefor2017FederatedGatewayModel

Hub

API Portal

API GatewayAPI Gateway SpokeAPI Gateway

SpokeAPI Gateway

• Adoptingcontainertechnologyforscaling• Improveplatformresiliencyandeliminatesinglepointoffailures• InvestinAutomation

SynchronizeAPIPlans,Keys,AccountplansfromhubtoSpoke


OnDay1,establishprinciplesandguidelinestouseAPIManagementUnderstandCAAPImanagementinfrastructurebestpracticesDeveloppolicyfragments(templates)tobuildAPIservices,aneasywaytoimplementstandardsandbestpracticesHaveanAPIversioningstrategyDevelopandshowcasereferenceimplementationfordifferentstylesFederatetheAPIdeliverywithcentralizedoperationsandcodegovernanceTrainanddevelopexistingresource’sskillsetearlyinthecycleaspartoftheAPIprogram

KeyTakeaways

Ifyouwanttorunfast,runalone;ifyouwanttorunfar,taketheorganizationwithyou.

Ifyoucan’texecutethe strategy,itdoesn’tmatterhowgoodyourstrategyis..


Thankyou.VijayAlagarasanPrincipalArchitectEnterpriseArchitectureandTechnologyStrategyAsurion,Nashville,TN

[email protected]://www.linkedin.com/in/vijayalagarasan


DevOps– APIManagementandApplicationDevelopment

FormoreinformationonDevOps– APIManagementandApplicationDevelopment,pleasevisit:http://cainc.to/DL8ozQ