3scale Plus Amazon API Gateway Equals Full Complement API Program Management Deployment Options Include Lambda or Any External Endpoint, Plus CloudFront and CloudWatch Extensions
3scale’s API Management Platform supports the unique requirements of delivering APIs on the Amazon Web impressive ROI. AWS users can choose 3scale’s previously released Nginx-powered API Gateway AMI or choose from the options described here to deploy and integrate the new Amazon API Gateway for an optimal API management experience. API providers on AWS don’t have to switch solutions to get API gateway features like distributed denial-of-service (DDoS) attack protection and basic caching and logging. Plus, adding 3scale provides rich, sophisticated API management business operations for API adoption and promotion. These integration and extension options are available on all plans - from the free Developer plan through Enterprise packages.
The Amazon API Gateway and the 3scale API Management Platform
+ AWS API Gateway
API Management
Amazon API Gateway for Technical Operations Functionality The Amazon API Gateway is a gateway in the classic
Other Amazon API Gateway technical operations
sense, providing a controllable access point for API
features include: •
•
Key-based access control
•
Caching and logging
•
Basic rate limiting and protection against
Support for various stages of the API lifecycle including managing multiple release stages
•
distributed denial-of-service (DDoS) attacks
Flexible transformation of API requests or responses
•
Generation of SDKs for iOS, Android and JavaScript platforms
www.3scale.net •
[email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86
3scale Adds Business Ops Power for Sophisticated API Management Technical operation functions alone are not enough for full API management needs. The 3scale API Management Platform adds API business operations functionality to the API gateway’s technical operations functionality, so API providers can plan and execute strategies that fully leverage the utility of exposing assets via APIs.
3scale delivers:
access policies for each segment - even down to individual applications
alerts
$
Integration of end-to-end billing processes to monetize access to APIs
Support for all essential developer-related processes, such as onboarding, key application and/or account management
Developer portals can be customized to match to the API provider’s brand style
Interactive API documentation based on Swagger to increase API adoption (embeddable into the developer portals)
www.3scale.net •
[email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86
Options for Supercharging Your Amazon API Gateway Deployment with 3scale
AWS API Consumers
API Gateway Cache
API Gateway
AWS Lambda Functions 3scale Authorization Function
Internet Amazon CloudFront
Endpoints on Amazon EC2
Any other publicly accessible endpoint
Amazon CloudWatch Monitoring
Authorization + Reporting
Developer Portal
Developers
API Management Platform
Admin Portal
Your API Team
Amazon API Gateway and 3scale integrated API management solution overview
www.3scale.net •
[email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86
The integration allows, but is not limited to, the following deployment scenarios and optional extensions: An API request from an external API consumer calls the Amazon API Gateway
1.
Run zero-infrastructure APIs
public endpoint and is internally redirected
using Lambda
to a 3scale Authorization Function implemented in Lambda.
2.
Run APIs with backend services (e.g., on EC2)
The function calls the 3scale API Management Platform for API key
3.
authorization. Optional extensions including:
a.
3scale authenticates the keys and Perimeter protection against DDoS attacks with CloudFront
b.
accessing the actual API implementation; API acceleration with
either on Lambda or an other HTTP
CloudFront content
endpoint.
caching
c.
Finally, successful execution of the whole Enhanced monitoring for APIs with seamless
reported to 3scale and can be seen in
CloudWatch integration
analytics.
www.3scale.net •
[email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86
1.
Run Zero-Infrastructure APIs Using Lambda Here, the API itself is directly implemented using AWS Lambda - a compute service that runs code in response to events and automatically manages compute resources. No additional API servers or hosting required.
AWS
AWS API API Consumers Consumers
API Gateway Cache
AWS API Gateway API Gateway Cache
Internet Amazon CloudFront
Amazon API Gateway CloudFront
Amazon CloudFront
3scale Authorization Function
API Gateway
Internet Internet
API Gateway Cache
3scale Authorization Function
Amazon CloudWatch Monitoring
Amazon CloudWatch Monitoring
Developer Portal
Developers
AWS Lambda Functions
3scale Authorization AWS Lambda Function Functionson Endpoints Amazon EC2
Endpoints on Amazon EC2
Any other publicly accessible endpoint
En Am
Any other publicly accessible endpoint
Authorization + Reporting
Amazon CloudWatch Monitoring Authorization API Management Platform + Reporting
AW F
Admin Portal
Your API Team
Authorization + Reporting Developer Portal
Developers
API Management Platform
Developer Portal
Admin Portal
Your API Team
API Management Platform
Developers www.3scale.net •
[email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86
Yo
2.
Run APIs with Backend Services Like EC2 In the second scenario, the Amazon API Gateway and 3scale integrated solution supports nt. This is achieved in HTTP calls. Endpoints
can be hosted anywhere - including Amazon’s own EC2 service. AWS
AWS API API Consumers Consumers
API Gateway Cache
AWS API Gateway API Gateway Cache
Internet Amazon CloudFront
Amazon API Gateway CloudFront
Amazon CloudFront
3scale Authorization Function
API Gateway
Internet Internet
API Gateway Cache
3scale Authorization Function
Amazon CloudWatch Monitoring
Amazon CloudWatch Monitoring
Developer Portal
Developers
AWS Lambda Functions
3scale Authorization AWS Lambda Function Functionson Endpoints Amazon EC2
Endpoints on Amazon EC2
Any other publicly accessible endpoint
En Am
Any other publicly accessible endpoint
Authorization + Reporting
Amazon CloudWatch Monitoring Authorization API Management Platform + Reporting
AW F
Admin Portal
Your API Team
Authorization + Reporting Developer Portal
Developers
API Management Platform
Developer Portal
Developers
Admin Portal
Your API Team
API Management Platform
www.3scale.net •
[email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86
Yo
3.
Optional Extensions Using CloudFront and CloudWatch Optional extensions can be deployed by using AWS CloudFront and/or CloudWatch, and can be applied to each of the two integration types. CloudFront provides perimeter
AWS protection against DDoS attacks, minimal latency and load reduction with optimised
AWS
geographic deployment, as well as acceleration via content caching. CloudWatch provides enhanced monitoring capabilities including performance metrics and info on API calls, data latency and error rates.
API API Consumers Consumers
API Gateway Cache
AWS API Gateway API Gateway Cache
Internet Amazon CloudFront
Amazon API Gateway CloudFront
Amazon CloudFront
3scale Authorization Function
AWS Lambda Functions
3scale Authorization AWS Lambda Function Functionson Endpoints Amazon EC2
3scale Authorization Function
Amazon CloudWatch Monitoring
Amazon CloudWatch Monitoring
Developer Portal
Developers
Endpoints on Amazon EC2
Scenario 2
Authorization API Management Platform + Reporting
Any other publicly accessible endpoint
En Am
Any other publicly accessible endpoint
Authorization + Reporting
Amazon CloudWatch Monitoring
AW F
Scenario 1
API Gateway
Internet Internet
API Gateway Cache
Admin Portal
Your API Team
Authorization + Reporting Developer Portal
Developers
API Management Platform
Developer Portal
Developers
Admin Portal
Your API Team
API Management Platform
www.3scale.net •
[email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86
Yo