3scale Plus Amazon API Gateway Equals Full Complement API Program Management

3scale Plus Amazon API Gateway Equals Full Complement API Program Management Deployment Options Include Lambda or Any External Endpoint, Plus CloudFro...
Author: Gavin Nichols
2 downloads 0 Views 18MB Size
3scale Plus Amazon API Gateway Equals Full Complement API Program Management Deployment Options Include Lambda or Any External Endpoint, Plus CloudFront and CloudWatch Extensions

3scale’s API Management Platform supports the unique requirements of delivering APIs on the Amazon Web impressive ROI. AWS users can choose 3scale’s previously released Nginx-powered API Gateway AMI or choose from the options described here to deploy and integrate the new Amazon API Gateway for an optimal API management experience. API providers on AWS don’t have to switch solutions to get API gateway features like distributed denial-of-service (DDoS) attack protection and basic caching and logging. Plus, adding 3scale provides rich, sophisticated API management business operations for API adoption and promotion. These integration and extension options are available on all plans - from the free Developer plan through Enterprise packages.

The Amazon API Gateway and the 3scale API Management Platform

+ AWS API Gateway

API Management

Amazon API Gateway for Technical Operations Functionality The Amazon API Gateway is a gateway in the classic

Other Amazon API Gateway technical operations

sense, providing a controllable access point for API

features include: •



Key-based access control



Caching and logging



Basic rate limiting and protection against

Support for various stages of the API lifecycle including managing multiple release stages



distributed denial-of-service (DDoS) attacks

Flexible transformation of API requests or responses



Generation of SDKs for iOS, Android and JavaScript platforms

www.3scale.net • [email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86

3scale Adds Business Ops Power for Sophisticated API Management Technical operation functions alone are not enough for full API management needs. The 3scale API Management Platform adds API business operations functionality to the API gateway’s technical operations functionality, so API providers can plan and execute strategies that fully leverage the utility of exposing assets via APIs.

3scale delivers:

access policies for each segment - even down to individual applications

alerts

$

Integration of end-to-end billing processes to monetize access to APIs

Support for all essential developer-related processes, such as onboarding, key application and/or account management

Developer portals can be customized to match to the API provider’s brand style

Interactive API documentation based on Swagger to increase API adoption (embeddable into the developer portals)

www.3scale.net • [email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86

Options for Supercharging Your Amazon API Gateway Deployment with 3scale

AWS API Consumers

API Gateway Cache

API Gateway

AWS Lambda Functions 3scale Authorization Function

Internet Amazon CloudFront

Endpoints on Amazon EC2

Any other publicly accessible endpoint

Amazon CloudWatch Monitoring

Authorization + Reporting

Developer Portal

Developers

API Management Platform

Admin Portal

Your API Team

Amazon API Gateway and 3scale integrated API management solution overview

www.3scale.net • [email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86

The integration allows, but is not limited to, the following deployment scenarios and optional extensions:  An API request from an external API consumer calls the Amazon API Gateway

1.

Run zero-infrastructure APIs

public endpoint and is internally redirected

using Lambda

to a 3scale Authorization Function implemented in Lambda.

2.

Run APIs with backend services (e.g., on EC2)

 The function calls the 3scale API Management Platform for API key

3.

authorization. Optional extensions including:

a.

 3scale authenticates the keys and Perimeter protection against DDoS attacks with CloudFront 

b.

accessing the actual API implementation; API acceleration with

either on Lambda or an other HTTP

CloudFront content

endpoint.

caching

c.

 Finally, successful execution of the whole Enhanced monitoring for APIs with seamless

reported to 3scale and can be seen in

CloudWatch integration

analytics.

www.3scale.net • [email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86

1.

Run Zero-Infrastructure APIs Using Lambda Here, the API itself is directly implemented using AWS Lambda - a compute service that runs code in response to events and automatically manages compute resources. No additional API servers or hosting required.

AWS

AWS API API Consumers Consumers

API Gateway Cache

AWS API Gateway API Gateway Cache

Internet Amazon CloudFront

Amazon API Gateway CloudFront

Amazon CloudFront

3scale Authorization Function

API Gateway

Internet Internet

API Gateway Cache

3scale Authorization Function

Amazon CloudWatch Monitoring

Amazon CloudWatch Monitoring

Developer Portal

Developers

AWS Lambda Functions

3scale Authorization AWS Lambda Function Functionson Endpoints Amazon EC2

Endpoints on Amazon EC2

Any other publicly accessible endpoint

En Am

Any other publicly accessible endpoint

Authorization + Reporting

Amazon CloudWatch Monitoring Authorization API Management Platform + Reporting

AW F

Admin Portal

Your API Team

Authorization + Reporting Developer Portal

Developers

API Management Platform

Developer Portal

Admin Portal

Your API Team

API Management Platform

Developers www.3scale.net • [email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86

Yo

2.

Run APIs with Backend Services Like EC2 In the second scenario, the Amazon API Gateway and 3scale integrated solution supports nt. This is achieved in HTTP calls. Endpoints

can be hosted anywhere - including Amazon’s own EC2 service. AWS

AWS API API Consumers Consumers

API Gateway Cache

AWS API Gateway API Gateway Cache

Internet Amazon CloudFront

Amazon API Gateway CloudFront

Amazon CloudFront

3scale Authorization Function

API Gateway

Internet Internet

API Gateway Cache

3scale Authorization Function

Amazon CloudWatch Monitoring

Amazon CloudWatch Monitoring

Developer Portal

Developers

AWS Lambda Functions

3scale Authorization AWS Lambda Function Functionson Endpoints Amazon EC2

Endpoints on Amazon EC2

Any other publicly accessible endpoint

En Am

Any other publicly accessible endpoint

Authorization + Reporting

Amazon CloudWatch Monitoring Authorization API Management Platform + Reporting

AW F

Admin Portal

Your API Team

Authorization + Reporting Developer Portal

Developers

API Management Platform

Developer Portal

Developers

Admin Portal

Your API Team

API Management Platform

www.3scale.net • [email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86

Yo

3.

Optional Extensions Using CloudFront and CloudWatch Optional extensions can be deployed by using AWS CloudFront and/or CloudWatch, and can be applied to each of the two integration types. CloudFront provides perimeter

AWS protection against DDoS attacks, minimal latency and load reduction with optimised

AWS

geographic deployment, as well as acceleration via content caching. CloudWatch provides enhanced monitoring capabilities including performance metrics and info on API calls, data latency and error rates.

API API Consumers Consumers

API Gateway Cache

AWS API Gateway API Gateway Cache

Internet Amazon CloudFront

Amazon API Gateway CloudFront

Amazon CloudFront

3scale Authorization Function

AWS Lambda Functions

3scale Authorization AWS Lambda Function Functionson Endpoints Amazon EC2

3scale Authorization Function

Amazon CloudWatch Monitoring

Amazon CloudWatch Monitoring

Developer Portal

Developers

Endpoints on Amazon EC2

Scenario 2

Authorization API Management Platform + Reporting

Any other publicly accessible endpoint

En Am

Any other publicly accessible endpoint

Authorization + Reporting

Amazon CloudWatch Monitoring

AW F

Scenario 1

API Gateway

Internet Internet

API Gateway Cache

Admin Portal

Your API Team

Authorization + Reporting Developer Portal

Developers

API Management Platform

Developer Portal

Developers

Admin Portal

Your API Team

API Management Platform

www.3scale.net • [email protected] • North America: +1 (415) 671-6432 • EMEA: +34 93 309 27 86

Yo