The Journey of an OpenAPI platform

Transcript

1. The Journey of an API Platform
2. Alvaro Navarro Developer Advocate
3. Why building an API platform? Main benefits for opening your APIs Promotes Innovation and Cocreation Open up new Business Opportunities Unlocks value of existing data
4. Defining the idea Photo by AbsolutVision on Unsplash
5. Defining the idea Platform characteristics Onboarding process: Self-Service, Manual validation Environments: Sandbox, Production Security: OAuth2 Support: from others APIs already delivered API Platform: Monitoring, Lifecycle, Usage
6. Building the Catalogue Photo by Markus Spiske on Unsplash
7. 1 Proposal Step-by-step expansion process Building the API Catalogue
8. Open APIs proposal Drivers Market demands Innovation trends. Competitors’ offering Quick wins from others APIs already delivered Complement with Partner APIs
9. 1 Proposal BUs, Legal & Security Approval 2 Step-by-step expansion process Building the API Catalogue
10. Building the catalogue Getting the approval
11. Building the catalogue Getting the approval
12. Building the catalogue Getting the approval
13. Building the catalogue Getting the approval
14. 1 Proposal 3 BUs, Legal & Security Approval API Governance Board 2 Step-by-step expansion process Building the API Catalogue
15. API Design What is the API Governance? • Define the Use Case of the API • Flows (how to use the API) • Data Dictionary • URI • Examples • Swagger Specs API Designer Experts Owner of Rules & Guidelines Owner of Data Dictionary Owner of Processes
16. API Design Why API Governance is important? As a Designer Design guidelines and standardization: Errors Endpoints naming Improvements Data dictionaries Not only API Validation, support around APIs A place where designers can speak As a Consumer Better API integration
17. API Design Example of guidelines: API versioning Using URLs http://api.amadeus.com/v1/flight-search http://api.amadeus.com/2018/flight-search http://api.amadeus.com/2018/02/flight-search Using HTTP Header Accept: application/vnd.amadeus.v1 Accept-Version: 1 Using a Query parameter http://api.amadeus.com/flight-search?version=1
18. 1 Proposal 3 BUs, Legal & Security Approval Development and Deployment 4 API Governance Board 2 Step-by-step expansion process Building the API Catalogue
19. 1 1 API and Swagger locally created Traditional API Deployment flow
20. 1 1 API and Swagger locally created 2 New routes on the API Gateway 2 API Gateway Traditional API Deployment flow
21. 1 1 API and Swagger locally created 2 New routes on the API Gateway 2 3 Set up routes on Amadeus premises 3 API Gateway Traditional API Deployment flow
22. 1 1 API and Swagger locally created 2 New routes on the API Gateway 2 4 Setup security configuration 3 4 API Gateway Auth Traditional API Deployment flow 3 Set up routes on Amadeus premises
23. 1 1 API and Swagger locally created 2 New routes on the API Gateway 2 3 4 Auth API Gateway 5 5 Deploy API implementation on backend API Traditional API Deployment flow 4 Setup security configuration 3 Set up routes on Amadeus premises
24. 1 1 API and Swagger locally created 2 New routes on the API Gateway 2 3 4 Auth API Gateway 5 API Traditional API Deployment flow 5 Deploy API implementation on backend 4 Setup security configuration 3 Set up routes on Amadeus premises
25. 1 1 API and Swagger locally created 2 New routes on the API Gateway 2 3 4 Auth API Gateway 5 API Traditional API Deployment flow 5 Deploy API implementation on backend 4 Setup security configuration 3 Set up routes on Amadeus premises ¯\_(
    )_/¯
26. 1 Serverless API Deployment flow 1 Model commit and optionally tag
27. 1 2 2 Run tests on every commit and start deployment Serverless API Deployment flow 1 Model commit and optionally tag
28. 1 2 3 3 Serverless Environment and swagger generation Serverless API Deployment flow API Gateway 2 Run tests on every commit and start deployment 1 Model commit and optionally tag
29. 1 2 3 4 Model deployment on public Cloud Serverless API Deployment flow 4 API Gateway 3 Serverless Environment and swagger generation 2 Run tests on every commit and start deployment 1 Model commit and optionally tag
30. 1 2 3 Serverless API Deployment flow 4 < 1 minute API Gateway 4 Model deployment on public Cloud 3 Serverless Environment and swagger generation 2 Run tests on every commit and start deployment 1 Model commit and optionally tag
31. Traditional vs Serverless Traditional Sensible data content Inherited implementation Serverless Speed to Market No infrastructure to maintain Continuous experimentation enabler Pay per Use
32. 1 Proposal 3 BUs, Legal & Security Approval 5 Development and Deployment 4 API Governance Board 2 Testing Step-by-step expansion process Building the API Catalogue
33. Beta Tester program Engaging developers to test your APIs Tests and shape the new APIs Community (internal & external) Remote usability tests (~45 minutes) Beta Tester rewards
34. Beta Tester program Safe and controlled environment 1 Beta Tester access privately to Swagger 1
35. Beta Tester program Safe and controlled environment 1 Beta Tester access privately to Swagger 1 2 2 Swagger shooter with auth Token
36. Beta Tester program Safe and controlled environment 1 Beta Tester access privately to Swagger 1 2 2 Swagger shooter with auth Token 3 3 Fake backend with static JSON responses
37. Beta Tester program Safe and controlled environment 1 Beta Tester access privately to Swagger 1 2 2 Swagger shooter with auth Token 3 3 Fake backend with static JSON responses 4 4 Private repository with automatic deployment
38. Beta Tester program Safe and controlled environment 1 Beta Tester access privately to Swagger 1 2 2 Swagger shooter with auth Token 3 3 Fake backend with static JSON responses 4 4 Private repository with automatic deployment 5 5 APIs shootable from Postman (or code)
41. © Amadeus IT Group and its affiliates and subsidiaries • First time Amadeus attends Hackwars, hackathon organized annually by American Airlines • 24 hours long, 20th-21st April 2018 • 1200 developers, 120 teams • 37 tech providers, including: Google, Amazon, IBM, Red-Hat, Oracle, Salesforce, MongoDB, GitHub, Docker, Intel, Cisco... Hackathons American Airlines Hackathon Key Figures
42. © Amadeus IT Group and its affiliates and subsidiaries • Hack the Journey, Nice • HackWars V, Dallas • Hack the Journey, Madrid • #Hack4SD, Oviedo • Blockchained Mobility Hackathon, Munich • Futurize, Bangalore • Hack MIT, Boston • Turkish Airlines Hackathon, Istanbul • South Summit, Madrid Hackathons Several Hackathons - Different approaches
43. Before the event During the event After the event 1. Preliminary interviews / surveys 2. Direct observation 3. Support questions 4. Additional challenges 5. Teams’ interviews 6. Anonymous surveys 7. Monitor metrics 8. Follow up with participants Maximizing the value of the Hackathons How do we collect and measure feedback?
44. 1 Proposal 3 BUs, Legal & Security Approval 5 Development and Deployment 4 API Governance Board 2 Testing Release Step-by-step expansion process Building the API Catalogue
45. Developer Experience
46. Developer Experience Platform characteristics Documentation: Static, Dynamic Tutorials and Sample code SDK: How many languages?
47. Photo by Yvette de Wit on Unsplash
48. • Open innovation programs bring always value • Test from early phases of the program • Be consistent with the APIs • Listen to your API consumers! Conclusions & key takeaways
49. Thank you! Thank you! developers.amadeus.com @amadeus4dev amadeus4dev developers@amadeus.com