Apidays Paris 2023 - How to Master the Lifecycle of your APIs, Ivan Frain, Susan Vrona Bejina and Theotime Macrez, PwC France et Maghreb

Apidays Paris 2023 - Software and APIs for Smart, Sustainable and Sovereign Societies
December 6, 7 & 8, 2023

How to Master the Lifecycle of your APIs - From Strategy to Execution
Ivan Frain, Cloud Transformation Director at PwC France et Maghreb
Susan Vrona Bejina, Cloud transformation Senior Manager at PwC France et Maghreb
Theotime Macrez, Cloud Transformation Senior Associate at PwC France et Maghreb

------

Check out our conferences at https://www.apidays.global/

Do you want to sponsor or talk at one of our conferences?
https://apidays.typeform.com/to/ILJeAaV8

Learn more on APIscene, the global media made by the community for the community:
https://www.apiscene.io

Explore the API ecosystem with the API Landscape:
https://apilandscape.apiscene.io/

Transcript

1. How to Master the Lifecycle of your APIs From Strategy to Execution December 6th, 2023 2:00 p.m. – 2:50 p.m. Théotime Macrez Senior Associate PwC France, Cloud Transformation theotime.macrez@pwc.com Susan Vrona Béjina Senior Manager PwC France, Cloud Transformation susan.vrona.bejina@pwc.com Ivan Frain Director PwC France, Cloud Transformation ivan.frain@pwc.com
2. PwC 99% of organizations use APIs to integrate applications and data to create connected customer experiences and generate revenue, and 38% of organizations’ revenue-generating digital assets utilize APIs. 2023 State of the API Report Postman 2
3. How to Master the Lifecycle of your APIs PwC France Cloud Transformation 3 API Lifecycle Master the complete lifecycle of your APIs Open the richness of your enterprise to your collaborators, partners and market Governance Business outcomes, Organisation, Standards, Tech enablement, Risk Build & test Monitoring define build validate run optimise Conformity, Functional, Integration, Performance, Security Business KPIs, Availability, Security
4. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 1. API Trust Master the lifecycle of your APIs 2. Focus on API Governance Address the governance challenges throughout the lifecycle of your APIs 3 Focus on API Performance Ensure the performance of your APIs ★ All along this session: feedback from our experience in supporting clients throughout their API journeys Agenda 4
5. API Trust Master the lifecycle of your APIs 1
6. December 6th, 2023 PwC France Cloud Transformation How to Master the Lifecycle of your APIs All major vendors expose APIs thereby facilitating important operational integrations Many major actors from different sectors have already jumped into the API world, exposing their services externally Build digital systems using APIs to interconnect your IT Expose your services to the outside world APIs Aren’t Just for Tech Companies* *https://hbr.org/2021/04/apis-arent-just-for-tech-companies Over 12,000 APIs offered by firms today* Connect your CRM to your ITSM: Integrating ServiceNow with Salesforce gives real-time visibility to the support and sales team into each other's work and priorities. Automate your deployment on the cloud using hyperscalers’ APIs Connect many frontend types to your unique backend API Mercedes-Benz Developer’s portal https://developer.mercedes-benz.com/ API Products API Portal Collectives Developers Portal • Speedup innovation with partners to rapidly deliver digital products and services • Facilitate partnerships by exposing your digital capabilities • Easy onboard your customers to integrate with your digital capabilities • Simplify evolution of your overall IT systems with understandable interfaces • Facilitate operations with comprehensive and well monitored integration flows… • Create a faster time to market APIs at the center of business value creation
7. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 API Trust for business impact business Retail APIs create business impact in all industries and business functions More than 12,000 APIs exist in the market through which companies expose business value: Salesforce.com with 50% of revenues enabled by APIs, Expedia.com at 90%, and eBay, at 60%* *Source: https://hbr.org Energy & Utilities Space & Automotive Health Banks & Insurance Telecom & Media Tech Giants Human Resources Finance Purchasing Marketing & Communication Production Logistics Operations All Industry Sectors All Business Units
8. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 Master the complete lifecycle of your APIs Open the richness of your enterprise to your employees, your partners and your market define build validate run optimise Mastering your API approach will smooth your internal operations and amplify your value proposition for partners and clients Build digital systems using APIs to interconnect your IT Expose your services to the outside world • Accelerate innovation with your partners by furnishing access more rapidly to your products and services • Facilitate partnerships by exposing your digital capabilities • Improve your customer experience • Simplify your IT systems • Create agility and scale • Facilitate team operations while ensuring access control • Empower operations to achieve faster time to market API Trust for business impact
9. December 6th, 2023 PwC France Cloud Transformation How to Master the Lifecycle of your APIs Standards & Governance Security & Monitoring New Products | New Business Channels | New Business Models Performance & Scale • Well designed - Representative and understandable • Scalable - Able to meet demand • Cost optimized - Fulfill your return on investment (ROI) • Secure - Protecting your brand, inspire and ensure confidence of partners • Easy to operate - Master downtime and facilitate diagnostics and operation Current Business Models PwC API Trust Approach Mastery of your API approach permits you to evolve current business models and create new ones API Trust for business impact Are you able to benefit from the power of APIs ?
10. December 6th, 2023 PwC France Cloud Transformation How to Master the Lifecycle of your APIs Farmers Improve agronomic performance while reducing fertilizer cost and environmental impact mobile app, web portal, bridges to tractors, etc. Managing authorities and paying agencies Register compliance with GAEC 5, possibly further SMRs and GAECs Support for further environmental commitments Gather consolidated data 2-way communication web portal Advisors Assist farmers in developing an efficient and compliant NMP web portal Institutional & private partners Propose innovative and relevant services to the extensive FaST user community integrate through APIs and opt-in service marketplace Policy-makers & researchers Develop innovative solutions to optimize the use of inputs in agriculture Ensure data security, privacy and anonymization web portal, APIs Knowledge and trends from consolidated data, large datasets for statistics and CAP strategies Environm ental m onitoring, increased 2-way com m s, econom ies of scale & CAP digitization User base of small farmers to propose advanced services Nutrient management What & when, nutrient budget, best practices Additional services Compliance, basic payments, environmental impact, etc. Earth Observation Sentinel, Copernicus, soil data Farm Sustainability Platform (FaST) https://gitlab.com/fastplatform Administrative data IACS, LPIS, NVZ, Natura 2000 User data Pictures, soil samples Common platform Cloud-hosted on DIAS Scalable 2-way messaging Between MA/PA and farmer Reduced costs, environmental compliance, time saving, opt-in services Easy data sharing between farmers and advisors, benchmarking Adapts to local specificities (administrative, agricultural, regulatory) Interfaces with existing systems Economies of scale for participating MS Data security & privacy (GDPR)… … Modular design ⇢ extensible … Builds on past EU projects (e.g. H2020) Start of project Feasibility and interest of concept Review of possible architectures Development of an open-source prototype of platform & farmer app Pilot Study Prototype operational on a DIAS Jan 2019 May 2018 2020 - 2021 API Trust for business impact
11. December 6th, 2023 PwC France Cloud Transformation How to Master the Lifecycle of your APIs FaST - a microservice based, API enabled platform for sustainable Agriculture The Farm Sustainability Tool (FaST) 11 11 Infrastructure as a Service Access layer Services: use cases and algorithms Vegetation status service Fertilization service Farmer client app MA/PA portal API / export data Weather service Messaging and notification service Container orchestration Scalability Network Distributed storage Soil info storage service Data … additional services Earth observation data satellite, weather Databases / caches Administrative/open data LPIS, NVZ, regulations, etc User-generated data soil sampling, crop rotation, nutrient plans… Remote APIs GSAA, weather, etc Authentication Serving and eventing system CPU HDD RAM DIAS Infrastructure as code CI/CD GitOps Core Module Custom Modules Add-ons • Storage • API Gateways • Web backend and Admin portal • Vector map filers • GIS enrichment services • FaST authentication • Custom authentication (national ID, cp…) • Data import pipelines • NVZ • Natura2000 • Hydrography • Soil data • LPIS • Weather services • Fertilization services • Satellite imagery services (Sentinel).... API Trust for business impact
12. Focus on API Governance Address the governance challenges throughout the lifecycle of your APIs 2
13. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 13 MORE TOUCHPOINTS MORE SERVICES MORE APIs Modern businesses are delivering their services through an increasing number and diversity of touchpoints. For example, retailers can sell products via their e-commerce website, multiple mobile applications for different operating systems, third-party platforms and even physical stores. This increasing number of touchpoints entails an increasing volume and variety of IT services and an increasing number and diversity of interactions between these services. For example, all the touchpoints via which retailers sell products must interact with the product inventory. This increasing number of interactions entails a growing need for APIs to enable a loose coupling between services. For example, retailers can use an API to enable services to interact with the product inventory. APIs are effective to enable interactions between both internal and external services, and can therefore play a significant role in business integration. companies use more than 1,000 applications on average, 10% more than last year2 99% of companies added at least one new sales channel in 2022, 51 % added 3 or more1 1Cleo 2023 Global Supply Chain Executive Report; 2MuleSoft 2023 Connectivity Benchmark Report; 3Rapid 2022 State of APIs Report 40% of companies with 10,000+ employees have 250+ internal APIs3 Your challenges around the governance of your APIs
14. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 14 Ensure that your APIs can be easily reused and updated Ensure that your APIs can be easily discovered, understood and used by both your teams and your API consumers Ensure that your APIs are consistent across your organization and form a coherent and comprehensive landscape CONSISTENCY Ensure that your APIs satisfy your quality and security standards, and comply with applicable regulations SECURITY & QUALITY DISCOVERABILITY Ensure that your APIs deliver reliable functionality and user experiences to your API consumers RELIABILITY REUSABILITY If you recognize challenges you are currently facing in some of these stakes, you could probably benefit from improve the governance of your APIs. Ensure that your practices facilitate collaboration and synergies between your teams Ensure that your teams promote and adopt API best practices, and upskill themselves BEST PRACTICES Ensure that your teams can focus on the delivery of business outcomes INNOVATION COLLABORATION Your APIs Your teams Using your APIs Your challenges around the governance of your APIs
15. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 15 Consistency Quality Reliability Best practices Innovation Collaboration Discoverability Reusability CHALLENGES AROUND THE GOVERNANCE OF YOUR APIs API GOVERNANCE BENEFITS OF API GOVERNANCE Improved user experience Increased business value Improved reputation Increased revenue Increased operational efficiency Improved data security Address the challenges around the governance of your APIs Standards Processes Tools Comprehensive framework Foundations of API governance Achieve a competitive edge enabled by your APIs Reduced time-to-market Increased usage API governance as a solution to your challenges
16. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 16 TOOLS to support your standards and processes STANDARDS Tools to verify the application of your standards Checklists to assess the maturity of your teams Checklists to assess the compliance of your APIs Tools to monitor the usage and performance of your APIs Tools to generate, manage and expose the documentation of your APIs Tools to support the design, development and testing of your APIs PROCESSES Documentation to be produced Decisions to be made Governance committees Roles and responsibilities Activities to be carried out Norms and guidelines Metamodel and taxonomies to classify APIs Templates of documentation … Versioning Deployment Monitoring Security Performance Architecture Workflows API governance as a solution to your challenges
17. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 17 EXAMPLE SCENARIO #2: API CENTER OF EXCELLENCE AND SPECIALIZED TEAMS EXAMPLE SCENARIO #1: API CENTER OF EXCELLENCE AND NON-SPECIALIZED TEAMS EXAMPLE SCENARIO #3: API SERVICE CENTER API CENTER OF EXCELLENCE PROJECT A API TEAM APP. TEAM PROJECT A API TEAM APP. TEAM … API CENTER OF EXCELLENCE PROJECT A PROJECT B … API SERVICE CENTER PROJECT A … PROJECT B : API framework : applications : APIs Our approach for API governance
18. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 18 TRACK the application of your framework DEFINE your API governance framework APPLY your API governance framework Our approach for API governance
19. PwC France Cloud Transformation How to Master the Lifecycle of your APIs December 6th, 2023 19 300+ collaborators provide global services to support the worldwide digital platforms of a French luxury fashion house CONTEXT 10+ members of a community of co-owners of the initiative on the client side and consultants from several consulting firms commissioned by the client to co-construct the outcomes of the initiative to improve the governance of APIs DEFINITION OF AN API GOVERNANCE FRAMEWORK LIFECYCLE MANAGEMENT ▪ 8 API lifecycle stages defined ▪ 60+ lifecycle activities defined, along with the associated workflows, decisions and responsibilities ▪ 40+ lifecycle deliverables defined, along with the associated tooling ▪ 3 templates of deliverables defined ▪ 5 governance committees defined DOCUMENTATION ▪ 1 metamodel defined ▪ 13 types of API documentation defined ▪ 60+ use cases defined, 8 solutions studied, 2 proofs of concept performed and 1 tool selected to build a developer portal STANDARDS ▪ 18 norms and guidelines defined regarding API design and development DEPLOYMENT OF THE API GOVERNANCE FRAMEWORK ▪ 1 Confluence space built ▪ 5 learning sessions organized ▪ 2 tools built to assess the maturity of a team against the framework and assess the compliance of an API against the framework ▪ 6 teams supported to assess and improve their maturity, define action plans ▪ 1 API audited to assess its compliance ▪ 8 newsletters sent ▪ 1 feedback campaign conducted Our experience in supporting clients with API governance
20. Focus on API Performance Ensure the performance of your APIs 3
21. PwC France How to Master the Lifecycle of your APIs December 6th, 2023 21
22. December 6th, 2023 PwC France Cloud Transformation How to Master the Lifecycle of your APIs Restitution: - Result - Recommandation Preparation: - Scenario definition - Traduction into emulation code Execution: - Infrastructure deployment - Test run Python /api/clients Terra- form ACI Azure Storage Azure Key Vault Master Worker Worker Worker Worker /api/clients /api/clients /api/clients Locust web interface Azure monitor Business operational cases PwC Asset Hosting PwC ou client Client Business Team PwC Technical Team Example Deliverable: Architecture Performance test benchmark Context: stress-testing an API with simulated real-life scenario
23. December 6th, 2023 PwC France Cloud Transformation How to Master the Lifecycle of your APIs 95%P 1400 ms Med 800 ms Median response time in milliseconds for all request 95% of the request had less or equal to 1400ms as response time Req/s 1000 Requests / second Min 50 ms Minimum response time in milliseconds Establish a set of KPIs for benchmarking: • Requests per second • Max, med, min response time • Performance threshold Perform stress tests • Progressive # of requests • Variable endurance • Visualise & report findings Establish performance capacity for each supplier We established the performance characteristics of each supplier thus giving our client visibility into which supplier would deliver the level of service necessary to support the client’s business and growth. - Time savings - Cost savings - Peace of mind - Guarantees for required level of service Accelerator: Our API testbed Our client had a short time to market to deploy a new payment clearing system. Needing to choose between several vendors, the client needed to arrive quickly to a recommendation. They needed an independent, apples to apples comparison in order to determine which vendor would support their expected growth and allow them to capitalize quickly on this new revenue source Context Work done Benefits Ensure suppliers’ API performance
24. December 6th, 2023 PwC France Cloud Transformation How to Master the Lifecycle of your APIs *Graphics are not at same scale. Behavior are as expected fine. • Solution 1 platform can hold high number of requests by second • Solution 2 platform can also manage a large number of requests by second • Solution 3 performance is limited with the configuration of the delivered platform Solution 1 Solution 2 Solution 3 Performance test scenario is run for each solution. The results are presented graphically and a summary for the 3 solutions is presented in a table. Example Deliverable: Architecture Performance test benchmark Context: test the performance of 3 solutions to host APIs
25. Interested in learning more about API Trust? Contact us © 2023 PwC. All rights reserved. Not for further distribution without the permission of PwC. “PwC” refers to the network of member firms of PricewaterhouseCoopers International Limited (PwCIL), or, as the context requires, individual member firms of the PwC network. Each member firm is a separate legal entity and does not act as agent of PwCIL or any other member firm. PwCIL does not provide any services to clients. PwCIL is not responsible or liable for the acts or omissions of any of its member firms nor can it control the exercise of their professional judgment or bind them in any way. No member firm is responsible or liable for the acts or omissions of any other member firm nor can it control the exercise of another member firm’s professional judgment or bind another member firm or PwCIL in any way. Théotime Macrez Senior Associate PwC France, Cloud Transformation theotime.macrez@pwc.com Susan Vrona Béjina Senior Manager PwC France, Cloud Transformation susan.vrona.bejina@pwc.com Ivan Frain Director PwC France, Cloud Transformation ivan.frain@pwc.com Also check out our session focused on API Security on Friday! And visit our API Performance asset on the PwC Store!