<span>Help us improve by sharing feedback about your learning experience.</span>

You've completed

cleanFiles/bookmap_SAP_Integration_Suite_in_a_Nutshell_en-US_learning-sap-com_lsc-prod.zip (MMCP-DROPZONE) - 2024-08-27T13:32:13.000Z

Governing and Securing Your APIs with API Management

Modernizing Integration with SAP Integration Suite

SAP_MOOC_btp5_Lesson_9_APIM_Video.mp4

Hello, my name is Chaim Bendelac, lead product manager at SAP. Welcome to this lesson. Today I will try to give you a quick overview of how you can use API management to govern your critical APIs. Well, unless you have been living under a rock, you know that APIs are the absolute foundation of today's digital world. Without APIs, there would be no internet, no cloud. APIs are the digital glue. They enable interoperability and data sharing between systems, clients, and servers. APIs are how you build a commercial ecosystem, create partnerships, and take advantage of your digital assets. But that is only the beginning. APIs are the enabler of a new wave of generative AI-based automation. If you want to participate in this AI bonanza, you will need to invest even more in APIs. So I'm not telling you anything new. APIs are business critical. That is not the question. The question is, how do you manage those APIs? How do you protect your digital assets? How do you keep track of who is using your APIs? And that is what we are trying to answer. The answer to all of these questions is API management. API management, a premium capability of SAP Integration Suite, provides you with the means to securely discover, manage, and govern how your interfaces get exposed and consumed. You have the role of an API administrator, and you have a bunch of APIs. Your first governance step is to discover and collect all your APIs and ensure that they are properly documented, versioned, supported, et cetera. Of course, you can also add the documentation or create and design new APIs using an API first approach with the included API designer tool. Once you have discovered and listed all your APIs, the next step is to protect and secure them uniformly. Security compliance is the core value of API management with a range of ready to use policy templates using a large selection of policies for access control, authentication, authorization, IP whitelisting, traffic spike control, call quotas, API keys,  and much more. Additionally, API management comes with a large variety of custom transforms, policies that can be applied to the headers of payloads, of incoming API calls on the way in or to the response on the way out. You can add unique firewall and schema validations, filter out personal data, or resolve expectation gaps between clients and servers. Graph, a new feature of API management, offers developers a GraphQL interface to an entire SAP landscape in the form of a single data graph. And if that is not enough, you can use other parts of the SAP Integration Suite to create arbitrarily complex integration scenarios. So how do you apply these policies? You create and deploy so-called proxies for your APIs. A proxy sits between the caller and your API where it executes the security and transform policies. It hides the internal API and instead exposes a facade. A facade is basically a new URL with your domain name of choice and naming schema. The proxy forwards validated calls to the internal API and returns the response to the caller. Using proxies, all your APIs are protected and well-behaved with a professional look and feel. As an API administrator, your final step is to decide which proxies to deploy and which APIs to expose. API management comes with a built-in developer hub and portal, a web application. APIs published to the developer hub become visible to developers and are also available in SAP Build, our development tools. So now your APIs are deployed, protected, and published, ready for use. Approved developers use the self-service portal to obtain the required credentials for accessing the APIs and to build web or mobile applications for business users. When those business users start to use the applications, API usage is incurred. Here is where you enjoy the analytical functions of API management. Insights using dashboards to monitor and track API usage, you will get notifications of unusual activities such as suspicious error rates or usage surges. You can assign a cost to each API and generate a monthly bill, perhaps for internal cross charging. By analyzing usage patterns, you can gain invaluable insights into how your business runs. So what did we learn? APIs are business critical assets and must be managed. API management is a premium and easy-to-use solution providing you with all the governance, security, and analytic features to ensure that your APIs are documented, safe, secure, and well monitored. You can follow these links for more information. And hereby, thank you, thank you for your attention, and good luck with API management.

Share feedback

Follow guided learning and develop the skills you need at your own pace

Join a moderated learning group to engage with our experts and peers

Find the right learning resources to drive your career as a developer

Sign up to access exclusive student learning journeys

Discover the SAP product knowledge you need to help you progress in your career

Develop your skills

Learn.png

Want to learn more about the value of learning with SAP?

View available SAP Certifications on SAP Learning 

Purchase a subscription and book your exam

Validate your SAP expertise

SAP Certification validates your skills, sets you apart from the crowd, and demonstrates you have the knowledge you need to succeed.

Certify.png

Accelerate your career 

Upskill in key innovation topics through openSAP's free, expert-led online courses, microlearning, and podcasts.

Join SAP Community and connect with a global network of experts and peers to ask and answer questions.

Search for SAP product documentation or browse all SAP Learning Journeys to become competent in the SAP solutions you need.

Log in to SAP Learning Hub and access the entire SAP Learning portfolio, live practice systems, and social learning opportunities.

Find free tutorials, trials, downloads, and technical product information in the SAP Developer Center.

Book live classes (online and in person) and purchase SAP Certification and SAP Learning Hub subscriptions.