cleanFiles/bookmap_SAP_Integration_Suite_in_a_Nutshell_en-US_learning-sap-com_lsc-prod.zip (MMCP-DROPZONE) - 2024-08-27T13:32:13.000Z

Governing and Securing Your APIs with API Management

cleanFiles/bookmap_Positioning_Integration_Solutions_for_Part_en-US_learning-sap-com_lsc-prod.zip (MMCP-DROPZONE) - 2025-03-28T10:52:39.000Z

Modernizing Integration with SAP Integration Suite

SAP_MOOC_btp5_ 9_v4.mp4

Hello. My name is Chaim Bendelak, lead product manager at SAP. Welcome to this lesson. Today I will try to give you a quick overview of how you can use API management to govern your critical APIs. Well, unless you have been living under a rock, you know that APIs are the absolute foundation of today's digital world. Without APIs, There would be no internet, no cloud. APIs are the digital glue. They enable interoperability and data sharing between systems, clients, and servers. APIs are how you build a commercial ecosystem, create partnerships, and take advantage of your digital assets. But that is only the beginning. APIs are the enabler of a new wave of generative AI-based automation. If you want to participate in this AI Bonanza, you will need to invest even more in APIs. So I'm not telling you anything new. APIs are business critical. That is not the question. The question is, how do you manage those APIs? How do you protect your digital assets? How do you keep track of who is in using your APIs? And that is what we are trying to answer. The answer to all of these questions is API management. API management, a premium capability of SAP Integration Suite, provides you with the means to securely discover, manage, and govern how your interfaces get exposed and consumed. You have the role of an API administrator, and you have a bunch of APIs. Your first governance step is to discover. and collect all your APIs, and ensure that they are properly documented, versioned, supported, etc. Of course, you can also add the documentation or create and design new APIs using an API-first approach with the included API Designer tool. Once you have discovered and listed all your APIs, the next step is to protect and secure them uniformly. Security compliance is the core value of API management, with a range of ready-to -use policy templates using a large selection of policies for access control, authentication, authorization, IP-wide listing, traffic spike control, call quotas, API keys, and much more. Additionally, API management comes with a large variety of custom transforms, policies that can be applied to the headers of payloads, of incoming API calls on the way in or to the response on the way out. You can add unique firewall and schema validations, filter out personal data, or resolve expectation gaps between clients and servers. Graph, a new feature of API management, offers developers a GraphQL interface to an entire SAP landscape in the form of a single data graph. And if that is not enough, you can use other parts of the SAP integration suite to create arbitrarily complex integration scenarios. So how do you apply these policies? You create and deploy so -called proxies for your APIs. A proxy sits between the caller and your API, where it executes the security and transform policies. It hides the internal API and instead exposes a facade. A facade is basically a new URL with your domain name of choice and naming schema. The proxy forwards validated calls to the internal API and returns the response to the caller. Using proxies, all your APIs are protected and well-behaved. with a professional look and feel. As an API administrator, your final step is to decide which proxies to deploy and which APIs to expose. API management comes with a built -in developer hub and portal, a web application. API is published to the developer hub, become visible to developers and are also available in SAP Build, are development tools. So now your APIs are deployed, protected, and published, ready for use. Approved the developers, use the self-service portal to obtain the required credentials for accessing the APIs and to build web or mobile applications for business users. When those business users start to use the applications, API usage is incurred. Here is where you enjoy the analytical functions of API management, insights, using dashboards to much. monitor and track API usage, you will get notifications of unusual activities such as suspicious error rates or usage surges. You can assign a cost to each API and generate a monthly bill, perhaps for internal cross-charging. By analyzing usage patterns, you can gain invaluable insights into how your business runs. So what did we learn? APIs are business-critical assets and must be managed. API management is a premium and easy-to-use solution providing you with all the governance, security, and analytic features to ensure that your APIs are documented, safe, secure, and well-monitored. You can follow these links for more information. And, hereby, thank you, thank you for attention and good luck with API management.