0:00
hello everyone welcome to another
0:02
hello everyone welcome to another
0:02
hello everyone welcome to another episode of the cloud show as you can see
0:05
episode of the cloud show as you can see
0:05
episode of the cloud show as you can see I am at conference I'm at Cloud Brew in
0:07
I am at conference I'm at Cloud Brew in
0:07
I am at conference I'm at Cloud Brew in Belgium a Community Conference which is
0:09
Belgium a Community Conference which is
0:09
Belgium a Community Conference which is amazing has really good speakers and
0:11
amazing has really good speakers and
0:11
amazing has really good speakers and everything and of course this is all to
0:14
everything and of course this is all to
0:14
everything and of course this is all to thank the sponsors of this event for
0:17
thank the sponsors of this event for
0:17
thank the sponsors of this event for example this company here sopr areia uh
0:20
example this company here sopr areia uh
0:20
example this company here sopr areia uh they are here as a sponsor and we really
0:22
they are here as a sponsor and we really
0:22
they are here as a sponsor and we really want to thank them for doing that
0:23
want to thank them for doing that
0:23
want to thank them for doing that supporting community events is important
0:26
supporting community events is important
0:26
supporting community events is important now I want to talk to the next star on
0:28
now I want to talk to the next star on
0:28
now I want to talk to the next star on the cloud show about
0:30
the cloud show about another interesting topic in this case
0:32
another interesting topic in this case
0:32
another interesting topic in this case it's going to be about API governance
0:35
it's going to be about API governance
0:35
it's going to be about API governance why do we do that and why is that a
0:37
why do we do that and why is that a
0:37
why do we do that and why is that a thing let's ask
0:39
thing let's ask [Music]
0:46
masimo hey masim how you doing I'm doing
0:49
masimo hey masim how you doing I'm doing
0:49
masimo hey masim how you doing I'm doing very good M new yeah it's it's good to
0:51
very good M new yeah it's it's good to
0:51
very good M new yeah it's it's good to be here with you standing here at the
0:53
be here with you standing here at the
0:53
be here with you standing here at the cloud uh Brew conference um you're
0:55
cloud uh Brew conference um you're
0:55
cloud uh Brew conference um you're enjoying the conference so far lovely
0:57
enjoying the conference so far lovely
0:57
enjoying the conference so far lovely conference lovely topics and Lely speak
1:00
conference lovely topics and Lely speak
1:00
conference lovely topics and Lely speak as well and great people absolutely yes
1:03
as well and great people absolutely yes
1:03
as well and great people absolutely yes and so you else also have a session here
1:05
and so you else also have a session here
1:05
and so you else also have a session here are you talking about apis and stuff in
1:07
are you talking about apis and stuff in
1:07
are you talking about apis and stuff in your session yes I did have a session
1:09
your session yes I did have a session
1:09
your session yes I did have a session today about API governance and Azure API
1:11
today about API governance and Azure API
1:11
today about API governance and Azure API Center as a tool to manage the overall
1:14
Center as a tool to manage the overall
1:14
Center as a tool to manage the overall life cycle full life cycle of API right
1:17
life cycle full life cycle of API right
1:17
life cycle full life cycle of API right and and so tell us first like like who
1:21
and and so tell us first like like who
1:21
and and so tell us first like like who are you what do you do like you do this
1:23
are you what do you do like you do this
1:23
are you what do you do like you do this I guess apis yeah so I'm ASA I'm working
1:26
I guess apis yeah so I'm ASA I'm working
1:26
I guess apis yeah so I'm ASA I'm working for a company called coded I'm a lead
1:29
for a company called coded I'm a lead
1:29
for a company called coded I'm a lead architect over there there and I let's
1:31
architect over there there and I let's
1:31
architect over there there and I let's say since um more than 10 years I'm
1:34
say since um more than 10 years I'm
1:34
say since um more than 10 years I'm working in the space of apis and in
1:36
working in the space of apis and in
1:36
working in the space of apis and in general API management the way we govern
1:39
general API management the way we govern
1:39
general API management the way we govern API the way we package API the way we
1:41
API the way we package API the way we
1:42
API the way we package API the way we expose it to our to the outside world
1:44
expose it to our to the outside world
1:44
expose it to our to the outside world okay brilliant and so specifically then
1:48
okay brilliant and so specifically then
1:48
okay brilliant and so specifically then we need to apparently govern our apis
1:51
we need to apparently govern our apis
1:51
we need to apparently govern our apis why are we governing our apis the thing
1:53
why are we governing our apis the thing
1:53
why are we governing our apis the thing is we should ask ourself what do we want
1:56
is we should ask ourself what do we want
1:56
is we should ask ourself what do we want to do with our API so which kind of De
1:59
to do with our API so which kind of De
1:59
to do with our API so which kind of De velop ER experience which which kind of
2:01
velop ER experience which which kind of
2:01
velop ER experience which which kind of customer experience we want to provide
2:04
customer experience we want to provide
2:04
customer experience we want to provide to our audience and it all boils down to
2:07
to our audience and it all boils down to
2:07
to our audience and it all boils down to Quality so if you want to deliver
2:09
Quality so if you want to deliver
2:09
Quality so if you want to deliver quality and excellent customer
2:11
quality and excellent customer
2:11
quality and excellent customer experience that's good no worries to our
2:13
experience that's good no worries to our
2:13
experience that's good no worries to our customers we need to keep under control
2:16
customers we need to keep under control
2:16
customers we need to keep under control governance which means for example the
2:19
governance which means for example the
2:19
governance which means for example the uniformity between apis so we want to if
2:23
uniformity between apis so we want to if
2:23
uniformity between apis so we want to if you are exposing three 4 10 20p we want
2:26
you are exposing three 4 10 20p we want
2:26
you are exposing three 4 10 20p we want they all look the same you should
2:27
they all look the same you should
2:27
they all look the same you should probably keep your microphone close to
2:29
probably keep your microphone close to
2:29
probably keep your microphone close to your listen to me is very good no wor
2:32
your listen to me is very good no wor
2:32
your listen to me is very good no wor man right so and um so I was saying we
2:35
man right so and um so I was saying we
2:35
man right so and um so I was saying we have to make them consistent we have to
2:37
have to make them consistent we have to
2:37
have to make them consistent we have to make sure that those apis they are
2:40
make sure that those apis they are
2:40
make sure that those apis they are assessed from a security point of view
2:42
assessed from a security point of view
2:42
assessed from a security point of view as well we have to make sure that there
2:44
as well we have to make sure that there
2:44
as well we have to make sure that there is that we can guarantee agility agility
2:46
is that we can guarantee agility agility
2:46
is that we can guarantee agility agility means we keep under control for example
2:50
means we keep under control for example
2:50
means we keep under control for example how we govern the breaking changes how
2:53
how we govern the breaking changes how
2:53
how we govern the breaking changes how do we govern the versioning and then for
2:56
do we govern the versioning and then for
2:56
do we govern the versioning and then for example compliancy we are in Europe
2:58
example compliancy we are in Europe
2:58
example compliancy we are in Europe Belgium the heart of Europe Europe you
3:00
Belgium the heart of Europe Europe you
3:00
Belgium the heart of Europe Europe you know gdpr you might important things
3:03
know gdpr you might important things
3:03
know gdpr you might important things gdpr an example of of compliance that
3:06
gdpr an example of of compliance that
3:06
gdpr an example of of compliance that you might have you have compliancy at
3:08
you might have you have compliancy at
3:08
you might have you have compliancy at Country level you might have also
3:10
Country level you might have also
3:10
Country level you might have also compliance in industry healthare or
3:12
compliance in industry healthare or
3:12
compliance in industry healthare or things like this so keeping all of these
3:14
things like this so keeping all of these
3:14
things like this so keeping all of these different dimensions different angles of
3:17
different dimensions different angles of
3:17
different dimensions different angles of apis in control that's all about of API
3:21
apis in control that's all about of API
3:21
apis in control that's all about of API governance okay that's the role of API
3:23
governance okay that's the role of API
3:23
governance okay that's the role of API governance okay so when you need to
3:27
governance okay so when you need to
3:27
governance okay so when you need to version something in your API and and
3:30
version something in your API and and
3:30
version something in your API and and then you have to like manage how that is
3:33
then you have to like manage how that is
3:33
then you have to like manage how that is rolled out and you have to be able to
3:35
rolled out and you have to be able to
3:35
rolled out and you have to be able to describe it it's a it's a when there is
3:38
describe it it's a it's a when there is
3:38
describe it it's a it's a when there is a governance word into into the in place
3:41
a governance word into into the in place
3:41
a governance word into into the in place it's all about a procedure so having
3:44
it's all about a procedure so having
3:44
it's all about a procedure so having bringing together people a process and
3:48
bringing together people a process and
3:48
bringing together people a process and the technology right so the technology
3:50
the technology right so the technology
3:50
the technology right so the technology is the the tool of the product if you
3:52
is the the tool of the product if you
3:52
is the the tool of the product if you want to model the process and bring
3:55
want to model the process and bring
3:55
want to model the process and bring together for example cross functional
3:58
together for example cross functional
3:58
together for example cross functional people the governance is not only
4:01
people the governance is not only
4:01
people the governance is not only delivering an API it's also about
4:04
delivering an API it's also about
4:04
delivering an API it's also about bringing these business people together
4:07
bringing these business people together
4:07
bringing these business people together in the same place with technical people
4:10
in the same place with technical people
4:10
in the same place with technical people and design from the a all to the
4:13
and design from the a all to the
4:13
and design from the a all to the everything was good and then people yeah
4:15
everything was good and then people yeah
4:15
everything was good and then people yeah people is people is one of the uh of the
4:19
people is people is one of the uh of the
4:19
people is people is one of the uh of the key elements in in the equation we
4:21
key elements in in the equation we
4:21
key elements in in the equation we cannot do anything about people that's
4:22
cannot do anything about people that's
4:22
cannot do anything about people that's true that's true we we love technology
4:24
true that's true we we love technology
4:24
true that's true we we love technology but but we need to support them to be
4:26
but but we need to support them to be
4:26
but but we need to support them to be able to uh to make the right calls
4:28
able to uh to make the right calls
4:28
able to uh to make the right calls exactly yeah yeah yeah all right so how
4:29
exactly yeah yeah yeah all right so how
4:29
exactly yeah yeah yeah all right so how do we break this down like what is the
4:31
do we break this down like what is the
4:31
do we break this down like what is the what are the elements of of governance
4:33
what are the elements of of governance
4:33
what are the elements of of governance that you want to yeah so uh for sure one
4:36
that you want to yeah so uh for sure one
4:36
that you want to yeah so uh for sure one very important things is discoverability
4:38
very important things is discoverability
4:38
very important things is discoverability right you cannot govern something or you
4:40
right you cannot govern something or you
4:40
right you cannot govern something or you cannot secure something that you don't
4:42
cannot secure something that you don't
4:42
cannot secure something that you don't know that exist of course you have to
4:44
know that exist of course you have to
4:44
know that exist of course you have to know where it is exactly so Discovery is
4:47
know where it is exactly so Discovery is
4:47
know where it is exactly so Discovery is extremely important in governance so you
4:49
extremely important in governance so you
4:49
extremely important in governance so you create an API catalog for example so you
4:52
create an API catalog for example so you
4:52
create an API catalog for example so you can keep under control every single
4:55
can keep under control every single
4:55
can keep under control every single stage of these assets from the the
4:59
stage of these assets from the the
4:59
stage of these assets from the the beginning design all the way to the
5:02
beginning design all the way to the
5:02
beginning design all the way to the production and also to the the sunset so
5:05
production and also to the the sunset so
5:05
production and also to the the sunset so you when something is not used anymore
5:07
you when something is not used anymore
5:07
you when something is not used anymore you want to retire you make it first in
5:08
you want to retire you make it first in
5:09
you want to retire you make it first in the first stage of Sunset and and all
5:10
the first stage of Sunset and and all
5:10
the first stage of Sunset and and all the way so all the modeling of the life
5:13
the way so all the modeling of the life
5:13
the way so all the modeling of the life cycle that's one thing so okay if you
5:15
cycle that's one thing so okay if you
5:16
cycle that's one thing so okay if you have a catalog you can discover and life
5:18
have a catalog you can discover and life
5:18
have a catalog you can discover and life cycle okay from discoverability to to
5:20
cycle okay from discoverability to to
5:20
cycle okay from discoverability to to all the way to Sunset right got it y
5:22
all the way to Sunset right got it y
5:22
all the way to Sunset right got it y That's one one of the things so the
5:24
That's one one of the things so the
5:24
That's one one of the things so the catalog then the second things is like
5:27
catalog then the second things is like
5:27
catalog then the second things is like once you have a catalog is like we
5:28
once you have a catalog is like we
5:28
once you have a catalog is like we talked before about the process how do
5:31
talked before about the process how do
5:31
talked before about the process how do you model the process and the process
5:33
you model the process and the process
5:33
you model the process and the process always change Company by company so you
5:36
always change Company by company so you
5:36
always change Company by company so you are in pharmaceutical for example you
5:38
are in pharmaceutical for example you
5:38
are in pharmaceutical for example you have some compliancy rules that you want
5:41
have some compliancy rules that you want
5:41
have some compliancy rules that you want to adhere to of course so you can design
5:44
to adhere to of course so you can design
5:44
to adhere to of course so you can design it's very important to design this uh
5:46
it's very important to design this uh
5:46
it's very important to design this uh process you can design it on paper you
5:49
process you can design it on paper you
5:49
process you can design it on paper you can use your tool and today for example
5:51
can use your tool and today for example
5:51
can use your tool and today for example we talk about Azure API center that is
5:53
we talk about Azure API center that is
5:53
we talk about Azure API center that is one tool to model that process got it so
5:56
one tool to model that process got it so
5:56
one tool to model that process got it so the catalog the process and the disc
5:59
the catalog the process and the disc
5:59
the catalog the process and the disc Discovery once you have the catalog so
6:01
Discovery once you have the catalog so
6:01
Discovery once you have the catalog so you know what are your assets once you
6:04
you know what are your assets once you
6:04
you know what are your assets once you have a process the second step and the
6:05
have a process the second step and the
6:05
have a process the second step and the third step is the Discovery simple all
6:08
third step is the Discovery simple all
6:08
third step is the Discovery simple all right okay so when uh somebody needs to
6:12
right okay so when uh somebody needs to
6:12
right okay so when uh somebody needs to uh become better at that because I'm I'm
6:14
uh become better at that because I'm I'm
6:14
uh become better at that because I'm I'm assuming that many just kind of publish
6:17
assuming that many just kind of publish
6:17
assuming that many just kind of publish their API and and then that basically
6:19
their API and and then that basically
6:19
their API and and then that basically that's it like it's just out there right
6:21
that's it like it's just out there right
6:21
that's it like it's just out there right yes um that that it boils down to the
6:24
yes um that that it boils down to the
6:24
yes um that that it boils down to the what is called API strategy first so if
6:27
what is called API strategy first so if
6:27
what is called API strategy first so if you look at API strategy you have or
6:29
you look at API strategy you have or
6:29
you look at API strategy you have or business model if you want four apis you
6:31
business model if you want four apis you
6:31
business model if you want four apis you have different approach the most used in
6:33
have different approach the most used in
6:33
have different approach the most used in the developer Community is the code
6:35
the developer Community is the code
6:35
the developer Community is the code first you just got your functional
6:37
first you just got your functional
6:37
first you just got your functional requirement just coding coding coding
6:40
requirement just coding coding coding
6:40
requirement just coding coding coding you WR you write your API and that it
6:42
you WR you write your API and that it
6:42
you WR you write your API and that it goes and publish here we go and that it
6:44
goes and publish here we go and that it
6:44
goes and publish here we go and that it works fine for small companies but it
6:46
works fine for small companies but it
6:46
works fine for small companies but it does not scale at the end of the day
6:48
does not scale at the end of the day
6:48
does not scale at the end of the day that does not provide the best
6:51
that does not provide the best
6:51
that does not provide the best experience to your consumers of course
6:54
experience to your consumers of course
6:54
experience to your consumers of course not that makes sense the the opposite of
6:56
not that makes sense the the opposite of
6:56
not that makes sense the the opposite of this is the design first where you bring
7:00
this is the design first where you bring
7:00
this is the design first where you bring together the people you bring together
7:02
together the people you bring together
7:02
together the people you bring together the rules and you design outside in I
7:04
the rules and you design outside in I
7:04
the rules and you design outside in I design not for myself but I design for
7:07
design not for myself but I design for
7:07
design not for myself but I design for you that you are my audience get the
7:08
you that you are my audience get the
7:08
you that you are my audience get the out of here move move
7:11
out of here move move
7:11
out of here move move move let's cut this man people are so
7:16
move let's cut this man people are so
7:16
move let's cut this man people are so what
7:18
what let's what we are saying design first
7:21
let's what we are saying design first
7:21
let's what we are saying design first yes design first uh
7:24
yes design first uh is design first you bring together all
7:27
is design first you bring together all
7:27
is design first you bring together all the people yes the opposite of the this
7:29
the people yes the opposite of the this
7:29
the people yes the opposite of the this is a design first where you bring
7:31
is a design first where you bring
7:31
is a design first where you bring together the people to design the
7:34
together the people to design the
7:34
together the people to design the outside in you keep yourself in the
7:36
outside in you keep yourself in the
7:36
outside in you keep yourself in the shoes of your consumer you define
7:38
shoes of your consumer you define
7:38
shoes of your consumer you define company rules and you make sure
7:42
company rules and you make sure
7:42
company rules and you make sure that you close the feedback loop as soon
7:45
that you close the feedback loop as soon
7:45
that you close the feedback loop as soon as possible you involve as much as
7:47
as possible you involve as much as
7:47
as possible you involve as much as possible people from different let's say
7:49
possible people from different let's say
7:49
possible people from different let's say not not department but this different
7:51
not not department but this different
7:51
not not department but this different functions to design the way that your
7:55
functions to design the way that your
7:55
functions to design the way that your product uh should be for your then you
7:58
product uh should be for your then you
7:58
product uh should be for your then you have to know everything up front
8:00
have to know everything up front
8:00
have to know everything up front it's a lot of it's a lot of one example
8:03
it's a lot of it's a lot of one example
8:03
it's a lot of it's a lot of one example is defining API dictionary so what it
8:07
is defining API dictionary so what it
8:07
is defining API dictionary so what it means very data contract designing so
8:10
means very data contract designing so
8:10
means very data contract designing so you could I could call I do 10 apis I
8:13
you could I could call I do 10 apis I
8:13
you could I could call I do 10 apis I could call a field one time zip code the
8:16
could call a field one time zip code the
8:16
could call a field one time zip code the other time zip but if I take the time
8:18
other time zip but if I take the time
8:18
other time zip but if I take the time and the investment to Define my
8:21
and the investment to Define my
8:21
and the investment to Define my dictionary my apis are consistent this
8:24
dictionary my apis are consistent this
8:24
dictionary my apis are consistent this is one simple example but ites the idea
8:27
is one simple example but ites the idea
8:27
is one simple example but ites the idea if there is an organization if there is
8:29
if there is an organization if there is
8:29
if there is an organization if there is the process in place if there are
8:31
the process in place if there are
8:31
the process in place if there are multiple controls static controls
8:34
multiple controls static controls
8:34
multiple controls static controls Dynamic controls sometimes also you need
8:36
Dynamic controls sometimes also you need
8:36
Dynamic controls sometimes also you need a manual controls so a person that say
8:39
a manual controls so a person that say
8:39
a manual controls so a person that say Okay I want to categorize this API as
8:43
Okay I want to categorize this API as
8:43
Okay I want to categorize this API as sensitive because there are personal
8:46
sensitive because there are personal
8:46
sensitive because there are personal information that are flying through the
8:48
information that are flying through the
8:48
information that are flying through the or will F fly through those API right
8:51
or will F fly through those API right
8:51
or will F fly through those API right again it's all to find data
8:54
again it's all to find data
8:54
again it's all to find data categorization rules standards
8:58
categorization rules standards
8:58
categorization rules standards compliancy because at the end every will
9:00
compliancy because at the end every will
9:00
compliancy because at the end every will be everything will be discoverable every
9:03
be everything will be discoverable every
9:03
be everything will be discoverable every everything will be unified and
9:06
everything will be unified and
9:06
everything will be unified and consistent and then we will be able to
9:08
consistent and then we will be able to
9:08
consistent and then we will be able to deliver a better customer experience
9:10
deliver a better customer experience
9:10
deliver a better customer experience that sounds about right so finally then
9:13
that sounds about right so finally then
9:13
that sounds about right so finally then uh for for for the record basically if a
9:16
uh for for for the record basically if a
9:16
uh for for for the record basically if a company wants to start doing this better
9:18
company wants to start doing this better
9:18
company wants to start doing this better you're talking about API Center how do
9:20
you're talking about API Center how do
9:20
you're talking about API Center how do you like get started if that's what you
9:22
you like get started if that's what you
9:22
you like get started if that's what you want to do yeah so API Center is a tool
9:27
want to do yeah so API Center is a tool
9:27
want to do yeah so API Center is a tool okay so you can to start with a tool is
9:29
okay so you can to start with a tool is
9:29
okay so you can to start with a tool is is is azure you go there you provision
9:32
is is azure you go there you provision
9:32
is is azure you go there you provision the tool and is ready to go but the
9:34
the tool and is ready to go but the
9:35
the tool and is ready to go but the first step is just to think what you
9:37
first step is just to think what you
9:38
first step is just to think what you need for procedure design a process so
9:41
need for procedure design a process so
9:41
need for procedure design a process so what are my requirements okay there are
9:44
what are my requirements okay there are
9:44
what are my requirements okay there are some very common classic things like
9:46
some very common classic things like
9:46
some very common classic things like dictionary API style guides how do I
9:49
dictionary API style guides how do I
9:50
dictionary API style guides how do I want if I want to use same ver or not
9:52
want if I want to use same ver or not
9:52
want if I want to use same ver or not how do I want to manage this kind of
9:54
how do I want to manage this kind of
9:54
how do I want to manage this kind of versioning if I have a strategy for
9:56
versioning if I have a strategy for
9:56
versioning if I have a strategy for breaking changes etc etc once you have
9:58
breaking changes etc etc once you have
9:58
breaking changes etc etc once you have your process and the people involved
10:00
your process and the people involved
10:00
your process and the people involved then you can use the tool to implement
10:03
then you can use the tool to implement
10:03
then you can use the tool to implement that process and to follow up so then
10:05
that process and to follow up so then
10:05
that process and to follow up so then you you are in control because you know
10:08
you you are in control because you know
10:08
you you are in control because you know what to do and you have the tool that
10:09
what to do and you have the tool that
10:09
what to do and you have the tool that facilitates you your your job okay
10:12
facilitates you your your job okay
10:12
facilitates you your your job okay perfect well that's uh I think is uh the
10:15
perfect well that's uh I think is uh the
10:15
perfect well that's uh I think is uh the perfect end to this episode of the cloud
10:17
perfect end to this episode of the cloud
10:17
perfect end to this episode of the cloud show I want to thank you mimu for being
10:18
show I want to thank you mimu for being
10:18
show I want to thank you mimu for being on the cloud show with me that's it's
10:20
on the cloud show with me that's it's
10:20
on the cloud show with me that's it's been good thank you very much thank you
10:22
been good thank you very much thank you
10:22
been good thank you very much thank you Magnus thank you everyone all right see
10:23
Magnus thank you everyone all right see
10:23
Magnus thank you everyone all right see you in next time on the cloud show
10:26
you in next time on the cloud show
10:26
you in next time on the cloud show [Music]