TECHNOLOGY

With Microsoft Azure’s API management

API gateway

The spider in the API web

API management

Provision and configure

Azure services

Cloud for everyone

API gateway

The spider in the API web

All requests from client applications first reach the API gateway, which then forwards them to respective backend services. The API gateway acts as a facade to the backend services, allowing API providers to abstract API implementations and evolve backend architecture without impacting API consumers. The gateway enables consistent configuration of routing, security, throttling, caching, and observability. Specifically, the gateway acts as a facade to backend services by accepting API calls and routing them to appropriate back-ends. It verifies API keys and other credentials such as JWT tokens and certificates presented with requests. It enforces usage quotas and rate limits, and transforms requests and responses as specified in policy statements If configured, caches responses to improve response latency and minimize the load on backend services. Furthermore, the API gateway emits logs, metrics, and traces for monitoring, reporting, and troubleshooting.

API management

Provision and configure

API providers interact with the service through the management plane, which provides full access to the API Management service capabilities. Customers interact with the management plane through Azure tools including the Azure portal, Azure PowerShell, Azure CLI, a Visual Studio Code extension, or client SDKs in several popular programming languages. The management plane is used to provision and configure API Management service settings as well as to define or import API schemas from a wide range of sources, including OpenAPI specifications, Azure compute services, or WebSocket or GraphQL backends. It packages APIs into products, sets up policies like quotas or transformations on the APIs. It get insights from analytics and it manages users and API keys.

Azure services

Cloud for everyone

API management integrates with many complementary Azure services to create enterprise solutions, such as Azure Key Vault for secure safekeeping and management of client certificates and secrets, Azure Monitor for logging, reporting, and alerting, application Insights for live metrics, end-to-end tracing, and troubleshooting, Azure Active Directory for developer authentication and request authorization. Event Hubs for streaming events and several Azure compute offerings commonly used to build and host APIs on Azure, including Functions, Logic Apps, Web Apps, Service Fabric, and others.