API Marketplace Engineering: Design, Build, and Run a Platform for External Developers

Table of Contents
About the Author
About the Technical Reviewer
Acknowledgments
Introduction
Chapter 1: API Engineering
	APIs in Action
	What Makes APIs So Special?
	Connectedness, Sharing, and Survival
	An API Manifesto
	Speedboats and Aircraft Carriers
	Patterns of Integration
	Enterprise-wide Impact
	The Gravity of a New Digital Channel
	Developer Ecosystem
	Roles
	A Guide to This Book
Chapter 2: Regulation
	Background
		Screen Scraping
		Application Programming Interfaces (APIs)
	Open Banking
		Objectives
		Terminology
		Benefits
		Risks
		Prescriptive, Facilitated, or Market-Driven Approaches
		Open Banking Across the Globe
	From Open Banking to Open Finance
	Sample Applications
	Summary
Chapter 3: Consumption
	Marketplace APIs vs. Internal APIs
	Personas
	Business Value
		Attract
		Educate
		Build Trust
		Transparency
		Collaborate
		Lead
	Technical Developer Portal
		Attract
		Educate
		Build Trust
		Transparency
		Collaborate
		Lead
	Developer Advocacy
	Developer Support
	Ecosystem
	Developer Engagement
	Tooling
		cURL
		Postman API Client
		Fiddler
		Developer Education
	Summary
Chapter 4: Monetization
	The API Marketplace Flywheel
	Your Marketplace Identity
	Value and Revenue Strategies
		Developer Pays
		Developer Gets Paid
		Free
		Indirect
	Billing Engineering
	Analytics and Insight
		Data Collection
		Data Analysis
		Reporting
	The Notional Income Statement
	Pivot to New Business Models
	Summary
Chapter 5: Platform Architecture
	Elements
		API Gateway (External/Internal)
		Identity
		Container Platform (Managed/Unmanaged)
		Microservices
		Database
	Integration Strategy
		Google Remote Procedure Call (gRPC)
		The Power of Port-Forward
		Taxonomy
	Platform As a Service
	Platform Services
	Deployment Architecture
		Launch Configuration
		As-Is Configuration
		To-Be Configuration
	Summary
Chapter 6: Security
	Cross-Cutting Concern
	API Security
		Open APIs
		Business to Business (B2B)
		Business to Consumer (B2C)
	OAuth
		Actors and Scopes
		Application Registration
		Grant Types and Access Tokens
		Client Credentials
		Authorization Code
		Refresh Token
		Permission Revocation
		Variation: Open Banking
		Vulnerability
	OWASP
		Security Top 10
		Recommendations
	Security Review
	Summary
Chapter 7: API Design
	Design Strategy
		Top Down, Pre-defined
		Bottom Up
		Consumer-Driven
		Build Your Own
	Considerations
		Viability and Feasibility
		Requirements
		Documentation
		Governance
	Access Mechanisms
		SOAP
		REST
		GraphQL
	Patterns
		Synchronous
		Asynchronous
		The Proxy vs. Tap Debate
	Lifecycle
		Developer Experience
		Versioning
		End of Life
	Design Guidelines
		Error Handling
		Filtering and Pagination
		Software Development Kit (SDK)
	Summary
Chapter 8: API Development
	API First, Tech Second
	Team Structure
		Delivery Lead(s)
		Developers
		Quality Assurance
	Delivery Approach
		Defining the Strategy
		Planning
		Squads
		Agile Methodology
	DevOps
		Continuous Integration (CI)
		Continuous Delivery (CD)
		Microservices
	Application Development
		Development Guidance
		API Gateway
		Microservices
		Platform Services
		Portal Applications
	Summary
Chapter 9: Sandbox
	Purpose
	Process
	Sandbox Strategies
		beta
			Approach
			Use-Case
			Design Considerations
		Backend Simulation
			Approach
			Use-Case
			Design
		Shallow
			Approach
			Use-Case
			Design
		Semi-Live
			Approach
			Use-Case
			Design
		QA Live
			Approach
			Use-Case
			Design
		Third-Party Sandbox Access
	Building a Virtualiser
		Requirements
		Implementation Options
		Design Philosophy
		Sample Flow
	Summary
Chapter 10: API Operations
	The Operational Universe
	Change and Release Management
	DevOps Practice
	Logging
		The ELK Stack
	Monitoring
		Environment Monitoring
		Application Performance Monitoring
		Functional Monitoring
		Telemetry
		Alerting
	Support
		Roles
		Transition
		Communication Strategy
	Process
		Issue Tracking and Reporting
		Service-Level Agreements
	Supporting Systems
		Platform As a Service Strategy
		Backend Dependencies
	Summary
Chapter 11: Conclusion
	Team Dynamic
	Organizational Support
	Agility to Pivot
	Developer Centricity
	Where to Start
	Keep in Touch
Index