You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

This tutorial explains step by step how to create all necessary elements of API Management to be able to manage a private API. Private APIs are APIs that are only accessible for known consumers (clients).

Follow Our Example User Story

ACME Corp. uses Scheer PAS API Management to provide customers with access to the ACME APIs. For example, ACME Corp. is running the test service RESTAPI_Echo_Example which implements a very basic REST service that is perfect for testing. Now David Stringer of ACME Corp. wants to enable the developers of customer Spring Corp. to use this service. So David is going to setup private API access to the service RESTAPI_Echo_Example.

You are going to help him with that task.

During this tutorial you will build up the following: Organization STRINGER containing the PrivateEchoAPI, which will be consumed by client Spring Corp. via plan Gold which contains the Rate Limiting Policy.


All content in a lighter font color refers to the story of the tutorial.

Please make sure that the name of the created elements such as organizations, APIs, clients etc. is unique. You can use your own name as pre- or suffix (PublicEchoAPI_David...).

During this tutorial you will learn

  • how to create an organization

  • how to create a plan

  • how to import the API of an xUML service from the PAS Administration to API Management

  • how to create a client

  • how to add a contract
  • how to apply policies to plans and APIs
  • how to restrict the visibility of an API
  • how to test API access in API Management
  • how to consume a private API via the API Developer Portal

A Short Introduction to API Management Concepts

The main elements of API Management are grouped within an Organization, which is the "container" for all other elements such as Clients, Plans and APIs. APIs represent real backend APIs (Application Programming Interfaces). API Management provides a way to turn unmanaged (raw) back-end APIs into managed APIs by attaching policies to them.

Every managed API can be published as public API or private API:

Public APIs...Private APIs...
  • ... reside in an organization.
  • ... can contain policy definitions.
  • ... are accessible to everyone.

  • ... reside in an organization.
  • ... can contain policy definitions.
  • ... can only consumed by a client via a contract and a plan.
  • Plans and clients can also contain policies.

  • Policies are rules or units of work applied when the API is accessed.

APIs are created within API Management. They are provided via the API Developer Portal from where consumers of the API have access to them.

 

For more information on the concepts of API Management, refer to The Concepts of API Management.

Prerequisites

MultiExcerpt named prerequisites_api_tutorials was not found -- Please check the page name and MultiExcerpt name used in the MultiExcerpt-Include macro


  • No labels