Product Brief

Hex #FC4C02

Hex #54585A

Apigee Edge API ServicesManage, scale, secure, and build APIs and apps

© CC BY-SA

Apigee Edge API Services � 1

White

Apigee Edge API Services Product Brief

Apigee Edge API Services

Manage, scale, secure, and build APIs and Apps

Apigee Edge with API Services is designed to unite the

best of Internet and enterprise technologies to provide

rock-solid reliability, and enterprise-grade flexibility all in

the industry’s most complete and unified platform.

API Services provide the foundation that meets

digital business requirements by providing a modern

architecture that enables you to manage, scale, secure,

and build the APIs and Apps that deliver value in the

digital economy.

API Management is an important component of API

Services but not sufficient to address all the infrastructure

requirements for digital services. API Services adds an

API Backend as a Service (BaaS), vertically integrated

security, and flexible API Programmability for a unified

and complete foundation.

API Management

API Management enables the transformation of existing

backend services to APIs with over 30 policies designed for

configure rather than code deployment, which simplifies

customer self-service and reduces time-to-value.

• Transform from any API protocol to any other,

including SOAP, REST, JSON, XML binary,

or custom protocol

• Manage access to APIs via OAuth or other

security schemes

• Protect your organization and customers against

XML specific threats and sensitive data exposure

• Manage API versioning with a virtualization layer

that abstracts customers from your API

• Control and throttle API traffic using quotas or

create a “safety valve” using API rate-limiting

Fig. 1: Configurable policies securely transform existing back-ends to APIs

© CC BY-SA

Apigee Edge API Services � 2

Apigee Edge API ServicesWhite

Apigee Edge API Services Product Brief

AP

I S

erv

ices

Pre-Built

PartnerServices

ExistingBackend

Datastore

User Data

Connections/Social

LocationInquiries

Push Notifications

API BaaS

The API Backend as a Service provides web and mobile

App developers with a cloud datastore and services

that simplify building Apps including user management,

push notifications, and social networking and

geolocation services.

• BaaS - Use the built-in Backend as a Service to

enable new data services such as social graphs,

geo-location, and push notifications with a cloud

scale datastore

• User Management - Add and manage users

by providing the core services necessary for

secure registration and log in, including OAuth

2.0-compliant client authentication

• Datastore - Extend existing data systems with

the information needed by today’s modern,

socially connected apps.

• Location - Capture geolocation data from users’

GPS-enabled devices and associate with places,

activities, events, people and devices

• Social – Take advantage of the benefits of

increased social interaction with social graphs that

show user location, activity streams that enable

publishing of user actions, comments, activities,

and tweets

• Push notifications - Reach app users with

messages they care about with highly targeted

and effective events and notifications.

Fig. 2: Pre-built services streamline development of modern, socially aware Apps

© CC BY-SA

Apigee Edge API Services � 3

White

Apigee Edge API Services Product Brief

Apigee Edge API Services

Fig. 3: Configurable security policies

Security

In the world of accelerated digitization, the IT mandate is

still to provide secure access to services while protecting

customers and the business from threats, back-end

overload, and service issues.

Edge provides a unified security infrastructure that ensures

optimized performance, reduced latency, and enterprise-

grade security. Edge security capabilities include:

• Role-based access control (RBAC) -

Fine-grained policy management for authorization

• Authentication for users, developers,

and administrators

• Authentication for APIs via OAuth, SAML, and LDAP

• Threat protection against XML, JSON,

and DoS attacks

• Content-based routing, rate-limiting,

and protection against traffic spikes

• Performance optimization and throttling on

back-end connections

© CC BY-SA

Apigee Edge API Services � 4

Apigee Edge API ServicesWhite

Apigee Edge API Services Product Brief

http/httpshttp/https

Mobile

Web

Rate LimitNativeNode.js

container

• Load Balancing

• Fall-over

OAuth

ThreatProtection

JS/JavaCallout

FaultHandling

ServiceCallout

XSL Cache

Social

BackendService

Management UI

Fig. 4: Node.js in the API Services environment

API Programmability

API Services can be extended increasing flexibility and

how they are used. Apigee enables developers a choice

of options with support for JavaScript, Java, Python, and

node.js. The rapid growth of node.js enables developers to

address a number of custom requirements.

Developers can add to Node.js, Apigee API management

features, such as OAuth security and traffic management,

using Apigee configuration capabilities.

• Create custom logic and perform complex

transformations

• Build API and App backends and mediate and

orchestrate backend systems

• Enrich apps with security, traffic management, and

protocol transformation logic using the 30+ existing

policies

• Build “mash-ups” and composite services by

orchestration or aggregation of existing APIs and

web services

• Rapidly mock up and prototype new APIs quickly

using a web framework like Express or an API

framework like Argo

• In addition, these applications can take advantage

of the tens of thousands of third-party modules

that the Node.js community has already created,

making new capabilities available to Apigee users.

Licensing and Deployment

API Services is available either as a cloud service

subscription or for on-premises deployment.

• An API Services subscription is included in all

Edge cloud configurations.

• For additional throughput performance an

API Services Pack provides additional API

Services infrastructure

• On-premises deployment is licensed on a 4 core

or 8 core basis API BaaS is sold separately