Software Dedicated Cloud The Challenge Smartphones, mobility and the IoT are changing the way users consume digital information. They re changing the expectations and experience of customers interacting with government organisations. At the heart of these changes is the API. APIs have fast become the channel through which organisations can share data and information with new digital eco-systems. Mobile-enable your organisation, externalise your products and services as APIs. Accelerate time to market and reduce total cost of ownership by leveraging existing backend services and applications with API Management. The Solution Software combines SOA Software s market leading API Management solution with CSC managed cloud services and delivers a dedicated, competitively priced, fully featured cloud solution. It is an ideal solution to accelerate digital transformation by securely extending organisations reach across multiple channels mobile, cloud and Internet of Things. SOA Software enables governments to share data as APIs, connect and integrate applications, drive partner adoption, monetize their assets, and provide intelligent insights into their business and operations. Functionality. API management: Powered by SOA Software accelerates enterprise API deployment. It provides the most comprehensive API Management solution spanning security, transformation, analytics, integration services and developer community. The solution also supports popular platforms such as IBM (Datapower) and Microsoft. API Portal Community Manager Community Manager is an API Portal in which APIs, together with any user documentation and legal documentation, are published. Once published, API s can be searched, allowing consumers to discover and request access to APIs. - Publish APIs & Services - After you ve created your API, the developer web portal allows active engagement of developers - Social Interaction - Integrated forums for finding information, alerts, discussions, trouble tickets and workflow requests for all resources - Groups and Team Management - Allow developer and development managers to create teams of peers who can collaborate on their API consumption aspects of their App - API & App Visibility - Allow users to create public resources that they can promote and market, or private resources to support beta or development uses, or for sensitive business applications - API Documentation - Upload and manage various types of API documentation and associated table of contents
API Gateway The API Gateway streamlines management, deployment, development and operation of APIs, enhancing security and regulatory compliance through authentication, authorization and audit capabilities. It provides central definition and management of security, routing, reliability, mediation, auditing and other operational governance policies across multiple instances. The Gateway enables enterprises to standardize API and service delivery with high security, performance and availability. The API Gateway provides a vendor agnostic policy definition tool in which policies are configured (no coding required). The API Gateway enforces the policies defined at runtime. The policies can range from Authentication, Authorization, Mediation, Routing, and Throttling policies. Security and Threat Prevention - Comprehensive out-of-the-box policies, no development required Choose from a wide array of authentication schemes, standards and token types to ensure that only valid users and applications get access to your APIs - Comprehensive OAuth server - Use your existing enterprise security systems to create an OAuth authorization server so your users can manage access rights for their own data - Built-in PKI and key distribution model - Ensure the privacy of customer data with sophisticated encryption and signature capabilities - First and last mile security - Optional Delegates and Agents integrate with the Gateway to provide a complete end-to-end solution - Threat Prevention - Detect and prevent Denial of Service (DoS) attacks, malformed messages or excessive XML/JSON depth and breadth. Integration, Mediation and Transformation - Bi-directional protocol transformation - Convert existing SOAP or Plain-old-XML (POX) over MQ or JMS services into RESTful APIs with XML and/or JSON content - API & Message Routing - Route based on message content, headers, identity and other factors - Virtualization and Aggregation - Use virtualization to remove operations, aggregate multiple backend APIs or services, perform mediation, or composition without writing code. - Composition, Orchestration and Message Enrichment - Use the Webbased GUI to define reusable processes and sub-processes for API composition or message enrichment. Author reusable scripts using a variety of languages (e.g. JavaScript, Groovy, Jython, BeanShell) and embed them within processes
Analytics and Monitoring - Real-time system monitoring - Use the Web-based dashboards to get real-time visibility into service and API performance, dependencies, and alert status - Alert Management Powerful alert management, monitoring, and distribution. Leverage alerts within compositions to control message routing, enforce SLAs or perform other runtime activities - Reporting - Dashboards and out-ofthe-box reports provide visibility into the performance of APIs and services from different perspectives, including department, partner, application contract, API/service or operation Lifecycle Manager for APIs In order to win in today s fast paced digital world, organisations must maintain stability and reliability while depending on constantly changing internal and external (cloud and partner) environments that support their digital services. Lifecycle Manager for APIs enables enterprises to effectively collaborate between business, developers and IT operations, resulting in rapid development and deployment cycles while increasing reliability, stability and availability of their APIs and supporting assets. Ensure alignment of API programs with strategic business objectives and make sure that enterprises build the right services at the right time. Achieve quicker return on investment, making sure APIs are built to plan and built to priority. Understand dependencies between planned services and prioritize development appropriately, and build services based on current and planned needs according to a well thoughtout program. Deliver APIs and services that are connected to the organisation s broad set of existing software capabilities and aligned with the enterprise s architectural principles and policies. Provide visibility into what APIs, services and other software assets exist, how they re related to each other and how each fits into a company s business and technical landscape. Provide a context for understanding and assessing existing software assets and automate SDLC processes for new APIs and services.
Flexible Deployment. Off premises, the solution is deployed from the CSC Trusted Cloud. On premises, it is deployed in a private cloud operating environment, so you can gain scalability, efficiency and cost savings. Security. API management: Powered by SOA Software delivers a dedicated virtual application for each client. When delivered on premises, it is deployed behind your firewall using your security and compliance standards and processes. Off premises, the service is delivered from the CSC Trusted Cloud data centers, which are all Tier II or III access controlled, faulttolerant, SAS 70 Type II audited, and protected by CSC s holistic defense-in-depth security frame- work, which delivers the physical and logical security, access control, data integrity and transparency needed to address enterprise requirements. Reliability. API management: Powered by SOA Software provides API Management with end-to-end management backed by 99.9% or 99.95% availability SLAs. Automated service monitoring, failover and data backup are included for both on- and off-premises deployment options. WHAT S INCLUDED Software is a fully managed, high-function, fully integrated API Management solution. Software The solution includes API portal, API Gateway, API Analytics and Lifecycle Management for APIs in one solution ready to onboard and deploy APIs. Cloud Infrastructure CSC s Trusted Cloud is built on the VCE VblockTM platform, which combines leading technology from VMware, Cisco and
EMC, as well as CSC s multidimensional defense-in- depth security and transparency framework, developed over more than 50 years of outsourcing experience. Management Services This CSC Cloud API Management service includes onboarding and management (application management, service levels, backup, threat protection and ongoing 24x7 help desk services).