apidays Helsinki & North 2023 - Automation of APIs in a Highly Compliant Ecosystem, Santiago Gomez Saez, Volkswagen Financial Services AG

apidays Helsinki & North 2023
API Ecosystems - Connecting Physical and Digital
June 5 & 6, 2023

Automation of APIs in a Highly Compliant Ecosystem
Santiago Gomez Saez, Cloud Architect & API Platform Owner at Volkswagen Financial Services AG

------

Check out our conferences at https://www.apidays.global/

Do you want to sponsor or talk at one of our conferences?
https://apidays.typeform.com/to/ILJeAaV8

Learn more on APIscene, the global media made by the community for the community:
https://www.apiscene.io

Explore the API ecosystem with the API Landscape:
https://apilandscape.apiscene.io/

Transcript

1. Santiago Gómez Sáez Volkswagen Financial Services AG Automation in APIs in a Highly Compliant Ecosystem
3. 2 BRANDS DEALERS CUSTOMERS CUSTOMER CAR DATA VWFS API Days | Santiago Gómez Sáez | 6 June 2023
4. 3 29 markets 10+ products 1.5M+ contracts 180+ applications 2.5M CONTRACTS UNTIL 2025 5 Brands API Days | Santiago Gómez Sáez | 6 June 2023
5. 4 Frontends APIs Data API Days | Santiago Gómez Sáez | 6 June 2023
6. Pillars • API Platform-as-a-Service atop of AWS • Standardise & Automate API Life-Cycle • Tool chain supporting the API Life-Cycle • Our customers are API Engineering Teams in VWFS
7. 6 API Gateway On-prem API Portal Platform APIs … 140+ APIs 100+ AWS Accounts 6 AWS Regions 4 Stages 500M+ API reqs API Days | Santiago Gómez Sáez | 6 June 2023
8. 8 Design Generate Implement Deploy Publish Monitor API Compliance Check API Days | Santiago Gómez Sáez | 6 June 2023
9. 9 Design Generate Implement Deploy Publish Monitor API Compliance Check API Days | Santiago Gómez Sáez | 6 June 2023
10. 10 API Days | Santiago Gómez Sáez | 6 June 2023
11. 11 API Days | Santiago Gómez Sáez | 6 June 2023
12. Digital, Direct & Mobility | Accelerating Development & Enabling Collaboration of APIs | 2023
13. 13 Design Generate Implement Deploy Publish Monitor API Compliance Check API Days | Santiago Gómez Sáez | 6 June 2023
14. Digital, Direct & Mobility | Accelerating Development & Enabling Collaboration of APIs | 2023
15. Digital, Direct & Mobility | Accelerating Development & Enabling Collaboration of APIs | 2023
16. API Days | Santiago Gómez Sáez | 6 June 2023
17. API Days | Santiago Gómez Sáez | 6 June 2023
18. Microservice Generation • Project structure • Documentation templates: Tech Docs, Service Docs, Risklog, Changelog • API Tests • Server skeleton • Typed Models • Standard API endpoints • Performance tests skeleton
19. 19 Design Generate Implement Deploy Publish Monitor API Days | Santiago Gómez Sáez | 6 June 2023 API Compliance Check
20. API Days | Santiago Gómez Sáez | 6 June 2023
21. 21 Design Generate Implement Deploy Publish Monitor API Days | Santiago Gómez Sáez | 6 June 2023 API Compliance Check
22. API Days | Santiago Gómez Sáez | 6 June 2023
23. 23 API Gateway API Portal Platform APIs API Days | Santiago Gómez Sáez | 6 June 2023
24. 24 • Encryption at Rest • Encryption in Transit • Backup policy • Tagging strategy • IAM roles • Security Groups • Load Balancing • … API Days | Santiago Gómez Sáez | 6 June 2023
25. API Days | Santiago Gómez Sáez | 6 June 2023
26. 26 Design Generate Implement Deploy Publish Monitor API Days | Santiago Gómez Sáez | 6 June 2023 API Compliance Check
27. 27 API Days | Santiago Gómez Sáez | 6 June 2023
28. 28 API Days | Santiago Gómez Sáez | 6 June 2023
29. 29 API Days | Santiago Gómez Sáez | 6 June 2023
30. 30 Design Generate Implement Deploy Publish Monitor API Days | Santiago Gómez Sáez | 6 June 2023 API Compliance Check
31. API Days | Santiago Gómez Sáez | 6 June 2023
32. 1. API documentation update: service docs, tech docs, changelog, architecture 2. Hard-coded secrets in source code 3. Git branch naming convention 4. Unit test coverage 5. OpenAPI Linting 6. Web security tests 7. Logs obfuscation library usage for production
33. Takeaways
34. • Provide core API platform components- as-a-service • Generate template servers with standard artifacts • Automate API life-cycle steps focusing on compliance as code • Embed monitoring creation in the CI/CD process • Abstract from API engineer infrastructure configuration
35. • Expand runtime environment with AWS Lambda • API Feedback • Low-Code generation of APIs
36. Thank you! Santiago Gómez Sáez VWFS – Digital, Direct & Mobility @Berlin Santiago.Gomez@digitalunit.berlin https://www.linkedin.com/in/sgomezsaez/