Product Brief

Apigee Edge
API Services
Manage, scale, secure, and build APIs and apps

Hex Hex
#FC4C02 #54585A
 Apigee Edge
API Services
Product Brief

Apigee Edge API Services White

Manage, scale, secure, and build APIs and Apps

Apigee Edge with API Services is designed to unite the

best of Internet and enterprise technologies to provide
rock-solid reliability, and enterprise-grade flexibility all in
the industry’s most complete and unified platform.

API Services provide the foundation that meets

digital business requirements by providing a modern
Fig. 1: Configurable policies securely transform existing back-ends to APIs
architecture that enables you to manage, scale, secure,
and build the APIs and Apps that deliver value in the
digital economy.
• Manage access to APIs via OAuth or other
API Management is an important component of API security schemes
Services but not sufficient to address all the infrastructure
• Protect your organization and customers against
requirements for digital services. API Services adds an XML specific threats and sensitive data exposure
API Backend as a Service (BaaS), vertically integrated
• Manage API versioning with a virtualization layer
security, and flexible API Programmability for a unified
that abstracts customers from your API
and complete foundation.
• Control and throttle API traffic using quotas or
create a “safety valve” using API rate-limiting
API Management

API Management enables the transformation of existing

backend services to APIs with over 30 policies designed for
configure rather than code deployment, which simplifies
customer self-service and reduces time-to-value.

• Transform from any API protocol to any other,

including SOAP, REST, JSON, XML binary,
or custom protocol

Apigee Edge API Services „„ 1

© CC BY-SA
 Apigee Edge
API Services
Product Brief

Apigee Edge API Services White

API BaaS • Datastore - Extend existing data systems with

the information needed by today’s modern,
The API Backend as a Service provides web and mobile
socially connected apps.
App developers with a cloud datastore and services
that simplify building Apps including user management, • Location - Capture geolocation data from users’
push notifications, and social networking and GPS-enabled devices and associate with places,
geolocation services. activities, events, people and devices

• BaaS - Use the built-in Backend as a Service to
enable new data services such as social graphs,
geo-location, and push notifications with a cloud
scale datastore
• User Management - Add and manage users
by providing the core services necessary for
secure registration and log in, including OAuth
2.0-compliant client authentication
• Social – Take advantage of the benefits of
increased social interaction with social graphs that
show user location, activity streams that enable
publishing of user actions, comments, activities,
and tweets
• Push notifications - Reach app users with
messages they care about with highly targeted
and effective events and notifications.

Datastore
Partner
Services
User Data
API Services

Pre-
Built Connections/
Social

Location
Inquiries
Existing
Backend
Push
Notifications

Fig. 2: Pre-built services streamline development of modern, socially aware Apps

Apigee Edge API Services „„ 2

© CC BY-SA
 Apigee Edge
API Services
Product Brief

Apigee Edge API Services White

Security

In the world of accelerated digitization, the IT mandate is

still to provide secure access to services while protecting
customers and the business from threats, back-end
overload, and service issues.

Edge provides a unified security infrastructure that ensures

optimized performance, reduced latency, and enterprise-
grade security. Edge security capabilities include:
Fig. 3: Configurable security policies

• Role-based access control (RBAC) -

Fine-grained policy management for authorization

• Authentication for users, developers,

and administrators

• Authentication for APIs via OAuth, SAML, and LDAP

• Threat protection against XML, JSON,

and DoS attacks

• Content-based routing, rate-limiting,

and protection against traffic spikes

• Performance optimization and throttling on

back-end connections

Apigee Edge API Services „„ 3

© CC BY-SA
 Apigee Edge
API Services
Product Brief

Apigee Edge API Services White

API Programmability
Social

API Services can be extended increasing flexibility and

Rate Limit OAuth

how they are used. Apigee enables developers a choice Native

Node.js
container
Mobile Threat JS/Java
Protection Callout

of options with support for JavaScript, Java, Python, and http/https

Fault
Handling
Service
Callout http/https Backend
• Load Service
Balancing

node.js. The rapid growth of node.js enables developers to Web XSL Cache
• Fall-over

address a number of custom requirements.

Developers can add to Node.js, Apigee API management

features, such as OAuth security and traffic management,
using Apigee configuration capabilities.
Management UI

Fig. 4: Node.js in the API Services environment

• Create custom logic and perform complex
transformations

• Build API and App backends and mediate and

Licensing and Deployment
orchestrate backend systems
API Services is available either as a cloud service
• Enrich apps with security, traffic management, and
subscription or for on-premises deployment.
protocol transformation logic using the 30+ existing
policies • An API Services subscription is included in all
Edge cloud configurations.
• Build “mash-ups” and composite services by
orchestration or aggregation of existing APIs and • For additional throughput performance an

web services API Services Pack provides additional API

Services infrastructure
• Rapidly mock up and prototype new APIs quickly
using a web framework like Express or an API • On-premises deployment is licensed on a 4 core

framework like Argo or 8 core basis API BaaS is sold separately

• In addition, these applications can take advantage

of the tens of thousands of third-party modules
that the Node.js community has already created,
making new capabilities available to Apigee users.

Apigee Edge API Services „„ 4

© CC BY-SA