October 2022 Summaries

In modern enterprises, isolated teams often strive to align with leadership's objectives without creating friction, yet they face challenges in collaboration and communication, especially when confined by legacy processes or a waterfall software development model. To address these issues, API development teams are increasingly relying on machine-readable artifacts like OpenAPI, AsyncAPI, and JSON Schema, which help map out and manage the complex web of digital resources within an organization. These tools not only aid in documentation and code generation but also enhance team collaboration by providing a shared understanding of the API landscape. The API-first approach, exemplified by Amazon, emphasizes well-defined microservices and asynchronous communication, leveraging platforms like Slack and Teams to integrate machine-readable artifacts into workflows, thereby enabling faster, artifact-driven communication and leaving a historical record of changes. Empowering teams with autonomy and appropriate tools while ensuring operational visibility through common repositories and workspaces is essential to achieving greater accountability and fostering a two-way relationship between API producers and consumers, ultimately supporting enterprise scalability and success.

An API platform serves as a comprehensive tool for managing operations by defining resources in a modular and machine-readable manner, which facilitates consistent documentation, testing, and governance of APIs. This platform enhances API governance by indexing and making APIs easily searchable and accessible across private, partner, and public networks, allowing for greater visibility and integration with existing workspaces, repositories, and gateways. Automated governance is crucial, involving linting at design time and integration into the CI/CD pipeline to ensure consistent application of governance rules. The platform supports a feedback loop through integrations with tools like GitHub and Slack, enabling granular feedback on API artifacts and fostering collaboration across teams to address gaps in governance. Rather than imposing a top-down approach, successful API governance is positioned as enablement, evolving through continuous feedback and adaptation to meet organizational and team needs. Achieving effective API governance requires strategic investment at the platform level, tactical implementation within teams, and ongoing iteration informed by feedback to ensure comprehensive coverage and alignment with evolving API landscapes.

Pieter Humphrey's guest post explores the evolution and significance of web APIs in the cloud computing era, highlighting how technologies like gRPC are reshaping high-performance systems by offering faster alternatives to traditional REST APIs. As databases and applications transition to cloud environments, native database drivers face challenges in adapting to the cloud's demands, prompting the rise of solutions like Stargate, which modernizes Apache Cassandra to support various web APIs, including gRPC, GraphQL, and REST. The post discusses the importance of data serialization and the trade-offs between developer productivity and performance, emphasizing how gRPC's capabilities allow for efficient, low-latency communication in cloud-native applications. Apache Cassandra, with its leaderless architecture, is positioned as a robust solution for big data and cloud-scale applications, particularly as it integrates Stargate to enhance performance and support multiple data models. The post underscores the growing role of APIs as primary interaction points in digital business, driven by the proliferation of machine-generated data and the need for scalable, high-speed options in cloud-scale applications.

Effective technical onboarding is crucial for API producers to ensure new users can seamlessly integrate and utilize public APIs, which leads to faster time to value, higher conversion rates, and better retention. The text explores various strategies and examples for improving the developer onboarding experience, such as organizing resources effectively, addressing early blockers like authorization, showcasing advanced usage, enabling troubleshooting, and optimizing discovery. Additionally, it highlights the importance of feedback collection, measuring time to first call, and leveraging both internal and external search optimizations to enhance accessibility and usability. By prioritizing these aspects, API providers can better cater to both new and existing users, ultimately enhancing the overall developer experience and fostering greater adoption of their technologies.

In a recent Postman livestream, Lead Product Manager Strategist Deepa Goyal and a collaborator explored the Postman Public API Network, which functions as a vast public API hub akin to GitHub repositories, providing a platform for both API producers and consumers. The network enables API producers to create public workspaces, enhancing user onboarding and API discovery, while consumers can search and interact with APIs through categories and curated lists, fostering a community-driven environment. The Public API Network, boasting over 20 million users, aims to increase API adoption, reduce the time to the first call, and provide ready-to-use code and documentation, ultimately easing the learning curve for API users. The livestream highlighted topics such as the differences between public and private networks, creating public workspaces, and best practices for API documentation, with insights drawn from PayPal's Public Collection.

APIs are integral to modern applications across various industries, making API literacy a valuable skill for those pursuing software-oriented careers. Postman's Student Expert Program offers free training and certification to enhance API proficiency, emphasizing the importance of APIs beyond traditional developer roles. The program is informed by Postman's 2022 State of the API report, which highlights trends such as the widespread use of APIs across industries, the continued demand for API-savvy employees despite economic uncertainties, and the prevalence of Postman as an industry-standard tool, used by a significant majority of developers and Fortune 500 companies. The self-paced program includes a hands-on curriculum and courses that cover API basics, the API-first methodology, and Postman tools, culminating in a certification that can be showcased on professional platforms. Participants gain access to exclusive events, community support, and opportunities for leadership and advocacy.

In a recent episode of Breaking Changes, Ellis Smith from the American Cannabis Company discussed the integral role of technology in the evolving cannabis industry, highlighting how APIs are facilitating growth and innovation. Despite cannabis being illegal in more than half of the U.S. states, the industry is rapidly transforming through high-tech agriculture, manufacturing, and regulatory compliance. APIs are crucial for managing supply chains, driving fintech innovations, and enabling cannabis businesses to operate like mainstream industries despite federal restrictions. As fintech platforms like Abaca and Dama Financial address banking challenges, API-driven technologies are helping smaller operations remain competitive against larger entities by enhancing automation, quality, and regulatory adherence. This transformation mirrors the technological evolution seen across various sectors, underscoring the importance of productivity, quality, and governance. The episode invites listeners to explore further insights into this burgeoning sector via the Breaking Changes podcast available on multiple platforms.

Postman has enhanced its free Student Programs to further advance API literacy, with thousands of students and educators participating in various educational tracks like the Student Expert, Student Leader, and Classroom Programs. These programs aim to equip participants with essential API skills crucial for modern software development, as APIs are foundational in the tech industry, utilized by over 20 million developers and 98% of Fortune 500 companies. The updated programs offer new content and features to make API training more accessible globally, including the restructured Postman Student Expert training, now divided into "Intro to APIs and Postman" and "API Fundamentals Student Expert Certification," which awards digital badges upon completion. Educators can monitor student progress through customized links and dashboards, enhancing curriculum integration, while bi-weekly livestreams and community platforms like Discord provide ongoing support and showcase student achievements. Future expansions include building a collaborative platform for students and educators, alongside new certifications and events, all supporting Postman's mission to foster API literacy at no cost.

Postman has announced a strategic partnership with Microsoft Azure, joining the Postman Ecosystem Partner Program to enhance API lifecycle support for its over 20 million users. This integration allows users of both Postman and Azure API Management to create and test APIs within Postman, then seamlessly deploy them to Azure, thereby improving the API onboarding experience for consumers. The collaboration introduces functionalities such as importing OpenAPI definitions from Azure API Management into Postman, exporting them to Azure with support for versions, revisions, and environment variables, and allowing Azure API Management to export APIs into Postman using the "Run in Postman" feature.

APIs are vital components of modern applications, enabling connections with internal and third-party services; therefore, adhering to software development lifecycle best practices, such as "shifting left" with CI/CD pipelines, is essential for developing quality APIs. Implementing these practices helps reduce overhead, meet customer needs, and mitigate security risks by catching issues early in the development process. Spectral rules play a significant role in ensuring API specifications are secure, well-formed, and compliant, offering a mature strategy when integrated consistently throughout the CI/CD pipeline. The concept of "shifting left" involves moving processes to earlier stages of development, allowing for defects to be identified and resolved when costs are lower, which is particularly crucial for APIs often produced and consumed by different teams or companies. Six essential Spectral rules for improving API quality, security, and compliance include enforcing HTTPS, COE-enforced API governance, Info license, avoiding empty paths, enforcing authentication types, and providing example responses. These rules help prevent potential security breaches, ensure proper licensing and governance, and facilitate better communication between API producers and consumers, ultimately protecting the organization's brand and revenue.

API governance involves establishing policies to standardize the design, building, and deployment of APIs within an organization, an endeavor that is particularly challenging at an enterprise scale. To develop an effective strategy, it is crucial to start small, taking inventory of existing teams, APIs, and artifacts, and then build incrementally. Mapping the successful practices of teams through blueprints and fostering open conversations with both business and technical stakeholders can lead to meaningful operational improvements. Emphasizing discovery and observability ensures that API operations are transparent and manageable, while versioning the governance strategy allows for adaptation to technological changes. These steps, when approached methodically, promote collaboration and streamline API workflows, ultimately benefiting both the organization and its customers in a competitive landscape.

As API development becomes increasingly virtual, enhancing developer productivity is crucial for engineering leaders, who should adopt a holistic approach as suggested by the 2021 Microsoft and GitHub paper "The SPACE of Developer Productivity." This framework emphasizes multiple dimensions beyond traditional metrics like lines of code, focusing on satisfaction, performance, activity, communication, collaboration, efficacy, and flow. The 2022 State of the API report highlights the effectiveness of API-first practices, particularly in a remote work environment, and recommends tools like Postman to facilitate productivity. With over 20 million users, Postman is highly rated for API management and design, offering features that enhance developer satisfaction and performance by providing necessary tools and resources. It allows for efficient performance evaluation, quality assurance, and collaboration through features like automation testing and workspaces. Additionally, Postman supports smooth integration with other systems, acting as a central hub for API development and helping teams minimize disruptions, thereby maintaining flow and efficacy. While no single metric can fully capture productivity, Postman provides comprehensive insights into various productivity aspects across the API lifecycle.