►
Description
Write Once, Earn Anywhere – Monetizing Enterprise APIs with Cloud Foundry - Robert Land & Elijah Martinez, SAP
Microservices are frequently touted as “SOA done right”. Cloud Foundry and microservice architectures are ideally suited for one another, with Cloud Foundry handling underlying issues such as scaling, failover, load balancing, etc. When coupled with a strong API layer, true continuous software delivery becomes a reality for developers. This architecture is ideal for applying API management which provides usage monitoring, service discovery and monetization. Additionally businesses and application developers increasingly rely on external APIs for quick and efficient enhancement of their core data and business processes, whether on premise or in the cloud.
SAP as a world leader in business data, touching over $16 Trillion of consumer purchases globally, has committed to moving its business into the cloud, supporting API development and choosing Cloud Foundry as its strategic architecture for its Cloud Platform. Come discover how you can leverage this new paradigm of data openness to tap into Enterprise APIs, and how API Management enables developers to quickly and easily monetize software built on these APIs.
Robert Land
SAP Labs, LLC.
Product Manager, SAP Cloud Platform, Demo Creation
Robert is a Product Manager for SAP Cloud Platform Demo Creation, where he creates proof-of-concept software applications. Robert has a software engineering background in medical robotics and networks, including more than a decade at Cisco Systems. Robert has been a frequent presenter during Hack-a-thons, Corporate conferences and industry events.
A
Okay
see
the
red
light,
so
here
we
go.
This
is
Elijah
Martinez,
I'm,
Bob
Lee,
and
we
work
for
sa
P
in
our
areas.
Si
P
cloud
platform
which
we'll
talk
a
little
about
we're,
gonna,
be
discussing
monetizing,
micro-services
and
ap
is
and
cloud
foundry
in
some
order.
So,
first
of
all,
a
few
words
about
what
s
ap
cloud
platform
is
s.
Ap
has
a
lot
of
stuff
that
enterprises
use
the
SI
p
Hana
database.
As
for
Hana
software,
the
their
applications,
like
concur
Arriba.
A
Typically,
all
these
things
out
of
the
box
meet
a
lot
of
the
needs
of
an
enterprise,
but
they
need
extra.
They
need
extra
functionality,
and
rather
than
do
that,
one
at
a
time
when
Enterprise
at
a
time
si
B
has
put
together
a
platform
as
a
service
which
includes
collaboration,
integration,
Internet
of
Things,
machine
learning
and,
as
you
see,
Cloud
Foundry.
These
are
the
things
the
building
blocks
that
are
used
for
customizing.
A
So,
first
of
all,
that
explanation
doesn't
satisfy
a
daughter
she's
in
sixth
grade.
So
this
is
what
I
tell
her
SP
cloud
platform
is
like
a
big
minecraft
inventory
of
really
cool
things,
and
they
let
IT
organizations
create
really
great
enterprise
software
while
they
are
scrambling
in
survival
mode,
and
so
you
can
think
of
the
Securities
like
diamond
armor,
and
then
the
web
IDE
is
like
a
crafting
table
and
HTML
and
java
swords.
Your
picks.
We
have
no
js'
and
so
on.
You
can
imagine
who
are
the
skeletons
firing
arrows
and
the
the
cave
spiders.
A
So
next
slide
here.
So
really,
this
is
what
we
see.
We
can
use
Cloud
Foundry
for
scaling.
We
can
use
it
for
failover,
we
use
for
load
balancing,
and
this
makes
so,
which
used
to
be
a
challenge
a
lot
easier.
If
you're
trying
to
get
a
job
done
at
the
same
time
have
reusable
code,
you
have
a
lot
of
problems.
The
code
is
not.
A
A
Please
so
API
management
is
very
important
for
this.
This
is
mining.
You
know
the
Minecraft
thing,
a
valuable
focused
functionality
from
on-premise
software,
and
so
we
consume
those
api's
with
cloud
native
software
and
there's
no
required
refactoring
reclad
for
me
or
any
changes
in
the
back-end
code.
So
next
and
if
the
security
remains
the
same,
so
we're
going
to
see
a
story
about
how
this
happens
in
one
organization.
So
let's
go
next,
so
there's
the
story
and
next
and
it's
about
a
closeout
sale.
A
So
these
cartoons
are
actually
a
product
called
scenes
that
s
AP
uses
for
user
centered
design.
It
allows
us
to
look
at
scenarios
based
on
the
individual
circuit
of
using
this
software
and
ask
ourselves
how
they
cope
today.
How
will
they
cope
with
our
software
development
and
we
can
focus
on
optimizing
functionalities
here?
We've
got
a
warehouse
manager,
Leo
and
IT
manager,
Walt
and
installation
tech.
So
a
next
so
Zoey
Leo
are
setting
up
for
a
week
of
installing
hardware
with
customers
and
suddenly
look
at
route
map.
A
Zoe
sees
that
her
phone
gets
a
device
used.
Appricate
it
and
Leo
gets
the
same
thing.
I,
don't
know
if
any
of
you
have
ever
had
that
I've
actually
had
that
happen
to
me
and
I
won't
say
the
brand
of
device,
but,
as
a
result,
I
had
to
go
through
some
talks
with
IT,
so
next
and,
of
course,
an
IT.
What
you
get
is
a
train
of
messages
from
lots
and
lots
of
people
with
problems.
Now
Walt
is
thinking
about
this
logically
says
all
these
people
bought
their
devices
online
from
the
company
store.
A
They
should
be
able
to
go
online
and
exchange
those
devices
problem.
Is
the
store
isn't
built
to
do
that
and
touching
that
kind
of
monolithic
app
can
be
dangerous.
If
you
don't
break
it,
you
may
take
its
designer
direction
that
you
later
regret,
and
so
what
he
really
wants
is
just
to
be
able
to
layer
something
on
top
of
what
already
exists
next
slide.
So
this
I'll
just
say
this:
is
the
company
store
app?
You
can
have
this,
your
very
self.
We
have
these.
A
You
can
get
a
trial
account
in
SA,
P
cloud
platform
for
free,
just
registering
online
and
among
the
sample.
Apps
is
in
fact
a
webshop
like
this.
Next
so-
and
here
there's
the
the
phone
that
we're
saying
is
is
going
to
be
recalled,
so
what
he
wants
to
do
is
for
the
employee,
who
owns
one
of
those
to
see
a
pop-up
that
says
this
is
deprecated
exchange
it
and
run.
Do
the
right
thing
so
and
then
just
send
an
email
saying
this
has
all
been
handled.
So
let's
say
he
does
that.
A
How
did
he
do
that?
Okay
now
so?
Well,
he
a
little
too
fast,
okay.
So
instead
of
disappearing
the
phone
from
the
list,
because
it's
deprecated
next,
he
wants
to
insert
API
management
in
between
the
api's
that
were
exposed
in
the
backend
and
that
were
consumed
in
the
client
on
the
web
and
the
API
management
layer
makes
these
changes
and
layers
them
on
top
of
the
interface
already
existed.
So
let's
see
how
he
does
that
next.
Okay!
So
that's
what
he
wants.
A
He
wants
to
come
up
sewing
deprecated,
a
single
button
that
says
exchange
and
then
the
JavaScript
does
the
rest
on.
So
the
steps
number
one
use
this
sa
P
cloud
platform.
Api
management
create
API
proxies
for
the
OData
services
and
then
protect
them
with
keys
and
policies.
Then
something
else
and
eventually
you
hope
to
make
money
next,
so
it
goes
to
API
management.
A
This
is
us
one
of
the
many
services
we
saw
for
a
CP
cloud
platform
and
it
has
two
flavors
there's
a
portal
for
people
who
are
building
api's
and
another
portal
for
people
who
are
consuming
api's
in
applications.
So
first
we
have
to
build
the
API.
So
here
he
sees
statistics
on
what
api's
has
been
have
been
built
already
in
the
system
and
how
much
they're
being
used
and
who
the
big
users
are
now.
A
What
he
can
do
now
is
go
to
the
company
store,
browse
it
in
chrome,
and
so
we
all
do
just
click
on
developer
tools,
and
now
he
can
look
and
find.
Where
is
that
thing
getting
its
back-end
data
about
these
devices
copies?
The
URL
now
goes
back
to
the
home
page
and
says:
create
api
pastes.
The
URL
and
now
creates
a
base
path
in
the
api.
A
A
Does
he
really
he
can
copy
that
next
and
paste
it
into
Chrome,
and
he
sees
the
back-end
data
and
that's
bad,
so
what
he
realizes
is.
Maybe
that
was
a
little
too
fast
and
he
goes
on
to
add
security,
so
you
go
to
policies
now
goes
to
policies
and
he
can
now
add
as
many
policies
as
he
wants
on
the
request
and
response
paths
of
that
API.
A
good
one
to
add
at
this
point
is
check
for
an
API
key
and
see
you
have
a
good
API
key.
So
he
puts
that
in
right
away.
A
Now,
let's
see
what
happens?
Okay,
you
can
no
longer
get
to
your
precious
back-end
data
from
Chrome,
because
it's
looking
for
a
valid
API
key
now
few
steps
api's
back
a
little
okay
thanks,
okay,
okay
yeah,
you
have
to
create
a
product,
so
he's
clicking
on
product.
A
product
is
a
way
a
logical
collection
of
API
is
that
go
together
for
developers
might
be
as
little
as
one
API,
but
typically
there
may
be
several
ones.
A
For
example,
a
security
product
might
have
several
kinds
of
protection
for
different
kinds
of
code
injection
moving
on
okay,
so
he's
creating
a
product
name
product
and
moving
on,
and
he
selects
just
the
API
that
he
just
built
saying
that's
what's
in
the
product,
okay
and
the
product
is
now
published,
which
means
that
he
can
work
on
it
in
the
developer
portal.
So
at
this
point
he
puts
on
his
developer
hat
and
opens
the
developer
portal.
A
He
sees
the
product
there,
he
can
click
on
that
and
typically
there
would
be
information
he's
dealt
with
things,
so
he
knows
what
it
does,
but
this
would
have
a
lot
of
information
about
what
this
API
does
and
any
cautions
about
using
it.
He
subscribes
in
the
name
of
his
application,
okay
moving
on,
and
so
that's
the
company
store
UI,
which
also
is
now
going
to
have
additional
logic
and
widgets
for
his
deprecated
items.
Announcement
and
the
exchange
button.
A
So
now
the
company
store
UI
is
a
registered
API
application
and
if
he
clicks
on
that,
he
finds
its
very
own
unique,
API
key
that
is
going
to
give
him
access
to
the
API.
So
we
move
on
and
there's
a
in
SAT
cloud
platform.
You
have
a
client
that
can
use
for
testing
these
things
or
he
could
use
postmen
same
thing
and
sure
enough
if
he
adds
the
API
key
to
his
request.
A
He
can
actually
get
at
the
backend
date,
and
this
time
it's
been
done
securely
with
an
API
key.
So
moving
on
so
he's
gotten
at
the
back-end
data,
he
has
managed
to
add
a
policy
that
makes
it
safe
to
expose,
and
now
he
can
use
hooks
those
hooks
from
the
company
store
UI
so
that
he
can
exchange
deprecated
devices.
So
he
basically
just
has
to
make
changes
to
the
UI.
The
back
end
remains
exactly
the
same
and
a
different
was,
and
so
he
gets
it.
And
now
his
employees
are
able
to
exchange
the
deprecated
phones.
A
A
He
needs
to
zero
his
inventory,
they
discuss
it
and
the
company
is
able
to
negotiate
to
have
a
24-hour
closeout
online
auction,
but
a
24-hour
closeout
of
bidding
war
does
not
sound
good
to
walls,
because
that
web
traffic
would
not
be
a
good
thing
for
his
dedicated
servers
to
experience.
The
answer
is
to
deploy
the
auction
site
on
Cloud
Foundry
moving
on,
so
he
doesn't
create
the
auction
site.
A
They
only
see
a
limited
number
of
products
so
using
that
reduced
product
which
doesn't
expose
anything
that
that
is
sensitive,
a
contractor
is
able
to
create
an
auction
site
using
another
sa
P
Club
platform
feature
the
portal
service,
and
the
portal
service
is
a
great
way
to
create
things,
websites
that
have
uniform
branding
and
that
are
tightly
integrated
with
the
rest
of
SA
P
cloud
platform.
So
the
site
has
been
created
for
him.
A
He
now
goes
into
so
Walt
now
can
access
his
Cloud
Foundry
space
and
a
CP
cloud
platform,
and
he
can
create
a
container
for
his
for
his
closeout
sales
and
then
upload
it
from
the
mtar
file,
which
represents
the
work
that
the
the
contractor
did,
and
at
that
point
he
sees
that.
He
now
has
an
instance
of
his
closeout
site
and
it's
running.
A
He
can
look
at
details
of
it
and
then
next
he
can
vary
the
quota
and
memory
next
and
he
can
those
two
buttons
up.
There
allow
him
to
add
or
subtract
instances
and
next
and
so
by
monitoring
exactly
what's
going
on.
He
can
massage
the
ability
of
the
auction
site
to
hand
traffic
so
leo
is
able
to
clear
his
shelves,
and
the
deprecated
inventory
is
your
doubt
now.
A
Well,
walls
is
able
to
recognize
that
he
was
able
to
solve
his
immediate
Leo
wants
to
use
the
same
method
to
liquidate
further
inventory
issues
so
he's
now
considering
selling
access
to
a
limited
API
that
he
now
has
a
good
idea
of
what
it
would
be
to
Liquidators
and
third-party
developers
and
charge
them
based
on
usage
next,
so
tracking
usage
is
the
key
to
monetization
here
and
that's
analytics.
So
if
you
see
here
the
API
platform
and
developer
services
we
talked
about,
but
the
analytics
is
the
other
part
of
this.
A
So
you
can
look
at
the
long
and
short
term
trends
and
analyze
and,
of
course,
because
every
application
has
a
unique
token
you're
able
to
see
a
key
you're
able
to
see
who's
using
what
now?
You
probably
also
noticed
we
had
this
thing
called
API
business
hub,
which
was
to
the
left
when
he
went
to
API
management.
A
Now
what
that
is
is
like
the
developer
portal,
but
it's
for
the
things
that
came
out
of
the
box
with
s
ap
cloud
platform,
you're
able
to
get
at
those
features
through
AP
is,
and
so
you
can
explore
that
and
use
that
as
a
way
of
generating
new
functionality.
So
next
so
yeah
the
yeah.
This
is
a
good
example
of
some
of
the
things
on
the
side
there,
the
s
for
Hana
finance
or
the
success
factors.
These
are
all
the
translation
of
these
are
all
things
that
can
be
accessed
as
api's
and
integrated.
B
Never
mike
fan
so
I
did
just
want
to
summarize
a
little
bit
about
what
we
had
heard
in
this
nice
demo
presentation.
You
know.
The
idea
here
is
that
you
can,
as
a
developer,
come
in
and
work
on
top
of
the
api's
that
exists
already
to
monetize
and
basically
revamp
existing
access
and
assets.
You
can
do
that
either
as
a
partner,
so
Bob
mentioned.
For
example,
you
can
have
a
partner
build
the
shell
structure
which
can
be
realized
on
top
of
the
api's
that
exists
already.
B
B
You
may
not
know
about
enterprise
services
software,
all
this
stuff,
it's
something
you
don't
really
care
about.
You've
never
worked
with
it
before,
but
with
the
API.
Is
you
don't
need
to
know
all
that
stuff
right?
You
just
need
to
know
what
the
forms
of
the
data
that's
going
to
be
returned.
You
need
to
know
sort
of
what
people
are
going
to
be
looking
for
and
then
build
some
kind
of
extension
or
application.
On
top
of
that,
so
we've
actually
already
seen
success
factors,
which
is
our
HR
solution.
B
We've
seen
developers
come
into
the
business
hub,
discover
the
forms
and
data.
That's
returned.
We
actually
have
sandbox,
you
can
play
with
live
in
the
VPI
business
hub
for
free
and
just
from
discovering
and
learning
what
those
data
formats
look
like
build,
an
application
that
actually
visualizes
and
makes
a
nice
front-end
on
top
of
that
data,
which
can
then
be
sold
to
customers
in
order
to
actually
be
used
in
their
live
production
instances,
and
these
are
people
who
don't
necessarily
know
this
enterprise
data
already.
B
So
it's
a
really
nice
way
to
actually
start
to
develop,
monetize
and
make
money
on
top
of
data
without
having
to
be
like
a
true
enterprise
and
level
person.
So
I
just
wanted
to
kind
of
summarize
all
the
things
that
you
heard
here
as
well
as
bring
a
little
bit
of
new
stuff
into
it.
Now,
of
course,
monetization
doesn't
have
to
just
be
on
the
API
management
layer
level
we
like
it
because
it
makes
it
much
more
easy
and
flexible.
B
B
So
there
are
definitely
quite
a
few
security
policies,
so
authentication,
of
course,
doesn't
have
to
just
be
done
with
an
API
key.
You
can
do
it
with
an
OAuth
token.
You
can
do
with
sam'l
so
calling
out
to
an
IDP
for
people
to
really
make
these
applications
Enterprise
ready
and
then
there's
real
access,
runtime
level
authentication.
So
you
can
do
things
like
like
you're
saying
injection
protection,
one
of
the
ones
that
I
just
saw
very
recently
was
for
JSON
inspection.
B
You
can
actually
limit
the
number
of
recursive
layers
that
can
be
added
to
a
particular
thing,
so
you
can't
just
overload
a
back-end
with
some
ridiculous
number
of
things.
You
can
do
traffic
quota,
you
can
do
spiked
arrests,
you
can
do
XML
bomb
protection
and
things
like
that.
So
there
are
actually
quite
a
number
of
pre-made
security
policies,
specifically
with
that
kind
of
stuff
in
mind
and
I,
don't
know
if
anyone's
familiar
with
Oh
wasp.
So
this
is
kind
of
a
broader
security
thing.
B
So
we've
really
tried
to
address
a
lot
of
the
top
threats
that
they
have
brought
up
in
terms
of
being
a
ready-made
policy,
and
then,
as
Bob
mentioned,
you
can
actually
create
or
script
your
own
enhanced
security
protections.
If
there's
something
that's
not
out
of
the
box
that
you
really
need,
so
it's
it's
a
pretty
robust
tool,
we're
actually
really
protecting
and
making
sure
that
API
is
are
not
just
open
willy-nilly
and
that's
really.
B
One
of
the
powers
of
that
is
that
everybody
loves
API
is
I
mean
it
really
makes
the
developer
experience
much
better,
but
the
idea
of
having
just
open
API
is
is
not
always
the
best,
especially
in
an
enterprise
scenario.
So
you
know
if
you
have
any
kind
of
need
for
protection
of
back-end
having
that
managed
API
with
the
security,
the
authentication,
the
transformations
things
like
that,
it
really
adds
a
lot
of
value
to
those
of
you
guys.
So
thank
you
for
that
question.
B
So
our
developer
portal-
well
so
the
actual
underlying
structure
of
the
API
management
is
all
built
as
an
API
first
technology.
So
you
can
access
all
of
the
information
via
API
calls.
The
actual
just
front-end
is
built
on
what
we
call
Fiore.
This
is
kind
of
our
fury
experience,
but
it
can
be
modified.
So,
for
example,
Bob
talked
about
the
cloud
portal.
You
can
actually
build
a
cloud
portal
front-end
to
other
developer
portal.
B
And
you
don't
have
to
use
our
stuff
out
of
the
box
either,
so
you
can
use
even
just
like
a
CMS
or
just
a
plain
webpage
as
long
as
you're
able
to
pull
in
those
API
calls.
So
it
really
is
whatever
you
want.
So
we
provide
something
for
you
out
of
the
box.
We
provide
templates
for
making
easily
consumed
portal
sites
and
then,
if
you
want
to
go
your
own
way,
then
you
have
all
those
API
calls
available
as
well.
B
B
Okay,
now
I'm
calling
it,
and
if
you
do
have
other
questions
that
come
to
mind,
we
do
have
an
expert
booth
available
in
the
show.
Call,
oh
and
myself
will
be
participating
as
well
as
a
number
of
other
experts
in
the
cloud
platform,
product
management
and
true
technical
development
experience
level.
So
please
feel
free
to
come
by
and
ask
us
any
questions
you
like,
and
thank
you
for
attending.