SlideShare a Scribd company logo
26th March 2022 , 10:00 AM (IST)
Online
Engineering Student Group
MuleSoft Meetup: #3
TOPIC :
API Implementation using, Anypoint API
Manager, API Policies, APIkit Router
Online Engineering Student Group: Meetup
2
Organizer(s)
3
https://www.linkedin.com/in/ravi-tamada-7543bb1a/
Online Engineering Student Group: Meetup
Topic Presenter
Safe Harbor Statement
4
• Both the speaker and host are organizing this meet up in individual capacity, only.
We are not representing our companies here.
• This presentation is strictly for learning purpose only. Organizer/Presenter do not hold
any responsibility that same solution will work for your business requirements also.
• This presentation is not meant for any promotional activities.
CHEERS..!!!
5
We have prizes to give away!
3 Winners a special prize is ready
What topics those covered in the
past Meetups 1 & 2?
7
API Manager & API Policies & APIkit Router
API Policies
▪ enable you to enforce regulations to help
manage security, control traffic, and
improve adaptability of your APIs
▪ is a component of Anypoint Platform that
enables you to Manage, Govern, and Secure
APIs
▪ is a tool for building Mule REST or SOAP APIs. Auto
generate code from API specification. Routing the
incoming requests to specific flows & do Validation.
API Lifecycle
PART 1:
Anypoint API Manager
9
API Manager
▪ is a component of Anypoint Platform that enables you to manage, govern, and secure APIs
1. The environment selector
2. Navigation menu
3. The Manage API button
4. The Environment information button
5. The Promote from
environment button
6. Search
7. The tracking registration status of
each API
8. The name of each API
9. The percentage of API requests that
resulted in errors
10. The total number of API requests
11. The number of contracted client
applications for each API
10
API Manager
PART 2:
API Policies
12
API Policies
▪ To enforce regulations to help manage security, control traffic, and improve adaptability of
your APIs.
▪ Apply regulations with no modification to the code
▪ Predefined Policies & Custom Policies
▪ Apply to HTTP based APIs
o APIkit project;
o API running on CloudHub;
o API running on Anypoint Runtime Fabric;
o API deployed to a private or cloud-based Mule runtime engine;
▪ Policy Factors: by category, by purpose, by version, by configuration.
Mule 3 Mule 4
Deployable Jar file XML File
YAML File
13
API Policies
▪ Policies and SLAs
o Rate Limiting policy, with predefined SLA
o limit access to only one API resource
▪ Policy Types
o Default Policies
❖ ready-to-use policies
o Automated Policies
❖ apply any default or a custom policy to all the APIs in your environment
o Custom Policies
❖ Online Custom Policies
❖ Offline Custom Policies
14
API Policies
Security
• Basic Authentication
- LDAP
• Basic Authentication
– Simple
• IP Blocklist
• IP Allowlist
• JSON Threat
Protection
• XML Threat
Protection
• JWT
• OAuth 2.0 Access
Token Enforcement
Using Mule OAuth
Provider Policy
• OpenAM Access
Token Enforcement
• PingFederate
Access Token
Enforcement
• Tokenization
• Detokenization
Compliance
• Client ID
Enforcement
• CORS
Transformation
• Header Injection
• Header Removal
Quality of Service
• HTTP Caching
• Rate Limiting
• Rate Limiting, SLA-
Based
• Spike Control
Troubleshooting
• Message Logging
PART 3:
API Implementation using
APIkit Router
16
APIkit
▪ a tool for building Mule REST or SOAP APIs (RAML & WSDL)
▪ Auto generation of Flows
o Archetype
o API implementation (HTTP listener, API Console, Flows)
▪ APIkit Router
o Message Routing / Enrichment / Validation
17
APIkit
use a different APIkit version
Dependency in POM.xml
API Folder
Generating RAML-based Flows
18
APIkit
APIkit Router Scaffolding Flows
19
APIkit
APIkit Error Handling
Q & A
Trivia Quiz
22
Question 1
23
Question 1
____________________is a mechanism that manages an API from API
Manager by pairing the deployed application to an API created on
the platform
1) Autopolicy
2) Autodiscovery
3) Policydiscovery
4) clientidEnforement
24
Question 2
25
Question 2
Configuring what kind of policies enables your Anypoint Platform instance to comply with common
security and logging requirements by applying the same set of policies to all APIs running in a single
environment?
1) Custom Policies
2) Automated Policies
3) Default Policies
4) Resource-Level Policies
26
Question 3
27
Question 3
You can’t create multiple instances of an API in the same environment
1) True
2) False
28
Question 4
29
Question 4
SLA tier can be applied to following Policy
A) JWT Validation
B) Ratelimit
C) Header Injection
D) HTTP Caching
30
Question 5
31
Question 5
In terms of ‘APIkit Router’ functionality, which of the following is not correct?
1: Message Enrichment
2: Message Routing
3: Message Validation
4: None of the above
Thanks

More Related Content

PPTX
Anypoint API Manager Custom Policies & Best Practices
PPTX
Mule api gateway overview
PPTX
Apimanagement
PDF
MuleSoft Surat Virtual Meetup#3 - Anypoint Custom Policies, API Manager (Prox...
PPTX
Mule api management
PPTX
Mule soft riyadh virtual meetup_30_aug
PPTX
How to Secure Mule API's With a Demo
PPTX
[Madrid-Meetup Octubre 22] Seguridad fuerte como el vinagre de Jerez. Políti...
Anypoint API Manager Custom Policies & Best Practices
Mule api gateway overview
Apimanagement
MuleSoft Surat Virtual Meetup#3 - Anypoint Custom Policies, API Manager (Prox...
Mule api management
Mule soft riyadh virtual meetup_30_aug
How to Secure Mule API's With a Demo
[Madrid-Meetup Octubre 22] Seguridad fuerte como el vinagre de Jerez. Políti...

Similar to Engineering Student MuleSoft Meetup#3 - API Implementation using APIKIT router, Anypoint API Manager and API Policies (20)

PPTX
Handling NFRs for the API through OoTB API policies Part-1 | MuleSoft Mysore ...
PPTX
MuleSoft Meetup June 2022 - Munich, Germany
PPTX
Exploring Universal API Management And Flex Gateway
PDF
MuleSoft Surat Meetup#41 - Universal API Management, Anypoint Flex Gateway an...
PPTX
Toronto Virtual Meetup #5 - API Security and Threats
PDF
Perth Meetup August 2021
PPTX
How Secure is Your API?
PPTX
13th Manila MuleSoft Meetup Sept 2022
PPTX
Madrid MuleSoft Meetup #11.pptx
PPTX
Handling NFRs for the API through API policies (Custom Policies) -Part 2 | Mu...
PPTX
Warsaw MuleSoft Meetup #7 - custom policy
PPT
Mule api
PPT
Mule api
PPTX
Kochi MuleSoft Meetup-7-November-2021
PDF
Virtual Meetup - API Security Best Practices
PPTX
Creating a mule project with raml and api
PPT
Mule esb api layer
PPT
Mule esb api layer
PPT
Api Layer
PPT
Mule esb api layer
Handling NFRs for the API through OoTB API policies Part-1 | MuleSoft Mysore ...
MuleSoft Meetup June 2022 - Munich, Germany
Exploring Universal API Management And Flex Gateway
MuleSoft Surat Meetup#41 - Universal API Management, Anypoint Flex Gateway an...
Toronto Virtual Meetup #5 - API Security and Threats
Perth Meetup August 2021
How Secure is Your API?
13th Manila MuleSoft Meetup Sept 2022
Madrid MuleSoft Meetup #11.pptx
Handling NFRs for the API through API policies (Custom Policies) -Part 2 | Mu...
Warsaw MuleSoft Meetup #7 - custom policy
Mule api
Mule api
Kochi MuleSoft Meetup-7-November-2021
Virtual Meetup - API Security Best Practices
Creating a mule project with raml and api
Mule esb api layer
Mule esb api layer
Api Layer
Mule esb api layer
Ad

More from Jitendra Bafna (20)

PDF
MuleSoft Surat Meetup#55 - Unleash the power of Anypoint MQ
PDF
MuleSoft Surat Meetup#54 - MuleSoft Automation
PDF
MuleSoft Surat Meetup#53 - MuleSoft for Clinical Trial Modernization
PDF
MuleSoft Surat Meetup#52 - Flex Gateway (Port Based Routing V/S Path Based Ro...
PDF
MuleSoft Surat Meetup#51 - API Monitoring - Through a New Lens
PDF
Engineering Student MuleSoft Meetup#7 - Leveraging MuleSoft Service in Salesf...
PDF
MuleSoft Nashik Meetup#7 - Building FHIR applications in MongoDB using MuleSoft
PDF
MuleSoft Surat Meetup#50 - Ask the MuleSoft Ambassadors + CloudHub 2.0 Overvi...
PDF
MuleSoft Surat Meetup#49 - Robotic Process Automation - Why, Where, When and ...
PDF
MuleSoft Surat Meetup#48 - Anypoint API Governance (RAML, OAS and Async API) ...
PDF
MuleSoft Surat Meetup#47 - Error Handling With MuleSoft
PDF
MuleSoft Surat Meetup#46 - Deep Dive into MUnit With MuleSoft
PDF
MuleSoft Surat Meetup#45 - Anypoint Flex Gateway as a Kubernetes Ingress Cont...
PDF
MuleSoft Surat Meetup#44 - Anypoint Flex Gateway Custom Policies With Rust
PDF
Engineering Student MuleSoft Meetup#6 - Basic Understanding of DataWeave With...
PDF
MuleSoft Nashik Meetup#5 - JSON Logger and Externalize Logs
PDF
MuleSoft Surat Meetup#43 - Combine Service Mesh With Anypoint API Management ...
PDF
Engineering Student MuleSoft Meetup#5 - Error Handling With MuleSoft
PDF
MuleSoft Surat Meetup#42 - Runtime Fabric Manager on Self Managed Kubernetes ...
PDF
MuleSoft Surat Meetup#40 - Watermarking Concept and Fragments in MuleSoft
MuleSoft Surat Meetup#55 - Unleash the power of Anypoint MQ
MuleSoft Surat Meetup#54 - MuleSoft Automation
MuleSoft Surat Meetup#53 - MuleSoft for Clinical Trial Modernization
MuleSoft Surat Meetup#52 - Flex Gateway (Port Based Routing V/S Path Based Ro...
MuleSoft Surat Meetup#51 - API Monitoring - Through a New Lens
Engineering Student MuleSoft Meetup#7 - Leveraging MuleSoft Service in Salesf...
MuleSoft Nashik Meetup#7 - Building FHIR applications in MongoDB using MuleSoft
MuleSoft Surat Meetup#50 - Ask the MuleSoft Ambassadors + CloudHub 2.0 Overvi...
MuleSoft Surat Meetup#49 - Robotic Process Automation - Why, Where, When and ...
MuleSoft Surat Meetup#48 - Anypoint API Governance (RAML, OAS and Async API) ...
MuleSoft Surat Meetup#47 - Error Handling With MuleSoft
MuleSoft Surat Meetup#46 - Deep Dive into MUnit With MuleSoft
MuleSoft Surat Meetup#45 - Anypoint Flex Gateway as a Kubernetes Ingress Cont...
MuleSoft Surat Meetup#44 - Anypoint Flex Gateway Custom Policies With Rust
Engineering Student MuleSoft Meetup#6 - Basic Understanding of DataWeave With...
MuleSoft Nashik Meetup#5 - JSON Logger and Externalize Logs
MuleSoft Surat Meetup#43 - Combine Service Mesh With Anypoint API Management ...
Engineering Student MuleSoft Meetup#5 - Error Handling With MuleSoft
MuleSoft Surat Meetup#42 - Runtime Fabric Manager on Self Managed Kubernetes ...
MuleSoft Surat Meetup#40 - Watermarking Concept and Fragments in MuleSoft
Ad

Recently uploaded (20)

PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PDF
Encapsulation_ Review paper, used for researhc scholars
PDF
KodekX | Application Modernization Development
PDF
Chapter 3 Spatial Domain Image Processing.pdf
PDF
cuic standard and advanced reporting.pdf
PPTX
MYSQL Presentation for SQL database connectivity
PPTX
Big Data Technologies - Introduction.pptx
PPTX
Digital-Transformation-Roadmap-for-Companies.pptx
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PPTX
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
PDF
Machine learning based COVID-19 study performance prediction
PPTX
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
PPTX
20250228 LYD VKU AI Blended-Learning.pptx
PDF
Agricultural_Statistics_at_a_Glance_2022_0.pdf
PDF
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
PDF
Unlocking AI with Model Context Protocol (MCP)
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
DOCX
The AUB Centre for AI in Media Proposal.docx
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Mobile App Security Testing_ A Comprehensive Guide.pdf
Encapsulation_ Review paper, used for researhc scholars
KodekX | Application Modernization Development
Chapter 3 Spatial Domain Image Processing.pdf
cuic standard and advanced reporting.pdf
MYSQL Presentation for SQL database connectivity
Big Data Technologies - Introduction.pptx
Digital-Transformation-Roadmap-for-Companies.pptx
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
Machine learning based COVID-19 study performance prediction
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
Reach Out and Touch Someone: Haptics and Empathic Computing
20250228 LYD VKU AI Blended-Learning.pptx
Agricultural_Statistics_at_a_Glance_2022_0.pdf
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
Unlocking AI with Model Context Protocol (MCP)
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
The AUB Centre for AI in Media Proposal.docx

Engineering Student MuleSoft Meetup#3 - API Implementation using APIKIT router, Anypoint API Manager and API Policies

  • 1. 26th March 2022 , 10:00 AM (IST) Online Engineering Student Group MuleSoft Meetup: #3 TOPIC : API Implementation using, Anypoint API Manager, API Policies, APIkit Router
  • 2. Online Engineering Student Group: Meetup 2 Organizer(s)
  • 4. Safe Harbor Statement 4 • Both the speaker and host are organizing this meet up in individual capacity, only. We are not representing our companies here. • This presentation is strictly for learning purpose only. Organizer/Presenter do not hold any responsibility that same solution will work for your business requirements also. • This presentation is not meant for any promotional activities.
  • 5. CHEERS..!!! 5 We have prizes to give away! 3 Winners a special prize is ready
  • 6. What topics those covered in the past Meetups 1 & 2?
  • 7. 7 API Manager & API Policies & APIkit Router API Policies ▪ enable you to enforce regulations to help manage security, control traffic, and improve adaptability of your APIs ▪ is a component of Anypoint Platform that enables you to Manage, Govern, and Secure APIs ▪ is a tool for building Mule REST or SOAP APIs. Auto generate code from API specification. Routing the incoming requests to specific flows & do Validation. API Lifecycle
  • 9. 9 API Manager ▪ is a component of Anypoint Platform that enables you to manage, govern, and secure APIs 1. The environment selector 2. Navigation menu 3. The Manage API button 4. The Environment information button 5. The Promote from environment button 6. Search 7. The tracking registration status of each API 8. The name of each API 9. The percentage of API requests that resulted in errors 10. The total number of API requests 11. The number of contracted client applications for each API
  • 12. 12 API Policies ▪ To enforce regulations to help manage security, control traffic, and improve adaptability of your APIs. ▪ Apply regulations with no modification to the code ▪ Predefined Policies & Custom Policies ▪ Apply to HTTP based APIs o APIkit project; o API running on CloudHub; o API running on Anypoint Runtime Fabric; o API deployed to a private or cloud-based Mule runtime engine; ▪ Policy Factors: by category, by purpose, by version, by configuration. Mule 3 Mule 4 Deployable Jar file XML File YAML File
  • 13. 13 API Policies ▪ Policies and SLAs o Rate Limiting policy, with predefined SLA o limit access to only one API resource ▪ Policy Types o Default Policies ❖ ready-to-use policies o Automated Policies ❖ apply any default or a custom policy to all the APIs in your environment o Custom Policies ❖ Online Custom Policies ❖ Offline Custom Policies
  • 14. 14 API Policies Security • Basic Authentication - LDAP • Basic Authentication – Simple • IP Blocklist • IP Allowlist • JSON Threat Protection • XML Threat Protection • JWT • OAuth 2.0 Access Token Enforcement Using Mule OAuth Provider Policy • OpenAM Access Token Enforcement • PingFederate Access Token Enforcement • Tokenization • Detokenization Compliance • Client ID Enforcement • CORS Transformation • Header Injection • Header Removal Quality of Service • HTTP Caching • Rate Limiting • Rate Limiting, SLA- Based • Spike Control Troubleshooting • Message Logging
  • 15. PART 3: API Implementation using APIkit Router
  • 16. 16 APIkit ▪ a tool for building Mule REST or SOAP APIs (RAML & WSDL) ▪ Auto generation of Flows o Archetype o API implementation (HTTP listener, API Console, Flows) ▪ APIkit Router o Message Routing / Enrichment / Validation
  • 17. 17 APIkit use a different APIkit version Dependency in POM.xml API Folder Generating RAML-based Flows
  • 20. Q & A
  • 23. 23 Question 1 ____________________is a mechanism that manages an API from API Manager by pairing the deployed application to an API created on the platform 1) Autopolicy 2) Autodiscovery 3) Policydiscovery 4) clientidEnforement
  • 25. 25 Question 2 Configuring what kind of policies enables your Anypoint Platform instance to comply with common security and logging requirements by applying the same set of policies to all APIs running in a single environment? 1) Custom Policies 2) Automated Policies 3) Default Policies 4) Resource-Level Policies
  • 27. 27 Question 3 You can’t create multiple instances of an API in the same environment 1) True 2) False
  • 29. 29 Question 4 SLA tier can be applied to following Policy A) JWT Validation B) Ratelimit C) Header Injection D) HTTP Caching
  • 31. 31 Question 5 In terms of ‘APIkit Router’ functionality, which of the following is not correct? 1: Message Enrichment 2: Message Routing 3: Message Validation 4: None of the above