Copy
The week in API strategy, news, articles, and upcoming events.
James Higginbotham, Curator  A hand-curated weekly newsletter for API developers, sponsored by LaunchAny and CaseySoftware

Find this via Twitter? Subscribe now so you don't miss out
 
 

API Developer Weekly

Nov 22, 2018 - Issue #239
Hot Topics
How to Secure APIs, the New Shadow IT
APIs are creating a major blind spot in many companies’ security plan. Gartner predicts by 2022, the largest source of data breaches will arise from APIs. APIs are the new Shadow IT because developers are exposing APIs without alerting their IT teams of the risks and vulnerabilities. by Keith Casey [thenewstack.io]

A Gardener's Approach to Growing an API Culture
My work on pragmatic software governance has evolved. It started with a focus scaling good API design across a modern enterprise company. Increasingly, I'm interested in how culture impacts technology adoption. Why are do some approaches become deeply embedded within an org, while others disappear after a hot minute? [matthewreinbold.com]

ongoing by Tim Bray · Post-REST
What we talk about when we talk about "REST" · Th­ese days, it's used col­lo­qui­al­ly to mean any API that is HTTP-based. In fac­t, the vast ma­jor­i­ty of them of­fer CRUD op­er­a­tions on things that have URIs, em­bed some of those URIs in their pay­load­s, and thus are ar­guably REST­ful in the orig­i­nal sense; al­though these days I'm hear­ing the oc­ca­sion­al "CRUDL" where L is for List. [tbray.org]

Some notes about HTTP/3
HTTP/3 is going to be standardized. As an old protocol guy, I thought I'd write up some comments. Google (pbuh) has both the most popular web browser (Chrome) and the two most popular websites (#1 Google.com #2 Youtube.com). Therefore, they are in control of future web protocol development. by Robert Graham [blog.erratasec.com]

Analyzing the API docs and DX Patterns in the Best Media Developer Portals
Users today expect their music, videos and pictures to be available anywhere at anytime. Developers need APIs that can provide this to end users, but they also need developer portals that enable them to integrate these APIs into their applications as efficiently and quickly as possible. [pronovix.com]

Misunderstanding REST with Mike Amundsen
Web Services with SOAP are a pretty well understood thing, but what's all this appeal about REST? Is REST just CRUD (Create Read Update Delete) for the Web? Is it a pattern, a style or dogma? Recognized REST expert Mike Amundsen sets Scott straight. by Scott Hanselman [hanselminutes.com]

Using Postman REST Client Cleverly - Some Quick Tips - DZone Integration
Postman is one of the most popular API development environments, which needs no introduction to API developers. But strangely, numerous API developers often ignore many of its key features and make their work unnecessarily difficult. In this post, we'll discuss such key features that every API developer should be aware of. by Sanjay Patel, See the original article here. [dzone.com]

WebSockets - A Conceptual Deep-Dive | Ably Realtime
The WebSocket protocol elevated the possibilities of communication over the internet and gave way to a truly realtime web. This article is all about building a deeper understanding of what WebSockets are, how they came to be and what's actually going on under the hood of applications using WebSockets. [ably.io]

Overriding request/response parameters and response status in Amazon API Gateway | Amazon Web Services
This post is courtesy of Akash Jain, Partner Solutions Architect - AWS APIs are driving modern architectures. Many customers are moving their traditional architecture to service-oriented or microservices-based architectures. As part of this transition, you may face a few complex situations. For example, a backend API returns an HTTP status code of 2XX that must [...] [aws.amazon.com]

Upcoming Web API Events
A list of upcoming Web API Events, maintained by Matthew Reinbold
 
The Business of APIs
How the Best Developer-Focused Companies Reach Their Audience
I'd start this post by proudly making an announcement, but that sort of sentence serves the writer more than the reader. You're here to learn how developer-focused companies reach their audience. I've been exploring developer communications for a long time, going back to my time writing code. by Adam DuVander [adamduvander.com]

Are APIs becoming the keys to customer experience?
In recent years, APIs have encouraged the emergence of new services by facilitating collaboration between applications and databases of one or more companies. Beyond catalyzing innovation, APIs have also revolutionized the customer-company relationship, allowing it to provide an accurate and detailed picture of the consumer at a time when a quality customer experience now counts as much as the price or capabilities of the product. by Jerome Louvel [betanews.com]

Simple Rules to Make Support Engineering Painless | Nordic APIs |
Support engineering doesn't often get as much attention as impressive functionality. After all, who wants to be fixing an assortment of minor issues when you could be building cool tools? With that said, effective support is a crucial element of the software lifecycle, whether we like it or not. by Thomas Bush [nordicapis.com]

7 Types Of API Business Models | Nordic APIs |
Much of the modern business world runs on APIs. As a result of this, APIs are now valuable assets in a business environment, causing a lot of thought for API practitioners. Chief of these concerns is the exact methodology and process of monetization. How does it work? by Kristopher Sandoval [nordicapis.com]

What's New in Paw 3.1.8
Paw is a full-featured and beautifully designed Mac app that makes interaction with REST services delightful.Whether you are an API maker or consumer, Paw helps you build HTTP requests, inspect the server's response and even generate client code. [paw.cloud]

Amazon API Gateway adds support for AWS WAF | Amazon Web Services
This post courtesy of Heitor Lessa, AWS Specialist Solutions Architect - Serverless Today, I'm excited to tell you about the Amazon API Gateway native integration with AWS WAF. Previously, if you wanted to secure your API in Amazon API Gateway with AWS WAF, you had to deploy a Regional API endpoint and use your own [...] [aws.amazon.com]

(Un)Related Topics
Who Is in Charge of Developing a DevOps Culture? - The New Stack
CloudBees sponsored this story, as part of an ongoing series on "Cloud Native DevOps." Check back through the month on further editions. Want to understand the cultural barriers to your DevOps transformation? It often helps to have an outside perspective. The New Stack talked with two consultants who are brought in once a company's C-levels... by Jennifer Riggins, Gianluca Arbezzano, Bernd Greifeneder [thenewstack.io]

How to put GitHub Actions to work for your software team | TechBeacon
GitHub created a surge of interest throughout the developer community when it announced GitHub Actions at GitHub Universe 2018. Actions, still in beta at the time of this writing, will help developers trigger event-based workflows. Based on GitHub webhooks, Actions-based workflows could be a huge boon to increase automation and aid continuous delivery efforts. [techbeacon.com]

Run Amazon Elastic Container Service for Kubernetes on Cisco Data Center Infrastructure and on AWS
Cisco Container Platform (CCP) now ships with Amazon Elastic Container Service for Kubernetes (EKS) APIs for consistent application deployment, monitoring, networking, compliance control, and security management between data center infrastructure (Cisco Hyperflex and UCS) and EKS. This required a si [linkedin.com]

Using Netflix's HubCommander to Automate GitHub Organizations - DevOps.com
Netflix owes a great deal of its exponential growth to its phenomenal tech stack. Throttling its content through a single internal API, the company was Here'show Netflix has utilized HubCommander and a look at into its open source iteration to automate its GitHub organization. by Bill Doerrfeld [devops.com]

Conquering the Microservices Dependency Hell at Postman, with Postman - (Part 2)
In the first article in this series on Microservices at Postman, I talked about the situation we found ourselves in early 2018. I highlighted the challenges from technology as well as an organization perspective. In this article, I will discuss organizational practices we put in place that helped us overcome microservice dependency hell. by Ankit Sobti [medium.com]

The Six Commands You NEED To Know To Work With Git
So let me say first, there are WAY more than 6 git commands you should know if you're working with a project that uses git. However, when you're first getting started, there are 6 git commands that you can't get away without knowing. Here they are. [thomasrayner.ca]
 
Want to share something?
As always, if you want to chat, share a link, or make a suggestion, feel free to drop us a quick note or tagging us on Twitter (@launchany and @caseysoftware) or by emailing us at: james@launchany.com
 
Follow on Twitter    Forward to Friend    Subscribe
Copyright © 2018 LaunchAny, All rights reserved.
unsubscribe from this list