An API Management Platform contains five architecture components:
Enterprise Service Bus, configured as an API gateway delivering traffic shaping, API key validation, URL mapping, security credential mediation, and service level tracking.
Business Activity Monitor captures business activity, usage activity, policy decision events, policy violations, policy exceptions, and governance key performance indicators. IT and Business users may analyze high-volume activity and use governance dashboards to view key performance indicators, policy exceptions, and compliance.
Governance Registry storing API meta-data defining interface, API service level tiers, back-end service dependencies, developer documentation, and API subscriptions.
Complex Event Processor analyzes business activity over time and triggers notifications, automatic systems management actions, application performance tuning, corrective workflows, and human tasks.
Identity Server manages identity and policy-driven entitlements, determines context-based entitlement assertions, delivers role based access control decisions, generates access keys and tokens, provisions applications, facilitates single sign-on, maps credentials, federates identity repositories and identity providers.