API governance is a balance between decentralized control and standardized guidelines. Here are six examples of organizations that enacted API governance and got it right!
Atlassian resolved the issue of siloed teams by creating a structured framework called Extensibility Standards for API design and development, which can be easily shared and referenced.
Vodafone adopted the TMF Open Digital Architecture for standardizing their API governance and development. By leveraging open APIs, Vodafone can deploy a highly modular and flexible architecture for its internal systems.
Facebook enforces API governance through the establishment of standards by the nature of each API. This so-called “governance arrangement” allows APIs to operate with each other by respecting the governance of the collective system.
A large telecom operator in the UK created an API Governance Team with Tony Harris to create the API guidelines, standards and roadmap to reach their goal. A team called API Farm was created to generate APIs utilizing a “Factory Model” that ultimately delivered more than fifty APIs within six months.
Microsoft’s Graph API is a unified approach toward software development that uses a single API to connect to various services and APIs for novel development. Microsoft looked to AI — retrieval augmented generation (RAG), to speed up the process of API governance.
Netflix leverages a federated GraphQL platform. A GraphQL service allows developers to define their own federated GraphQL schema for API development, and the APIs that interact with it are governed by the nature of the resource.
These six examples have blazed new trails in the area of API governance. Governance is a principal focus for many security engineers and developers, and having a bevy of solutions to the complex balance of decentralized development and centralized control is extremely important.
These examples show the power of combining structure with flexibility to achieve optimal API governance. By using automation, governance rulesets, and generative tooling, API governance can be made more efficient and effective.
What do you think of these strategies? Let us know in the comments below!