Skip to main content

Managed API Service Questions

General Questions​

  • What is the availability and uptime of the Managed API services?
  • What is the maximum request rate and guaranteed response time?
  • What is the scalability and elasticity target?
  • What authentication and authorization methods are supported by the Managed API services?
  • Are there any restrictions on the type of data that can be sent to or received?
  • What are the restrictions on the number of requests or responses that can be sent to or received?
  • What are the logging, monitoring, and alerting capabilities?
  • What are the security policies and procedures in place to protect the Managed API services?
  • Are there any additional costs associated with using the Managed API services?

Cost​

  • What is the cost associated with setting up and maintaining the API service?
  • What are the pricing tiers and what features do they include?
  • Is there a free tier and what are the limitations?
  • Are there any additional costs for scaling up the API service if needed?
  • Are there any additional costs for data transfer?
  • Are there any additional costs for storage?
  • Are there any additional costs for additional features such as authentication, authorization, monitoring, logging and analytics?
  • Are there any discounts for volume usage?
  • Are there any additional costs for support?
  • Is there a setup fee?
  • Is there a fee for additional users?
  • Are there additional costs for custom domains?
  • Are there any additional costs for custom integrations?
  • Are there any additional costs for third-party services?

Operations​

  • What levels of scalability and reliability does the API service provide?
  • How is the service secured and authenticated?
  • What is the latency of the API service?
  • What kind of performance monitoring and logging does the service provide?
  • How is the service versioned, and what is the upgrade process?
  • What kind of API management capabilities does the service provide (e.g. throttling, rate limiting, etc.)?
  • What kind of integration options does the service provide (e.g. with other cloud services, on-premise services, etc.)?
  • Does the service provide any built-in features to support development and testing (e.g. mocking, testing, etc.)?
  • What kind of support is offered for the API service (e.g. documentation, support channels, etc.)?
  • Are there any additional charges for using the API service?
  • Are there any limits on the number of requests that can be made to the API service?
  • Does the API service provide any features to optimize performance (e.g. caching, etc.)?
  • is there support for deployment automation (e.g. CI/CD)?
  • is there support for service discovery (e.g. service meshes, etc.)?
  • is there support for distributed tracing (e.g. OpenTracing, etc.)?
  • is there support for automated testing (e.g. unit tests, integration tests, etc.)?
  • is there support for debugging (e.g. logging, breakpoints, etc.)?
  • is there support for monitoring and alerting?
  • is there support for custom metrics (e.g. custom counters, etc.)?

Performance​

  • What are the throughput limits and latency of the the API services?
  • How will the API services handle dropping requests?
  • What security measures are in place to protect against malicious requests?
  • What is the uptime/availability SLA of the the API services?
  • How are the API services monitored and managed?
  • What scalability options are available for the API services?
  • What type of logging and analytics are available for the API services?
  • What type of caching is available to improve the performance of the API services?
  • How is the API services integrated with other systems in the architecture?
  • What is the process for deploying the API services?
  • What type of automation is available for the API services service deployments?
  • How is the API services integrated with the authentication layer?
  • What type of API versioning is supported by the API services?
  • How are the API services integrated with other services in the architecture?
  • What type of integration and testing tools are available for the API services?
  • What type of logging and analytics are available for the API services?
  • How is the API services integrated with the monitoring and alerting systems?
  • How is the API services integrated with the deployment pipeline?
  • What type of automation is available for the API services service scaling?

Security​

  • What authentication methods are supported?
  • How is authentication managed and secured?
  • How is the API traffic secured?
  • How is data encryption handled?
  • Are there any built-in security protocols such as OAuth2, SAML, or OpenID Connect?
  • How are API requests tracked?
  • How is data integrity maintained?
  • Are there any built-in monitoring and alerting capabilities?
  • Does the service support any security standards such as PCI DSS, HIPAA, or GDPR?
  • Are there any audit logs that can be used to track API usage?
  • What measures are in place to protect against malicious attacks such as DDoS?
  • Are there any rate-limiting mechanisms?
  • Are there any user and role-based access control mechanisms?
  • Are there any data masking capabilities?
  • How are API keys and secrets managed?
  • Is there a vulnerability and risk assessment tool available?
  • Are there any built-in firewall rules?
  • Are there any anti-spamming features?
  • Is there an API sandbox environment available?
  • Are there any content filtering capabilities?
  • Are there any API analytics and reporting tools available?
  • Are there any user identity and access management tools available?
  • Can API responses be customized to meet compliance requirements?