Brief
- a comprehensive API Management Service using Microsoft Azure to integrate providers and offer real-time access to health data.
About Company
- The Client is the region’s first Health Information Exchange platform, that safely and securely connects public and private healthcare providers.
Business Scenario
- Securely integrate various medical systems, ensure seamless data exchange between hospitals, clinics, and insurance providers. Controlled access to sensitive patient records, ensure compliance, enabling efficient healthcare delivery while reducing operational costs. Scalable solution to easily accommodate growing data needs, increasing volume of health data transactions
Challenges
- Secure Access: Controls API access, ensuring safe, compliant data exchange.
- Legacy Integration: Connects legacy systems with modern apps via APls.
- Multi-Channel Support: Provides consistent access across web, mobile, and third-party apps.
- Scalability: Handles growing traffic and API requests efficiently.
- Developer Efficiency: Speeds up API development and deployment with built-in tools.
Solution
- Azure API Management Service: Deployed across Development, UAT, and Production environments with tailored settings for testing, debugging, and scalability, ensuring seamless API traffic.
- Hub and Spoke Model: Implemented to centralize connections, enhance security, and streamline traffic management across application workloads.
- Self-hosted Gateways: Deployed on OpenShift clusters, ensuring consistent API policies and compliance on-premises without routing traffic through Azure.
- Multi-environment Setup: Separate API Management instances for Development (Developer SKU), UAT (Developer SKU), and Production (Premium SKU)
- Network Security: Implemented Network Security Groups (NSGs) at the subnet level
- Hybrid Connectivity: VPN Gateway for connecting on-premises network with Azure
- Caching: External Redis cache deployed in OpenShift clusters boosts API performance by storing frequently accessed data, reducing backend load, and speeding up response times.
- Logging: Event Hubs used for logging API requests and responses
- DNS Resolution: Private DNS Zone for backend service resolution
- Monitoring: Custom dashboards created for each environment using Azure Monitor
