📖 About this Domain
This domain covers the operationalization of APIs within the Anypoint Platform, focusing on the post-development lifecycle stages. It details the processes for deploying, securing, and managing APIs using tools like API Manager and Runtime Manager. The core objective is ensuring API governance, reliability, and controlled consumption.
🎓 What You Will Learn
- You will learn to apply and configure policies like rate limiting, throttling, and client ID enforcement for API governance.
- You will learn the mechanics of deploying Mule applications and API proxies to various deployment targets including CloudHub and Runtime Fabric (RTF).
- You will learn to establish and manage Service Level Access (SLA) tiers to control API access for different client applications.
- You will learn the function of API autodiscovery for linking a deployed Mule application to its API Manager configuration for policy enforcement.
🛠️ Skills You Will Build
- You will build the skill to architect a CI/CD pipeline for the automated build, test, and deployment of Mule applications.
- You will build the ability to select and implement appropriate API policies to enforce security, quality of service, and compliance.
- You will build proficiency in using Anypoint Monitoring and Visualizer to diagnose runtime issues and monitor API performance.
- You will build the capability to manage the complete API lifecycle, including versioning, deprecation, and retirement strategies.
💡 Top Tips to Prepare
- Master the distinction between API Manager for governance and Runtime Manager for deployment and operational control.
- Understand the specific use cases for different deployment models and how they impact API management and scalability.
- Focus on the key out-of-the-box policies and their primary functions, especially those related to security and traffic control.
- Practice scenarios involving API autodiscovery to understand how a Mule runtime connects with API Manager for policy enforcement.
📖 About this Domain
This domain covers the establishment of a Center for Enablement (C4E) to drive API-led connectivity and platform adoption. It focuses on architecting the Anypoint Platform's organizational structure, including business groups, environments, and roles. You will learn to implement governance and operational models for scalable and secure platform usage.
🎓 What You Will Learn
- Define a Center for Enablement (C4E) operating model to promote asset reuse and self-service development.
- Structure Anypoint Platform with business groups, roles, and permissions for effective organizational governance.
- Configure Anypoint Platform environments (Dev, Test, Prod) to support the API development lifecycle.
- Integrate external identity providers (IdP) using protocols like SAML or OpenID Connect for centralized identity management.
🛠️ Skills You Will Build
- Design a C4E charter and define key performance indicators (KPIs) to measure API program success.
- Architect a multi-layered business group hierarchy that aligns with organizational structure and security requirements.
- Establish environment promotion strategies and access control policies using platform roles and teams.
- Configure single sign-on (SSO) for Anypoint Platform to streamline user access and enforce security policies.
💡 Top Tips to Prepare
- Master the different C4E operating models, including centralized, decentralized, and federated, and their specific use cases.
- Deeply understand the relationship between business groups, environments, roles, and permissions within Anypoint Platform.
- Review official MuleSoft documentation on setting up Anypoint Platform for organizational governance and identity management.
- Practice scenarios involving mapping complex company structures to Anypoint Platform business groups and environments.
📖 About this Domain
This domain covers the application of policies and controls to APIs to ensure security, quality, and consistency. It focuses on using Anypoint Platform's API Manager to enforce governance across the full API lifecycle. You will learn how to manage API access, consumption, and security through centralized policy management.
🎓 What You Will Learn
- Learn to apply out-of-the-box policies like rate limiting, throttling, and client ID enforcement using API Manager.
- Understand how to create and apply custom policies to meet specific non-functional requirements.
- Discover the role of API gateways, including the Mule runtime and Flex Gateway, in policy enforcement.
- Explore the use of API groups and Service Level Access (SLA) tiers to manage access for different API consumers.
🛠️ Skills You Will Build
- You will build the skill to secure APIs by applying appropriate security policies like OAuth 2.0 or JWT validation.
- You will be able to manage API traffic and consumption by implementing quality of service (QoS) policies.
- You will develop the ability to design a governance strategy that aligns with organizational standards using API Manager.
- You will gain proficiency in automating policy application and management across different environments.
💡 Top Tips to Prepare
- Master the differences between out-of-the-box policies and the specific use cases that require a custom policy.
- Understand the architecture of policy enforcement, including the role of the API proxy, autodiscovery, and the API gateway.
- Practice configuring various SLA tiers and client access management within API Manager to control API consumption.
- Review the policy development lifecycle, including creating a policy definition file (YAML) and its implementation template.
📖 About this Domain
This domain focuses on designing MuleSoft solutions that maintain operational continuity despite component failures. It covers the principles and patterns for building fault-tolerant and highly available integration platforms. You will explore strategies for both runtime plane and control plane resiliency.
🎓 What You Will Learn
- You will learn to design high availability (HA) clusters for customer-hosted Mule runtimes to eliminate single points of failure.
- You will understand CloudHub's intrinsic resiliency features, including worker failover, zero-downtime updates, and persistent queues.
- You will explore disaster recovery (DR) topologies, such as active-active and active-passive, to meet Recovery Time Objective (RTO) and Recovery Point Objective (RPO) goals.
- You will learn the role of load balancers, both dedicated and shared, in distributing traffic and ensuring service availability across multiple nodes or workers.
🛠️ Skills You Will Build
- You will build the skill to architect a resilient application network that can withstand infrastructure and application-level failures.
- You will build the ability to evaluate and recommend appropriate HA and DR strategies based on specific non-functional requirements.
- You will build competence in configuring Mule runtimes and CloudHub deployments for maximum uptime and fault tolerance.
- You will build proficiency in designing stateful integrations using object stores and persistent VM queues to prevent data loss during outages.
💡 Top Tips to Prepare
- Master the distinction between high availability for localized failures and disaster recovery for site-wide outages.
- Deeply understand the mechanics of an on-premises Mule runtime cluster, including the shared memory grid and quorum requirements.
- Focus on how CloudHub automatically provides resiliency through its multi-worker and multi-AZ architecture.
- Review scenarios involving load balancers and persistent queues to understand how they contribute to a resilient system design.
📖 About this Domain
This domain covers strategies for creating and consuming reusable assets within Anypoint Platform to build an application network. It focuses on the role of a Center for Enablement (C4E) in governing and promoting the reuse of APIs, templates, and fragments to enable API-led connectivity.
🎓 What You Will Learn
- Apply API-led connectivity principles to design a three-layered architecture that maximizes asset reuse.
- Understand different Center for Enablement (C4E) operating models for governing and evangelizing reuse.
- Learn the asset lifecycle for publishing, versioning, and managing APIs, fragments, and templates in Anypoint Exchange.
- Identify key metrics and KPIs to measure the business value and adoption of reusable assets.
🛠️ Skills You Will Build
- Design modular API specifications and fragments using RAML or OAS for broad reusability.
- Define a C4E governance framework with clear roles, processes, and standards for asset management.
- Utilize Anypoint Exchange effectively for asset discovery, consumption, and feedback loops.
- Develop and apply API policies to enforce consistent security and quality of service on reusable APIs.
💡 Top Tips to Prepare
- Master the distinct responsibilities of System, Process, and Experience APIs in an API-led architecture.
- Study the various C4E models and their impact on organizational adoption of reuse.
- Focus on Anypoint Exchange features like asset versioning, API groups, and custom asset types.
- Know how to use Anypoint Platform to track reuse metrics and demonstrate the ROI of an application network.
📖 About this Domain
This domain covers the core principles of MuleSoft's API-led connectivity methodology. It emphasizes the three-layered architecture and its role in creating a composable enterprise through an application network.
🎓 What You Will Learn
- Understand the distinct roles and responsibilities of Experience, Process, and System APIs in a layered architecture.
- Learn to design an application network graph that promotes asset reuse and decouples systems.
- Grasp how to articulate the business outcomes of API-led, such as increased organizational agility and self-service IT.
- Identify how API-led connectivity facilitates a full API lifecycle management strategy within Anypoint Platform.
🛠️ Skills You Will Build
- Architecting composable solutions by correctly layering APIs to meet specific business and technical requirements.
- Developing a strategic vision for an application network that aligns with C4E (Center for Enablement) operating models.
- Communicating the technical and business value proposition of an API-led approach to diverse stakeholders.
- Defining governance strategies for API design, development, and consumption to ensure consistency and reusability.
💡 Top Tips to Prepare
- Memorize the specific functions and boundaries of Experience, Process, and System API layers.
- Focus on the C4E's role in evangelizing API-led connectivity and enabling decentralized development.
- Practice mapping complex business requirements to a three-tiered API architecture diagram.
- Thoroughly review the official MuleSoft documentation and whitepapers on building an application network.
📖 About this Domain
This domain covers architecting security for Mule applications and the Anypoint Platform. It focuses on a defense-in-depth strategy, securing the application network, and protecting data. You will design solutions for identity management, access control, and threat mitigation.
🎓 What You Will Learn
- Integrate with external identity providers (IdPs) using OAuth 2.0, OpenID Connect, and SAML for identity federation.
- Apply out-of-the-box policies like Rate Limiting, Throttling, and JSON/XML Threat Protection via API Manager.
- Implement transport layer security (TLS) for data in transit and encryption for data at rest using secure properties.
- Utilize Anypoint Platform security features including VPCs, dedicated load balancers, and role-based access control (RBAC).
🛠️ Skills You Will Build
- Select and apply appropriate API policies to enforce security contracts and protect backend systems.
- Architect Identity and Access Management (IAM) solutions for Mule applications, including SSO and client management.
- Design secure network architectures for CloudHub deployments using VPCs, VPNs, and dedicated load balancers.
- Leverage Anypoint Platform logging and auditing capabilities to monitor for security events and ensure compliance.
💡 Top Tips to Prepare
- Master the different OAuth 2.0 grant types and their specific use cases for securing APIs.
- Differentiate security layers: edge (DLB), API gateway (policies), and application implementation.
- Practice scenarios involving CloudHub VPCs, firewalls, and dedicated load balancers to secure network traffic.
- Know the purpose and configuration of key security policies like JWT validation and client ID enforcement.
