ANZ Bank is one of Australia’s top four banks and the largest bank in New Zealand by market capitalization. Headquartered in Melbourne, Victoria, we operate in more than 32 markets across Australia, New Zealand, Asia, Pacific, Europe, America and the Middle East. Our Payment team deals with all payment transaction types by providing highly secure, mission critical payment services to retail, institutional and international customers. The core payment platform is based on microservices architecture to support discreet payment processing requirements such as continuous volume growth, industry service level agreement (SLA) and complex payment orchestration and more. The API platform leverages APIs to perform specific business functions under the payment orchestration layer, which need to be resilient, scalable and heavy on security controls.

Simplifying our technology landscape

At ANZ, our mission is to improve the financial wellbeing and sustainability of our customers through reliable payment services. Over the past 12 months, we looked to simplify our technology landscape, to free up time so we could focus on implementing more customer-focused banking services. We needed an API management solution that would align to our API-first strategy, while also maintaining our high performance, security, and regulatory standards.

Specifically, the solution needed to:

• Simplify channel interactions with our platform;
• Improve developer experience and enable self-service;
• Ensure resilient fault tolerance;
• Improve our payment API security posture;
• Enable API-first digital enablement for both our internal and external payments customers;
• Have a scalable and transparent pricing model that ensured sustainable API programme growth.
  

Core focus on security and compliance

To meet our security and regulatory compliance standards an API solution would need to offer functionality including:

• Providing coarse-grained and fine-grained authorization and domain specific entitlements for API requests;
• Bundling APIs based on the nature of the channel;
• Integrating easily with established identity providers;
• Establishing patterns for connecting trusted upstream and downstream systems;
• Providing support for the industry standard OAuth 2.0 authorization protocol as per enterprise security standards.

We reviewed Apigee against other API management solutions and gateways, and determined it was the best fit for our needs. Not only did Apigee deliver on all our mission-critical requirements, but it also provided strong ease of use, feature-completeness and support for multiple coding languages.

Enabling smooth developer onboarding, processes and troubleshooting

Using Apigee has greatly improved developer onboarding and reduced the tedious steps involved in knowledge transfer and upskilling. The platform is easy for developers to use, and is backed by great documentation and video resources. These resources provide clear guidance about how to execute certain processes and troubleshoot as needed.

Overall, Apigee has delivered the features we need to manage the publication and consumption of APIs efficiently. We are now running eighteen APIs in production, including two APIs that enable payments through connection to our transaction database, and others that enable supporting services in the payment services platform team.

Our engineers and testers have found it easy to use the interface and Apigee API Management to deploy and test proxies. In addition, out of the box policies allow for fine-grained access control to handle and build proxies of varying degrees of complexity. These policies allow us to control security, manage traffic, mediate transformations and implement custom functionality via scripts.

We can now implement our fine-grained entitlement-based access control requirements, onboard new customers to the cloud and streamline payment channel onboarding. With Apigee, we are also integrating with other API management tools at the bank, in part to enable self-service for API providers and consumers by building a developer portal.

Thanks to Apigee, we are well positioned to adopt a decentralized API team model that will see different teams within payments and beyond create APIs, and ramp up to full production of our API-centric model in the near future. This is a key component of the bank’s broader cloud and API-first strategy that is designed to help ANZ become a more agile and adaptive technology organization. With the right components in place, can we help ANZ create opportunities and propositions that colleagues and customers love, ultimately helping ANZ realize its vision across Australia, New Zealand and international markets.

Kubernetes is an increasingly key part of the application deployment strategies at large organizations, and one of the most recommended options for the teams we work with. An idea brought to life at Google, organizations throughout the world use containers and Kubernetes on-premises, in Google Cloud, or in a multi-cloud scenario, and it has emerged as a leading application deployment platform. And because it’s open source, anyone can pop the hood, so to speak, to see how each component of it works, creating a trusted, verifiable framework that users can rely on.

Customers begin their Kubernetes and containerization journeys using various offerings in our product portfolio. Some, like Colgate, started their modernization journey with Kubernetes. Colgate is an $18B global consumer products company with ~34,000 diverse and dedicated people serving over 200 countries and territories. Through science-led innovation, they drive growth and reimagine a healthier future for all people, their pets, and our planet. 

During ideation, they talked through various considerations: What technology strengths does their organization have? What skills do their teams need? What will this initiative look like a decade from now? They implemented the following Kubernetes-focused architecture:

Supporting a variety of use cases and teams

Google Cloud also helped Colgate break new ground over the years, especially in the areas of cloud-native networking, security, monitoring, pub/sub, managed containerization, and multi-tenant environments.

Over time Colgate began to leverage Google’s managed container portfolio, which includes Cloud Run. Cloud Run lets you run containers on top of a serverless platform, unlocking workload possibilities for public websites, private services, APIs and batch jobs and eliminating a lot of the time spent on infrastructure management. Cloud Run also requires no prior knowledge of Kubernetes or containers.

Simplified enterprise-level management

Many teams have found that they prefer the serverless, hands-off approach that Cloud Run provides, and Colgate now evaluates Google Cloud’s serverless solutions alongside GKE for any applications destined for the cloud. At the same time, Cloud Run lets them continue to leverage their investment in workloads based on the Open Container Initiative. 

For example, Cloud Run is designed for Kubernetes compatibility with consistent management capabilities such as the ability to manage resources using kubectl via the config controller, and the ability to browse logs and metrics from both platforms in Cloud Logging and Monitoring. Cloud Run and GKE data planes are also interoperable, allowing Cloud Run and GKE services to be exposed behind a VPC behind private IPs using an internal load balancer. Cloud Run as an option has contributed to faster innovation, allowing Colgate to bring smiles to many more faces globally.

Google’s managed container offerings provide a composable and comprehensive set of solutions for customers’ applications. At Colgate, container-based managed services are used across the stack: on the front-end, where they use Identity-Aware Proxy to manage authentication and External Load Balancers to handle incoming traffic with high availability and low latency; at the application layer, where they can choose from Cloud Functions, Cloud Run, or GKE, depending on the level of control they need over the application; and at the internal load balancing level where NGINX® controllers serve internal applications. Together, these managed services ensure that Colgate has the flexibility to choose the right toolchain and maximize their goals for each use case. 

Colgate wanted to build internal applications on Cloud Run in a way that complied with their organization’s policies while maximizing developer productivity. They were able to use new features like the Cloud Run Identity Aware Proxy GA to build a secure, serverless deployment for their applications.

A great partnership with Google Cloud

Colgate and Google Cloud have enjoyed a deep partnership for many years, engaging across many technologies, teams, and design patterns.

They’ve engaged with Product and Engineering across compute, networking, Kubernetes, and serverless as they brought this new way of thinking to their users.

For Colgate and many of our customers looking to address the needs of the modern user, Google’s managed container offerings are a breath of fresh air. Its reliability, scalability, and control offer the  flexibility to build applications that meet the demands of both internal and external consumers. In addition, the variety of container offerings available on Google Cloud — GKE and Cloud Run — allow customers to make app deployment decisions based on the amount of Day 2 operations the users are willing to take on. Platform administrators appreciate the reduced management effort, users enjoy reduced downtime, and developers can simply deploy.

^{Google Cloud contributors: Rex Orioko, Rachel Tsao
Colgate-Palmolive contributors: Matthew Tattoli, Nicholas Farley, and David Wiser}

In the past year, Google has worked to surface timely and reliable health information, amplify public health campaigns, and help nonprofits get urgent support to Indians in need. Now, we are continuing to focus on helping India’s businesses accelerate their digital transformation, deepening our commitment to India’s digitization and economic recovery. To support customers and the public sector in India and across Asia Pacific, we’re excited to announce that our new Google Cloud region in Delhi National Capital Region (NCR) is now open. 

Designed to help both Indian and global companies alike build highly available applications for their customers, the Delhi NCR region is our second Google Cloud region in India and 10th to open in Asia Pacific. 

What customers and partners are saying

Navigating this past year has been a challenge for companies as they grapple with changing customers demands and economic uncertainty. Technology has played a critical role, and we’ve been fortunate to partner with and serve people, companies, and government institutions around the world to help them adapt. The Google Cloud region in Delhi NCR will help our customers adapt to new requirements, new opportunities and new ways of working, like we’ve helped so many companies do in the region: 

• InMobi scaled a personalized AI platform to support 120+ million active users. “With the arrival of the Google Cloud Delhi NCR, InMobi Group sees the opportunity to continue closing the gap between our users and products,” says Mohit Saxena, Co-founder and Group CTO of Inmobi. “Glance, especially, has been serving AI-powered personalised content to over 120 million active users. We can’t wait to continue giving them truly meaningful experiences that are speedy, scale well, and are relevant to them, by expanding the use of our current tools working on Google Cloud with the opening of a new region.”
• Groww now supports a sizable user base. “Google Cloud provides great technology that enables us to build and scale infrastructure to millions of users, and the new Google Cloud region in Delhi NCR will continue to help more businesses and startups in India access powerful cloud-based infrastructure, products and services,” says Neeraj Singh, Co-founder and Chief Technology Officer, Groww.
• HDFC Bank is positioned for the future. “At HDFC Bank, we are harnessing technology platforms to both run and build the bank. As we progress to be future ready, the objective is to invest in future technologies that give us scale, efficiency and resiliency. Towards this the Google Cloud region in Delhi NCR will enable us to enhance our resiliency and help us in building an active-active design framework for our new generation applications on cloud,” says Ramesh Lakshminarayanan, CIO, HDFC Bank.  
• Dr. Reddy’s Lab built a modern data platform with Google Cloud. “At Dr Reddy’s, we pride ourselves in helping patients regain good health, acting quickly to provide innovative solutions to address patients’ unmet needs and in accelerating access to medicines to people worldwide. Our Google Cloud-powered data platform is helping us realize these objectives and we welcome Google’s investment in the new Delhi NCR region as helping us and other businesses in India make further contributions to our social and economic future,” says Mukesh Rathi, Senior Vice President & CIO, Dr. Reddy’s Laboratories.
• “To survive the disruption caused by the pandemic and to succeed in the long term, organizations need to become digital natives, so they can be more agile, explore new business models and build new capabilities that boost resilience. A cloud-first strategy plays a key role in enabling businesses to do this,” said Piyush N. Singh, Lead – India market unit & lead – Growth and Strategic Client Relationships, Asia Pacific and Latin America, Accenture. “Harnessing the potential of cloud requires the right data infrastructure and this expansion by Google Cloud will undoubtedly help Indian enterprises in their digital transformation journeys.”

A global network of regions

Delhi NCR joins 25 existing Google Cloud regions connected via our high-performance network, helping customers better serve their users and customers throughout the globe. As the second region in India, customers benefit from improved business continuity planning with distributed, secure infrastructure needed to meet IT and business requirements for disaster recovery, while maintaining data sovereignty.

With this new region, Google Cloud customers operating in India also benefit from low latency and high performance of their cloud-based workloads and data. Designed for high availability, the region opens with three availability zones to protect against service disruptions, and offers a portfolio of key products, including Compute Engine, App Engine, Google Kubernetes Engine, Cloud Bigtable, Cloud Spanner, and BigQuery. 

Supporting India’s recovery with training and education

Google and Google Cloud will also continue to support our customers with people and education programs. We’re investing in local talent and the local developer community to help enterprises digitally transform and support economic recovery. 

Through the India Digitization Fund, we expanded our efforts to support India’s recovery from COVID-19—in particular, through programs to support education and small businesses. In addition to expanding internet access, and investments to help start-ups accelerate India’s digital transformation, we’ve grown our Grow with Google efforts. Businesses can access digital tools to maintain business continuity, find resources like quick help videos, and learn digital skills—in both English and in Hindi.

Helping customers build their transformation clouds

Google Cloud is here to support businesses, helping them get smarter with data, deploy faster, connect more easily with people and customers throughout the globe, and protect everything that matters to their businesses. The cloud region in Delhi NCR offers new technology and tools that can be a catalyst for this change. To learn more, visit the Google Cloud locations page, and be sure to watch the region launch event here.

Apps play a critical role in an ever-expanding range of healthcare services, as patients and providers increasingly expect streamlined, engaging digital experiences. This means that IT must become faster, more agile, and free from the constraints of everyday infrastructure management.

At Cardinal Health, we are continuously enhancing our technology to empower innovators across our organization as they strive to build connections across the continuum of care. Through our efforts, we have adopted a continuous integration and continuous delivery (CI/CD) pipeline that powers breakthroughs and drives innovation. Our CI/CID pipelines use a combination of Cloud Build for foundational elements, as well as our internal DevSecOps platform, NitroDX, to deploy our application workloads built on Google Cloud.

This CI/CD pipeline powered the development of our Pharmacy Marketing Advantage (PMA) Commerce, which was built from the ground up on Google Kubernetes Engine (GKE), to provide independent pharmacists with a digital platform that expands online shopping capabilities for patients by offering more than 11,000 over-the-counter products. We also replatformed our Order Express tool, which is a simple, reliable web ordering application for independent pharmacists, from on-prem to Google Compute Engine and GKE, which allowed us to shift from quarterly releases to weekly on-demand releases.

Our application teams work in close alignment with our product teams and handle everything from basic software updates to more advanced cloud-native app development. We place tremendous value on our ability to empower our application teams, and we invest in tools and technologies to make them as efficient and successful as possible.

As part of our efforts to optimize applications and deliver engaging digital experiences for our customers and their patients, we saw the value of rethinking our approach to storage and overall IT administration. Working with the NetApp Cloud Volume Service (CVS), a fully managed storage service, and Google Cloud, we fundamentally changed our IT capabilities.

Accelerating app development

As a cloud-first company, Cardinal Health has embraced a managed approach to IT provisioning in many areas. When we offload responsibilities like infrastructure maintenance, patching, and updates, we enable our developers to focus on continuous innovations that directly impact the quality of patient and provider experiences.

We’ve made measurable progress in automating our CI/CD pipelines to simplify provisioning Virtual Machines (VMs), managing firewall rules, launching Google Cloud projects, and more. Our NitroDx platform also significantly reduced development time from weeks to minutes, improving the software delivery process and accelerating digital transformation.

Google Cloud is our primary cloud services vendor and has removed much of the heavy lifting related to server provisioning, firmware patches, and similar tasks. We rely on a mix of Google Cloud services, including Compute Engine, GKE, BigQuery, and Vertex AI to deliver patient-centric solutions. We also work closely with partners like NetApp to improve our storage management at a much greater scale and more efficiently than we could do on our own.

By using a combination of NetApp and Google Cloud solutions, we’ve been able to decouple storage from our underlying infrastructure to make better use of our resources and accelerate app development. When running on-prem, shared storage proved to be a time and resource drain.

If an application needed shared storage in our legacy on-prem environment, we had to communicate the requirements to an engineer and create a change control. And even then, if all staff and funding were in place to support the change, it would take weeks to complete. This held up projects and delayed our time to market.

We quickly overcame this challenge with NetApp CVS. Through this tool, we can delegate permissions directly within a teams’ Google Cloud project, allowing them to administer their own shared volumes. This translates to on-demand shared storage without operational complexities or the need for dedicated teams to manage it.

We were an early adopter of NetApp CVS, and we’re happy to have made that decision. In addition to cost savings and faster time-to-market, we can now provide our staff with more professional development opportunities. The team members who made up the dedicated storage team now work across the cloud organization, focused on innovation and enablement rather than maintenance.

A stronger foundation for developers to stand on

We constantly work to fill gaps at any point in the developer experience. Containerizing our apps and deploying to GKE has been a major part of this process, driving efficiencies through consolidation and improving our processes to keep our operating systems patched, updated and maintained.

In the past, it was also difficult for us to get reproducible or CI/CD pipelines into our application spaces. Now, we make things easier for application teams as we can provide a CI/CD pipeline for the containers themselves, automating more of the underlying technology to keep developers moving forward.

As we shift more traditional virtual machine (VM) workloads into GKE and leverage NetApp CVS for shared storage, our developers can more easily plug into file-based services. This further accelerates app development and deployments and fuels a more easily managed, efficient CI/CD framework focused on value, not system maintenance.

Smart, data-driven decisions

We’ve been impressed by how quickly we can aggregate data, analyze it, and uncover insights with BigQuery, Vertex AI, and Dataproc — at a speed that would not have been possible without Google Cloud. Vertex AI pipelines helped us automate and standardize our ML operations so data scientists can focus on innovating code vs. managing deployments. This allowed us to make improvements in areas such as more accurately predicting market demand and providing more relevant product recommendations to our customers.

To date, Google Cloud has collaborated with us on many projects, giving us access to early-release products, listening to our needs, and applying our feedback to their product development. Likewise, NetApp continues to work closely with us to expand what is possible with NetApp CVS, particularly with the types of data we can store and the ability to manage it easily.

It’s an excellent partnership, and our work with Google Cloud and NetApp helps us redefine the possibilities of app modernization in healthcare. We can continue to push boundaries of speed, agility, and success of CI/CD pipelines. It’s exciting to see what we are accomplishing today and what we’ll do in the future to constantly improve our customer’s digital experience.

Learn how integrated solutions with NetApp on Google Cloud can help you unlock the full potential of your data.