Oracle API Platform Cloud Service has this gateway which runs as an application inside the WebLogic server. The WebLogic server itself is quite huge. They should have something very lightweight to run this gateway, like NGINX. Right now, it's quite heavy. Oracle API Platform Cloud Service provides an API documentation tool, which is quite outdated. They support more of a blueprint while the market goes with OpenAPI.

Even when an API is functioning correctly, there seems to be a glitch within OCI (Oracle Cloud Infrastructure). We occasionally need to refresh and wait; then the same API starts working again. I'm not sure why this happens. This can be frustrating as it takes time to refresh and get things working properly. That's the main difficulty we face; otherwise, it's fine.

The internal portal functions well. However, when it comes to connectivity with internal photos or DNS domains, there's room for improvement. It could be a bit more user-friendly.

The solution's cost in terms of scaling could be better.

The product continues to improve and becomes more feature rich.  We know that there are tools to more closely integrate with Configuration Management.  Features to make more of Identity frameworks.

The APIs to retrieve the list of APIs should be improved. The need to allow token-based authorization with grant types other than the current password types, allowing us to integrate the API more easily into our public facing custom developer portal. Currently, only tokens generated by the Oracle Cloud login screen can be used.

There should be closer integration between the API Platform Cloud Service and the Identity Cloud Service to allow IDCS Applications, protecting backend systems, to be linked to the API Applications that consumers use to access APIs.

I would like to see enhanced support for SOAP Service and the corresponding WS-Security policies.

The on-premises connectivity can be improved because it is still not at it's best. I still have to install a gateway on-premises, then a firewall API management portal on the cloud. 

In the next release, I would like to see more security policies and for it to include an on-cloud gateway.