Skip to content

Commit 9ef5c4f

Browse files
tyao117tyao117
authored
First Version (#8)
1 parent 1d29160 commit 9ef5c4f

File tree

5 files changed

+492
-102
lines changed

5 files changed

+492
-102
lines changed

‎ibm_catalog.json‎

Lines changed: 249 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,251 @@
11
{
2-
"products": [
3-
{
4-
"label": "stack-template",
5-
"name": "stack-template",
6-
"product_kind": "solution",
7-
"tags": [
8-
"converged_infra"
9-
],
10-
"offering_icon_url": "https://globalcatalog.cloud.ibm.com/api/v1/1082e7d2-5e2f-0a11-a3bc-f88a8e1931fc/artifacts/solution.svg",
11-
"flavors": [
12-
{
13-
"compliance": {},
14-
"architecture": {}
15-
}
16-
]
17-
}
18-
]
2+
"products": [
3+
{
4+
"label": "Core Security Services",
5+
"name": "core-security-services",
6+
"product_kind": "solution",
7+
"tags": [
8+
"solution",
9+
"support_ibm",
10+
"target_terraform",
11+
"ibm_beta",
12+
"security"
13+
],
14+
"keywords": [
15+
"kms",
16+
"scc",
17+
"secrets manager",
18+
"security-compliance-center",
19+
"keyprotect",
20+
"IaC",
21+
"infrastructure as code",
22+
"security and compliance center",
23+
"terraform",
24+
"solution",
25+
"secrets",
26+
"key protect",
27+
"compliance"
28+
],
29+
"short_description": "This architecture supports deploying core security services - Key Protect, Secrets Manager, Security and Compliance Center. It will deploy Event Notifications and Observability.",
30+
"long_description": "This architecture supports deploying core security services like Key Protect, Secrets Manager, Security and Compliance Center.",
31+
"provider_name": "IBM",
32+
"offering_icon_url": "https://globalcatalog.cloud.ibm.com/api/v1/1082e7d2-5e2f-0a11-a3bc-f88a8e1931fc/artifacts/terraform.svg",
33+
"features": [
34+
{
35+
"title": "Creates an IBM Key Protect instance",
36+
"description": "Creates and configures IBM Key Protect instance and creates root keys for Cloud Object Storage and Secrets Manager."
37+
},
38+
{
39+
"title": "Creates an IBM Secrets Manager Instance ",
40+
"description": "Creates and configures an IBM Secrets Manager Instance."
41+
},
42+
{
43+
"title": "Creates an IBM Security and Compliance Center Instance",
44+
"description": "Creates and configures an IBM Security Compliance Center Instance."
45+
},
46+
{
47+
"title": "Creates an IBM Cloud Object Storage Instance",
48+
"description": "Creates and configures an IBM Cloud Object Storage Instance and multiple COS buckets that is encrypted by Key Protect"
49+
},
50+
{
51+
"title": "Creates Service to Service Authorizations.",
52+
"description": "Creates and configures service-to-service authorizations for the following: KMS, COS, Secrets Manager, and SCC"
53+
}
54+
],
55+
"flavors": [
56+
{
57+
"label": "Standard",
58+
"name": "Standard",
59+
"compliance": {
60+
"authority": "scc-v3",
61+
"profiles": [
62+
{
63+
"profile_name": "CIS IBM Cloud Foundations Benchmark",
64+
"profile_version": "1.0.0"
65+
}
66+
]
67+
},
68+
"iam_permissions": [
69+
{
70+
"service_name": "cloud-object-storage",
71+
"role_crns": [
72+
"crn:v1:bluemix:public:iam::::serviceRole:Manager"
73+
]
74+
},
75+
{
76+
"service_name": "secrets-manager",
77+
"role_crns": [
78+
"crn:v1:bluemix:public:iam::::serviceRole:Manager",
79+
"crn:v1:bluemix:public:iam::::role:Editor",
80+
"crn:v1:bluemix:public:iam::::role:Operator"
81+
]
82+
},
83+
{
84+
"service_name": "kms",
85+
"role_crns": [
86+
"crn:v1:bluemix:public:iam::::serviceRole:Manager"
87+
]
88+
},
89+
{
90+
"service_name": "compliance",
91+
"role_crns": [
92+
"crn:v1:bluemix:public:iam::::serviceRole:Manager",
93+
"crn:v1:bluemix:public:iam::::role:Operator",
94+
"crn:v1:bluemix:public:iam::::role:Editor"
95+
]
96+
}
97+
],
98+
"architecture": {
99+
"features": [
100+
{
101+
"title": "Creates IBM Cloud Core Security Services in a resource group.",
102+
"description": "Creates a resource group called core-security-services or uses a preexisting one"
103+
},
104+
{
105+
"title": "Creates an IBM Key Protect Instance",
106+
"description": "Creates and configures an IBM Key Protect Instance and creates root keys for Secret Manager and COS."
107+
},
108+
{
109+
"title": "Creates an IBM Secrets Manager Instance ",
110+
"description": "Creates and configures an IBM Secrets Manager Instance"
111+
},
112+
{
113+
"title": "Creates an IBM Security and Compliance Center Instance",
114+
"description": "Creates and configures an IBM Security Compliance Center Instance"
115+
},
116+
{
117+
"title": "Creates an IBM Event Notification Instance",
118+
"description": "Creates and configures an Event Notifications Instance"
119+
}
120+
],
121+
"diagrams": [
122+
{
123+
"diagram": {
124+
"url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-kms-all-inclusive/main/reference-architecture/key_protect.svg",
125+
"caption": "Key Protect",
126+
"type": "image/svg+xml",
127+
"thumbnail_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-kms-all-inclusive/main/reference-architecture/key_protect.svg"
128+
},
129+
"description": "The architecture of Key Protect"
130+
},
131+
{
132+
"diagram": {
133+
"url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-observability-da/main/reference-architecture/deployable-architecture-observability-instances.svg",
134+
"caption": "Observability",
135+
"type": "image/svg+xml",
136+
"thumbnail_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-observability-da/main/reference-architecture/deployable-architecture-observability-instances.svg"
137+
},
138+
"description": "The architecture of Observability"
139+
},
140+
{
141+
"diagram": {
142+
"url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-event-notifications/main/reference-architecture/en.svg",
143+
"caption": "Event Notifications",
144+
"type": "image/svg+xml",
145+
"thumbnail_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-event-notifications/main/reference-architecture/en.svg"
146+
},
147+
"description": "The architecture of Event Notifications"
148+
},
149+
{
150+
"diagram": {
151+
"url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-scc-da/main/reference-architecture/scc.svg",
152+
"caption": "IBM Cloud Security and Compliance Center",
153+
"type": "image/svg+xml",
154+
"thumbnail_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-scc-da/main/reference-architecture/scc.svg"
155+
},
156+
"description": "The architecture of Security and Compliance Center"
157+
},
158+
{
159+
"diagram": {
160+
"url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-secrets-manager/main/reference-architecture/secrets_manager.svg",
161+
"caption": "Secrets Manager",
162+
"type": "image/svg+xml",
163+
"thumbnail_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-secrets-manager/main/reference-architecture/secrets_manager.svg"
164+
},
165+
"description": "The architecture of Secrets Manager"
166+
}
167+
]
168+
},
169+
"configuration": [
170+
{
171+
"key": "prefix",
172+
"type": "string",
173+
"default_value": "",
174+
"description": "The prefix to use for all resources deployed.",
175+
"required": true
176+
},
177+
{
178+
"key": "use_existing_resource_group",
179+
"type": "boolean",
180+
"default_value": false,
181+
"description": "Whether to use an existing resource group.",
182+
"required": true
183+
},
184+
{
185+
"key": "region",
186+
"type": "string",
187+
"default_value": "us-south",
188+
"description": "The region to deploy the Deployable Architecture",
189+
"required": true,
190+
"options": [
191+
{
192+
"displayname": "us-south",
193+
"value": "us-south"
194+
},
195+
{
196+
"displayname": "eu-de",
197+
"value": "eu-de"
198+
},
199+
{
200+
"displayname": "eu-es",
201+
"value": "eu-es"
202+
}
203+
]
204+
},
205+
{
206+
"key": "resource_group_name",
207+
"type": "string",
208+
"default_value": "__NOT_SET__",
209+
"required": true
210+
},
211+
{
212+
"key": "sm_service_plan",
213+
"type": "string",
214+
"default_value": "standard",
215+
"description": "The pricing plan to use when deploying the Secrets Manager Deployable Architecture",
216+
"required": false,
217+
"options": [
218+
{
219+
"displayname": "standard",
220+
"value": "standard"
221+
},
222+
{
223+
"displayname": "trial",
224+
"value": "trial"
225+
}
226+
]
227+
},
228+
{
229+
"key": "scc_service_plan",
230+
"type": "string",
231+
"default_value": "security-compliance-center-standard-plan",
232+
"description": "The pricing plan to use when deploying IBM Cloud Security Compliance Center",
233+
"required": false,
234+
"options": [
235+
{
236+
"displayname": "standard",
237+
"value": "security-compliance-center-standard-plan"
238+
},
239+
{
240+
"displayname": "trial",
241+
"value": "security-compliance-center-trial-plan"
242+
}
243+
]
244+
}
245+
],
246+
"install_type": "fullstack"
247+
}
248+
]
249+
}
250+
]
19251
}

0 commit comments

Comments
 (0)