|
22 | 22 | "solution" |
23 | 23 | ], |
24 | 24 | "short_description": "Deploy Virtual Private Clouds (VPCs) on IBM Cloud with full flexibility and customisation to support different workloads", |
25 | | - "long_description": "The VPC landing zone deployable architecture provides a foundational IBM Cloud [Virtual Private Cloud (VPC)](https://www.ibm.com/cloud/vpc) environment that serves as the base for deploying compute and advanced resources. It establishes the core networking and security framework without including Virtual Server Instances (VSI) or Red Hat OpenShift clusters by default. This architecture can be extended to support a variety of deployable architectures, such as [Landing zone for applications with virtual servers](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-vsi-vpc-28e2b12c-858f-4ae8-8717-60db8cec2e6e-global), [Landing zone for containerized applications with Red Hat OpenShift](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-ocp-vpc-1728a4fd-f561-4cf9-82ef-2b1eeb5da1a8-global), [Cloud automation for Red Hat OpenShift AI](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-ocp-ai-ba708aed-bb8a-4ac0-83a7-53a066701db5-global), and other cloud automation architectures. By setting up this foundational layer, it enables consistent, scalable, and secure deployments across multiple IBM Cloud workloads.", |
| 25 | + "long_description": "The Cloud foundation for VPC deployable architecture provides a foundational IBM Cloud [Virtual Private Cloud (VPC)](https://www.ibm.com/cloud/vpc) environment that serves as the base for deploying compute and advanced resources. It establishes the core networking and security framework without including Virtual Server Instances (VSI) or Red Hat OpenShift clusters by default. You can extend this deployable architecture to support a variety of others like [Landing zone for applications with virtual servers](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-vsi-vpc-28e2b12c-858f-4ae8-8717-60db8cec2e6e-global), [Landing zone for containerized applications with Red Hat OpenShift](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-ocp-vpc-1728a4fd-f561-4cf9-82ef-2b1eeb5da1a8-global), [Cloud automation for Red Hat OpenShift AI](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-ocp-ai-ba708aed-bb8a-4ac0-83a7-53a066701db5-global) and many more. You can set up a foundational layer to enable consistent, scalable, and secure deployments across multiple IBM Cloud workloads.", |
26 | 26 | "offering_docs_url": "https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-overview#overview-vpc", |
27 | 27 | "offering_icon_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/main/images/vpc_icon.svg", |
28 | 28 | "provider_name": "IBM", |
29 | 29 | "features": [ |
30 | 30 | { |
31 | 31 | "title": "VPC Networking and Subnet Management", |
32 | | - "description": "Automatically provisions [subnets](https://cloud.ibm.com/docs/vpc?topic=vpc-about-subnets-vpc) across three availability zones, dividing your VPC into smaller, isolated networks for improved organization, availability, and traffic control. Includes support for [address prefixes](https://cloud.ibm.com/docs/vpc?topic=vpc-about-subnets-vpc) to define IP ranges, and [routing tables](https://cloud.ibm.com/docs/vpc?topic=vpc-create-vpc-routing-table&interface=ui) with custom routes to manage how traffic flows within the VPC and to external networks." |
| 32 | + "description": "Provisions [subnets](https://cloud.ibm.com/docs/vpc?topic=vpc-about-subnets-vpc) across three availability zones, dividing your VPC into smaller, isolated networks for improved organization, availability, and traffic control. It Includes support for [address prefixes](https://cloud.ibm.com/docs/vpc?topic=vpc-about-subnets-vpc) to define IP ranges, and [routing tables](https://cloud.ibm.com/docs/vpc?topic=vpc-create-vpc-routing-table&interface=ui) with custom routes to manage flow of traffic not only within the VPC but also to the external networks." |
33 | 33 | }, |
34 | 34 | { |
35 | 35 | "title": "Network Security Controls", |
|
125 | 125 | "crn:v1:bluemix:public:iam::::role:Administrator" |
126 | 126 | ], |
127 | 127 | "service_name": "is.vpc", |
128 | | - "notes": "Required to create Virtual Private Cloud(VPC) instance." |
| 128 | + "notes": "Required to create Virtual Private Cloud(VPC)" |
129 | 129 | }, |
130 | 130 | { |
131 | 131 | "service_name": "cloud-object-storage", |
|
136 | 136 | "notes": "[Optional] Required if VPC Flow Logs are enabled." |
137 | 137 | }, |
138 | 138 | { |
139 | | - "service_name": "kms", |
140 | 139 | "role_crns": [ |
141 | 140 | "crn:v1:bluemix:public:iam::::serviceRole:Manager", |
142 | 141 | "crn:v1:bluemix:public:iam::::role:Editor" |
143 | 142 | ], |
144 | | - "notes": "[Optional] Required if KMS encryption is enabled to encrypt the Object Storage bucket used for storing flow logs." |
| 143 | + "service_name": "hs-crypto", |
| 144 | + "notes": "[Optional] Required if Hyper Protect Crypto Service is used for encryption." |
| 145 | + }, |
| 146 | + { |
| 147 | + "role_crns": [ |
| 148 | + "crn:v1:bluemix:public:iam::::serviceRole:Manager", |
| 149 | + "crn:v1:bluemix:public:iam::::role:Editor" |
| 150 | + ], |
| 151 | + "service_name": "kms", |
| 152 | + "notes": "[Optional] Required if Key Protect is used for encryption." |
145 | 153 | }, |
146 | 154 | { |
147 | 155 | "role_crns": [ |
|
165 | 173 | "crn:v1:bluemix:public:iam::::role:Editor" |
166 | 174 | ], |
167 | 175 | "service_name": "atracker", |
168 | | - "notes": "[Optional] Required to set up Activity Tracker Event Routing of auditing events." |
| 176 | + "notes": "[Optional] Required when enabling the Activity Tracker Event Routing." |
169 | 177 | }, |
170 | 178 | { |
171 | 179 | "service_name": "sysdig-secure", |
|
181 | 189 | "crn:v1:bluemix:public:iam::::serviceRole:Manager" |
182 | 190 | ], |
183 | 191 | "service_name": "apprapp", |
184 | | - "notes": "[Optional] Required for provisioning the App Configuration instance." |
| 192 | + "notes": "[Optional] Required to Create the App Configuration instance." |
185 | 193 | } |
186 | 194 | ], |
187 | 195 | "configuration": [ |
|
541 | 549 | { |
542 | 550 | "name": "deploy-arch-ibm-kms", |
543 | 551 | "id": "2cad4789-fa90-4886-9c9e-857081c273ee-global", |
544 | | - "description": "Enables customer-managed encryption with IBM Cloud Key Protect for the Cloud Object Storage bucket used by VPC Flow Logs. If disabled, IBM-managed encryption is used. ", |
| 552 | + "description": "Enable managed encryption with your own keys via IBM Cloud Key Protect. If disabled, services will default to IBM-managed encryption. ", |
545 | 553 | "flavors": [ |
546 | 554 | "fully-configurable" |
547 | 555 | ], |
|
582 | 590 | { |
583 | 591 | "name": "deploy-arch-ibm-cos", |
584 | 592 | "id": "68921490-2778-4930-ac6d-bae7be6cd958-global", |
585 | | - "description": "Sets up an Object Storage instance to store VPC Flow Logs. ", |
| 593 | + "description": "Set up an Object Storage instance to store VPC Flow Logs. ", |
586 | 594 | "flavors": [ |
587 | 595 | "instance" |
588 | 596 | ], |
|
652 | 660 | }, |
653 | 661 | { |
654 | 662 | "name": "deploy-arch-ibm-cloud-monitoring", |
655 | | - "description": "Sets up a Cloud Monitoring instance to collect the platform metrics.", |
| 663 | + "description": "Set up a Cloud Monitoring instance to collect the platform metrics.", |
656 | 664 | "id": "73debdbf-894f-4c14-81c7-5ece3a70b67d-global", |
657 | 665 | "version": "v1.6.4", |
658 | 666 | "flavors": [ |
|
0 commit comments