ibm_catalog.json

{
  "products": [
    {
      "name": "deploy-arch-ibm-is-private-path-ext-conn",
      "label": "Cloud foundation for on-premises connectivity",
      "product_kind": "solution",
      "tags": [
        "ibm_created",
        "target_terraform",
        "terraform",
        "solution",
        "network",
        "platform_engineering"
      ],
      "keywords": [
        "vpc",
        "private path",
        "private",
        "nlb",
        "alb",
        "IaC",
        "infrastructure as code",
        "terraform",
        "solution"
      ],
      "short_description": "Deploys VPC Private Path service with integration of application load balancer for external connectivity",
      "long_description": "Private network connectivity is essential for IBM Cloud customers who prioritize privacy, security, and compliance. Through [Private Path services for VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-private-path-service-intro), providers can deliver their cloud and on-premises services over the IBM Cloud private network backbone, ensuring secure and private interactions for consumers. \n\nLeverage [Terraform IBM Modules](https://github.com/terraform-ibm-modules) to shape and scale your solutions. You can integrate Terraform IBM Modules (TIM) to extend functionality and design a solution tailored to your environment and operations needs. These modules offer reusable, customizable elements that follow IBM Cloud's recommended practices. You can access the [source code and documentation](https://github.com/terraform-ibm-modules/terraform-ibm-vpc-private-path-external-connectivity) and use it to extend your current architecture or create new solutions.\n\nYou can use this solution to provision and configure a VPC Private Path service to securely connect services hosted in IBM Cloud VPC, on-premise or other reachable external locations.\n\nℹ️ This Terraform-based automation is part of a broader suite of IBM-maintained Infrastructure as Code (IaC) assets, each following the naming pattern \"Cloud automation for *servicename*\" and focusing on single IBM Cloud service. These single-service deployable architectures can be used on their own to streamline and automate service deployments through an [IaC approach](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-understanding-projects), or assembled together into a broader [automated IaC stack](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-config-stack) to automate the deployment of an end-to-end solution architecture.",
      "offering_docs_url": "https://cloud.ibm.com/docs/ibm-cloud-provider-for-terraform?topic=ibm-cloud-provider-for-terraform-about-tim",
      "offering_icon_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-vpc-private-path-external-connectivity/main/images/private_path.svg",
      "provider_name": "IBM",
      "features": [
        {
          "title": "Application load balancer",
          "description": "Sets up an [Application load balancer (ALB)](https://cloud.ibm.com/docs/vpc?topic=vpc-load-balancers) within a Virtual Private Cloud (VPC) environment to manage and distribute incoming network traffic across multiple backend targets."
        },
        {
          "title": "Private Path Network load balancer",
          "description": "Sets up a [Private Path Network load balancer](https://cloud.ibm.com/docs/vpc?topic=vpc-ppnlb-ui-creating-private-path-network-load-balancer&interface=ui) with a backend pool to connect to the VPE Gateway."
        },
        {
          "title": "Private Path service",
          "description": "Creates a VPC [Private Path service](https://cloud.ibm.com/docs/private-path?topic=private-path-overview&interface=cli&OR=PowerPoint#pps_overview-include-pps-use-case-5) that provides private connectivity for IBM Cloud and the external services."
        },
        {
          "title": "Observability",
          "description": "This solution can optionally configure resources for logging, monitoring and activity tracker event routing."
        },
        {
          "title": "Object Storage",
          "description": "Optionally you can create and configure an [Object Storage](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-cos-understand) to store VPC Flow Logs. You can provide an existing Object Storage instance or use the [Cloud automation for Object Storage](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-cos-68921490-2778-4930-ac6d-bae7be6cd958-global) to creating an instance."
        },
        {
          "title": "Key encryption",
          "description": "You can optionally enable key encryption of the Object Storage using either a newly created key or an existing one. [Cloud automation for Key Protect](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-kms-2cad4789-fa90-4886-9c9e-857081c273ee-global) can be used for key management."
        },
        {
          "title": "Composable and Extensible Architecture",
          "description": "This architecture illustrates how Terraform IBM Modules(TIM) can be integrated to deliver a complete solution on IBM Cloud. Each module is a reusable, and validated component for security, compliance, and operational IBM best practices. You can deploy this architecture as-is or configure it as code by leveraging the underlying modules to fit your specific requirements. Explore the [source code and documentation](https://github.com/terraform-ibm-modules/terraform-ibm-vpc-private-path-external-connectivity) to adapt, extend, or create entirely new solutions using these building blocks."
        }
      ],
      "support_details": "This product is in the community registry, as such support is handled through the [original repo](https://github.com/terraform-ibm-modules/terraform-ibm-vpc-private-path-external-connectivity). If you experience issues please open an issue [here](https://github.com/terraform-ibm-modules/terraform-ibm-vpc-private-path-external-connectivity/issues). Please note this product is not supported via the IBM Cloud Support Center.",
      "flavors": [
        {
          "label": "Fully configurable",
          "name": "fully-configurable",
          "index": 1,
          "install_type": "fullstack",
          "short_description": "Ideal for users who want flexibility with a reliable starting point.",
          "working_directory": "solutions/fully-configurable",
          "release_notes_url": "https://github.com/terraform-ibm-modules/terraform-ibm-vpc-private-path-external-connectivity/releases",
          "iam_permissions": [
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::role:Viewer"
              ],
              "service_name": "Resource group only",
              "notes": "Viewer access is required in the resource group you want to provision in."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::role:Administrator"
              ],
              "service_name": "All Account Management services",
              "notes": "[Optional] Required to create new resource groups when enabling the Account Configuration integration."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::role:Administrator"
              ],
              "service_name": "All Identity and Access enabled services",
              "notes": "[Optional] Required to create new resource groups with account settings when enabling the Account Configuration integration."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::role:Administrator"
              ],
              "service_name": "is.vpc",
              "notes": "[Optional] Required to create Virtual Private Cloud(VPC)."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::serviceRole:Manager",
                "crn:v1:bluemix:public:iam::::role:Editor"
              ],
              "service_name": "cloud-object-storage",
              "notes": "[Optional] Required if VPC Flow Logs are enabled."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::serviceRole:Manager",
                "crn:v1:bluemix:public:iam::::role:Editor"
              ],
              "service_name": "kms",
              "notes": "[Optional] Required if Key Protect is used for encryption."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::serviceRole:Manager",
                "crn:v1:bluemix:public:iam::::role:Editor"
              ],
              "service_name": "hs-crypto",
              "notes": "[Optional] Required if Hyper Protect Crypto Service is used for encryption."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::serviceRole:Manager",
                "crn:v1:bluemix:public:iam::::role:Editor"
              ],
              "service_name": "sysdig-monitor",
              "notes": "[Optional] Required to create an instance of Cloud Monitoring."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::serviceRole:Manager",
                "crn:v1:bluemix:public:iam::::role:Editor"
              ],
              "service_name": "logs",
              "notes": "[Optional] Required to create an instance of Cloud Logs."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::serviceRole:Writer",
                "crn:v1:bluemix:public:iam::::role:Editor"
              ],
              "service_name": "atracker",
              "notes": "[Optional]  Required when enabling the Activity Tracker Event Routing."
            },
            {
              "role_crns": [
                "crn:v1:bluemix:public:iam::::serviceRole:Administrator",
                "crn:v1:bluemix:public:iam::::serviceRole:Manager"
              ],
              "service_name": "secrets-manager",
              "notes": "[optional] Required for creating an Secrets Manager instance."
            }
          ],
          "configuration": [
            {
              "key": "ibmcloud_api_key"
            },
            {
              "key": "region",
              "required": true,
              "type": "string",
              "custom_config": {
                "config_constraints": {
                  "generationType": "2"
                },
                "grouping": "deployment",
                "original_grouping": "deployment",
                "type": "vpc_region"
              }
            },
            {
              "key": "prefix",
              "required": true,
              "default_value": "dev",
              "random_string": {
                "length": 4
              },
              "value_constraints": [
                {
                  "type": "regex",
                  "description": "Prefix must begin with a lowercase letter and may contain only lowercase letters, digits, and hyphens '-'. It must not end with a hyphen('-'), and cannot contain consecutive hyphens ('--'). It should not exceed 16 characters.",
                  "value": "^$|^__NULL__$|^[a-z](?!.*--)(?:[a-z0-9-]{0,14}[a-z0-9])?$"
                }
              ]
            },
            {
              "key": "existing_resource_group_name",
              "display_name": "resource_group",
              "custom_config": {
                "type": "resource_group",
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "identifier": "rg_name"
                }
              }
            },
            {
              "key": "existing_vpc_crn",
              "display_name": "existing_vpc",
              "value_constraints": [
                {
                  "type": "regex",
                  "description": "The value provided for 'existing_vpc_crn' is not valid.",
                  "value": "^crn:(.*:){3}is:(.*:){2}:vpc:[0-9a-z]{4}-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$"
                }
              ],
              "custom_config": {
                "type": "platform_resource",
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "resourceType": "vpc",
                  "selection": "single_select",
                  "valueType": "crn"
                }
              }
            },
            {
              "key": "existing_subnet_id",
              "required": true,
              "custom_config": {
                "type": "platform_resource",
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "resourceType": "subnet",
                  "selection": "single_select",
                  "valueType": "id"
                }
              }
            },
            {
              "key": "private_path_service_endpoints",
              "required": true,
              "custom_config": {
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "type": "string"
                }
              }
            },
            {
              "key": "private_path_tags",
              "custom_config": {
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "type": "string"
                }
              }
            },
            {
              "key": "private_path_access_tags",
              "custom_config": {
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "type": "string"
                }
              }
            },
            {
              "key": "private_path_name"
            },
            {
              "key": "private_path_default_access_policy",
              "options": [
                {
                  "displayname": "Review",
                  "value": "review"
                },
                {
                  "displayname": "Permit",
                  "value": "permit"
                },
                {
                  "displayname": "Deny",
                  "value": "deny"
                }
              ]
            },
            {
              "key": "private_path_publish"
            },
            {
              "key": "private_path_zonal_affinity"
            },
            {
              "key": "private_path_account_policies",
              "custom_config": {
                "type": "code_editor",
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "supportedLanguages": [
                    "hcl"
                  ]
                }
              }
            },
            {
              "key": "network_loadbalancer_name"
            },
            {
              "key": "application_loadbalancer_listener_certificate_crn",
              "required": true,
              "value_constraints": [
                {
                  "type": "regex",
                  "description": "The value provided for 'application_loadbalancer_listener_certificate_crn' is not valid.",
                  "value": "^__NULL__$|^crn:(.*:){3}secrets-manager:(.*:){2}[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}:secret:[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$"
                }
              ]
            },
            {
              "key": "application_loadbalancer_listener_idle_timeout"
            },
            {
              "key": "application_loadbalancer_listener_port"
            },
            {
              "key": "application_loadbalancer_listener_protocol",
              "options": [
                {
                  "displayname": "HTTPS",
                  "value": "https"
                },
                {
                  "displayname": "TCP",
                  "value": "tcp"
                },
                {
                  "displayname": "UDP",
                  "value": "udp"
                }
              ]
            },
            {
              "key": "application_loadbalancer_pool_algorithm",
              "options": [
                {
                  "displayname": "Round Robin",
                  "value": "round_robin"
                },
                {
                  "displayname": "Weighted Round Robin",
                  "value": "weighted_round_robin"
                }
              ]
            },
            {
              "key": "application_loadbalancer_pool_health_delay"
            },
            {
              "key": "application_loadbalancer_pool_health_retries"
            },
            {
              "key": "application_loadbalancer_pool_health_timeout"
            },
            {
              "key": "application_loadbalancer_pool_health_type",
              "options": [
                {
                  "displayname": "HTTPS",
                  "value": "https"
                },
                {
                  "displayname": "TCP",
                  "value": "tcp"
                }
              ]
            },
            {
              "key": "application_loadbalancer_pool_member_ip_address"
            },
            {
              "key": "application_loadbalancer_pool_member_port"
            },
            {
              "key": "application_loadbalancer_pool_protocol",
              "options": [
                {
                  "displayname": "HTTPS",
                  "value": "https"
                },
                {
                  "displayname": "TCP",
                  "value": "tcp"
                },
                {
                  "displayname": "UDP",
                  "value": "udp"
                }
              ]
            },
            {
              "key": "application_loadbalancer_type",
              "options": [
                {
                  "displayname": "Public",
                  "value": "public"
                },
                {
                  "displayname": "Private",
                  "value": "private"
                }
              ]
            },
            {
              "key": "network_loadbalancer_listener_accept_proxy_protocol"
            },
            {
              "key": "network_loadbalancer_listener_port"
            },
            {
              "key": "network_loadbalancer_pool_algorithm"
            },
            {
              "key": "network_loadbalancer_pool_health_delay"
            },
            {
              "key": "network_loadbalancer_pool_health_monitor_port"
            },
            {
              "key": "network_loadbalancer_pool_health_monitor_url"
            },
            {
              "key": "network_loadbalancer_pool_health_retries"
            },
            {
              "key": "network_loadbalancer_pool_health_timeout"
            },
            {
              "key": "network_loadbalancer_pool_health_type",
              "options": [
                {
                  "displayname": "HTTPS",
                  "value": "https"
                },
                {
                  "displayname": "TCP",
                  "value": "tcp"
                }
              ]
            },
            {
              "key": "network_loadbalancer_pool_member_port"
            },
            {
              "key": "secrets_manager_service_plan",
              "type_metadata": "string",
              "virtual": true,
              "default_value": "standard",
              "options": [
                {
                  "description": "Centrally manage secrets in a dedicated instance. Unlimited Secrets Manager instances per IBM Cloud account. Unlimited access to all service capabilities.",
                  "displayname": "Standard",
                  "value": "standard"
                },
                {
                  "description": "Choose this option only if your account does not already have a Trial plan instance. Only one Trial plan instance is allowed per account. After it expires, upgrade to the Standard plan to keep using Secrets Manager.",
                  "displayname": "Trial (30 days)",
                  "value": "trial"
                }
              ]
            },
            {
              "key": "existing_secrets_manager_instance_crn",
              "display_name": "existing_secrets_manager_instance",
              "required": false,
              "value_constraints": [
                {
                  "type": "regex",
                  "description": "The value provided for 'existing_secrets_manager_instance_crn' is not valid.",
                  "value": "^crn:(.*:){3}secrets-manager:(.*:){2}[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}::$"
                }
              ],
              "custom_config": {
                "type": "platform_resource",
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "resourceType": "secrets-manager",
                  "selection": "single_select",
                  "valueType": "crn"
                }
              }
            },
            {
              "key": "existing_secrets_manager_secret_group_id"
            },
            {
              "key": "private_cert_engine_config_root_ca_common_name"
            },
            {
              "key": "private_cert_engine_config_template_name"
            },
            {
              "key": "root_ca_name",
              "type": "string",
              "required": false,
              "virtual": true,
              "default_value": "root-ca",
              "description": "The name of the Root Certificate Authority you want to create."
            },
            {
              "key": "root_ca_common_name",
              "type": "string",
              "required": false,
              "virtual": true,
              "default_value": "example-root.com",
              "description": "The common name of the Root Certificate Authority you want to create."
            },
            {
              "key": "intermediate_ca_name",
              "type": "string",
              "required": false,
              "virtual": true,
              "default_value": "intermediate-ca",
              "description": "The name of the Intermediate Certificate Authority you want to create."
            },
            {
              "key": "intermediate_ca_common_name",
              "type": "string",
              "required": false,
              "virtual": true,
              "default_value": "example-int.com",
              "description": "The common name of the Intermediate Certificate Authority you want to create."
            },
            {
              "key": "certificate_template_name",
              "type": "string",
              "required": false,
              "virtual": true,
              "default_value": "template",
              "description": "The name of the Certificate Template you want to create."
            },
            {
              "key": "template_max_ttl",
              "type": "string",
              "required": false,
              "virtual": true,
              "default_value": "8760h",
              "description": "Max TTL for the certificate template you want to create."
            },
            {
              "key": "provider_visibility",
              "hidden": true,
              "options": [
                {
                  "displayname": "Private",
                  "value": "private"
                },
                {
                  "displayname": "Public",
                  "value": "public"
                },
                {
                  "displayname": "Public-and-Private",
                  "value": "public-and-private"
                }
              ]
            },
            {
              "key": "subnets",
              "default_value": "{\n    zone-1 = [\n      {\n        name           = \"subnet-a\"\n        cidr           = \"10.10.10.0/24\"\n        public_gateway = true\n        acl_name       = \"vpc-acl\"\n        no_addr_prefix = false\n      }\n    ],\n    zone-2 = [\n      {\n        name           = \"subnet-b\"\n        cidr           = \"10.20.10.0/24\"\n        public_gateway = true\n        acl_name       = \"vpc-acl\"\n        no_addr_prefix = false\n      }\n    ],\n    zone-3 = [\n      {\n        name           = \"subnet-c\"\n        cidr           = \"10.30.10.0/24\"\n        public_gateway = true\n        acl_name       = \"vpc-acl\"\n        no_addr_prefix = false\n      }\n    ]\n  }",
              "description": "List of subnets for the vpc. For each item in each array, a subnet will be created. Items can be either CIDR blocks or total ipv4 addresses. Public gateways will be enabled only in zones where a gateway has been created. [Learn more](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/blob/main/solutions/fully-configurable/DA-types.md#subnets-).",
              "required": false,
              "virtual": true,
              "hidden": true,
              "custom_config": {
                "grouping": "deployment",
                "original_grouping": "deployment",
                "type": "code_editor",
                "config_constraints": {
                  "supportedLanguages": [
                    "hcl"
                  ]
                }
              }
            },
            {
              "key": "network_acls",
              "type": "list(object)",
              "default_value": "[\n  { name                         = \"vpc-acl\"\n    add_ibm_cloud_internal_rules = true\n    add_vpc_connectivity_rules   = true\n    prepend_ibm_rules            = true\n    rules = [\n      {\n        name      = \"allow-443-inbound-source\"\n        action    = \"allow\"\n        direction = \"inbound\"\n        tcp = {\n          source_port_min = 443\n          source_port_max = 443\n        }\n        destination = \"0.0.0.0/0\"\n        source      = \"0.0.0.0/0\"\n      },\n      {\n        name      = \"allow-443-inbound-dest\"\n        action    = \"allow\"\n        direction = \"inbound\"\n        tcp = {\n          port_max = 443\n          port_min = 443\n        }\n        destination = \"0.0.0.0/0\"\n        source      = \"0.0.0.0/0\"\n      },\n      {\n        name      = \"allow-all-80-inbound\"\n        action    = \"allow\"\n        direction = \"inbound\"\n        tcp = {\n          source_port_min = 80\n          source_port_max = 80\n        }\n        destination = \"0.0.0.0/0\"\n        source      = \"0.0.0.0/0\"\n      },\n      {\n        name      = \"allow-all-ingress-inbound\"\n        action    = \"allow\"\n        direction = \"inbound\"\n        tcp = {\n          source_port_min = 30000\n          source_port_max = 32767\n        }\n        destination = \"0.0.0.0/0\"\n        source      = \"0.0.0.0/0\"\n      },\n      {\n        name      = \"allow-443-outbound-source\"\n        action    = \"allow\"\n        direction = \"outbound\"\n        tcp = {\n          source_port_min = 443\n          source_port_max = 443\n        }\n        destination = \"0.0.0.0/0\"\n        source      = \"0.0.0.0/0\"\n      },\n      {\n        name      = \"allow-443-outbound-dest\"\n        action    = \"allow\"\n        direction = \"outbound\"\n        tcp = {\n          port_min = 443\n          port_max = 443\n        }\n        destination = \"0.0.0.0/0\"\n        source      = \"0.0.0.0/0\"\n      },\n      {\n        name      = \"allow-all-80-outbound\"\n        action    = \"allow\"\n        direction = \"outbound\"\n        tcp = {\n          port_min = 80\n          port_max = 80\n        }\n        destination = \"0.0.0.0/0\"\n        source      = \"0.0.0.0/0\"\n      },\n      {\n        name      = \"allow-all-ingress-outbound\"\n        action    = \"allow\"\n        direction = \"outbound\"\n        tcp = {\n          port_min = 30000\n          port_max = 32767\n        }\n        destination = \"0.0.0.0/0\"\n        source      = \"0.0.0.0/0\"\n      }\n    ]\n  }\n]",
              "description": "The list of ACLs to create. Provide at least one rule for each ACL. [Learn more](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/blob/main/solutions/fully-configurable/DA-types.md#network-acls-).",
              "required": false,
              "virtual": true,
              "hidden": true,
              "custom_config": {
                "type": "code_editor",
                "grouping": "deployment",
                "original_grouping": "deployment",
                "config_constraints": {
                  "supportedLanguages": [
                    "hcl"
                  ]
                }
              }
            }
          ],
          "architecture": {
            "features": [
              {
                "title": " ",
                "description": "Configured to use IBM secure by default standards, but can be edited to fit your use case."
              }
            ],
            "diagrams": [
              {
                "diagram": {
                  "caption": "VPC Private Path topology",
                  "url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-vpc-private-path-external-connectivity/main/reference-architectures/deployable-architecture-private-path-external-connectivity.svg",
                  "type": "image/svg+xml"
                },
                "description": "This architecture provisions a <b>Private Path</b> service to facilitate secure, private connectivity between IBM Cloud Virtual Private Cloud (VPC) environments and on-premises networks or external services using this solution. This solution automates the deployment of IBM Cloud's Private Path and Application Load Balancer (ALB) services to enable enterprises to establish robust, private, and scalable network connections.<br><br>The Private Path service establishes private Layer 3 network connectivity between IBM Cloud VPC resources and external destinations such as on-premises data centers or other cloud environments. It leverages secure IPsec tunnels and Direct Link connections to maintain encrypted, low-latency communication, ensuring sensitive workloads can operate within a highly secure, isolated network path that bypasses the public internet.<br><br>By automating the provisioning and configuration of these components, the solution delivers a seamless, production-ready framework for establishing hybrid connectivity, optimizing both performance and security. This approach enhances operational agility while maintaining enterprise-grade standards for secure data exchange across cloud and on-premises boundaries.<br><br>You can create a <b>VPC</b> by selecting the [Cloud foundation for VPC](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-vpc-9fc0fa64-27af-4fed-9dce-47b3640ba739-global?catalog_query=aHR0cHM6Ly9jbG91ZC5pYm0uY29tL2NhdGFsb2cjZGVwbG95YWJsZV9hcmNoaXRlY3R1cmVfdGFi) dependency or you can use an existing VPC if any. The VPC can be provisioned either in a single-zone or multi-zone configuration, depending on your availability requirements. The default configuration deploys a VPC with three zone subnets, configures the predefined ACLs, and attaches a public gateway with one of the subnets."
              }
            ]
          },
          "dependencies": [
            {
              "name": "deploy-arch-ibm-slz-vpc",
              "description": "Configure the VPC and subnets required to deploy VPC private path.",
              "id": "9fc0fa64-27af-4fed-9dce-47b3640ba739-global",
              "version": "v8.15.0",
              "flavors": [
                "fully-configurable"
              ],
              "catalog_id": "1082e7d2-5e2f-0a11-a3bc-f88a8e1931fc",
              "optional": true,
              "on_by_default": false,
              "input_mapping": [
                {
                  "dependency_input": "prefix",
                  "version_input": "prefix",
                  "reference_version": true
                },
                {
                  "dependency_input": "existing_resource_group_name",
                  "version_input": "existing_resource_group_name",
                  "reference_version": true
                },
                {
                  "dependency_input": "region",
                  "version_input": "region",
                  "reference_version": true
                },
                {
                  "dependency_output": "private_path_subnet_id",
                  "version_input": "existing_subnet_id"
                },
                {
                  "dependency_output": "vpc_crn",
                  "version_input": "existing_vpc_crn"
                },
                {
                  "dependency_input": "subnets",
                  "version_input": "subnets",
                  "reference_version": true
                },
                {
                  "dependency_input": "network_acls",
                  "version_input": "network_acls",
                  "reference_version": true
                }
              ]
            },
            {
              "name": "deploy-arch-secrets-manager-private-cert",
              "description": "Configures secrets manager instance, private certificate engine and ALB listener certificate. Client certificate will not get created and will have to be created manually.",
              "id": "422283a7-9cb2-4149-8093-a36a799e1d27-global",
              "version": "v1.11.2",
              "flavors": [
                "fully-configurable"
              ],
              "catalog_id": "7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3",
              "optional": true,
              "on_by_default": true,
              "ignore_auto_referencing": [
                "*"
              ],
              "input_mapping": [
                {
                  "dependency_input": "prefix",
                  "version_input": "prefix",
                  "reference_version": true
                },
                {
                  "dependency_output": "secrets_manager_crn",
                  "version_input": "existing_secrets_manager_instance_crn"
                },
                {
                  "dependency_input": "prefix",
                  "version_input": "prefix",
                  "reference_version": true
                },
                {
                  "dependency_input": "secrets_manager_region",
                  "version_input": "region",
                  "reference_version": true
                },
                {
                  "dependency_input": "secrets_manager_service_plan",
                  "version_input": "secrets_manager_service_plan",
                  "reference_version": true
                },
                {
                  "dependency_input": "root_ca_name",
                  "version_input": "root_ca_name",
                  "reference_version": true
                },
                {
                  "dependency_input": "root_ca_common_name",
                  "version_input": "root_ca_common_name",
                  "reference_version": true
                },
                {
                  "dependency_input": "intermediate_ca_name",
                  "version_input": "intermediate_ca_name",
                  "reference_version": true
                },
                {
                  "dependency_input": "intermediate_ca_common_name",
                  "version_input": "intermediate_ca_common_name",
                  "reference_version": true
                },
                {
                  "dependency_input": "certificate_template_name",
                  "version_input": "certificate_template_name",
                  "reference_version": true
                },
                {
                  "dependency_input": "template_max_ttl",
                  "version_input": "template_max_ttl",
                  "reference_version": true
                },
                {
                  "version_input": "enable_certificate_auth",
                  "value": false
                },
                {
                  "dependency_output": "secret_crn",
                  "version_input": "application_loadbalancer_listener_certificate_crn"
                }
              ]
            }
          ],
          "dependency_version_2": true,
          "terraform_version": "1.12.2",
          "ignore_readme": true
        }
      ]
    }
  ]
}