IBM Cloud
Systematic IBM Cloud platform guidance for enterprise cloud infrastructure, covering compute, storage, databases, networking, security, and operational best practices.
Workflow Decision Tree
Choose your path based on the task:
1. Service Category Selection
Compute & Containers → Load compute-services.md
- Virtual Private Cloud (VPC) and Virtual Server Instances
- IBM Kubernetes Service (IKS) and Red Hat OpenShift
- Code Engine (serverless containers) and Cloud Functions
Storage → Load storage-services.md
- Cloud Object Storage, Block Storage, File Storage
Databases → Load database-services.md
- Db2, Cloudant, PostgreSQL, MySQL, MongoDB, Redis
Security & Access → Load iam-security.md
- IAM, Resource Groups, Service IDs, Key Protect, Secrets Manager
Networking → Load networking.md
- VPC Networks, Load Balancers, DNS/CDN, Direct Link
2. Architecture & Deployment Patterns
High Availability → Multi-zone deployment across 3 availability zones
Microservices → IKS/OpenShift with service mesh and ingress
Serverless → Code Engine applications with auto-scaling
Hybrid Cloud → Direct Link or VPN for on-premises connectivity
3. Common Operations
Initial Setup → Install CLI, authenticate, configure regions and resource groups
Resource Provisioning → Use CLI, Terraform, or IBM Cloud Console
Security Configuration → IAM policies, encryption, network security
Monitoring → Set up logging, monitoring, and cost tracking
Core Concepts
Resource Hierarchy
Account → Resource Groups → Services/Resources → Access Groups (IAM)
Regions and Multi-Zone Architecture
- Primary Regions:
us-south, us-east, eu-gb, eu-de, jp-tok, au-syd
- Availability Zones: 3 zones per region (e.g.,
us-south-1, us-south-2, us-south-3)
- Best Practice: Deploy across multiple zones for high availability
Service Categories
- IaaS: VPC, Virtual Servers, Block/File Storage
- PaaS: IKS, OpenShift, Code Engine
- SaaS: Managed Databases, Watson AI, DevOps Tools
- Serverless: Code Engine, Cloud Functions
Quick Start
1. Install and Configure CLI
# Install CLI (macOS/Linux)
curl -fsSL https://clis.cloud.ibm.com/install/osx | sh
# Login
ibmcloud login
# Target region and resource group
ibmcloud target -r us-south -g my-resource-group
# Install common plugins
ibmcloud plugin install container-service vpc-infrastructure
2. Basic Resource Creation Pattern
# 1. Create VPC
ibmcloud is vpc-create my-vpc
# 2. Create resources (compute, storage, network)
ibmcloud is instance-create my-vsi ...
# 3. Configure IAM
ibmcloud iam ...
# 4. Deploy application
# 5. Set up monitoring
Essential Guidance
Security Best Practices
- IAM: Use Access Groups, apply least privilege, rotate API keys every 90 days
- Network: Use private endpoints, configure Security Groups and ACLs
- Data: Enable encryption at rest/transit, use Key Protect for key management
- Compliance: Choose regions for data residency requirements
Cost Optimization
- Right-size instances for workload requirements
- Use reserved capacity for predictable workloads
- Leverage serverless (Code Engine/Functions) for variable loads
- Select appropriate storage tiers (Standard, Vault, Cold Vault)
- Enable auto-scaling to match demand
- Set budget alerts and monitor usage
Reference Files
Load detailed guidance based on specific needs:
- compute-services.md: VPC, Virtual Servers, IKS, OpenShift, Code Engine, Cloud Functions
- storage-services.md: Object Storage, Block Storage, File Storage
- database-services.md: Db2, Cloudant, PostgreSQL, MySQL, MongoDB, Redis
- iam-security.md: IAM, Access Groups, Service IDs, Key Protect, Secrets Manager
- networking.md: VPC networking, Load Balancers, DNS/CDN, Direct Link
Support Resources
1---2name: ibm-cloud3description: Provides comprehensive IBM Cloud platform guidance including compute services (VPC, Virtual Servers, IKS, OpenShift, Code Engine, Cloud Functions), storage (Object Storage, Block Storage, File Storage), databases (Db2, Cloudant, PostgreSQL, MySQL, MongoDB, Redis), IAM security (access groups, service IDs, Key Protect, Secrets Manager), networking (VPC, load balancers, Direct Link), CLI automation, Terraform/Schematics infrastructure as code, monitoring, and cost optimization. Covers infrastructure provisioning, application deployment, security configuration, multi-zone high availability, and operational best practices. Use when working with IBM Cloud services, deploying cloud infrastructure, managing cloud resources, configuring security and networking, or when users mention "IBM Cloud", "IKS", "Code Engine", "Db2", "Cloudant", "VPC", "cloud provisioning", "IBM Kubernetes", "OpenShift", "Terraform IBM", "Schematics", or "IBM cloud platform".4---5
6# IBM Cloud
7
8Systematic IBM Cloud platform guidance for enterprise cloud infrastructure, covering compute, storage, databases, networking, security, and operational best practices.
9
10## Workflow Decision Tree
11
12Choose your path based on the task:
13
14## 1. Service Category Selection
15
16**Compute & Containers** → Load [compute-services.md](references/compute-services.md)
17
18- Virtual Private Cloud (VPC) and Virtual Server Instances
19- IBM Kubernetes Service (IKS) and Red Hat OpenShift
20- Code Engine (serverless containers) and Cloud Functions
21
22**Storage** → Load [storage-services.md](references/storage-services.md)
23
24- Cloud Object Storage, Block Storage, File Storage
25
26**Databases** → Load [database-services.md](references/database-services.md)
27
28- Db2, Cloudant, PostgreSQL, MySQL, MongoDB, Redis
29
30**Security & Access** → Load [iam-security.md](references/iam-security.md)
31
32- IAM, Resource Groups, Service IDs, Key Protect, Secrets Manager
33
34**Networking** → Load [networking.md](references/networking.md)
35
36- VPC Networks, Load Balancers, DNS/CDN, Direct Link
37
38### 2. Architecture & Deployment Patterns
39
40**High Availability** → Multi-zone deployment across 3 availability zones
41**Microservices** → IKS/OpenShift with service mesh and ingress
42**Serverless** → Code Engine applications with auto-scaling
43**Hybrid Cloud** → Direct Link or VPN for on-premises connectivity
44
45### 3. Common Operations
46
47**Initial Setup** → Install CLI, authenticate, configure regions and resource groups
48**Resource Provisioning** → Use CLI, Terraform, or IBM Cloud Console
49**Security Configuration** → IAM policies, encryption, network security
50**Monitoring** → Set up logging, monitoring, and cost tracking
51
52## Core Concepts
53
54### Resource Hierarchy
55
56```
57Account → Resource Groups → Services/Resources → Access Groups (IAM)
58```
59
60### Regions and Multi-Zone Architecture
61
62- **Primary Regions**: `us-south`, `us-east`, `eu-gb`, `eu-de`, `jp-tok`, `au-syd`
63- **Availability Zones**: 3 zones per region (e.g., `us-south-1`, `us-south-2`, `us-south-3`)
64- **Best Practice**: Deploy across multiple zones for high availability
65
66### Service Categories
67
68- **IaaS**: VPC, Virtual Servers, Block/File Storage
69- **PaaS**: IKS, OpenShift, Code Engine
70- **SaaS**: Managed Databases, Watson AI, DevOps Tools
71- **Serverless**: Code Engine, Cloud Functions
72
73## Quick Start
74
75### 1. Install and Configure CLI
76
77```bash
78# Install CLI (macOS/Linux)
79curl -fsSL https://clis.cloud.ibm.com/install/osx | sh
80
81# Login
82ibmcloud login
83
84# Target region and resource group
85ibmcloud target -r us-south -g my-resource-group
86
87# Install common plugins
88ibmcloud plugin install container-service vpc-infrastructure
89```
90
91### 2. Basic Resource Creation Pattern
92
93```bash
94# 1. Create VPC
95ibmcloud is vpc-create my-vpc
96
97# 2. Create resources (compute, storage, network)
98ibmcloud is instance-create my-vsi ...
99
100# 3. Configure IAM
101ibmcloud iam ...
102
103# 4. Deploy application
104# 5. Set up monitoring
105```
106
107## Essential Guidance
108
109### Security Best Practices
110
1111. **IAM**: Use Access Groups, apply least privilege, rotate API keys every 90 days
1122. **Network**: Use private endpoints, configure Security Groups and ACLs
1133. **Data**: Enable encryption at rest/transit, use Key Protect for key management
1144. **Compliance**: Choose regions for data residency requirements
115
116### Cost Optimization
117
118- Right-size instances for workload requirements
119- Use reserved capacity for predictable workloads
120- Leverage serverless (Code Engine/Functions) for variable loads
121- Select appropriate storage tiers (Standard, Vault, Cold Vault)
122- Enable auto-scaling to match demand
123- Set budget alerts and monitor usage
124
125### Reference Files
126
127Load detailed guidance based on specific needs:
128
129- **[compute-services.md](references/compute-services.md)**: VPC, Virtual Servers, IKS, OpenShift, Code Engine, Cloud Functions
130- **[storage-services.md](references/storage-services.md)**: Object Storage, Block Storage, File Storage
131- **[database-services.md](references/database-services.md)**: Db2, Cloudant, PostgreSQL, MySQL, MongoDB, Redis
132- **[iam-security.md](references/iam-security.md)**: IAM, Access Groups, Service IDs, Key Protect, Secrets Manager
133- **[networking.md](references/networking.md)**: VPC networking, Load Balancers, DNS/CDN, Direct Link
134
135## Support Resources
136
137- Documentation: <https://cloud.ibm.com/docs>
138- API Reference: <https://cloud.ibm.com/apidocs>
139- Terraform Provider: <https://registry.terraform.io/providers/IBM-Cloud/ibm>
140- CLI Reference: <https://cloud.ibm.com/docs/cli>