Skip to content
Navigation Menu
IBM Cloud
  • CatalogCatalog
  • Cost EstimatorCost Estimator
    • HelpHelp
      • Docs
Cookie Preferences
  • Log in
  • Sign up
  • Catalog
  • Cost Estimator
  • Help
    • Docs

  • Navigation settings

Error

Change theme

This feature is in early stage, some parts of the platform might not fully support different themes yet.

Themes
  1. Catalog

Cloud foundation for security and observability

Deploy core security and other supporting services to get set up to manage the security compliance of the resources in your account.

  • IBM
  • Date of last update: 10/06/2025
  • Docs
  • Get help
  • Release notes
  • Details

    Type
    • Software
    Provider
    • IBM
    Category
    • Observability
    • Platform engineering
    • Security
    Last updated
    • 10/06/2025
    Product version
    • v4.0.0
    Variation
    • Click and go
    Est. deployment time:
    • 1h 11min
    Copy
    Copy
    Copy
    Copy
    Copy
    Copy
  • Docs
  • Get help
  • Release notes

Details

Type
  • Software
Provider
  • IBM
Category
  • Observability
  • Platform engineering
  • Security
Last updated
  • 10/06/2025
Product version
  • v4.0.0
Variation
  • Click and go
Est. deployment time:
  • 1h 11min
Copy
Copy
Copy
Copy
Copy
Copy

Overview

Get IBM Cloud’s suite of core security services with a single deployment enabling you to securely manage keys and secrets and run security and compliance scans so that you always know the posture of the resources in your account. You can also take advantage of an event notification routing service that notifies you to critical events that occur in your IBM Cloud account and observability services that provide enterprise-grade monitoring and logging giving you operational visibility into the performance and health of your apps, services, and infrastructure.

Features and capabilities

Creates an IBM Key Protect instance

Creates and configures an IBM Key Protect instance and creates root keys for IBM Cloud Object Storage, Event Notifications, and Secrets Manager.

Creates an IBM Secrets Manager instance

Creates and configures an IBM Secrets Manager instance.

Creates an IBM Security and Compliance Center instance

Creates and configures an IBM Security Compliance Center instance.

Creates an Security and Compliance Center Workload Protection instance

Creates and configures an Security and Compliance Center Workload Protection instance.

Creates an IBM Cloud Object Storage instance

Creates and configures an IBM Cloud Object Storage instance and multiple Object Storage buckets that is encrypted by Key Protect.

Creates an IBM Cloud Event Notifications instance

Creates and configures an IBM Cloud Event Notifications instance with topics for Secrets Manager and Security and Compliance Center events.

Creates service-to-service authorizations

Creates and configures service-to-service authorizations for the following services: KMS, Event Notifications, Object Storage, Secrets Manager, and Security and Compliance Center.

Select a variation

Select a variation
Compare
Deploy core security and other supporting services to get set up to manage the security compliance of the resources in your account.
Close
    Version
    v4.0.0

    Cloud foundation for security and observability stack architecture

    Starting from
    $372.36/month
    Click and go
    Creates IBM Cloud core security services in a resource group
    Creates IBM Cloud core security services in an existing resource group.
    Creates an IBM Key Protect instance
    Creates and configures an IBM Key Protect instance and creates root keys for IBM Cloud Object Storage, Event Notifications, and Secrets Manager.
    Creates an IBM Cloud Secrets Manager instance
    Create, lease, and centrally manage secrets that are used in your apps and services using IBM Secrets Manager instance.
    Configures an IBM Cloud Secrets Manager IAM credentials engine to an IBM Cloud Secrets Manager instance
    Configures an IBM Secrets Manager IAM credentials engine to an IBM Cloud Secrets Manager instance.
    Creates an IBM Cloud App Configuration instance with Configuration Aggregator
    Facilitate a Cloud Governance SME with up-to-date configuration data of IBM Cloud resources in one place so that comprehensive information is available for goverance and compliance initiatives.
    Creates a IBM Cloud Security and Compliance Center Workload Protection instance
    Creates a Cloud-Native Application Protection Platform solution to manage your security and compliance posture, allowing you to monitor misconfigurations and detect and respond to vulnerabilities and threats in real-time.
    Creates an IBM Cloud Event Notifications instance
    Deliver Email, SMS, Webhooks and Push Notifications for your IBM Cloud service events using IBM Event Notifications instance.

    Cloud foundation for security and observability stack architecture

    The architecture of Cloud foundation for security and observability stack.

    The IBM Cloud Security and Compliance Center manages compliance profiles that indicate when a product meets defined requirements. Each profile can contain multiple controls. Only controls that are claimed and scanned are displayed in the table. Cloud foundation for security and observability claims the following security and compliance information.

    CIS IBM Cloud Foundations Benchmark v1.1.0 profile

    Profile version 1.1.0

    Complete scan
    Category
    Description
    2.0Storage
    8.0Key Management

    Getting support

    If you’re experiencing issues with this product, review the troubleshooting information available from the “Docs” link in the Related links section. If you can’t resolve your problem, click “Get help” in the related links and create a case.

    https://cloud.ibm.com/unifiedsupport/supportcenter

    Summary

    Cloud foundation for security and observability

      10 modules, 20 resources
      • Cloud automation for Security and Compliance Center Workload Protection Fully configurable
        2 resources
        *
        • e831e900-82d6-11ec-95c5-c12c5a5d9687
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: eu-de
            plan: graduated-tier
            service: sysdig-secure
            Usage costs
            Multi-Cloud CSPM Compute Instance Hours *
            $0.0000/Instance-Hours
            Node Hours *
            $0.0000/Instance-Hours
            VM Node Hours *
            $0.0000/Instance-Hours
        • Resources not included in cost (1 / 2 resources)
            Resource List
            The following resources were not included in the cost estimate but might have an associated cost.
            ibm_iam_trusted_profile_identity
      • Cloud automation for Activity Tracker Event Routing Fully configurable
        1 resources
        *
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: eu-de
            locationIdentifier: region_location
            plan: standard
            storage_class: smart
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0052/10k API calls
            Public Standard Egress *
            $0.0000/GB
      • Cloud automation for Object Storage Single instance (fully configurable)
        1 resources
        *
        • dff97f5c-bc5e-4455-b470-411c3edbe49c
          provided
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: global
            plan: standard
            service: cloud-object-storage
      • Cloud automation for Key Protect
        1 resources
        *
        • ee41347f-b18e-4ca6-bf80-b5467c63f9a6
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: eu-de
            plan: tiered-pricing
            service: kms
            Usage costs
            Key versions free allowance (first 5 Key Versions) *
            $0.0000/Key Versions
            Key versions *
            $1.2486/Key Versions
      • Cloud automation for Event Notifications Fully configurable
        2 resources
        *
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: eu-de
            locationIdentifier: region_location
            plan: standard
            storage_class: standard
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0042/10k API calls
            Public Standard Egress *
            $0.0000/GB
        • ecdb4690-c2d8-11eb-bff1-4f7b9d2dfe41
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: eu-de
            plan: standard
            service: event-notifications
            Usage costs
            Ingested Events *
            $1.2528/Million Events
      • Cloud automation for App Configuration Fully configurable
        5 resources
        *
        • apprapp
          provided
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: eu-de
            plan: enterprise
            service: apprapp
        • Resources not included in cost (4 / 5 resources)
            Resource List
            The following resources were not included in the cost estimate but might have an associated cost.
            ibm_app_config_integration_en
            ibm_app_config_integration_kms
            ibm_config_aggregator_settings
            ibm_iam_trusted_profile_identity
      • Cloud automation for Cloud Logs Fully configurable
        3 resources
        *
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: eu-de
            locationIdentifier: region_location
            plan: standard
            storage_class: smart
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0052/10k API calls
            Public Standard Egress *
            $0.0000/GB
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: eu-de
            locationIdentifier: region_location
            plan: standard
            storage_class: smart
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0052/10k API calls
            Public Standard Egress *
            $0.0000/GB
        • cd515180-d78a-11ec-b396-db7d306c4f73
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: eu-de
            plan: standard
            service: logs
            Usage costs
            Store and Search *
            $0.4800/GB/Hour
            Analyze and Alert *
            $0.7500/GB/Hour
            Priority Insights (Retention 7 days) *
            $1.2000/GB/Hour
            Priority Insights (Retention 14 days) *
            $1.7500/GB/Hour
            Priority Insights (Retention 30 days) *
            $2.2500/GB/Hour
            Priority Insights (Retention 60 days) *
            $2.7500/GB/Hour
            Priority Insights (Retention 90 days) *
            $3.2500/GB/Hour
      • Cloud automation for Cloud Monitoring Fully configurable
        1 resources
        *
        • 090c2c10-8c38-11e8-bec2-493df9c49eb8
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: eu-de
            plan: graduated-tier
            service: sysdig-monitor
            Usage costs
            Additional Time series *
            $0.0000/Time series hour
            Additional Container Hours *
            $0.0007/Container Hours
            Additional API Calls *
            $0.0000/API Calls
            Node Hours *
            $0.0517/Node Hours
      • Cloud automation for Secrets Manager Fully configurable
        1 resources
        *$372.36/mo
        • ebc0cdb0-af2a-11ea-98c7-29e5db822649
          *$372.36/mo
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: eu-de
            plan: standard
            service: secrets-manager
            Usage costs
            Instance (1)$372.36
            $372.3600/Instance
            Active Secrets *
            $0.2494/Secrets
      • Cloud automation for Cloud Logs Fully configurable
        3 resources
        *
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: eu-de
            locationIdentifier: region_location
            plan: standard
            storage_class: smart
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0052/10k API calls
            Public Standard Egress *
            $0.0000/GB
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: eu-de
            locationIdentifier: region_location
            plan: standard
            storage_class: smart
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0052/10k API calls
            Public Standard Egress *
            $0.0000/GB
        • cd515180-d78a-11ec-b396-db7d306c4f73
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: eu-de
            plan: standard
            service: logs
            Usage costs
            Store and Search *
            $0.4800/GB/Hour
            Analyze and Alert *
            $0.7500/GB/Hour
            Priority Insights (Retention 7 days) *
            $1.2000/GB/Hour
            Priority Insights (Retention 14 days) *
            $1.7500/GB/Hour
            Priority Insights (Retention 30 days) *
            $2.2500/GB/Hour
            Priority Insights (Retention 60 days) *
            $2.7500/GB/Hour
            Priority Insights (Retention 90 days) *
            $3.2500/GB/Hour
      • Total estimated cost
        *$372.36/mo
      Already have an account? Log in
      Focus sentinel
      Close

      (1/11) | Cloud foundation for security and observability stack architecture

      Focus sentinel
      Focus sentinel
      Close

      (1/11) | Cloud foundation for security and observability stack architecture

      Focus sentinel
      close icon

      IBM web domains

      ibm.com, ibm.org, ibm-zcouncil.com, insights-on-business.com, jazz.net, mobilebusinessinsights.com, promontory.com, proveit.com, ptech.org, s81c.com, securityintelligence.com, skillsbuild.org, softlayer.com, storagecommunity.org, think-exchange.com, thoughtsoncloud.com, alphaevents.webcasts.com, ibm-cloud.github.io, ibmbigdatahub.com, bluemix.net, mybluemix.net, ibm.net, ibmcloud.com, galasa.dev, blueworkslive.com, swiss-quantum.ch, blueworkslive.com, cloudant.com, ibm.ie, ibm.fr, ibm.com.br, ibm.co, ibm.ca, community.watsonanalytics.com, datapower.com, skills.yourlearning.ibm.com, bluewolf.com, carbondesignsystem.com, openliberty.io
      close icon
      About cookies on this site Our websites require some cookies to function properly (required). In addition, other cookies may be used with your consent to analyze site usage, improve the user experience and for advertising. For more information, please review your options. By visiting our website, you agree to our processing of information as described in IBM’sprivacy statement.  To provide a smooth navigation, your cookie preferences will be shared across the IBM web domains listed here.