Skip to content
Navigation Menu

IBM Cloud

  • CatalogCatalog
  • Cost EstimatorCost Estimator
    • HelpHelp
      • Docs
  • Log in
  • Sign up
  • Catalog
  • Cost Estimator
  • Help
    • Docs

  • Navigation settings

Error

Change theme

This feature is in early stage, some parts of the platform might not fully support different themes yet.

Themes
  1. Catalog

VPC landing zone

Deploys a secure VPC network without compute resources

  • IBM
  • Date of last update: 07/30/2025
  • Docs
  • Get help
  • Readme file
  • Release notes
  • Details

    Type
    • Terraform
    Provider
    • IBM
    Category
    • Networking
    • Converged infrastructure
    Last updated
    • 07/30/2025
    Product version
    • v8.2.0
    Variation
    • Standard
    Est. deployment time:
    • 15min
    Copy
    Copy
    Copy
    Copy
    Copy
    Copy
  • Docs
  • Get help
  • Readme file
  • Release notes

Details

Type
  • Terraform
Provider
  • IBM
Category
  • Networking
  • Converged infrastructure
Last updated
  • 07/30/2025
Product version
  • v8.2.0
Variation
  • Standard
Est. deployment time:
  • 15min
Copy
Copy
Copy
Copy
Copy
Copy

Overview

The VPC landing zone deployable architecture deploys a simple Virtual Private Cloud (VPC) infrastructure without any compute resources, such as Virtual Server Instances (VSI) or Red Hat OpenShift clusters. You can use this architecture as a base on which to deploy compute resources. Or you can deploy those resources by using the other landing zone deployable architectures: VSI on VPC landing zone and Red Hat OpenShift Container Platform on VPC landing zone.

Features and capabilities

Creates Virtual Private Clouds

Creates a VPC-based topology based on two VPCs, by default.

Configures subnets

Defines multiple subnets in the VPC to define IP ranges and organize resources within the network.

Creates a transit gateway

The transit gateway connects the two default VPCs that the deployable architecture creates.

Integrates Flow Logs and Activity tracking

IBM Cloud Object Storage is used for Flow Logs and Activity Tracker, which enhance the observability and auditing of your infrastructure.

Supports edge networking

Isolates and speeds traffic to the public internet by using an edge VPC in a specific location, if enabled.

Architecture

Select a variation

Select a variation

VPC landing zone - Standard variation

Focus sentinel
Close

VPC landing zone - Standard variation

Focus sentinel

The Standard variation of the VPC landing zone deployable architecture deploys a simple Virtual Private Cloud (VPC) infrastructure without any compute resources. You can use this architecture as a base on which to deploy compute resources. The Standard variation uses two Virtual Private Clouds (VPC) - a Management VPC and a Workload VPC - to manage the environment and the deployed workload. Each VPC is a multi-zoned, multi-subnet implementation that keeps your workloads secure. A transit gateway connects the VPCs to each other and Virtual Private Endpoints are used connect to IBM Cloud services.

The IBM Cloud Security and Compliance Center manages compliance profiles that indicate when a product meets defined requirements. Each profile can contain multiple controls. Only controls that are claimed and scanned are displayed in the table. VPC landing zone claims the following security and compliance information.

IBM Cloud Framework for Financial Services profile

Profile version 1.7.0

Complete scan
Category
Description
AUAudit and Accountability
CPContingency Planning
IAIdentification and Authentication
SCSystem and Communications Protection
SISystem and Information Integrity

Getting support

If you’re experiencing issues with this product, review the troubleshooting information available from the "Docs" link under related links. If you can’t resolve your problem, click "Get help" in the related links and create a case.

https://cloud.ibm.com/unifiedsupport/supportcenter

Summary

VPC landing zone

    11 resources
    • VPC landing zone
      11 resources
      *$64.84/mo
      • Object Storage Bucket
        *
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          archive_enabled: false
          location: us-east
          locationIdentifier: region_location
          plan: standard
          storage_class: standard
          Usage costs
          Storage Capacity *
          $0.0000/GB
          Class A requests *
          $0.0052/1k API calls
          Class B requests *
          $0.0042/10k API calls
          Public Standard Egress *
          $0.0000/GB
      • Object Storage Bucket
        *
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          archive_enabled: false
          location: us-east
          locationIdentifier: region_location
          plan: standard
          storage_class: standard
          Usage costs
          Storage Capacity *
          $0.0000/GB
          Class A requests *
          $0.0052/1k API calls
          Class B requests *
          $0.0042/10k API calls
          Public Standard Egress *
          $0.0000/GB
      • Object Storage Bucket
        *
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          archive_enabled: false
          location: us-east
          locationIdentifier: region_location
          plan: standard
          storage_class: standard
          Usage costs
          Storage Capacity *
          $0.0000/GB
          Class A requests *
          $0.0052/1k API calls
          Class B requests *
          $0.0042/10k API calls
          Public Standard Egress *
          $0.0000/GB
      • is.vpn
        $64.84/mo
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          region: us-east
          Usage costs
          VPN connection hours us-east (730)$30.51
          $0.0418/Hours
          VPN instance hours us-east (730)$34.33
          $0.0470/Hours
      • dff97f5c-bc5e-4455-b470-411c3edbe49c
        provided
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          location: global
          plan: standard
          service: cloud-object-storage
      • dff97f5c-bc5e-4455-b470-411c3edbe49c
        provided
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          location: global
          plan: standard
          service: cloud-object-storage
      • ee41347f-b18e-4ca6-bf80-b5467c63f9a6
        *
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          location: us-east
          plan: tiered-pricing
          service: kms
          Usage costs
          Key versions free allowance (first 5 Key Versions) *
          $0.0000/Key Versions
          Key versions *
          $1.0763/Key Versions
      • is.flow-log-collector
        *
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          region: us-east
          Usage costs
          Flow Log Collector us-east - free allowance (first 5GB) *
          $0.0000/GB
          Flow Log Collector us-east *
          $0.0000/GB
      • is.vpc (2)
        *$0.00/mo
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          region: us-east
          Usage costs
          VPC instance (1)$0.00
          $0.0000/Instance
          VPC egress free allowance (first 5GB) *
          $0.0000/GB
          VPC egress us-east *
          $0.0000/GB
      • is.flow-log-collector
        *
          Resource Configuration
          Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
          region: us-east
          Usage costs
          Flow Log Collector us-east - free allowance (first 5GB) *
          $0.0000/GB
          Flow Log Collector us-east *
          $0.0000/GB
    • Total estimated cost
      *$64.84/mo
    Already have an account? Log in