VPC landing zone

Deploys a secure VPC network without compute resources

  • IBM
  • Date of last update: 07/30/2025
  • Docs
  • Get help
  • Readme file
  • Release notes

  • Details

    Type
    • Terraform
    Provider
    • IBM
    Category
    • Networking
    • Converged infrastructure
    Last updated
    • 07/30/2025
    Product version
    • v8.2.0
    Variation
    • Standard
    Est. deployment time:
    • 15min

Details

Type
  • Terraform
Provider
  • IBM
Category
  • Networking
  • Converged infrastructure
Last updated
  • 07/30/2025
Product version
  • v8.2.0
Variation
  • Standard
Est. deployment time:
  • 15min

Overview

The VPC landing zone deployable architecture deploys a simple Virtual Private Cloud (VPC) infrastructure without any compute resources, such as Virtual Server Instances (VSI) or Red Hat OpenShift clusters. You can use this architecture as a base on which to deploy compute resources. Or you can deploy those resources by using the other landing zone deployable architectures: VSI on VPC landing zone and Red Hat OpenShift Container Platform on VPC landing zone.

Features and capabilities

Creates Virtual Private Clouds

Creates a VPC-based topology based on two VPCs, by default.

Configures subnets

Defines multiple subnets in the VPC to define IP ranges and organize resources within the network.

Creates a transit gateway

The transit gateway connects the two default VPCs that the deployable architecture creates.

Integrates Flow Logs and Activity tracking

IBM Cloud Object Storage is used for Flow Logs and Activity Tracker, which enhance the observability and auditing of your infrastructure.

Supports edge networking

Isolates and speeds traffic to the public internet by using an edge VPC in a specific location, if enabled.

Architecture

Select a variation

Select a variation

VPC landing zone - Standard variation

The Standard variation of the VPC landing zone deployable architecture deploys a simple Virtual Private Cloud (VPC) infrastructure without any compute resources. You can use this architecture as a base on which to deploy compute resources. The Standard variation uses two Virtual Private Clouds (VPC) - a Management VPC and a Workload VPC - to manage the environment and the deployed workload. Each VPC is a multi-zoned, multi-subnet implementation that keeps your workloads secure. A transit gateway connects the VPCs to each other and Virtual Private Endpoints are used connect to IBM Cloud services.

Summary

VPC landing zone

    11 resources
    • Total estimated cost
      *$64.84/mo
    Already have an account? Log in