Skip to content
Navigation Menu

IBM Cloud

  • CatalogCatalog
  • Cost EstimatorCost Estimator
    • HelpHelp
      • Docs
  • Log in
  • Sign up
  • Catalog
  • Cost Estimator
  • Help
    • Docs

  • Navigation settings

Error

Change theme

This feature is in early stage, some parts of the platform might not fully support different themes yet.

Themes
  1. Catalog

VPC landing zone

Deploys a secure VPC network without compute resources

  • IBM
  • Date of last update: 05/27/2025
  • Docs
  • Get help
  • Readme file
  • Release notes
  • Details

    Type
    • Terraform
    Provider
    • IBM
    Category
    • Networking
    Last updated
    • 05/27/2025
    Product version
    • v7.2.2
    Variation
    • Standard
    Est. deployment time:
    • 15min
    Copy
    Copy
    Copy
    Copy
    Copy
    Copy
  • Docs
  • Get help
  • Readme file
  • Release notes

Details

Type
  • Terraform
Provider
  • IBM
Category
  • Networking
Last updated
  • 05/27/2025
Product version
  • v7.2.2
Variation
  • Standard
Est. deployment time:
  • 15min
Copy
Copy
Copy
Copy
Copy
Copy

Overview

The VPC landing zone deployable architecture deploys a simple Virtual Private Cloud (VPC) infrastructure without any compute resources, such as Virtual Server Instances (VSI) or Red Hat OpenShift clusters. You can use this architecture as a base on which to deploy compute resources. Or you can deploy those resources by using the other landing zone deployable architectures: VSI on VPC landing zone and Red Hat OpenShift Container Platform on VPC landing zone.

Features and capabilities

Creates Virtual Private Clouds

Creates a VPC-based topology based on two VPCs, by default.

Configures subnets

Defines multiple subnets in the VPC to define IP ranges and organize resources within the network.

Creates a transit gateway

The transit gateway connects the two default VPCs that the deployable architecture creates.

Integrates Flow Logs and Activity tracking

IBM Cloud Object Storage is used for Flow Logs and Activity Tracker, which enhance the observability and auditing of your infrastructure.

Supports edge networking

Isolates and speeds traffic to the public internet by using an edge VPC in a specific location, if enabled.

Architecture

    Version last updated: 02/21/2025

    Variation

    Variation

    VPC landing zone - Standard variation

    Focus sentinel
    Close

    VPC landing zone - Standard variation

    Focus sentinel

    The Standard variation of the VPC landing zone deployable architecture deploys a simple Virtual Private Cloud (VPC) infrastructure without any compute resources. You can use this architecture as a base on which to deploy compute resources. The Standard variation uses two Virtual Private Clouds (VPC) - a Management VPC and a Workload VPC - to manage the environment and the deployed workload. Each VPC is a multi-zoned, multi-subnet implementation that keeps your workloads secure. A transit gateway connects the VPCs to each other and Virtual Private Endpoints are used connect to IBM Cloud services.

    The IBM Cloud Security and Compliance Center manages compliance profiles that indicate when a product meets defined requirements. Each profile can contain multiple controls. Only controls that are claimed and scanned are displayed in the table. VPC landing zone claims the following security and compliance information.

    IBM Cloud Framework for Financial Services profile

    Profile version 1.7.0

    Complete scan
    Category
    Description
    AUAudit and Accountability
    CPContingency Planning
    IAIdentification and Authentication
    SCSystem and Communications Protection
    SISystem and Information Integrity

    Getting support

    If you’re experiencing issues with this product, review the troubleshooting information available from the "Docs" link under related links. If you can’t resolve your problem, click "Get help" in the related links and create a case.

    https://cloud.ibm.com/unifiedsupport/supportcenter

    Summary

    VPC landing zone

      11 resources
      • VPC landing zone
        11 resources
        *$64.84/mo
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: us-east
            locationIdentifier: region_location
            plan: standard
            storage_class: standard
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0042/10k API calls
            Public Standard Egress *
            $0.0000/GB
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: us-east
            locationIdentifier: region_location
            plan: standard
            storage_class: standard
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0042/10k API calls
            Public Standard Egress *
            $0.0000/GB
        • Object Storage Bucket
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            archive_enabled: false
            location: us-east
            locationIdentifier: region_location
            plan: standard
            storage_class: standard
            Usage costs
            Storage Capacity *
            $0.0000/GB
            Class A requests *
            $0.0052/1k API calls
            Class B requests *
            $0.0042/10k API calls
            Public Standard Egress *
            $0.0000/GB
        • is.vpn
          $64.84/mo
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            region: us-east
            Usage costs
            VPN connection hours us-east (730)$30.51
            $0.0418/Hours
            VPN instance hours us-east (730)$34.33
            $0.0470/Hours
        • dff97f5c-bc5e-4455-b470-411c3edbe49c
          provided
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: global
            plan: standard
            service: cloud-object-storage
        • dff97f5c-bc5e-4455-b470-411c3edbe49c
          provided
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: global
            plan: standard
            service: cloud-object-storage
        • ee41347f-b18e-4ca6-bf80-b5467c63f9a6
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            location: us-east
            plan: tiered-pricing
            service: kms
            Usage costs
            Key versions free allowance (first 5 Key Versions) *
            $0.0000/Key Versions
            Key versions *
            $1.0763/Key Versions
        • is.flow-log-collector
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            region: us-east
            Usage costs
            Flow Log Collector us-east - free allowance (first 5GB) *
            $0.0000/GB
            Flow Log Collector us-east *
            $0.0000/GB
        • is.vpc (2)
          *$0.00/mo
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            region: us-east
            Usage costs
            VPC instance (1)$0.00
            $0.0000/Instance
            VPC egress free allowance (first 5GB) *
            $0.0000/GB
            VPC egress us-east *
            $0.0000/GB
        • is.flow-log-collector
          *
            Resource Configuration
            Starting costs are based on this resource configuration. You can edit configurations after you add this product to a project, which might impact costs.
            region: us-east
            Usage costs
            Flow Log Collector us-east - free allowance (first 5GB) *
            $0.0000/GB
            Flow Log Collector us-east *
            $0.0000/GB
      • Total estimated cost
        *$64.84/mo
      Already have an account? Log in