IBM Cloud Docs
Your responsibilities with using App Configuration

Your responsibilities with using App Configuration

Learn about the management responsibilities and terms and conditions that you have when you use IBM Cloud App Configuration. For a high-level view of the service types in IBM Cloud and the breakdown of responsibilities between the customer and IBM for each type, see Shared responsibilities for IBM Cloud offerings.

Review the following sections for the specific responsibilities for you and for IBM when you use IBM Cloud App Configuration. For the overall terms of use, see IBM Cloud® Terms and Notices.

Incident and operations management

You and IBM share responsibilities for the setup and maintenance of your IBM Cloud App Configuration instance.

You are responsible for incident and operations management of your application and application data.

Responsibilities for incident and operations
Task IBM Responsibilities Your Responsibilities
Incidents Provide notifications for planned maintenance, security bulletins, or unplanned outages. Set preferences to receive emails about platform notifications, and monitor the IBM Cloud status page for general announcements.

Change management

You and IBM share responsibilities for keeping IBM Cloud App Configuration service components at the latest version.

You are responsible for change management of your application and application data.

Responsibilities for change management
Task IBM Responsibilities Your Responsibilities
Applications Provide infrastructure operating system (OS), version, and security updates. Use the API, SDK, CLI, or console tools to apply the provided updates for the local entities (app code, CLI, and SDK).

Identity and access management

You and IBM share responsibilities for controlling access to your IBM Cloud App Configuration instances and resources.

You are responsible for identity and access management to your application and application data.

Responsibilities for identity and access management
Task IBM Responsibilities Your Responsibilities
Applications Restrict access to resources. Depending on your needs, restrict access to resources and service functions by using Cloud IAM access policies. For more information, see Managing user access.

Security and regulation compliance

IBM is responsible for the security and compliance of IBM Cloud App Configuration.

You are responsible for the security and compliance of your application and application data.

Responsibilities for security and regulation compliance
Task IBM Responsibilities Your Responsibilities
Encryption
  • Automatically apply security patch updates for infrastructure.
  • Enable certain security settings, such as encrypted disks.
  • Disable certain insecure actions, such as allowing users to SSH into the host.
  • Encrypt communication with TLS.
  • Continuously monitor IBM Cloud App Configuration entities to detect vulnerability and security compliance issues.
  • Integrate IBM Cloud App Configuration with IBM Cloud Identity and Access Management (IAM).
Manage IBM Cloud credentials, and keep credentials secure.

Disaster recovery

IBM is responsible for the recovery of IBM Cloud App Configuration components in case of disaster.

You are responsible for the recovery of the workloads that run IBM Cloud App Configuration and your application and application data.

Responsibilities for disaster recovery
Task IBM Responsibilities Your Responsibilities
Availability
  • Provide high availability capabilities, such as IBM-owned infrastructure in multizone regions, to meet local access and, low latency requirements for each supported region.
  • Run IBM Cloud App Configuration deployments with three replicas in the same region for high availability.
  • Continuously monitor IBM Cloud App Configuration infrastructure to ensure the reliability and availability of the service environment by site reliability engineers.
  • Maintain service availability across worldwide regions so that customers can deploy projects across zones and regions for higher DR tolerance.
  • Use the list of available regions to plan and create new instances of the service to meet performance and availability requirements beyond the default that is provided by IBM.
  • Set up more IBM Cloud App Configuration instances across zones and regions to increase disaster recovery tolerance above the default provided by IBM.