---
name: devsecops-alm-devsecops-alm-terraform-script-prereqs
title: Prerequisites for provisioning DevSecOps toolchains by using the Terraform script
description: Before you begin the deployment, ensure that the prerequisites for the deployable architecture are in place.
last-updated: 2023-06-14
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/devsecops-alm?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Prerequisites for provisioning DevSecOps toolchains by using the Terraform script 
{: #devsecops-alm-planning-req}

Before you begin the deployment, ensure that the prerequisites for the deployable architecture are in place.
{: shortdesc}

* Provision the DevSecOps toolchains by using the Terraform script.
* Implement DevSecOps toolchain operations.

## Create an IBM Cloud® account
{: #devsecops-alm-acc}

Create an [IBM Cloud account](https://cloud.ibm.com/registration){: external}. 

Depending on your IBM Cloud account type, access to certain resources might be limited. Depending on your account plan limits, certain capabilities that are required by some DevSecOps toolchains might not be available. For more information, see [Setting up your IBM Cloud account](https://cloud.ibm.com/docs/account?topic=account-account-getting-started&format=markdown) and [Upgrading your account](https://cloud.ibm.com/docs/account?topic=account-upgrading-account&format=markdown).

## Choose a secrets management vault
{: #devsecops-alm-vault}

Ensure that all of the secret values that you need are stored in a secrets management vault. 

[Comparison between Secrets Manager and related IBM Cloud services](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-manage-secrets-ibm-cloud&format=markdown) can help you to choose from various secrets management and data protection offerings. 

If you don't already have an instance of the secrets management vault provider of your choice, create one. For more information about IBM Cloud® Secrets Manager see [Getting started with Secrets Manager](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-getting-started&format=markdown).

## Create a resource group
{: #devsecops-alm-resgrp}

Create a resource group where all the relevant resources are collected. 

Resource groups organize your account resources in customizable groupings so that you can assign users access to multiple resources at a time. Every toolchain is associated with a resource group. By default, the toolchain is created in the `Default` resource group. For more information, see [Creating a resource group](https://cloud.ibm.com/docs/account?topic=account-rgs&interface=ui&format=markdown#create_rgs).

## Install the IBM Cloud CLI and the catalogs management plug-in
{: #devsecops-alm-inst-cli}

If you plan to deploy DevSecOps Application Lifecycle Management by using the IBM Cloud CLI, you must install the IBM Cloud CLI and the Catalogs management CLI plug-in as follows:

* For more information on installing the IBM Cloud CLI, see [Installing the stand-alone IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-install-ibmcloud-cli&format=markdown).
* For more information on installing the Catalogs management CLI plug-in, see [Catalogs management CLI plug-in](https://cloud.ibm.com/docs/cli?topic=cli-manage-catalogs-plugin&format=markdown).