Regions and endpoints

Review region and connectivity options for interacting with IBM Cloud® Security and Compliance Center.

Supported regions

You can create Security and Compliance Center resources in one of the supported IBM Cloud regions, which represents the geographic area where your Security and Compliance Center requests are handled and processed.

Dallas (us-south)
Frankfurt (eu-de)
Toronto (ca-tor)
Madrid (eu-es)

Service endpoints

You can use the Security and Compliance Center APIs to manage your resources programmatically. You can connect to resources in your account over the IBM Cloud public network. Your data is encrypted in transit by using the Transport Security Layer (TLS) 1.2 protocol.

Review the following table to determine the API endpoints to use when you connect to the Security and Compliance Center API.

Table 1. Endpoints for interacting with Security and Compliance Center
Region	Endpoint URL
Dallas	Public: `https://us-south.compliance.cloud.ibm.com/instances/{instance_id}/v3` Private: `https://private.us-south.compliance.cloud.ibm.com/instances/{instance_id}/v3`
Frankfurt	Public: `https://eu-de.compliance.cloud.ibm.com/instances/{instance_id}/v3` Private: `https://private.eu-de.compliance.cloud.ibm.com/instances/{instance_id}/v3`
Toronto	Public: `https://ca-tor.compliance.cloud.ibm.com/instances/{instance_id}/v3` Private: `https://private.ca-tor.compliance.cloud.ibm.com/instances/{instance_id}/v3`
Madrid	Public: `https://eu-es.compliance.cloud.ibm.com/instances/{instance_id}/v3` Private: `https://private.eu-es.compliance.cloud.ibm.com/instances/{instance_id}/v3`

Viewing your endpoint URLs

You can find your service endpoint URLs in the Settings page of the Security and Compliance Center UI. If you need to retrieve your service endpoint URLs programmatically, you can also call the following API to retrieve the values that are specific to your Security and Compliance Center instance.

curl -X GET  
    -H "Accept: application/json" \
    -H "Authorization: Bearer <IAMToken>"
https://us-south.compliance.cloud.ibm.com/instances/<instanceId>/v3/{urlEncodedInstanceCRN}/endpoints"

Replace the variables in the example request according to the following table.

Table 3. Required parameters for retrieving service endpoints with the API
Parameter	Description
`region`	The region abbreviation that represents the geographic area where your Security and Compliance Center is located. For example, `us-south` or `eu-de`.
`url_encoded_instance_CRN`	The Cloud Resource Name (CRN) that uniquely identifies your Security and Compliance Center service instance. The value must be URL encoded.
`IAM_token`	Your IBM Cloud IAM access token.

A successful request returns the endpoint URLs that are associated with the region and service instance CRN that you specify.