Prepare Your IBM Cloud Account

Journey Map

Setup Resource Group

Resource Groups allow you to organize the resources/instances into groups (i.e. ProjectA_VPC, ProjectB_VPC, Dev_Env, Prod_Env, etc.), and can be used as part of the access management strategy (i.e. Developers granted access to resources in Dev_Env resourcce group but no access to Prod_Env). When a VPC is provisioned, it must be placed within a resource group. Please refer to the follow assets to understand the best practices for using resource groups:

• Best practices for resource groups and assigning access

Configure IAM

IBM Identity and Access Management (IAM) should be planned ahead and configured before the provisioning of a VPC on IBM Cloud. Typically, only users which serve as Network Admins should have access to create and manage the VPC (i.e. you may want to allow users view and create resources within the VPC but probably do not want them changing your VPC network/IP configuration). Please refer to the follow assets to understand IAM concepts and required permissions:

• Understand IAM Concepts in the IBM Cloud

• Getting Start with IAM and VPC

• Walk-Through Scenarios for Setting VPC Permissions

• List of IAM Permissions Needed to Perform an Action on a VPC Resource

Understand VPC Quota and limitations:

IBM Cloud limits the VPC resources provisioned per account per region per vpc by default. Default quotas are set and can be increased by support ticket.

• VPC quotas and limits

Next Steps

The next step on the deployment journey is:

• Provision VPC