Skip to content

Commit bd70137

Browse files
SirSpideySirSpidey
committed
initial editorial review
Signed-off-by: Allen Dean <[email protected]>
1 parent ddffb8e commit bd70137

File tree

7 files changed

+61
-59
lines changed

7 files changed

+61
-59
lines changed

Diff for: ‎docs/README.md

+18-17
Original file line numberDiff line numberDiff line change
@@ -1,29 +1,30 @@
1-
# Seamless Deployment: From Provisioning to Runtime with IBM Cloud's Landing Zone
1+
# Seamless Deployment: From Provisioning to Runtime With the IBM Cloud VPC Landing Zone
22

3-
The introduction of IBM Cloud [Deployable Architectures](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-faqs) makes it easy to provision existing pre-defined architecture in no time.
3+
The introduction of IBM Cloud [deployable architectures](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-faqs) makes it easy to provision predefined architecture in no time.
44

55
## 📖 What you will learn
66

7-
In this hands-on lab, you will learn to:
7+
In this hands-on lab, you will learn how to work with the VPC landing zone deployable architecture to accomplish these goals.
88

9-
1. Create a customized VPC-based topology using the IBM Cloud [VPC Landing Zone Deployable Architecture](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-overview)
10-
2. Deploy and expose a web application on top of this secure topology. For this lab, we will use an Apache service as an example.
11-
3. Share this deployable pattern with your enterprise through an IBM Cloud Private Catalog
9+
1. Create a customized VPC-based topology from the VPC Landing Zone deployable architecture.
10+
2. Deploy and expose a web application on this secure topology. For this lab, we use an Apache service as an example.
11+
3. Share this deployable pattern with your enterprise through the IBM Cloud private catalog.
1212

13-
This lab also introduces some concepts and background prior to diving onto the hands-on steps, which can help you to better get the "bigger" picture. The hands-on steps are however designed to be independent from the concepts and background information.
13+
The lab also introduces some concepts and background to help you to better get the "bigger" picture at the beginning. However, the hands-on steps are designed to be independent from the concepts and background information.
1414

1515
## Lab structure
1616

17-
This lab is split into two distinct parts. Part 1 is designed as a stepping stone for part 2.
17+
The lab has two parts. The first part is a stepping stone to the second part.
1818

19-
- [Part 1](./part1/00-objectives) takes the perspective of a Cloud Infrastructure Engineer, and shows the end-to-end steps to:
20-
1. Use the [Landing Zone Deployable Architecture](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-overview) to automatically deploy a secure VPC-based topology in an IBM Cloud account.
21-
2. Manually customize the deployed infrastructure in the account to:
22-
a. Provide operator access through a "jump box" VSI.\
23-
b. Install an Apache server in one of the workload VPC that serves the web pages.\
24-
c. Expose the web pages served by the Apache server through a public VPC load balancer.
19+
In [part 1](./part1/00-objectives), you take the perspective of a cloud infrastructure engineer:
2520

26-
- [Part 2](./part2/00-objectives) takes the perspective of a DevOps/Automation Engineer, and shows how to:
27-
1. Automate the manual steps in Part 1
28-
2. Package, and share the automation with other users as a **Deployable Architecture** through a private IBM Cloud Catalog. This facilitates discoverability and consumption of your automation by other users.
21+
1. Use the [Landing Zone Deployable Architecture](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-overview) to automatically deploy a secure VPC-based topology in an IBM Cloud account.
22+
2. Manually customize the deployed infrastructure in the account in the following ways:
23+
a. Provide operator access through a "jump box" VSI.
24+
b. Install an Apache server in one of the workload VPCs that serves the web pages.
25+
c. Expose the web pages that are served by the Apache server through a public VPC load balancer.
2926

27+
In [part 2](./part2/00-objectives), you are a DevOps/automation engineer:
28+
29+
1. Automate the manual steps in part 1.
30+
2. Package, and share the automation with other users as a **Deployable architecture** through a private IBM Cloud catalog. This packaging in a private catalog helps specific users to find and consume your automation.

Diff for: ‎docs/about/10-fs-cloud.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
# IBM Cloud for Financial Cloud Services Framework
22

3-
The IBM Cloud Financial Cloud Services Framework provides comprehensive and detailed guidance to help address the needs of enterprises with regulatory compliance, security, and resiliency during the initial deployment phase and with ongoing operations. More details can be found at: [Getting started with IBM Cloud for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-about)
3+
IBM Cloud Framework for Financial Services provides comprehensive and detailed guidance around regulatory compliance, security, and resiliency to help address the needs of enterprises both during initial deployment and with ongoing operations. For more information, see [Getting started with IBM Cloud for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-about).
44

5-
Whilst the framework was initially based on the needs of financial institutions, as its name indicates, it can be used as a starting point and baseline for meeting compliance and security for most industries.
5+
The framework was initially based on the needs of financial institutions, as its name indicates. However, it can be used as a compliance and security starting point and baseline for most industries.
66

7-
The framework provides secure [VPC reference architectures](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-about) meeting a number of regulatory controls.
7+
The framework provides secure [VPC reference architectures](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-about) that meet a number of regulatory controls.
88

99
![VPC reference architecture](../images/about-fs-cloud.png)

Diff for: ‎docs/about/20-vpc-landing-zone.md

+8-8
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
# VPC Landing Zone
22

3-
IBM VPC Landing Zone (also refered as "SLZ" for Secure Landing Zone) is a set of [Infrastructure-As-Code](https://en.wikipedia.org/wiki/Infrastructure_as_code) automation that enables creating a fully customizable VPC environment within a single region. The VPC Landing Zone is implemented in terraform and automates the provisioning, configuring, and integration of several services that participates in the realization of a compliant VPC-based topology aligned with the documented [IBM Cloud Financial Services Framework](./about/10-fs-cloud).
3+
IBM VPC Landing Zone (also referred to as "SLZ" for Secure Landing Zone) is [Infrastructure-As-Code](https://en.wikipedia.org/wiki/Infrastructure_as_code) automation that enables you to create a fully customizable VPC environment within a single region. The VPC Landing Zone is implemented in Terraform and automates the provisioning, configuring, and integration of several services that participate in the realization of a compliant VPC-based topology that is aligned with the documented [IBM Cloud for Financial Cloud Services Framework](./about/10-fs-cloud).
44

5-
The automation is available as a set of [terraform modules on GitHub](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone). The automation creates and configures all of the resources necessary to create a secure and compliant topology:
6-
- A resource group for cloud services and for each VPC.
5+
The automation is available as a set of [Terraform modules on GitHub](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone). The automation creates and configures all of the resources necessary to create a secure and compliant topology:
6+
- A resource group for cloud services and for each VPC
77
- Cloud Object Storage instances for flow logs and Activity Tracker (access and audit logs)
88
- Encryption keys in either a Key Protect or Hyper Protect Crypto Services instance
99
- A management and workload VPC connected by a transit gateway
@@ -15,15 +15,15 @@ The automation is available as a set of [terraform modules on GitHub](https://gi
1515
# Landing Zone patterns
1616

1717

18-
VPC Landing Zone comes with four fully functional patterns that are strictly following the IBM Cloud Financial Services reference architecture:
18+
VPC Landing Zone comes with four fully functional patterns that follow the IBM Cloud Framework for Financial Services reference architecture:
1919

2020
- VPC pattern
21-
- VPC with Virtual Servers ("VSIs") – which the lab will use.
22-
- VPC with OpenShift ("ROKS")
23-
- VPC with VSIs and OpenShift ("mixed") pattern.
21+
- VPC with Virtual Servers ("VSIs") – which the lab uses.
22+
- VPC with Red Hat OpenShift ("ROKS")
23+
- VPC with VSIs and Red Hat OpenShift ("mixed") pattern.
2424

2525
| VPC pattern | Virtual server pattern | Red Hat OpenShift pattern | Mixed pattern |
2626
| ------------------------------ | -------------------------------- | -------------------------------- | ---------------------------------- |
2727
| [![VPC](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone/main/reference-architectures/vpc.drawio.svg)](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone/blob/main/patterns/vpc/README.md) | [![VSI](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone/main/reference-architectures/vsi-vsi.drawio.svg)](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone/blob/main/patterns/vsi/README.md) | [![ROKS](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone/main/reference-architectures/roks.drawio.svg)](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone/blob/main/patterns/roks/README.md) | [![Mixed](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone/main/.docs/images/mixed.png)](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone/blob/main/patterns/mixed/README.md) |
2828

29-
Each of the patterns can be used as a starting point to create your own customizable VPC-based topology that matches your enterprise or customer exact needs.
29+
You can use any pattern as a starting point to create a customizable VPC-based topology that supports your customer needs or the needs of your enterprise.

Diff for: ‎docs/about/30-deployable-arch.md

+10-10
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,21 @@
1-
# Deployable Architecture
1+
# Deployable architecture
22

3-
“Deployable Architecture” is officially defined as “Cloud automation for deploying a common architectural pattern that combines one or more cloud resources that is designed for easy deployment, scalability, and modularity.”
3+
A deployable architecture is defined as "Cloud automation for deploying a common architectural pattern that combines one or more cloud resources that is designed for easy deployment, scalability, and modularity.
44

5-
More specifically, and concretely, from a technical perspective, “Deployable Architectures” are essentially terraform modules that are fully integrated into the IBM Cloud experience. Deployable Architecture are:
5+
From a technical perspective, deployable architectures are essentially Terraform modules that are fully integrated into the IBM Cloud experience. Deployable architectures have these characteristics:
66

7-
- Discoverable and available through the IBM Cloud Catalog (and through IBM Cloud search)
8-
- Fully integrated in IBM Cloud Projects and Schematics.
7+
- Discoverable and available through the IBM Cloud catalog (and through IBM Cloud search)
8+
- Fully integrated in IBM Cloud projects and Schematics
99
- Integrated with [IBM Cloud Risk Analyzer](https://cloud.ibm.com/docs/code-risk-analyzer-cli-plugin?topic=code-risk-analyzer-cli-plugin-cra-cli-plugin#terraform-command)
1010

11-
In other words, it is possible for an end-user to execute the terraform automation behind a “Deployable Architecture” just from a few clicks and inputs in the IBM Cloud console.
11+
In other words, a user can run the Terraform automation behind a deployable architecture just from a few clicks and inputs in the IBM Cloud console.
1212

13-
![Deployable Architecture console](../images/about-deployable-arch.png)
13+
![Deployable architecture console](../images/about-deployable-arch.png)
1414

15-
The Landing Zone terraform module and patterns described in [🌍 VPC Landing Zone](./about/20-vpc-landing-zone.md) have a corresponding [Deployable Architecture](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-overview) in IBM Cloud. In this lab, the Secure Landing Zone is consumed through the Deployable Architecture experience for ease of use, rather than using the terraform CLI against the open-source github version.
15+
The Landing Zone Terraform module and patterns that are described in [🌍 VPC Landing Zone](./about/20-vpc-landing-zone.md) have a corresponding [deployable architecture](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-overview) in IBM Cloud. To help you learn about deployable architectures, this lab provides steps for the deployable architecture in IBM Cloud rather than by running Terraform commands against the open source GitHub version.
1616

17-
IBM-maintained Deployable Architectures, like the Landing Zone Deployable Architecture:
17+
IBM-maintained deployable architectures are just like the Landing Zone deployable architecture in these ways:
1818

1919
- Provide the same level of customer support as any other IBM Cloud product
2020
- [Come with extensive documentation](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-overview)
21-
- Are maintained and remains current over time
21+
- Are maintained to be current over time

Diff for: ‎docs/about/40-projects.md

+11-10
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,19 @@
1-
# IBM Cloud Projects
1+
# IBM Cloud projects
22

3-
IBM Cloud Projects make it easy to manage Infrastructure-As-Code deployments across accounts, collaborate with team members, and maintain compliance.
3+
IBM Cloud projects make it easy to manage Infrastructure-As-Code (IaC) deployments across accounts, collaborate with team members, and maintain compliance.
44

5-
At its core, an IBM Cloud Project is made up of a collection of configurations that are used to manage related Infrastructure as Code (IaC) deployments (and associated resources) across accounts.
5+
At its core, an IBM Cloud project is made up of a collection of configurations that are used to manage related Infrastructure as Code (IaC) deployments (and associated resources) across accounts.
66

7-
As a concrete example, let’s imagine the scenario of a SRE team responsible for setting up the infrastructure supporting the web application. That SRE team wants to follow best practices and deploy the following environments, all based on the same Deployable Architecture template (but with slight configuration differences for each environment):
7+
For example, let’s imagine the scenario of a SRE team that is responsible for setting up the infrastructure that supports the web application. That SRE team wants to follow best practices and deploy the following environments, which are based on the same deployable architecture template (but with slight configuration differences for each environment):
88

9-
1. A development environment – with scaled down compute resources and no audit event tracking.
10-
2. A staging environment – as close as possible to the production environment
11-
3. 2 production environments: one in America and another one in Europe.
9+
1. A development environment: with scaled down compute resources and no audit event tracking.
10+
2. A staging environment: as close as possible to the production environment
11+
3. Two production environments: one in North America and another one in Europe.
1212

1313
That SRE team can group configurations, and thus centralize the governance and supervision, for the four different environments in one single Project.
1414

15-
Beyond the core configuration grouping capability, IBM Cloud Projects is designed with an IaC and a compliance-first approach. Projects also seemingly integrate with IBM Cloud Schematics to deploy, update, and manage the resources created by the IaC automation.
16-
Each project also includes tools to scan for potentially harmful resource changes, compliance, security, and cost, as well as tracking configuration versioning and governance.
15+
Beyond the core configuration grouping capability, IBM Cloud projects is designed with an IaC and a compliance-first approach. Projects also seemingly integrates with IBM Cloud Schematics to deploy, update, and manage the resources that are created by the IaC automation.
1716

18-
![IBM Cloud Projects](../images/about-projects.png)
17+
Each project also includes tools to scan for potentially harmful resource changes, compliance, security, and cost issues, and to track configuration versioning and governance.
18+
19+
![IBM Cloud projects](../images/about-projects.png)

Diff for: ‎docs/cover.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
<img src="header.jpg">
22

33
> Seamless Deployment: From Provisioning to Runtime<br/>
4-
> with IBM Cloud's Landing Zone
4+
> with IBM Cloud VPC landing zone
55
66
_Session 2448_
77

Diff for: ‎docs/sidebar.md

+10-10
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,17 @@
11
- [🌐 Introduction](README.md)
22
- [🏢 IBM Cloud for Financial Services](./about/10-fs-cloud.md)
3-
- [🌍 VPC Landing Zone](./about/20-vpc-landing-zone.md)
4-
- [🏗️ Deployable Architectures](./about/30-deployable-arch)
5-
- [📚 IBM Cloud Projects](./about/40-projects.md)
3+
- [🌍 VPC landing zone](./about/20-vpc-landing-zone.md)
4+
- [🏗️ Deployable architectures](./about/30-deployable-arch)
5+
- [📚 IBM Cloud projects](./about/40-projects.md)
66
- [📂 Part 1 - End-to-end deployment](./part1/00-objectives.md)
77
- [🚀 Deploy Landing Zone VSI pattern](./part1/10-project.md)
88
- [👤 Operator Access](./part1/20-operator-access.md)
99
- [🌐 Install Apache server](./part1/30-apache-server.md)
1010
- [🌐 Expose a web application](./part1/40-expose-web-app.md)
11-
- [🎓 Going further](./part1/50-going-further.md)
12-
- [📂 Part 2 - Automating and sharing](./part2/00-objectives.md)
13-
- [🛠️ Customization Options](./part2/10-customizing.md)
14-
- [🔍 Executing the Custom Topology](./part2/20-custom-module.md)
15-
- [🤖 Automate Web App Deployment](./part2/30-add-apache.md)
16-
- [📦 Share with IBM Cloud Catalog](./part2/40-catalog-onboarding.md)
17-
- [🎓 Going further](./part2/50-going-further.md)
11+
- [🎓 Go further](./part1/50-going-further.md)
12+
- [📂 Part 2 - Automate and share](./part2/00-objectives.md)
13+
- [🛠️ Customization options](./part2/10-customizing.md)
14+
- [🔍 Execute the custom topology](./part2/20-custom-module.md)
15+
- [🤖 Automate web app deployment](./part2/30-add-apache.md)
16+
- [📦 Share through a IBM Cloud catalog](./part2/40-catalog-onboarding.md)
17+
- [🎓 Go further](./part2/50-going-further.md)

0 commit comments

Comments
 (0)