# Ibm Cloud

> Provides comprehensive IBM Cloud platform guidance including compute services (VPC, Virtual Servers, IKS, OpenShift, Code Engine, Cloud Functions), storage (Object Storage, Block Storage, File Storage), databases (Db2, Cloudant, PostgreSQL, MySQL, MongoDB, Redis), IAM security (access groups, service IDs, Key Protect, Secrets Manager), networking (VPC, load balancers, Direct Link), CLI automation…

- **Type:** Skill
- **Install:** `agentstack add skill-dauquangthanh-hanoi-rainbow-ibm-cloud`
- **Verified:** Pending review
- **Seller:** [DauQuangThanh](https://agentstack.voostack.com/s/dauquangthanh)
- **Installs:** 0
- **Category:** [Databases](https://agentstack.voostack.com/c/databases)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [DauQuangThanh](https://github.com/DauQuangThanh)
- **Source:** https://github.com/DauQuangThanh/hanoi-rainbow/tree/main/skills/ibm-cloud

## Install

```sh
agentstack add skill-dauquangthanh-hanoi-rainbow-ibm-cloud
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# IBM Cloud

Systematic IBM Cloud platform guidance for enterprise cloud infrastructure, covering compute, storage, databases, networking, security, and operational best practices.

## Workflow Decision Tree

Choose your path based on the task:

## 1. Service Category Selection

**Compute & Containers** → Load [compute-services.md](references/compute-services.md)

- Virtual Private Cloud (VPC) and Virtual Server Instances
- IBM Kubernetes Service (IKS) and Red Hat OpenShift
- Code Engine (serverless containers) and Cloud Functions

**Storage** → Load [storage-services.md](references/storage-services.md)

- Cloud Object Storage, Block Storage, File Storage

**Databases** → Load [database-services.md](references/database-services.md)

- Db2, Cloudant, PostgreSQL, MySQL, MongoDB, Redis

**Security & Access** → Load [iam-security.md](references/iam-security.md)

- IAM, Resource Groups, Service IDs, Key Protect, Secrets Manager

**Networking** → Load [networking.md](references/networking.md)

- VPC Networks, Load Balancers, DNS/CDN, Direct Link

### 2. Architecture & Deployment Patterns

**High Availability** → Multi-zone deployment across 3 availability zones
**Microservices** → IKS/OpenShift with service mesh and ingress
**Serverless** → Code Engine applications with auto-scaling
**Hybrid Cloud** → Direct Link or VPN for on-premises connectivity

### 3. Common Operations

**Initial Setup** → Install CLI, authenticate, configure regions and resource groups
**Resource Provisioning** → Use CLI, Terraform, or IBM Cloud Console
**Security Configuration** → IAM policies, encryption, network security
**Monitoring** → Set up logging, monitoring, and cost tracking

## Core Concepts

### Resource Hierarchy

```
Account → Resource Groups → Services/Resources → Access Groups (IAM)
```

### Regions and Multi-Zone Architecture

- **Primary Regions**: `us-south`, `us-east`, `eu-gb`, `eu-de`, `jp-tok`, `au-syd`
- **Availability Zones**: 3 zones per region (e.g., `us-south-1`, `us-south-2`, `us-south-3`)
- **Best Practice**: Deploy across multiple zones for high availability

### Service Categories

- **IaaS**: VPC, Virtual Servers, Block/File Storage
- **PaaS**: IKS, OpenShift, Code Engine
- **SaaS**: Managed Databases, Watson AI, DevOps Tools
- **Serverless**: Code Engine, Cloud Functions

## Quick Start

### 1. Install and Configure CLI

```bash
# Install CLI (macOS/Linux)
curl -fsSL https://clis.cloud.ibm.com/install/osx | sh

# Login
ibmcloud login

# Target region and resource group
ibmcloud target -r us-south -g my-resource-group

# Install common plugins
ibmcloud plugin install container-service vpc-infrastructure
```

### 2. Basic Resource Creation Pattern

```bash
# 1. Create VPC
ibmcloud is vpc-create my-vpc

# 2. Create resources (compute, storage, network)
ibmcloud is instance-create my-vsi ...

# 3. Configure IAM
ibmcloud iam ...

# 4. Deploy application
# 5. Set up monitoring
```

## Essential Guidance

### Security Best Practices

1. **IAM**: Use Access Groups, apply least privilege, rotate API keys every 90 days
2. **Network**: Use private endpoints, configure Security Groups and ACLs
3. **Data**: Enable encryption at rest/transit, use Key Protect for key management
4. **Compliance**: Choose regions for data residency requirements

### Cost Optimization

- Right-size instances for workload requirements
- Use reserved capacity for predictable workloads
- Leverage serverless (Code Engine/Functions) for variable loads
- Select appropriate storage tiers (Standard, Vault, Cold Vault)
- Enable auto-scaling to match demand
- Set budget alerts and monitor usage

### Reference Files

Load detailed guidance based on specific needs:

- **[compute-services.md](references/compute-services.md)**: VPC, Virtual Servers, IKS, OpenShift, Code Engine, Cloud Functions
- **[storage-services.md](references/storage-services.md)**: Object Storage, Block Storage, File Storage
- **[database-services.md](references/database-services.md)**: Db2, Cloudant, PostgreSQL, MySQL, MongoDB, Redis
- **[iam-security.md](references/iam-security.md)**: IAM, Access Groups, Service IDs, Key Protect, Secrets Manager
- **[networking.md](references/networking.md)**: VPC networking, Load Balancers, DNS/CDN, Direct Link

## Support Resources

- Documentation: 
- API Reference: 
- Terraform Provider: 
- CLI Reference:

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [DauQuangThanh](https://github.com/DauQuangThanh)
- **Source:** [DauQuangThanh/hanoi-rainbow](https://github.com/DauQuangThanh/hanoi-rainbow)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: flagged — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-dauquangthanh-hanoi-rainbow-ibm-cloud
- Seller: https://agentstack.voostack.com/s/dauquangthanh
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.